flexVolume:
driver:
fsType:
options:
diff --git a/api/protobuf-spec/k8s_io_api_admission_v1beta1.proto b/api/protobuf-spec/k8s_io_api_admission_v1beta1.proto
index 159325f37d13..a4e4ca266e72 100644
--- a/api/protobuf-spec/k8s_io_api_admission_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_admission_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_admissionregistration_v1alpha1.proto b/api/protobuf-spec/k8s_io_api_admissionregistration_v1alpha1.proto
index 82508ca60ef3..11de02ff405a 100644
--- a/api/protobuf-spec/k8s_io_api_admissionregistration_v1alpha1.proto
+++ b/api/protobuf-spec/k8s_io_api_admissionregistration_v1alpha1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_admissionregistration_v1beta1.proto b/api/protobuf-spec/k8s_io_api_admissionregistration_v1beta1.proto
index 513a3d167ee1..cb1270ea47d5 100644
--- a/api/protobuf-spec/k8s_io_api_admissionregistration_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_admissionregistration_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_apps_v1.proto b/api/protobuf-spec/k8s_io_api_apps_v1.proto
index c0499d3258c4..184c868e3897 100644
--- a/api/protobuf-spec/k8s_io_api_apps_v1.proto
+++ b/api/protobuf-spec/k8s_io_api_apps_v1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_apps_v1beta1.proto b/api/protobuf-spec/k8s_io_api_apps_v1beta1.proto
index 68397a026ba7..da160922d7b0 100644
--- a/api/protobuf-spec/k8s_io_api_apps_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_apps_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_apps_v1beta2.proto b/api/protobuf-spec/k8s_io_api_apps_v1beta2.proto
index dac5a5f6efbe..4a8b28c150c7 100644
--- a/api/protobuf-spec/k8s_io_api_apps_v1beta2.proto
+++ b/api/protobuf-spec/k8s_io_api_apps_v1beta2.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
@@ -31,6 +31,8 @@ import "k8s.io/apimachinery/pkg/util/intstr/generated.proto";
// Package-wide variables from generator "generated".
option go_package = "v1beta2";
+// DEPRECATED - This group version of ControllerRevision is deprecated by apps/v1/ControllerRevision. See the
+// release notes for more information.
// ControllerRevision implements an immutable snapshot of state data. Clients
// are responsible for serializing and deserializing the objects that contain
// their internal state.
@@ -63,6 +65,8 @@ message ControllerRevisionList {
repeated ControllerRevision items = 2;
}
+// DEPRECATED - This group version of DaemonSet is deprecated by apps/v1/DaemonSet. See the release notes for
+// more information.
// DaemonSet represents the configuration of a daemon set.
message DaemonSet {
// Standard object's metadata.
@@ -218,6 +222,8 @@ message DaemonSetUpdateStrategy {
optional RollingUpdateDaemonSet rollingUpdate = 2;
}
+// DEPRECATED - This group version of Deployment is deprecated by apps/v1/Deployment. See the release notes for
+// more information.
// Deployment enables declarative updates for Pods and ReplicaSets.
message Deployment {
// Standard object metadata.
@@ -362,6 +368,8 @@ message DeploymentStrategy {
optional RollingUpdateDeployment rollingUpdate = 2;
}
+// DEPRECATED - This group version of ReplicaSet is deprecated by apps/v1/ReplicaSet. See the release notes for
+// more information.
// ReplicaSet ensures that a specified number of pod replicas are running at any given time.
message ReplicaSet {
// If the Labels of a ReplicaSet are empty, they are defaulted to
@@ -574,6 +582,8 @@ message ScaleStatus {
optional string targetSelector = 3;
}
+// DEPRECATED - This group version of StatefulSet is deprecated by apps/v1/StatefulSet. See the release notes for
+// more information.
// StatefulSet represents a set of pods with consistent identities.
// Identities are defined as:
// - Network: A single stable DNS and hostname.
diff --git a/api/protobuf-spec/k8s_io_api_authentication_v1.proto b/api/protobuf-spec/k8s_io_api_authentication_v1.proto
index fb7888b63236..ea7b3b2885ab 100644
--- a/api/protobuf-spec/k8s_io_api_authentication_v1.proto
+++ b/api/protobuf-spec/k8s_io_api_authentication_v1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_authentication_v1beta1.proto b/api/protobuf-spec/k8s_io_api_authentication_v1beta1.proto
index 300e53488a1f..3d0abd15dacd 100644
--- a/api/protobuf-spec/k8s_io_api_authentication_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_authentication_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_authorization_v1.proto b/api/protobuf-spec/k8s_io_api_authorization_v1.proto
index 28c8d660365c..2cd4af0c0774 100644
--- a/api/protobuf-spec/k8s_io_api_authorization_v1.proto
+++ b/api/protobuf-spec/k8s_io_api_authorization_v1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_authorization_v1beta1.proto b/api/protobuf-spec/k8s_io_api_authorization_v1beta1.proto
index 59df0b6d44fa..b64c0642cbdf 100644
--- a/api/protobuf-spec/k8s_io_api_authorization_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_authorization_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_autoscaling_v1.proto b/api/protobuf-spec/k8s_io_api_autoscaling_v1.proto
index e41e62746bdd..aa752a806466 100644
--- a/api/protobuf-spec/k8s_io_api_autoscaling_v1.proto
+++ b/api/protobuf-spec/k8s_io_api_autoscaling_v1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_autoscaling_v2beta1.proto b/api/protobuf-spec/k8s_io_api_autoscaling_v2beta1.proto
index de3d2665fdc6..cce8e42510ca 100644
--- a/api/protobuf-spec/k8s_io_api_autoscaling_v2beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_autoscaling_v2beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_batch_v1.proto b/api/protobuf-spec/k8s_io_api_batch_v1.proto
index 0f43d2fd5a50..b0306f3bc973 100644
--- a/api/protobuf-spec/k8s_io_api_batch_v1.proto
+++ b/api/protobuf-spec/k8s_io_api_batch_v1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_batch_v1beta1.proto b/api/protobuf-spec/k8s_io_api_batch_v1beta1.proto
index 11fa4e2aea15..9278a3d9bfc8 100644
--- a/api/protobuf-spec/k8s_io_api_batch_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_batch_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_batch_v2alpha1.proto b/api/protobuf-spec/k8s_io_api_batch_v2alpha1.proto
index cc90d4190969..e4de3644c382 100644
--- a/api/protobuf-spec/k8s_io_api_batch_v2alpha1.proto
+++ b/api/protobuf-spec/k8s_io_api_batch_v2alpha1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_certificates_v1beta1.proto b/api/protobuf-spec/k8s_io_api_certificates_v1beta1.proto
index e90f4f9cc350..e3cd9000fa83 100644
--- a/api/protobuf-spec/k8s_io_api_certificates_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_certificates_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_core_v1.proto b/api/protobuf-spec/k8s_io_api_core_v1.proto
index 4f00a69e0771..663b86f11cfe 100644
--- a/api/protobuf-spec/k8s_io_api_core_v1.proto
+++ b/api/protobuf-spec/k8s_io_api_core_v1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
@@ -1170,7 +1170,7 @@ message FCVolumeSource {
}
// FlexVolume represents a generic volume resource that is
-// provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+// provisioned/attached using an exec based plugin.
message FlexVolumeSource {
// Driver is the name of the driver to use for this volume.
optional string driver = 1;
@@ -2439,8 +2439,7 @@ message PersistentVolumeSource {
optional FlockerVolumeSource flocker = 11;
// FlexVolume represents a generic volume resource that is
- // provisioned/attached using an exec based plugin. This is an
- // alpha feature and may change in future.
+ // provisioned/attached using an exec based plugin.
// +optional
optional FlexVolumeSource flexVolume = 12;
@@ -2979,6 +2978,7 @@ message PodSpec {
// DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy.
// To have DNS options set along with hostNetwork, you have to specify DNS policy
// explicitly to 'ClusterFirstWithHostNet'.
+ // Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
// +optional
optional string dnsPolicy = 6;
@@ -3091,6 +3091,7 @@ message PodSpec {
// Specifies the DNS parameters of a pod.
// Parameters specified here will be merged to the generated DNS
// configuration based on DNSPolicy.
+ // This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
// +optional
optional PodDNSConfig dnsConfig = 26;
}
@@ -4475,8 +4476,7 @@ message VolumeSource {
optional RBDVolumeSource rbd = 11;
// FlexVolume represents a generic volume resource that is
- // provisioned/attached using an exec based plugin. This is an
- // alpha feature and may change in future.
+ // provisioned/attached using an exec based plugin.
// +optional
optional FlexVolumeSource flexVolume = 12;
diff --git a/api/protobuf-spec/k8s_io_api_events_v1beta1.proto b/api/protobuf-spec/k8s_io_api_events_v1beta1.proto
index c13a12a5eb7a..81be470f053a 100644
--- a/api/protobuf-spec/k8s_io_api_events_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_events_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_extensions_v1beta1.proto b/api/protobuf-spec/k8s_io_api_extensions_v1beta1.proto
index 99d034373dde..8308786d1476 100644
--- a/api/protobuf-spec/k8s_io_api_extensions_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_extensions_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
@@ -467,6 +467,7 @@ message IDRange {
optional int64 max = 2;
}
+// DEPRECATED 1.9 - This group version of IPBlock is deprecated by networking/v1/IPBlock.
// IPBlock describes a particular CIDR (Ex. "192.168.1.1/24") that is allowed to the pods
// matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should
// not be included within this rule.
@@ -608,6 +609,7 @@ message IngressTLS {
optional string secretName = 2;
}
+// DEPRECATED 1.9 - This group version of NetworkPolicy is deprecated by networking/v1/NetworkPolicy.
// NetworkPolicy describes what network traffic is allowed for a set of Pods
message NetworkPolicy {
// Standard object's metadata.
@@ -620,6 +622,7 @@ message NetworkPolicy {
optional NetworkPolicySpec spec = 2;
}
+// DEPRECATED 1.9 - This group version of NetworkPolicyEgressRule is deprecated by networking/v1/NetworkPolicyEgressRule.
// NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods
// matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to.
// This type is beta-level in 1.8
@@ -641,6 +644,7 @@ message NetworkPolicyEgressRule {
repeated NetworkPolicyPeer to = 2;
}
+// DEPRECATED 1.9 - This group version of NetworkPolicyIngressRule is deprecated by networking/v1/NetworkPolicyIngressRule.
// This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.
message NetworkPolicyIngressRule {
// List of ports which should be made accessible on the pods selected for this rule.
@@ -660,6 +664,7 @@ message NetworkPolicyIngressRule {
repeated NetworkPolicyPeer from = 2;
}
+// DEPRECATED 1.9 - This group version of NetworkPolicyList is deprecated by networking/v1/NetworkPolicyList.
// Network Policy List is a list of NetworkPolicy objects.
message NetworkPolicyList {
// Standard list metadata.
@@ -671,6 +676,7 @@ message NetworkPolicyList {
repeated NetworkPolicy items = 2;
}
+// DEPRECATED 1.9 - This group version of NetworkPolicyPeer is deprecated by networking/v1/NetworkPolicyPeer.
message NetworkPolicyPeer {
// This is a label selector which selects Pods in this namespace.
// This field follows standard label selector semantics.
@@ -690,6 +696,7 @@ message NetworkPolicyPeer {
optional IPBlock ipBlock = 3;
}
+// DEPRECATED 1.9 - This group version of NetworkPolicyPort is deprecated by networking/v1/NetworkPolicyPort.
message NetworkPolicyPort {
// Optional. The protocol (TCP or UDP) which traffic must match.
// If not specified, this field defaults to TCP.
@@ -705,6 +712,7 @@ message NetworkPolicyPort {
optional k8s.io.apimachinery.pkg.util.intstr.IntOrString port = 2;
}
+// DEPRECATED 1.9 - This group version of NetworkPolicySpec is deprecated by networking/v1/NetworkPolicySpec.
message NetworkPolicySpec {
// Selects the pods to which this NetworkPolicy object applies. The array of ingress rules
// is applied to any pods selected by this field. Multiple network policies can select the
diff --git a/api/protobuf-spec/k8s_io_api_imagepolicy_v1alpha1.proto b/api/protobuf-spec/k8s_io_api_imagepolicy_v1alpha1.proto
index 9a09cba267dd..a19967cbe949 100644
--- a/api/protobuf-spec/k8s_io_api_imagepolicy_v1alpha1.proto
+++ b/api/protobuf-spec/k8s_io_api_imagepolicy_v1alpha1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_networking_v1.proto b/api/protobuf-spec/k8s_io_api_networking_v1.proto
index ae28d2f2df2b..06365ebe3fc1 100644
--- a/api/protobuf-spec/k8s_io_api_networking_v1.proto
+++ b/api/protobuf-spec/k8s_io_api_networking_v1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_policy_v1beta1.proto b/api/protobuf-spec/k8s_io_api_policy_v1beta1.proto
index a276be1c93de..2e01cf3d9b6e 100644
--- a/api/protobuf-spec/k8s_io_api_policy_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_policy_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_rbac_v1.proto b/api/protobuf-spec/k8s_io_api_rbac_v1.proto
index 6edb2779a64a..2f8d863df1d0 100644
--- a/api/protobuf-spec/k8s_io_api_rbac_v1.proto
+++ b/api/protobuf-spec/k8s_io_api_rbac_v1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_rbac_v1alpha1.proto b/api/protobuf-spec/k8s_io_api_rbac_v1alpha1.proto
index 28a4ae3d010e..41a193f55d07 100644
--- a/api/protobuf-spec/k8s_io_api_rbac_v1alpha1.proto
+++ b/api/protobuf-spec/k8s_io_api_rbac_v1alpha1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_rbac_v1beta1.proto b/api/protobuf-spec/k8s_io_api_rbac_v1beta1.proto
index 975de1096b45..aa9960b8ec4c 100644
--- a/api/protobuf-spec/k8s_io_api_rbac_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_rbac_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_scheduling_v1alpha1.proto b/api/protobuf-spec/k8s_io_api_scheduling_v1alpha1.proto
index 625cae7bee03..75b4968cc316 100644
--- a/api/protobuf-spec/k8s_io_api_scheduling_v1alpha1.proto
+++ b/api/protobuf-spec/k8s_io_api_scheduling_v1alpha1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_settings_v1alpha1.proto b/api/protobuf-spec/k8s_io_api_settings_v1alpha1.proto
index 430319d7dca8..098e8dd9bf82 100644
--- a/api/protobuf-spec/k8s_io_api_settings_v1alpha1.proto
+++ b/api/protobuf-spec/k8s_io_api_settings_v1alpha1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_storage_v1.proto b/api/protobuf-spec/k8s_io_api_storage_v1.proto
index 939ebde685f8..72b3ceb832a3 100644
--- a/api/protobuf-spec/k8s_io_api_storage_v1.proto
+++ b/api/protobuf-spec/k8s_io_api_storage_v1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_storage_v1alpha1.proto b/api/protobuf-spec/k8s_io_api_storage_v1alpha1.proto
index c9421cf06bba..289ef5f3ee65 100644
--- a/api/protobuf-spec/k8s_io_api_storage_v1alpha1.proto
+++ b/api/protobuf-spec/k8s_io_api_storage_v1alpha1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/protobuf-spec/k8s_io_api_storage_v1beta1.proto b/api/protobuf-spec/k8s_io_api_storage_v1beta1.proto
index b0e030c01b4a..f9e1d29503cb 100644
--- a/api/protobuf-spec/k8s_io_api_storage_v1beta1.proto
+++ b/api/protobuf-spec/k8s_io_api_storage_v1beta1.proto
@@ -1,5 +1,5 @@
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/api/swagger-spec/api-v1.json b/api/swagger-spec/api-v1.json
index 183f0d52e569..1cc7710de2ad 100644
--- a/api/swagger-spec/api-v1.json
+++ b/api/swagger-spec/api-v1.json
@@ -21944,7 +21944,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"azureFile": {
"$ref": "v1.AzureFilePersistentVolumeSource",
@@ -22359,7 +22359,7 @@
},
"v1.FlexVolumeSource": {
"id": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
@@ -22786,7 +22786,7 @@
},
"dnsPolicy": {
"type": "string",
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
},
"nodeSelector": {
"type": "object",
@@ -22872,7 +22872,7 @@
},
"dnsConfig": {
"$ref": "v1.PodDNSConfig",
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy."
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
}
}
},
@@ -22933,7 +22933,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"cinder": {
"$ref": "v1.CinderVolumeSource",
diff --git a/api/swagger-spec/oapi-v1.json b/api/swagger-spec/oapi-v1.json
index 36a62dee4e46..c7f22e232d09 100644
--- a/api/swagger-spec/oapi-v1.json
+++ b/api/swagger-spec/oapi-v1.json
@@ -26042,7 +26042,7 @@
},
"dnsPolicy": {
"type": "string",
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
},
"nodeSelector": {
"type": "object",
@@ -26128,7 +26128,7 @@
},
"dnsConfig": {
"$ref": "v1.PodDNSConfig",
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy."
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
}
}
},
@@ -26189,7 +26189,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"cinder": {
"$ref": "v1.CinderVolumeSource",
@@ -26577,7 +26577,7 @@
},
"v1.FlexVolumeSource": {
"id": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
diff --git a/api/swagger-spec/openshift-openapi-spec.json b/api/swagger-spec/openshift-openapi-spec.json
index 907754a6d6ad..0632d7958646 100644
--- a/api/swagger-spec/openshift-openapi-spec.json
+++ b/api/swagger-spec/openshift-openapi-spec.json
@@ -124764,7 +124764,7 @@
}
},
"io.k8s.api.apps.v1beta2.ControllerRevision": {
- "description": "ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.",
+ "description": "DEPRECATED - This group version of ControllerRevision is deprecated by apps/v1/ControllerRevision. See the release notes for more information. ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.",
"required": [
"revision"
],
@@ -124834,7 +124834,7 @@
]
},
"io.k8s.api.apps.v1beta2.DaemonSet": {
- "description": "DaemonSet represents the configuration of a daemon set.",
+ "description": "DEPRECATED - This group version of DaemonSet is deprecated by apps/v1/DaemonSet. See the release notes for more information. DaemonSet represents the configuration of a daemon set.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
@@ -125038,7 +125038,7 @@
}
},
"io.k8s.api.apps.v1beta2.Deployment": {
- "description": "Deployment enables declarative updates for Pods and ReplicaSets.",
+ "description": "DEPRECATED - This group version of Deployment is deprecated by apps/v1/Deployment. See the release notes for more information. Deployment enables declarative updates for Pods and ReplicaSets.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
@@ -125244,7 +125244,7 @@
}
},
"io.k8s.api.apps.v1beta2.ReplicaSet": {
- "description": "ReplicaSet ensures that a specified number of pod replicas are running at any given time.",
+ "description": "DEPRECATED - This group version of ReplicaSet is deprecated by apps/v1/ReplicaSet. See the release notes for more information. ReplicaSet ensures that a specified number of pod replicas are running at any given time.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
@@ -125505,7 +125505,7 @@
}
},
"io.k8s.api.apps.v1beta2.StatefulSet": {
- "description": "StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.",
+ "description": "DEPRECATED - This group version of StatefulSet is deprecated by apps/v1/StatefulSet. See the release notes for more information. StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
@@ -129068,7 +129068,7 @@
}
},
"io.k8s.api.core.v1.FlexVolumeSource": {
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
@@ -130419,7 +130419,7 @@
"$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource"
},
"flexVolume": {
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"$ref": "#/definitions/io.k8s.api.core.v1.FlexVolumeSource"
},
"flocker": {
@@ -130790,11 +130790,11 @@
"x-kubernetes-patch-strategy": "merge"
},
"dnsConfig": {
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.",
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.",
"$ref": "#/definitions/io.k8s.api.core.v1.PodDNSConfig"
},
"dnsPolicy": {
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'.",
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.",
"type": "string"
},
"hostAliases": {
@@ -132313,7 +132313,7 @@
"$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource"
},
"flexVolume": {
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"$ref": "#/definitions/io.k8s.api.core.v1.FlexVolumeSource"
},
"flocker": {
@@ -133198,7 +133198,7 @@
}
},
"io.k8s.api.extensions.v1beta1.IPBlock": {
- "description": "IPBlock describes a particular CIDR (Ex. \"192.168.1.1/24\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.",
+ "description": "DEPRECATED 1.9 - This group version of IPBlock is deprecated by networking/v1/IPBlock. IPBlock describes a particular CIDR (Ex. \"192.168.1.1/24\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.",
"required": [
"cidr"
],
@@ -133360,7 +133360,7 @@
}
},
"io.k8s.api.extensions.v1beta1.NetworkPolicy": {
- "description": "NetworkPolicy describes what network traffic is allowed for a set of Pods",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicy is deprecated by networking/v1/NetworkPolicy. NetworkPolicy describes what network traffic is allowed for a set of Pods",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
@@ -133388,7 +133388,7 @@
]
},
"io.k8s.api.extensions.v1beta1.NetworkPolicyEgressRule": {
- "description": "NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyEgressRule is deprecated by networking/v1/NetworkPolicyEgressRule. NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8",
"properties": {
"ports": {
"description": "List of destination ports for outgoing traffic. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.",
@@ -133407,7 +133407,7 @@
}
},
"io.k8s.api.extensions.v1beta1.NetworkPolicyIngressRule": {
- "description": "This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyIngressRule is deprecated by networking/v1/NetworkPolicyIngressRule. This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.",
"properties": {
"from": {
"description": "List of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restricted by source). If this field is present and contains at least on item, this rule allows traffic only if the traffic matches at least one item in the from list.",
@@ -133426,7 +133426,7 @@
}
},
"io.k8s.api.extensions.v1beta1.NetworkPolicyList": {
- "description": "Network Policy List is a list of NetworkPolicy objects.",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyList is deprecated by networking/v1/NetworkPolicyList. Network Policy List is a list of NetworkPolicy objects.",
"required": [
"items"
],
@@ -133460,6 +133460,7 @@
]
},
"io.k8s.api.extensions.v1beta1.NetworkPolicyPeer": {
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyPeer is deprecated by networking/v1/NetworkPolicyPeer.",
"properties": {
"ipBlock": {
"description": "IPBlock defines policy on a particular IPBlock",
@@ -133476,6 +133477,7 @@
}
},
"io.k8s.api.extensions.v1beta1.NetworkPolicyPort": {
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyPort is deprecated by networking/v1/NetworkPolicyPort.",
"properties": {
"port": {
"description": "If specified, the port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.",
@@ -133488,6 +133490,7 @@
}
},
"io.k8s.api.extensions.v1beta1.NetworkPolicySpec": {
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicySpec is deprecated by networking/v1/NetworkPolicySpec.",
"required": [
"podSelector"
],
diff --git a/contrib/completions/bash/openshift b/contrib/completions/bash/openshift
index cb5b4cd05b40..6453275f110d 100644
--- a/contrib/completions/bash/openshift
+++ b/contrib/completions/bash/openshift
@@ -578,6 +578,18 @@ _openshift_start_template-service-broker()
local_nonpersistent_flags+=("--audit-log-path=")
flags+=("--audit-policy-file=")
local_nonpersistent_flags+=("--audit-policy-file=")
+ flags+=("--audit-webhook-batch-buffer-size=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-buffer-size=")
+ flags+=("--audit-webhook-batch-initial-backoff=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-initial-backoff=")
+ flags+=("--audit-webhook-batch-max-size=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-max-size=")
+ flags+=("--audit-webhook-batch-max-wait=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-max-wait=")
+ flags+=("--audit-webhook-batch-throttle-burst=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-throttle-burst=")
+ flags+=("--audit-webhook-batch-throttle-qps=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-throttle-qps=")
flags+=("--audit-webhook-config-file=")
local_nonpersistent_flags+=("--audit-webhook-config-file=")
flags+=("--audit-webhook-mode=")
diff --git a/contrib/completions/zsh/openshift b/contrib/completions/zsh/openshift
index 9fc724ae7dc9..bb77856b5586 100644
--- a/contrib/completions/zsh/openshift
+++ b/contrib/completions/zsh/openshift
@@ -720,6 +720,18 @@ _openshift_start_template-service-broker()
local_nonpersistent_flags+=("--audit-log-path=")
flags+=("--audit-policy-file=")
local_nonpersistent_flags+=("--audit-policy-file=")
+ flags+=("--audit-webhook-batch-buffer-size=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-buffer-size=")
+ flags+=("--audit-webhook-batch-initial-backoff=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-initial-backoff=")
+ flags+=("--audit-webhook-batch-max-size=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-max-size=")
+ flags+=("--audit-webhook-batch-max-wait=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-max-wait=")
+ flags+=("--audit-webhook-batch-throttle-burst=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-throttle-burst=")
+ flags+=("--audit-webhook-batch-throttle-qps=")
+ local_nonpersistent_flags+=("--audit-webhook-batch-throttle-qps=")
flags+=("--audit-webhook-config-file=")
local_nonpersistent_flags+=("--audit-webhook-config-file=")
flags+=("--audit-webhook-mode=")
diff --git a/glide.lock b/glide.lock
index e8234f22d369..03d3eb2cb44b 100644
--- a/glide.lock
+++ b/glide.lock
@@ -1,5 +1,5 @@
-hash: 3e20074518a5819a98ebf359189a0707a3153ba5835b1020f4efd50030817c30
-updated: 2018-01-02T15:05:33.403891829-05:00
+hash: 95f716b392d208817b3a8a5257cfa9d44d14b526dba3e3ce3e90f604cfb1bd24
+updated: 2018-01-05T14:39:33.429051893-05:00
imports:
- name: bitbucket.org/ww/goautoneg
version: 75cd24fc2f2c2a2088577d12123ddee5f54e0675
@@ -529,7 +529,7 @@ imports:
- name: github.com/google/btree
version: 7d79101e329e5a3adf994758c578dab82b90c017
- name: github.com/google/cadvisor
- version: 49440c7e0af98f96993e4d4b5777991f65091f23
+ version: 1e567c2ac359c3ed1303e0c80b6cf08edefc841d
subpackages:
- accelerators
- api
@@ -592,7 +592,7 @@ imports:
- compiler
- extensions
- name: github.com/gophercloud/gophercloud
- version: db5f840b1d1a595280d643defc09ce277996959e
+ version: 8183543f90d1aef267a5ecc209f2e0715b355acb
subpackages:
- openstack
- openstack/blockstorage/extensions/volumeactions
@@ -610,6 +610,7 @@ imports:
- openstack/identity/v3/extensions/trusts
- openstack/identity/v3/tokens
- openstack/networking/v2/extensions
+ - openstack/networking/v2/extensions/external
- openstack/networking/v2/extensions/layer3/floatingips
- openstack/networking/v2/extensions/layer3/routers
- openstack/networking/v2/extensions/lbaas_v2/listeners
@@ -618,6 +619,7 @@ imports:
- openstack/networking/v2/extensions/lbaas_v2/pools
- openstack/networking/v2/extensions/security/groups
- openstack/networking/v2/extensions/security/rules
+ - openstack/networking/v2/networks
- openstack/networking/v2/ports
- openstack/utils
- pagination
@@ -840,7 +842,7 @@ imports:
- go-selinux
- go-selinux/label
- name: github.com/openshift/api
- version: 3d85da175a2137c582afc6feb4253ea369b87215
+ version: 7f5fc719c0ee564c2061124ad0e4f05d54807640
subpackages:
- apps/v1
- authorization/v1
@@ -917,7 +919,7 @@ imports:
- user/informers/externalversions/user/v1
- user/listers/user/v1
- name: github.com/openshift/imagebuilder
- version: 7525b8f62295493c15f31261b73d35bed1e4b85b
+ version: 07e152d586c29af4edc7805484199bfbcf022811
subpackages:
- imageprogress
- name: github.com/openshift/source-to-image
@@ -1257,7 +1259,7 @@ imports:
- name: gopkg.in/yaml.v2
version: 53feefa2559fb8dfa8d81baad31be332c97d6c77
- name: k8s.io/api
- version: a53b443767b8371359bc21c8f857d8cd2d229f90
+ version: 1791f5da2379cb6154480063483cd1dd906cfe59
repo: git@github.com:openshift/kubernetes-api
subpackages:
- admission/v1beta1
@@ -1291,7 +1293,7 @@ imports:
- storage/v1alpha1
- storage/v1beta1
- name: k8s.io/apiextensions-apiserver
- version: 39ba0205056018a0a3d0f43f7c76b2393d2dbfe7
+ version: 4b7c9840284c1122713da02f50f4e56f59d0f379
repo: git@github.com:openshift/kubernetes-apiextensions-apiserver
subpackages:
- pkg/apis/apiextensions
@@ -1323,7 +1325,7 @@ imports:
- pkg/registry/customresource
- pkg/registry/customresourcedefinition
- name: k8s.io/apimachinery
- version: 618a852e51809ef38ec9b42ba539383a6d8f1eca
+ version: 58c23ccf04e540acd2427553cada70c1b1de3785
repo: git@github.com:openshift/kubernetes-apimachinery
subpackages:
- pkg/api/equality
@@ -1389,7 +1391,7 @@ imports:
- third_party/forked/golang/netutil
- third_party/forked/golang/reflect
- name: k8s.io/apiserver
- version: 506b0518afb83da963eee1f0f76a4eb69601c4cb
+ version: bf4ef711a472c20b04e26da97380d8b5b532c56f
repo: git@github.com:openshift/kubernetes-apiserver
subpackages:
- pkg/admission
@@ -1498,7 +1500,7 @@ imports:
- plugin/pkg/authenticator/token/webhook
- plugin/pkg/authorizer/webhook
- name: k8s.io/client-go
- version: 9999b1b0caa040548e1e38737ee762e647ba3ed0
+ version: 2e98cfd3328c1de185ad3cae0e8005b21481c677
repo: git@github.com:openshift/kubernetes-client-go
subpackages:
- discovery
@@ -1676,7 +1678,7 @@ imports:
- util/testing
- util/workqueue
- name: k8s.io/code-generator
- version: ff3e9afce6dc489cc817ade6556ccf62373dfd56
+ version: 00f8f55a7115062d42706483402f806cd6eaffec
repo: git@github.com:openshift/kubernetes-code-generator
subpackages:
- cmd/conversion-gen/generators
@@ -1697,7 +1699,7 @@ imports:
subpackages:
- metrics/api/v1/types
- name: k8s.io/kube-aggregator
- version: bd60ab8c0b65f79ed5bc405ab806a55fb3022704
+ version: 62763252cfeba5ae506b71c41973d40e1c083dd1
repo: git@github.com:openshift/kube-aggregator
subpackages:
- pkg/apis/apiregistration
@@ -1734,7 +1736,7 @@ imports:
- pkg/util/proto
- pkg/util/proto/validation
- name: k8s.io/kubernetes
- version: 1289624871fadf1dd3caf64c4678ab494638f44c
+ version: a0ce1bc657faa48c85731dcca6a613d91224dea0
repo: git@github.com:openshift/kubernetes
subpackages:
- cmd/genutils
@@ -2485,7 +2487,7 @@ imports:
- third_party/forked/gonum/graph/simple
- third_party/forked/gonum/graph/traverse
- name: k8s.io/metrics
- version: 5bbfa182de9efee1b171c3f2d0c83ce9fd04f9fd
+ version: 89895fe67943a667a188dd1ae9821cd1168de69f
repo: git@github.com:openshift/kubernetes-metrics
subpackages:
- pkg/apis/custom_metrics
diff --git a/glide.yaml b/glide.yaml
index 74afc4c4fd0c..50467459e2e4 100644
--- a/glide.yaml
+++ b/glide.yaml
@@ -9,31 +9,31 @@ import:
version: 39a7bf85c140f972372c2a0d1ee40adbf0c8bfe1
- package: k8s.io/code-generator
repo: git@github.com:openshift/kubernetes-code-generator
- version: release-1.9.0-beta.1
+ version: release-1.9.1
- package: k8s.io/apimachinery
repo: git@github.com:openshift/kubernetes-apimachinery
- version: release-1.9.0-beta.1
+ version: release-1.9.1
- package: k8s.io/api
repo: git@github.com:openshift/kubernetes-api
- version: release-1.9.0-beta.1
+ version: release-1.9.1
- package: k8s.io/client-go
repo: git@github.com:openshift/kubernetes-client-go
- version: release-1.9.0-beta.1
+ version: release-1.9.1
- package: k8s.io/metrics
repo: git@github.com:openshift/kubernetes-metrics
- version: release-1.9.0-beta.1
+ version: release-1.9.1
- package: k8s.io/apiserver
repo: git@github.com:openshift/kubernetes-apiserver
- version: release-1.9.0-beta.1
+ version: release-1.9.1
- package: k8s.io/kube-aggregator
repo: git@github.com:openshift/kube-aggregator
- version: release-1.9.0-beta.1
+ version: release-1.9.1
- package: k8s.io/apiextensions-apiserver
repo: git@github.com:openshift/kubernetes-apiextensions-apiserver
- version: release-1.9.0-beta.1
+ version: release-1.9.1
- package: k8s.io/kubernetes
repo: git@github.com:openshift/kubernetes
- version: release-1.9.0-beta.1
+ version: release-1.9.1
# openshift second
- package: github.com/openshift/api
diff --git a/pkg/cmd/server/bootstrappolicy/web_console_role_test.go b/pkg/cmd/server/bootstrappolicy/web_console_role_test.go
index 6acdd0a2793d..48c44bbf0588 100644
--- a/pkg/cmd/server/bootstrappolicy/web_console_role_test.go
+++ b/pkg/cmd/server/bootstrappolicy/web_console_role_test.go
@@ -59,6 +59,7 @@ var rolesToHide = sets.NewString(
"system:aggregate-to-admin",
"system:aggregate-to-edit",
"system:aggregate-to-view",
+ "system:aws-cloud-provider",
)
func TestSystemOnlyRoles(t *testing.T) {
diff --git a/pkg/cmd/server/kubernetes/master/master_config.go b/pkg/cmd/server/kubernetes/master/master_config.go
index 7e3d242fc574..33020d2fea7e 100644
--- a/pkg/cmd/server/kubernetes/master/master_config.go
+++ b/pkg/cmd/server/kubernetes/master/master_config.go
@@ -46,6 +46,7 @@ import (
utilflag "k8s.io/apiserver/pkg/util/flag"
auditlog "k8s.io/apiserver/plugin/pkg/audit/log"
auditwebhook "k8s.io/apiserver/plugin/pkg/audit/webhook"
+ pluginwebhook "k8s.io/apiserver/plugin/pkg/audit/webhook"
kubeclientgoinformers "k8s.io/client-go/informers"
openapicommon "k8s.io/kube-openapi/pkg/common"
kapiserveroptions "k8s.io/kubernetes/cmd/kube-apiserver/app/options"
@@ -819,7 +820,7 @@ func GetAuditConfig(auditConfig configapi.AuditConfig) (audit.Backend, auditpoli
// webhook configuration, only when config file was provided
if len(auditConfig.WebHookKubeConfig) > 0 {
- webhook, err := auditwebhook.NewBackend(auditConfig.WebHookKubeConfig, string(auditConfig.WebHookMode), auditv1beta1.SchemeGroupVersion)
+ webhook, err := auditwebhook.NewBackend(auditConfig.WebHookKubeConfig, string(auditConfig.WebHookMode), auditv1beta1.SchemeGroupVersion, pluginwebhook.NewDefaultBatchBackendConfig())
if err != nil {
glog.Fatalf("Audit webhook initialization failed: %v", err)
}
diff --git a/pkg/cmd/server/kubernetes/master/master_config_test.go b/pkg/cmd/server/kubernetes/master/master_config_test.go
index 45d92e23a4ac..2644afceca74 100644
--- a/pkg/cmd/server/kubernetes/master/master_config_test.go
+++ b/pkg/cmd/server/kubernetes/master/master_config_test.go
@@ -18,6 +18,7 @@ import (
apiserveroptions "k8s.io/apiserver/pkg/server/options"
"k8s.io/apiserver/pkg/storage/storagebackend"
utilconfig "k8s.io/apiserver/pkg/util/flag"
+ pluginwebhook "k8s.io/apiserver/plugin/pkg/audit/webhook"
kubeapiserveroptions "k8s.io/kubernetes/cmd/kube-apiserver/app/options"
cmapp "k8s.io/kubernetes/cmd/kube-controller-manager/app/options"
"k8s.io/kubernetes/pkg/api/legacyscheme"
@@ -125,12 +126,22 @@ func TestAPIServerDefaults(t *testing.T) {
EnableHttps: true,
HTTPTimeout: time.Duration(5) * time.Second,
},
+ // we currently overwrite this entire stanza, but we should be trying to collapse onto the upstream
+ // flag or config mechanism for kube.
Audit: &apiserveroptions.AuditOptions{
LogOptions: apiserveroptions.AuditLogOptions{
Format: "json",
},
WebhookOptions: apiserveroptions.AuditWebhookOptions{
Mode: "batch",
+ BatchConfig: pluginwebhook.BatchBackendConfig{
+ BufferSize: 10000,
+ MaxBatchSize: 400,
+ MaxBatchWait: time.Duration(30000000000),
+ ThrottleQPS: 10,
+ ThrottleBurst: 15,
+ InitialBackoff: time.Duration(10000000000),
+ },
},
},
Features: &apiserveroptions.FeatureOptions{
diff --git a/pkg/openapi/zz_generated.openapi.go b/pkg/openapi/zz_generated.openapi.go
index f67aaa6c6490..b2c69fb13e51 100644
--- a/pkg/openapi/zz_generated.openapi.go
+++ b/pkg/openapi/zz_generated.openapi.go
@@ -13400,7 +13400,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/apps/v1beta2.ControllerRevision": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
- Description: "ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.",
+ Description: "DEPRECATED - This group version of ControllerRevision is deprecated by apps/v1/ControllerRevision. See the release notes for more information. ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.",
Properties: map[string]spec.Schema{
"kind": {
SchemaProps: spec.SchemaProps{
@@ -13490,7 +13490,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/apps/v1beta2.DaemonSet": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
- Description: "DaemonSet represents the configuration of a daemon set.",
+ Description: "DEPRECATED - This group version of DaemonSet is deprecated by apps/v1/DaemonSet. See the release notes for more information. DaemonSet represents the configuration of a daemon set.",
Properties: map[string]spec.Schema{
"kind": {
SchemaProps: spec.SchemaProps{
@@ -13786,7 +13786,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/apps/v1beta2.Deployment": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
- Description: "Deployment enables declarative updates for Pods and ReplicaSets.",
+ Description: "DEPRECATED - This group version of Deployment is deprecated by apps/v1/Deployment. See the release notes for more information. Deployment enables declarative updates for Pods and ReplicaSets.",
Properties: map[string]spec.Schema{
"kind": {
SchemaProps: spec.SchemaProps{
@@ -14094,7 +14094,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/apps/v1beta2.ReplicaSet": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
- Description: "ReplicaSet ensures that a specified number of pod replicas are running at any given time.",
+ Description: "DEPRECATED - This group version of ReplicaSet is deprecated by apps/v1/ReplicaSet. See the release notes for more information. ReplicaSet ensures that a specified number of pod replicas are running at any given time.",
Properties: map[string]spec.Schema{
"kind": {
SchemaProps: spec.SchemaProps{
@@ -14488,7 +14488,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/apps/v1beta2.StatefulSet": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
- Description: "StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.",
+ Description: "DEPRECATED - This group version of StatefulSet is deprecated by apps/v1/StatefulSet. See the release notes for more information. StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.",
Properties: map[string]spec.Schema{
"kind": {
SchemaProps: spec.SchemaProps{
@@ -20435,7 +20435,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/core/v1.FlexVolumeSource": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
- Description: "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ Description: "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
Properties: map[string]spec.Schema{
"driver": {
SchemaProps: spec.SchemaProps{
@@ -22688,7 +22688,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
},
"flexVolume": {
SchemaProps: spec.SchemaProps{
- Description: "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ Description: "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
Ref: ref("k8s.io/api/core/v1.FlexVolumeSource"),
},
},
@@ -22844,7 +22844,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
},
"flexVolume": {
SchemaProps: spec.SchemaProps{
- Description: "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ Description: "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
Ref: ref("k8s.io/api/core/v1.FlexVolumeSource"),
},
},
@@ -23789,7 +23789,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
},
"dnsPolicy": {
SchemaProps: spec.SchemaProps{
- Description: "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'.",
+ Description: "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.",
Type: []string{"string"},
Format: "",
},
@@ -23957,7 +23957,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
},
"dnsConfig": {
SchemaProps: spec.SchemaProps{
- Description: "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.",
+ Description: "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.",
Ref: ref("k8s.io/api/core/v1.PodDNSConfig"),
},
},
@@ -26437,7 +26437,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
},
"flexVolume": {
SchemaProps: spec.SchemaProps{
- Description: "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ Description: "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
Ref: ref("k8s.io/api/core/v1.FlexVolumeSource"),
},
},
@@ -26711,7 +26711,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
},
"flexVolume": {
SchemaProps: spec.SchemaProps{
- Description: "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ Description: "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
Ref: ref("k8s.io/api/core/v1.FlexVolumeSource"),
},
},
@@ -28012,7 +28012,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/extensions/v1beta1.IPBlock": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
- Description: "IPBlock describes a particular CIDR (Ex. \"192.168.1.1/24\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.",
+ Description: "DEPRECATED 1.9 - This group version of IPBlock is deprecated by networking/v1/IPBlock. IPBlock describes a particular CIDR (Ex. \"192.168.1.1/24\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.",
Properties: map[string]spec.Schema{
"cidr": {
SchemaProps: spec.SchemaProps{
@@ -28287,7 +28287,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/extensions/v1beta1.NetworkPolicy": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
- Description: "NetworkPolicy describes what network traffic is allowed for a set of Pods",
+ Description: "DEPRECATED 1.9 - This group version of NetworkPolicy is deprecated by networking/v1/NetworkPolicy. NetworkPolicy describes what network traffic is allowed for a set of Pods",
Properties: map[string]spec.Schema{
"kind": {
SchemaProps: spec.SchemaProps{
@@ -28324,7 +28324,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/extensions/v1beta1.NetworkPolicyEgressRule": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
- Description: "NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8",
+ Description: "DEPRECATED 1.9 - This group version of NetworkPolicyEgressRule is deprecated by networking/v1/NetworkPolicyEgressRule. NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8",
Properties: map[string]spec.Schema{
"ports": {
SchemaProps: spec.SchemaProps{
@@ -28361,7 +28361,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/extensions/v1beta1.NetworkPolicyIngressRule": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
- Description: "This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.",
+ Description: "DEPRECATED 1.9 - This group version of NetworkPolicyIngressRule is deprecated by networking/v1/NetworkPolicyIngressRule. This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.",
Properties: map[string]spec.Schema{
"ports": {
SchemaProps: spec.SchemaProps{
@@ -28398,7 +28398,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/extensions/v1beta1.NetworkPolicyList": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
- Description: "Network Policy List is a list of NetworkPolicy objects.",
+ Description: "DEPRECATED 1.9 - This group version of NetworkPolicyList is deprecated by networking/v1/NetworkPolicyList. Network Policy List is a list of NetworkPolicy objects.",
Properties: map[string]spec.Schema{
"kind": {
SchemaProps: spec.SchemaProps{
@@ -28443,6 +28443,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/extensions/v1beta1.NetworkPolicyPeer": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
+ Description: "DEPRECATED 1.9 - This group version of NetworkPolicyPeer is deprecated by networking/v1/NetworkPolicyPeer.",
Properties: map[string]spec.Schema{
"podSelector": {
SchemaProps: spec.SchemaProps{
@@ -28471,6 +28472,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/extensions/v1beta1.NetworkPolicyPort": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
+ Description: "DEPRECATED 1.9 - This group version of NetworkPolicyPort is deprecated by networking/v1/NetworkPolicyPort.",
Properties: map[string]spec.Schema{
"protocol": {
SchemaProps: spec.SchemaProps{
@@ -28494,6 +28496,7 @@ func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenA
"k8s.io/api/extensions/v1beta1.NetworkPolicySpec": {
Schema: spec.Schema{
SchemaProps: spec.SchemaProps{
+ Description: "DEPRECATED 1.9 - This group version of NetworkPolicySpec is deprecated by networking/v1/NetworkPolicySpec.",
Properties: map[string]spec.Schema{
"podSelector": {
SchemaProps: spec.SchemaProps{
diff --git a/test/testdata/bootstrappolicy/bootstrap_cluster_role_bindings.yaml b/test/testdata/bootstrappolicy/bootstrap_cluster_role_bindings.yaml
index 98b750fe43bf..061b571ed7c3 100644
--- a/test/testdata/bootstrappolicy/bootstrap_cluster_role_bindings.yaml
+++ b/test/testdata/bootstrappolicy/bootstrap_cluster_role_bindings.yaml
@@ -1137,6 +1137,23 @@ items:
- apiGroup: rbac.authorization.k8s.io
kind: User
name: system:kube-scheduler
+- apiVersion: rbac.authorization.k8s.io/v1beta1
+ kind: ClusterRoleBinding
+ metadata:
+ annotations:
+ rbac.authorization.kubernetes.io/autoupdate: "true"
+ creationTimestamp: null
+ labels:
+ kubernetes.io/bootstrapping: rbac-defaults
+ name: system:aws-cloud-provider
+ roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: system:aws-cloud-provider
+ subjects:
+ - kind: ServiceAccount
+ name: aws-cloud-provider
+ namespace: kube-system
- apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
diff --git a/test/testdata/bootstrappolicy/bootstrap_cluster_roles.yaml b/test/testdata/bootstrappolicy/bootstrap_cluster_roles.yaml
index 36148012eea2..94e6ec0373b4 100644
--- a/test/testdata/bootstrappolicy/bootstrap_cluster_roles.yaml
+++ b/test/testdata/bootstrappolicy/bootstrap_cluster_roles.yaml
@@ -5797,6 +5797,32 @@ items:
verbs:
- list
- watch
+- apiVersion: rbac.authorization.k8s.io/v1beta1
+ kind: ClusterRole
+ metadata:
+ annotations:
+ authorization.openshift.io/system-only: "true"
+ rbac.authorization.kubernetes.io/autoupdate: "true"
+ creationTimestamp: null
+ labels:
+ kubernetes.io/bootstrapping: rbac-defaults
+ name: system:aws-cloud-provider
+ rules:
+ - apiGroups:
+ - ""
+ resources:
+ - nodes
+ verbs:
+ - get
+ - patch
+ - apiGroups:
+ - ""
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+ - update
- apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole
metadata:
diff --git a/test/testdata/bootstrappolicy/bootstrap_policy_file.yaml b/test/testdata/bootstrappolicy/bootstrap_policy_file.yaml
index 0745d98b276c..0da1e9b345a0 100644
--- a/test/testdata/bootstrappolicy/bootstrap_policy_file.yaml
+++ b/test/testdata/bootstrappolicy/bootstrap_policy_file.yaml
@@ -6334,6 +6334,34 @@ items:
verbs:
- list
- watch
+- apiVersion: v1
+ kind: ClusterRole
+ metadata:
+ annotations:
+ authorization.openshift.io/system-only: "true"
+ openshift.io/reconcile-protect: "false"
+ creationTimestamp: null
+ labels:
+ kubernetes.io/bootstrapping: rbac-defaults
+ name: system:aws-cloud-provider
+ rules:
+ - apiGroups:
+ - ""
+ attributeRestrictions: null
+ resources:
+ - nodes
+ verbs:
+ - get
+ - patch
+ - apiGroups:
+ - ""
+ attributeRestrictions: null
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+ - update
- apiVersion: v1
kind: ClusterRole
metadata:
@@ -7553,6 +7581,24 @@ items:
name: system:kube-scheduler
userNames:
- system:kube-scheduler
+- apiVersion: v1
+ groupNames: null
+ kind: ClusterRoleBinding
+ metadata:
+ annotations:
+ openshift.io/reconcile-protect: "false"
+ creationTimestamp: null
+ labels:
+ kubernetes.io/bootstrapping: rbac-defaults
+ name: system:aws-cloud-provider
+ roleRef:
+ name: system:aws-cloud-provider
+ subjects:
+ - kind: ServiceAccount
+ name: aws-cloud-provider
+ namespace: kube-system
+ userNames:
+ - system:serviceaccount:kube-system:aws-cloud-provider
- apiVersion: v1
groupNames: null
kind: ClusterRoleBinding
diff --git a/vendor/github.com/google/cadvisor/CHANGELOG.md b/vendor/github.com/google/cadvisor/CHANGELOG.md
index b7541197d208..708aa1c85985 100644
--- a/vendor/github.com/google/cadvisor/CHANGELOG.md
+++ b/vendor/github.com/google/cadvisor/CHANGELOG.md
@@ -1,5 +1,9 @@
# Changelog
+### 0.28.3 (2017-12-7)
+- Add timeout for docker calls
+- Fix prometheus label consistency
+
### 0.28.2 (2017-11-21)
- Fix GPU init race condition
diff --git a/vendor/github.com/google/cadvisor/accelerators/nvidia.go b/vendor/github.com/google/cadvisor/accelerators/nvidia.go
index ac528db0e138..054d206b2ac8 100644
--- a/vendor/github.com/google/cadvisor/accelerators/nvidia.go
+++ b/vendor/github.com/google/cadvisor/accelerators/nvidia.go
@@ -47,7 +47,7 @@ const nvidiaVendorId = "0x10de"
// Setup initializes NVML if nvidia devices are present on the node.
func (nm *NvidiaManager) Setup() {
if !detectDevices(nvidiaVendorId) {
- glog.Info("No NVIDIA devices found.")
+ glog.V(4).Info("No NVIDIA devices found.")
return
}
@@ -56,7 +56,7 @@ func (nm *NvidiaManager) Setup() {
return
}
go func() {
- glog.Info("Starting goroutine to initialize NVML")
+ glog.V(2).Info("Starting goroutine to initialize NVML")
// TODO: use globalHousekeepingInterval
for range time.Tick(time.Minute) {
nm.initializeNVML()
@@ -71,7 +71,7 @@ func (nm *NvidiaManager) Setup() {
func detectDevices(vendorId string) bool {
devices, err := ioutil.ReadDir(sysFsPCIDevicesPath)
if err != nil {
- glog.Warningf("error reading %q: %v", sysFsPCIDevicesPath, err)
+ glog.Warningf("Error reading %q: %v", sysFsPCIDevicesPath, err)
return false
}
@@ -79,11 +79,11 @@ func detectDevices(vendorId string) bool {
vendorPath := filepath.Join(sysFsPCIDevicesPath, device.Name(), "vendor")
content, err := ioutil.ReadFile(vendorPath)
if err != nil {
- glog.Infof("Error while reading %q: %v", vendorPath, err)
+ glog.V(4).Infof("Error while reading %q: %v", vendorPath, err)
continue
}
if strings.EqualFold(strings.TrimSpace(string(content)), vendorId) {
- glog.Infof("Found device with vendorId %q", vendorId)
+ glog.V(3).Infof("Found device with vendorId %q", vendorId)
return true
}
}
@@ -95,7 +95,7 @@ func (nm *NvidiaManager) initializeNVML() {
if err := gonvml.Initialize(); err != nil {
// This is under a logging level because otherwise we may cause
// log spam if the drivers/nvml is not installed on the system.
- glog.V(3).Infof("Could not initialize NVML: %v", err)
+ glog.V(4).Infof("Could not initialize NVML: %v", err)
return
}
numDevices, err := gonvml.DeviceCount()
@@ -107,7 +107,7 @@ func (nm *NvidiaManager) initializeNVML() {
nm.Unlock()
return
}
- glog.Infof("NVML initialized. Number of nvidia devices: %v", numDevices)
+ glog.V(1).Infof("NVML initialized. Number of nvidia devices: %v", numDevices)
nm.nvidiaDevices = make(map[int]gonvml.Device, numDevices)
for i := 0; i < int(numDevices); i++ {
device, err := gonvml.DeviceHandleByIndex(uint(i))
diff --git a/vendor/github.com/google/cadvisor/cadvisor.go b/vendor/github.com/google/cadvisor/cadvisor.go
index df8146a438f4..f35af67fff91 100644
--- a/vendor/github.com/google/cadvisor/cadvisor.go
+++ b/vendor/github.com/google/cadvisor/cadvisor.go
@@ -104,6 +104,9 @@ func (ml *metricSetValue) Set(value string) error {
func init() {
flag.Var(&ignoreMetrics, "disable_metrics", "comma-separated list of `metrics` to be disabled. Options are 'disk', 'network', 'tcp', 'udp'. Note: tcp and udp are disabled by default due to high CPU usage.")
+
+ // Default logging verbosity to V(2)
+ flag.Set("v", "2")
}
func main() {
@@ -156,7 +159,7 @@ func main() {
// Install signal handler.
installSignalHandler(containerManager)
- glog.Infof("Starting cAdvisor version: %s-%s on port %d", version.Info["version"], version.Info["revision"], *argPort)
+ glog.V(1).Infof("Starting cAdvisor version: %s-%s on port %d", version.Info["version"], version.Info["revision"], *argPort)
addr := fmt.Sprintf("%s:%d", *argIp, *argPort)
glog.Fatal(http.ListenAndServe(addr, mux))
diff --git a/vendor/github.com/google/cadvisor/container/containerd/factory.go b/vendor/github.com/google/cadvisor/container/containerd/factory.go
index a021538b1623..dba43ef32e21 100644
--- a/vendor/github.com/google/cadvisor/container/containerd/factory.go
+++ b/vendor/github.com/google/cadvisor/container/containerd/factory.go
@@ -133,7 +133,7 @@ func Register(factory info.MachineInfoFactory, fsInfo fs.FsInfo, ignoreMetrics c
return fmt.Errorf("failed to get cgroup subsystems: %v", err)
}
- glog.Infof("Registering containerd factory")
+ glog.V(1).Infof("Registering containerd factory")
f := &containerdFactory{
cgroupSubsystems: cgroupSubsystems,
client: client,
diff --git a/vendor/github.com/google/cadvisor/container/crio/factory.go b/vendor/github.com/google/cadvisor/container/crio/factory.go
index b0151c7f12ef..0c77db69ed10 100644
--- a/vendor/github.com/google/cadvisor/container/crio/factory.go
+++ b/vendor/github.com/google/cadvisor/container/crio/factory.go
@@ -154,7 +154,7 @@ func Register(factory info.MachineInfoFactory, fsInfo fs.FsInfo, ignoreMetrics c
return fmt.Errorf("failed to get cgroup subsystems: %v", err)
}
- glog.Infof("Registering CRI-O factory")
+ glog.V(1).Infof("Registering CRI-O factory")
f := &crioFactory{
client: client,
cgroupSubsystems: cgroupSubsystems,
diff --git a/vendor/github.com/google/cadvisor/container/crio/handler.go b/vendor/github.com/google/cadvisor/container/crio/handler.go
index 391d383322f0..024341da8ab2 100644
--- a/vendor/github.com/google/cadvisor/container/crio/handler.go
+++ b/vendor/github.com/google/cadvisor/container/crio/handler.go
@@ -185,7 +185,7 @@ func newCrioContainerHandler(
}
// TODO for env vars we wanted to show from container.Config.Env from whitelist
//for _, exposedEnv := range metadataEnvs {
- //glog.Infof("TODO env whitelist: %v", exposedEnv)
+ //glog.V(4).Infof("TODO env whitelist: %v", exposedEnv)
//}
return handler, nil
diff --git a/vendor/github.com/google/cadvisor/container/docker/docker.go b/vendor/github.com/google/cadvisor/container/docker/docker.go
index 3d3dfa5b6b92..b0ed227dda0d 100644
--- a/vendor/github.com/google/cadvisor/container/docker/docker.go
+++ b/vendor/github.com/google/cadvisor/container/docker/docker.go
@@ -23,26 +23,33 @@ import (
dockertypes "github.com/docker/docker/api/types"
"golang.org/x/net/context"
+ "time"
+
"github.com/google/cadvisor/info/v1"
"github.com/google/cadvisor/machine"
)
+const defaultTimeout = time.Second * 5
+
+func defaultContext() context.Context {
+ ctx, _ := context.WithTimeout(context.Background(), defaultTimeout)
+ return ctx
+}
+
func Status() (v1.DockerStatus, error) {
client, err := Client()
if err != nil {
return v1.DockerStatus{}, fmt.Errorf("unable to communicate with docker daemon: %v", err)
}
- dockerInfo, err := client.Info(context.Background())
+ dockerInfo, err := client.Info(defaultContext())
if err != nil {
return v1.DockerStatus{}, err
}
- return StatusFromDockerInfo(dockerInfo), nil
+ return StatusFromDockerInfo(dockerInfo)
}
-func StatusFromDockerInfo(dockerInfo dockertypes.Info) v1.DockerStatus {
+func StatusFromDockerInfo(dockerInfo dockertypes.Info) (v1.DockerStatus, error) {
out := v1.DockerStatus{}
- out.Version = VersionString()
- out.APIVersion = APIVersionString()
out.KernelVersion = machine.KernelVersion()
out.OS = dockerInfo.OperatingSystem
out.Hostname = dockerInfo.Name
@@ -54,7 +61,18 @@ func StatusFromDockerInfo(dockerInfo dockertypes.Info) v1.DockerStatus {
for _, v := range dockerInfo.DriverStatus {
out.DriverStatus[v[0]] = v[1]
}
- return out
+ var err error
+ ver, err := VersionString()
+ if err != nil {
+ return out, err
+ }
+ out.Version = ver
+ ver, err = APIVersionString()
+ if err != nil {
+ return out, err
+ }
+ out.APIVersion = ver
+ return out, nil
}
func Images() ([]v1.DockerImage, error) {
@@ -62,7 +80,7 @@ func Images() ([]v1.DockerImage, error) {
if err != nil {
return nil, fmt.Errorf("unable to communicate with docker daemon: %v", err)
}
- images, err := client.ImageList(context.Background(), dockertypes.ImageListOptions{All: false})
+ images, err := client.ImageList(defaultContext(), dockertypes.ImageListOptions{All: false})
if err != nil {
return nil, err
}
@@ -95,14 +113,14 @@ func ValidateInfo() (*dockertypes.Info, error) {
return nil, fmt.Errorf("unable to communicate with docker daemon: %v", err)
}
- dockerInfo, err := client.Info(context.Background())
+ dockerInfo, err := client.Info(defaultContext())
if err != nil {
return nil, fmt.Errorf("failed to detect Docker info: %v", err)
}
// Fall back to version API if ServerVersion is not set in info.
if dockerInfo.ServerVersion == "" {
- version, err := client.ServerVersion(context.Background())
+ version, err := client.ServerVersion(defaultContext())
if err != nil {
return nil, fmt.Errorf("unable to get docker version: %v", err)
}
@@ -125,35 +143,43 @@ func ValidateInfo() (*dockertypes.Info, error) {
}
func Version() ([]int, error) {
- return parseVersion(VersionString(), version_re, 3)
+ ver, err := VersionString()
+ if err != nil {
+ return nil, err
+ }
+ return parseVersion(ver, version_re, 3)
}
func APIVersion() ([]int, error) {
- return parseVersion(APIVersionString(), apiversion_re, 2)
+ ver, err := APIVersionString()
+ if err != nil {
+ return nil, err
+ }
+ return parseVersion(ver, apiversion_re, 2)
}
-func VersionString() string {
+func VersionString() (string, error) {
docker_version := "Unknown"
client, err := Client()
if err == nil {
- version, err := client.ServerVersion(context.Background())
+ version, err := client.ServerVersion(defaultContext())
if err == nil {
docker_version = version.Version
}
}
- return docker_version
+ return docker_version, err
}
-func APIVersionString() string {
+func APIVersionString() (string, error) {
docker_api_version := "Unknown"
client, err := Client()
if err == nil {
- version, err := client.ServerVersion(context.Background())
+ version, err := client.ServerVersion(defaultContext())
if err == nil {
docker_api_version = version.APIVersion
}
}
- return docker_api_version
+ return docker_api_version, err
}
func parseVersion(version_string string, regex *regexp.Regexp, length int) ([]int, error) {
diff --git a/vendor/github.com/google/cadvisor/container/docker/factory.go b/vendor/github.com/google/cadvisor/container/docker/factory.go
index a5ce4d14246c..9eb1ff526d08 100644
--- a/vendor/github.com/google/cadvisor/container/docker/factory.go
+++ b/vendor/github.com/google/cadvisor/container/docker/factory.go
@@ -340,7 +340,8 @@ func Register(factory info.MachineInfoFactory, fsInfo fs.FsInfo, ignoreMetrics c
glog.Errorf("devicemapper filesystem stats will not be reported: %v", err)
}
- status := StatusFromDockerInfo(*dockerInfo)
+ // Safe to ignore error - driver status should always be populated.
+ status, _ := StatusFromDockerInfo(*dockerInfo)
thinPoolName = status.DriverStatus[dockerutil.DriverStatusPoolName]
}
@@ -352,7 +353,7 @@ func Register(factory info.MachineInfoFactory, fsInfo fs.FsInfo, ignoreMetrics c
}
}
- glog.Infof("Registering Docker factory")
+ glog.V(1).Infof("Registering Docker factory")
f := &dockerFactory{
cgroupSubsystems: cgroupSubsystems,
client: client,
diff --git a/vendor/github.com/google/cadvisor/container/raw/factory.go b/vendor/github.com/google/cadvisor/container/raw/factory.go
index 36d236c8dd5e..1b8a43a40776 100644
--- a/vendor/github.com/google/cadvisor/container/raw/factory.go
+++ b/vendor/github.com/google/cadvisor/container/raw/factory.go
@@ -83,7 +83,7 @@ func Register(machineInfoFactory info.MachineInfoFactory, fsInfo fs.FsInfo, igno
return err
}
- glog.Infof("Registering Raw factory")
+ glog.V(1).Infof("Registering Raw factory")
factory := &rawFactory{
machineInfoFactory: machineInfoFactory,
fsInfo: fsInfo,
diff --git a/vendor/github.com/google/cadvisor/container/rkt/factory.go b/vendor/github.com/google/cadvisor/container/rkt/factory.go
index f29c615ebaa1..3f79d753e0d2 100644
--- a/vendor/github.com/google/cadvisor/container/rkt/factory.go
+++ b/vendor/github.com/google/cadvisor/container/rkt/factory.go
@@ -86,7 +86,7 @@ func Register(machineInfoFactory info.MachineInfoFactory, fsInfo fs.FsInfo, igno
return fmt.Errorf("failed to find supported cgroup mounts for the raw factory")
}
- glog.Infof("Registering Rkt factory")
+ glog.V(1).Infof("Registering Rkt factory")
factory := &rktFactory{
machineInfoFactory: machineInfoFactory,
fsInfo: fsInfo,
diff --git a/vendor/github.com/google/cadvisor/container/systemd/factory.go b/vendor/github.com/google/cadvisor/container/systemd/factory.go
index 4e71d40bda6d..cb3b7c89cd34 100644
--- a/vendor/github.com/google/cadvisor/container/systemd/factory.go
+++ b/vendor/github.com/google/cadvisor/container/systemd/factory.go
@@ -51,7 +51,7 @@ func (f *systemdFactory) DebugInfo() map[string][]string {
// Register registers the systemd container factory.
func Register(machineInfoFactory info.MachineInfoFactory, fsInfo fs.FsInfo, ignoreMetrics container.MetricSet) error {
- glog.Infof("Registering systemd factory")
+ glog.V(1).Infof("Registering systemd factory")
factory := &systemdFactory{}
container.RegisterContainerHandlerFactory(factory, []watcher.ContainerWatchSource{watcher.Raw})
return nil
diff --git a/vendor/github.com/google/cadvisor/docs/running.md b/vendor/github.com/google/cadvisor/docs/running.md
index b798c1c93849..c1c7fd0304ae 100644
--- a/vendor/github.com/google/cadvisor/docs/running.md
+++ b/vendor/github.com/google/cadvisor/docs/running.md
@@ -82,3 +82,26 @@ cAdvisor is now running (in the foreground) on `http://localhost:8080/`.
## Runtime Options
cAdvisor has a series of flags that can be used to configure its runtime behavior. More details can be found in runtime [options](runtime_options.md).
+
+## Hardware Accelerator Monitoring
+
+cAdvisor can export some metrics for hardware accelerators attached to containers.
+Currently only Nvidia GPUs are supported. There are no machine level metrics.
+So, metrics won't show up if no container with accelerators attached is running.
+Metrics will only show up if accelerators are explicitly attached to the container, e.g., by passing `--device /dev/nvidia0:/dev/nvidia0` flag to docker.
+If nothing is explicitly attached to the container, metrics will NOT show up. This can happen when you access accelerators from privileged containers.
+
+There are two things that cAdvisor needs to show Nvidia GPU metrics:
+- access to NVML library (`libnvidia-ml.so.1`).
+- access to the GPU devices.
+
+If you are running cAdvisor inside a container, you will need to do the following to give the container access to NVML library:
+```
+-e LD_LIBRARY_PATH=
+--volume :
+```
+
+If you are running cAdvisor inside a container, you can do one of the following to give it access to the GPU devices:
+- Run with `--privileged`
+- If you are on docker v17.04.0-ce or above, run with `--device-cgroup-rule 'c 195:* mrw'`
+- Run with `--device /dev/nvidiactl:/dev/nvidiactl /dev/nvidia0:/dev/nvidia0 /dev/nvidia1:/dev/nvidia1 `
diff --git a/vendor/github.com/google/cadvisor/fs/fs.go b/vendor/github.com/google/cadvisor/fs/fs.go
index b2eb7bd6c350..271b01e3562f 100644
--- a/vendor/github.com/google/cadvisor/fs/fs.go
+++ b/vendor/github.com/google/cadvisor/fs/fs.go
@@ -136,8 +136,8 @@ func NewFsInfo(context Context) (FsInfo, error) {
fsInfo.addDockerImagesLabel(context, mounts)
fsInfo.addCrioImagesLabel(context, mounts)
- glog.Infof("Filesystem UUIDs: %+v", fsInfo.fsUUIDToDeviceName)
- glog.Infof("Filesystem partitions: %+v", fsInfo.partitions)
+ glog.V(1).Infof("Filesystem UUIDs: %+v", fsInfo.fsUUIDToDeviceName)
+ glog.V(1).Infof("Filesystem partitions: %+v", fsInfo.partitions)
fsInfo.addSystemRootLabel(mounts)
return fsInfo, nil
}
@@ -162,7 +162,7 @@ func getFsUUIDToDeviceNameMap() (map[string]string, error) {
path := filepath.Join(dir, file.Name())
target, err := os.Readlink(path)
if err != nil {
- glog.Infof("Failed to resolve symlink for %q", path)
+ glog.Warningf("Failed to resolve symlink for %q", path)
continue
}
device, err := filepath.Abs(filepath.Join(dir, target))
@@ -438,7 +438,7 @@ func getDiskStatsMap(diskStatsFile string) (map[string]DiskStats, error) {
file, err := os.Open(diskStatsFile)
if err != nil {
if os.IsNotExist(err) {
- glog.Infof("not collecting filesystem statistics because file %q was not available", diskStatsFile)
+ glog.Warningf("Not collecting filesystem statistics because file %q was not found", diskStatsFile)
return diskStatsMap, nil
}
return nil, err
@@ -561,12 +561,12 @@ func GetDirDiskUsage(dir string, timeout time.Duration) (uint64, error) {
return 0, fmt.Errorf("failed to exec du - %v", err)
}
timer := time.AfterFunc(timeout, func() {
- glog.Infof("killing cmd %v due to timeout(%s)", cmd.Args, timeout.String())
+ glog.Warningf("Killing cmd %v due to timeout(%s)", cmd.Args, timeout.String())
cmd.Process.Kill()
})
stdoutb, souterr := ioutil.ReadAll(stdoutp)
if souterr != nil {
- glog.Errorf("failed to read from stdout for cmd %v - %v", cmd.Args, souterr)
+ glog.Errorf("Failed to read from stdout for cmd %v - %v", cmd.Args, souterr)
}
stderrb, _ := ioutil.ReadAll(stderrp)
err = cmd.Wait()
@@ -600,7 +600,7 @@ func GetDirInodeUsage(dir string, timeout time.Duration) (uint64, error) {
return 0, fmt.Errorf("failed to exec cmd %v - %v; stderr: %v", findCmd.Args, err, stderr.String())
}
timer := time.AfterFunc(timeout, func() {
- glog.Infof("killing cmd %v due to timeout(%s)", findCmd.Args, timeout.String())
+ glog.Warningf("Killing cmd %v due to timeout(%s)", findCmd.Args, timeout.String())
findCmd.Process.Kill()
})
err := findCmd.Wait()
@@ -741,7 +741,7 @@ func getBtrfsMajorMinorIds(mount *mount.Info) (int, int, error) {
return 0, 0, err
}
- glog.Infof("btrfs mount %#v", mount)
+ glog.V(4).Infof("btrfs mount %#v", mount)
if buf.Mode&syscall.S_IFMT == syscall.S_IFBLK {
err := syscall.Stat(mount.Mountpoint, buf)
if err != nil {
@@ -749,8 +749,8 @@ func getBtrfsMajorMinorIds(mount *mount.Info) (int, int, error) {
return 0, 0, err
}
- glog.Infof("btrfs dev major:minor %d:%d\n", int(major(buf.Dev)), int(minor(buf.Dev)))
- glog.Infof("btrfs rdev major:minor %d:%d\n", int(major(buf.Rdev)), int(minor(buf.Rdev)))
+ glog.V(4).Infof("btrfs dev major:minor %d:%d\n", int(major(buf.Dev)), int(minor(buf.Dev)))
+ glog.V(4).Infof("btrfs rdev major:minor %d:%d\n", int(major(buf.Rdev)), int(minor(buf.Rdev)))
return int(major(buf.Dev)), int(minor(buf.Dev)), nil
} else {
diff --git a/vendor/github.com/google/cadvisor/http/handlers.go b/vendor/github.com/google/cadvisor/http/handlers.go
index a2b4055dde0a..8950072b4b9c 100644
--- a/vendor/github.com/google/cadvisor/http/handlers.go
+++ b/vendor/github.com/google/cadvisor/http/handlers.go
@@ -60,7 +60,7 @@ func RegisterHandlers(mux httpmux.Mux, containerManager manager.Manager, httpAut
// Setup the authenticator object
if httpAuthFile != "" {
- glog.Infof("Using auth file %s", httpAuthFile)
+ glog.V(1).Infof("Using auth file %s", httpAuthFile)
secrets := auth.HtpasswdFileProvider(httpAuthFile)
authenticator := auth.NewBasicAuthenticator(httpAuthRealm, secrets)
mux.HandleFunc(static.StaticResource, authenticator.Wrap(staticHandler))
@@ -70,7 +70,7 @@ func RegisterHandlers(mux httpmux.Mux, containerManager manager.Manager, httpAut
authenticated = true
}
if httpAuthFile == "" && httpDigestFile != "" {
- glog.Infof("Using digest file %s", httpDigestFile)
+ glog.V(1).Infof("Using digest file %s", httpDigestFile)
secrets := auth.HtdigestFileProvider(httpDigestFile)
authenticator := auth.NewDigestAuthenticator(httpDigestRealm, secrets)
mux.HandleFunc(static.StaticResource, authenticator.Wrap(staticHandler))
diff --git a/vendor/github.com/google/cadvisor/machine/info.go b/vendor/github.com/google/cadvisor/machine/info.go
index 282f71dee487..be90f17e96ce 100644
--- a/vendor/github.com/google/cadvisor/machine/info.go
+++ b/vendor/github.com/google/cadvisor/machine/info.go
@@ -49,7 +49,7 @@ func getInfoFromFiles(filePaths string) string {
return strings.TrimSpace(string(id))
}
}
- glog.Infof("Couldn't collect info from any of the files in %q", filePaths)
+ glog.Warningf("Couldn't collect info from any of the files in %q", filePaths)
return ""
}
diff --git a/vendor/github.com/google/cadvisor/manager/container.go b/vendor/github.com/google/cadvisor/manager/container.go
index 1c3194bbf12d..8193bb5e3759 100644
--- a/vendor/github.com/google/cadvisor/manager/container.go
+++ b/vendor/github.com/google/cadvisor/manager/container.go
@@ -377,8 +377,7 @@ func newContainerData(containerName string, memoryCache *memory.InMemoryCache, h
// Create cpu load reader.
loadReader, err := cpuload.New()
if err != nil {
- // TODO(rjnagal): Promote to warning once we support cpu load inside namespaces.
- glog.Infof("Could not initialize cpu load reader for %q: %s", ref.Name, err)
+ glog.Warningf("Could not initialize cpu load reader for %q: %s", ref.Name, err)
} else {
cont.loadReader = loadReader
}
@@ -467,7 +466,7 @@ func (c *containerData) housekeeping() {
stats, err := c.memoryCache.RecentStats(c.info.Name, empty, empty, numSamples)
if err != nil {
if c.allowErrorLogging() {
- glog.Infof("[%s] Failed to get recent stats for logging usage: %v", c.info.Name, err)
+ glog.Warningf("[%s] Failed to get recent stats for logging usage: %v", c.info.Name, err)
}
} else if len(stats) < numSamples {
// Ignore, not enough stats yet.
@@ -483,6 +482,7 @@ func (c *containerData) housekeeping() {
instantUsageInCores := float64(stats[numSamples-1].Cpu.Usage.Total-stats[numSamples-2].Cpu.Usage.Total) / float64(stats[numSamples-1].Timestamp.Sub(stats[numSamples-2].Timestamp).Nanoseconds())
usageInCores := float64(usageCpuNs) / float64(stats[numSamples-1].Timestamp.Sub(stats[0].Timestamp).Nanoseconds())
usageInHuman := units.HumanSize(float64(usageMemory))
+ // Don't set verbosity since this is already protected by the logUsage flag.
glog.Infof("[%s] %.3f cores (average: %.3f cores), %s of memory", c.info.Name, instantUsageInCores, usageInCores, usageInHuman)
}
}
@@ -504,7 +504,7 @@ func (c *containerData) housekeepingTick(timer <-chan time.Time, longHousekeepin
err := c.updateStats()
if err != nil {
if c.allowErrorLogging() {
- glog.Infof("Failed to update stats for container \"%s\": %s", c.info.Name, err)
+ glog.Warning("Failed to update stats for container \"%s\": %s", c.info.Name, err)
}
}
// Log if housekeeping took too long.
diff --git a/vendor/github.com/google/cadvisor/manager/manager.go b/vendor/github.com/google/cadvisor/manager/manager.go
index 69c59b681c93..08955833bff0 100644
--- a/vendor/github.com/google/cadvisor/manager/manager.go
+++ b/vendor/github.com/google/cadvisor/manager/manager.go
@@ -148,19 +148,19 @@ func New(memoryCache *memory.InMemoryCache, sysfs sysfs.SysFs, maxHousekeepingIn
if err != nil {
return nil, err
}
- glog.Infof("cAdvisor running in container: %q", selfContainer)
+ glog.V(2).Infof("cAdvisor running in container: %q", selfContainer)
var (
dockerStatus info.DockerStatus
rktPath string
)
if tempDockerStatus, err := docker.Status(); err != nil {
- glog.Warningf("Unable to connect to Docker: %v", err)
+ glog.V(5).Infof("Docker not connected: %v", err)
} else {
dockerStatus = tempDockerStatus
}
if tmpRktPath, err := rkt.RktPath(); err != nil {
- glog.Warningf("unable to connect to Rkt api service: %v", err)
+ glog.V(5).Infof("Rkt not connected: %v", err)
} else {
rktPath = tmpRktPath
}
@@ -171,7 +171,7 @@ func New(memoryCache *memory.InMemoryCache, sysfs sysfs.SysFs, maxHousekeepingIn
}
crioInfo, err := crioClient.Info()
if err != nil {
- glog.Warningf("unable to connect to CRI-O api service: %v", err)
+ glog.V(5).Infof("CRI-O not connected: %v", err)
}
context := fs.Context{
@@ -222,13 +222,13 @@ func New(memoryCache *memory.InMemoryCache, sysfs sysfs.SysFs, maxHousekeepingIn
return nil, err
}
newManager.machineInfo = *machineInfo
- glog.Infof("Machine: %+v", newManager.machineInfo)
+ glog.V(1).Infof("Machine: %+v", newManager.machineInfo)
versionInfo, err := getVersionInfo()
if err != nil {
return nil, err
}
- glog.Infof("Version: %+v", *versionInfo)
+ glog.V(1).Infof("Version: %+v", *versionInfo)
newManager.eventHandler = events.NewEventManager(parseEventsStoragePolicy())
return newManager, nil
@@ -267,12 +267,12 @@ type manager struct {
func (self *manager) Start() error {
err := docker.Register(self, self.fsInfo, self.ignoreMetrics)
if err != nil {
- glog.Warningf("Docker container factory registration failed: %v.", err)
+ glog.V(5).Infof("Registration of the Docker container factory failed: %v.", err)
}
err = rkt.Register(self, self.fsInfo, self.ignoreMetrics)
if err != nil {
- glog.Warningf("Registration of the rkt container factory failed: %v", err)
+ glog.V(5).Infof("Registration of the rkt container factory failed: %v", err)
} else {
watcher, err := rktwatcher.NewRktContainerWatcher()
if err != nil {
@@ -283,17 +283,17 @@ func (self *manager) Start() error {
err = containerd.Register(self, self.fsInfo, self.ignoreMetrics)
if err != nil {
- glog.Warningf("Registration of the containerd container factory failed: %v", err)
+ glog.V(5).Infof("Registration of the containerd container factory failed: %v", err)
}
err = crio.Register(self, self.fsInfo, self.ignoreMetrics)
if err != nil {
- glog.Warningf("Registration of the crio container factory failed: %v", err)
+ glog.V(5).Infof("Registration of the crio container factory failed: %v", err)
}
err = systemd.Register(self, self.fsInfo, self.ignoreMetrics)
if err != nil {
- glog.Warningf("Registration of the systemd container factory failed: %v", err)
+ glog.V(5).Infof("Registration of the systemd container factory failed: %v", err)
}
err = raw.Register(self, self.fsInfo, self.ignoreMetrics)
@@ -326,12 +326,12 @@ func (self *manager) Start() error {
if err != nil {
return err
}
- glog.Infof("Starting recovery of all containers")
+ glog.V(2).Infof("Starting recovery of all containers")
err = self.detectSubcontainers("/")
if err != nil {
return err
}
- glog.Infof("Recovery completed")
+ glog.V(2).Infof("Recovery completed")
// Watch for new container.
quitWatcher := make(chan error)
@@ -849,29 +849,25 @@ func (m *manager) registerCollectors(collectorConfigs map[string]string, cont *c
if err != nil {
return fmt.Errorf("failed to read config file %q for config %q, container %q: %v", k, v, cont.info.Name, err)
}
- glog.V(3).Infof("Got config from %q: %q", v, configFile)
+ glog.V(4).Infof("Got config from %q: %q", v, configFile)
if strings.HasPrefix(k, "prometheus") || strings.HasPrefix(k, "Prometheus") {
newCollector, err := collector.NewPrometheusCollector(k, configFile, *applicationMetricsCountLimit, cont.handler, m.collectorHttpClient)
if err != nil {
- glog.Infof("failed to create collector for container %q, config %q: %v", cont.info.Name, k, err)
- return err
+ return fmt.Errorf("failed to create collector for container %q, config %q: %v", cont.info.Name, k, err)
}
err = cont.collectorManager.RegisterCollector(newCollector)
if err != nil {
- glog.Infof("failed to register collector for container %q, config %q: %v", cont.info.Name, k, err)
- return err
+ return fmt.Errorf("failed to register collector for container %q, config %q: %v", cont.info.Name, k, err)
}
} else {
newCollector, err := collector.NewCollector(k, configFile, *applicationMetricsCountLimit, cont.handler, m.collectorHttpClient)
if err != nil {
- glog.Infof("failed to create collector for container %q, config %q: %v", cont.info.Name, k, err)
- return err
+ return fmt.Errorf("failed to create collector for container %q, config %q: %v", cont.info.Name, k, err)
}
err = cont.collectorManager.RegisterCollector(newCollector)
if err != nil {
- glog.Infof("failed to register collector for container %q, config %q: %v", cont.info.Name, k, err)
- return err
+ return fmt.Errorf("failed to register collector for container %q, config %q: %v", cont.info.Name, k, err)
}
}
}
@@ -946,11 +942,11 @@ func (m *manager) createContainerLocked(containerName string, watchSource watche
}
devicesCgroupPath, err := handler.GetCgroupPath("devices")
if err != nil {
- glog.Infof("Error getting devices cgroup path: %v", err)
+ glog.Warningf("Error getting devices cgroup path: %v", err)
} else {
cont.nvidiaCollector, err = m.nvidiaManager.GetCollector(devicesCgroupPath)
if err != nil {
- glog.Infof("GPU metrics may be unavailable/incomplete for container %q: %v", cont.info.Name, err)
+ glog.V(4).Infof("GPU metrics may be unavailable/incomplete for container %q: %v", cont.info.Name, err)
}
}
@@ -959,7 +955,7 @@ func (m *manager) createContainerLocked(containerName string, watchSource watche
collectorConfigs := collector.GetCollectorConfigs(labels)
err = m.registerCollectors(collectorConfigs, cont)
if err != nil {
- glog.Infof("failed to register collectors for %q: %v", containerName, err)
+ glog.Warningf("Failed to register collectors for %q: %v", containerName, err)
}
// Add the container name and all its aliases. The aliases must be within the namespace of the factory.
@@ -1179,7 +1175,7 @@ func (self *manager) watchForNewContainers(quit chan error) error {
}
func (self *manager) watchForNewOoms() error {
- glog.Infof("Started watching for new ooms in manager")
+ glog.V(2).Infof("Started watching for new ooms in manager")
outStream := make(chan *oomparser.OomInstance, 10)
oomLog, err := oomparser.New()
if err != nil {
@@ -1347,8 +1343,14 @@ func getVersionInfo() (*info.VersionInfo, error) {
kernel_version := machine.KernelVersion()
container_os := machine.ContainerOsVersion()
- docker_version := docker.VersionString()
- docker_api_version := docker.APIVersionString()
+ docker_version, err := docker.VersionString()
+ if err != nil {
+ return nil, err
+ }
+ docker_api_version, err := docker.APIVersionString()
+ if err != nil {
+ return nil, err
+ }
return &info.VersionInfo{
KernelVersion: kernel_version,
diff --git a/vendor/github.com/google/cadvisor/manager/watcher/rkt/rkt.go b/vendor/github.com/google/cadvisor/manager/watcher/rkt/rkt.go
index d54c628886a0..4c54d9b94e07 100644
--- a/vendor/github.com/google/cadvisor/manager/watcher/rkt/rkt.go
+++ b/vendor/github.com/google/cadvisor/manager/watcher/rkt/rkt.go
@@ -53,7 +53,7 @@ func (self *rktContainerWatcher) Stop() error {
}
func (self *rktContainerWatcher) detectRktContainers(events chan watcher.ContainerEvent) {
- glog.Infof("starting detectRktContainers thread")
+ glog.V(1).Infof("Starting detectRktContainers thread")
ticker := time.Tick(10 * time.Second)
curpods := make(map[string]*rktapi.Pod)
@@ -92,7 +92,7 @@ func (self *rktContainerWatcher) syncRunningPods(pods []*rktapi.Pod, events chan
for id, pod := range curpods {
if _, ok := newpods[id]; !ok {
for _, cgroup := range podToCgroup(pod) {
- glog.Infof("cgroup to delete = %v", cgroup)
+ glog.V(2).Infof("cgroup to delete = %v", cgroup)
self.sendDestroyEvent(cgroup, events)
}
}
diff --git a/vendor/github.com/google/cadvisor/metrics/prometheus.go b/vendor/github.com/google/cadvisor/metrics/prometheus.go
index f401e1278bf6..2dd7747b8341 100644
--- a/vendor/github.com/google/cadvisor/metrics/prometheus.go
+++ b/vendor/github.com/google/cadvisor/metrics/prometheus.go
@@ -820,11 +820,19 @@ func (c *PrometheusCollector) collectContainersInfo(ch chan<- prometheus.Metric)
glog.Warningf("Couldn't get containers: %s", err)
return
}
+ rawLabels := map[string]struct{}{}
for _, container := range containers {
- labels, values := []string{}, []string{}
- for l, v := range c.containerLabelsFunc(container) {
+ for l := range c.containerLabelsFunc(container) {
+ rawLabels[l] = struct{}{}
+ }
+ }
+ for _, container := range containers {
+ values := make([]string, 0, len(rawLabels))
+ labels := make([]string, 0, len(rawLabels))
+ containerLabels := c.containerLabelsFunc(container)
+ for l := range rawLabels {
labels = append(labels, sanitizeLabelName(l))
- values = append(values, v)
+ values = append(values, containerLabels[l])
}
// Container spec
diff --git a/vendor/github.com/google/cadvisor/storagedriver.go b/vendor/github.com/google/cadvisor/storagedriver.go
index a72bc144fcd5..1787abce7567 100644
--- a/vendor/github.com/google/cadvisor/storagedriver.go
+++ b/vendor/github.com/google/cadvisor/storagedriver.go
@@ -45,8 +45,8 @@ func NewMemoryStorage() (*memory.InMemoryCache, error) {
return nil, err
}
if *storageDriver != "" {
- glog.Infof("Using backend storage type %q", *storageDriver)
+ glog.V(1).Infof("Using backend storage type %q", *storageDriver)
}
- glog.Infof("Caching stats in memory for %v", *storageDuration)
+ glog.V(1).Infof("Caching stats in memory for %v", *storageDuration)
return memory.New(*storageDuration, backendStorage), nil
}
diff --git a/vendor/github.com/google/cadvisor/utils/cpuload/cpuload.go b/vendor/github.com/google/cadvisor/utils/cpuload/cpuload.go
index e536d90be1c0..f3d29b8dd05e 100644
--- a/vendor/github.com/google/cadvisor/utils/cpuload/cpuload.go
+++ b/vendor/github.com/google/cadvisor/utils/cpuload/cpuload.go
@@ -41,6 +41,6 @@ func New() (CpuLoadReader, error) {
if err != nil {
return nil, fmt.Errorf("failed to create a netlink based cpuload reader: %v", err)
}
- glog.V(3).Info("Using a netlink-based load reader")
+ glog.V(4).Info("Using a netlink-based load reader")
return reader, nil
}
diff --git a/vendor/github.com/google/cadvisor/utils/oomparser/oomparser.go b/vendor/github.com/google/cadvisor/utils/oomparser/oomparser.go
index 184cdd73fda2..a73243f2e3e8 100644
--- a/vendor/github.com/google/cadvisor/utils/oomparser/oomparser.go
+++ b/vendor/github.com/google/cadvisor/utils/oomparser/oomparser.go
@@ -143,7 +143,7 @@ func (glogAdapter) Infof(format string, args ...interface{}) {
glog.V(4).Infof(format, args)
}
func (glogAdapter) Warningf(format string, args ...interface{}) {
- glog.Infof(format, args)
+ glog.V(2).Infof(format, args)
}
func (glogAdapter) Errorf(format string, args ...interface{}) {
glog.Warningf(format, args)
diff --git a/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/compute/v2/compute.go b/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/compute/v2/compute.go
index 38c355bc9371..fad4673b428f 100644
--- a/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/compute/v2/compute.go
+++ b/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/compute/v2/compute.go
@@ -143,11 +143,13 @@ func CreateFlavor(t *testing.T, client *gophercloud.ServiceClient) (*flavors.Fla
flavorName := tools.RandomString("flavor_", 5)
t.Logf("Attempting to create flavor %s", flavorName)
+ isPublic := true
createOpts := flavors.CreateOpts{
- Name: flavorName,
- RAM: 1,
- VCPUs: 1,
- Disk: gophercloud.IntToPointer(1),
+ Name: flavorName,
+ RAM: 1,
+ VCPUs: 1,
+ Disk: gophercloud.IntToPointer(1),
+ IsPublic: &isPublic,
}
flavor, err := flavors.Create(client, createOpts).Extract()
diff --git a/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/identity/v3/identity.go b/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/identity/v3/identity.go
index 1156a58cc980..ae7560dd584a 100644
--- a/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/identity/v3/identity.go
+++ b/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/identity/v3/identity.go
@@ -10,6 +10,7 @@ import (
"github.com/gophercloud/gophercloud/openstack/identity/v3/projects"
"github.com/gophercloud/gophercloud/openstack/identity/v3/regions"
"github.com/gophercloud/gophercloud/openstack/identity/v3/roles"
+ "github.com/gophercloud/gophercloud/openstack/identity/v3/services"
"github.com/gophercloud/gophercloud/openstack/identity/v3/users"
)
@@ -175,6 +176,33 @@ func CreateRegion(t *testing.T, client *gophercloud.ServiceClient, c *regions.Cr
return region, nil
}
+// CreateService will create a service with a random name.
+// It takes an optional createOpts parameter since creating a service
+// has so many options. An error will be returned if the service was
+// unable to be created.
+func CreateService(t *testing.T, client *gophercloud.ServiceClient, c *services.CreateOpts) (*services.Service, error) {
+ name := tools.RandomString("ACPTTEST", 8)
+ t.Logf("Attempting to create service: %s", name)
+
+ var createOpts services.CreateOpts
+ if c != nil {
+ createOpts = *c
+ } else {
+ createOpts = services.CreateOpts{}
+ }
+
+ createOpts.Extra["name"] = name
+
+ service, err := services.Create(client, createOpts).Extract()
+ if err != nil {
+ return service, err
+ }
+
+ t.Logf("Successfully created service %s", service.ID)
+
+ return service, nil
+}
+
// DeleteProject will delete a project by ID. A fatal error will occur if
// the project ID failed to be deleted. This works best when using it as
// a deferred function.
@@ -236,7 +264,7 @@ func DeleteRole(t *testing.T, client *gophercloud.ServiceClient, roleID string)
}
// DeleteRegion will delete a reg by ID. A fatal error will occur if
-// the role failed to be deleted. This works best when using it as
+// the region failed to be deleted. This works best when using it as
// a deferred function.
func DeleteRegion(t *testing.T, client *gophercloud.ServiceClient, regionID string) {
err := regions.Delete(client, regionID).ExtractErr()
@@ -247,6 +275,18 @@ func DeleteRegion(t *testing.T, client *gophercloud.ServiceClient, regionID stri
t.Logf("Deleted region: %s", regionID)
}
+// DeleteService will delete a reg by ID. A fatal error will occur if
+// the service failed to be deleted. This works best when using it as
+// a deferred function.
+func DeleteService(t *testing.T, client *gophercloud.ServiceClient, serviceID string) {
+ err := services.Delete(client, serviceID).ExtractErr()
+ if err != nil {
+ t.Fatalf("Unable to delete service %s: %v", serviceID, err)
+ }
+
+ t.Logf("Deleted service: %s", serviceID)
+}
+
// UnassignRole will delete a role assigned to a user/group on a project/domain
// A fatal error will occur if it fails to delete the assignment.
// This works best when using it as a deferred function.
diff --git a/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/identity/v3/service_test.go b/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/identity/v3/service_test.go
index 7a0c71f4fa8b..ffd7e4d1fb5c 100644
--- a/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/identity/v3/service_test.go
+++ b/vendor/github.com/gophercloud/gophercloud/acceptance/openstack/identity/v3/service_test.go
@@ -16,7 +16,11 @@ func TestServicesList(t *testing.T) {
t.Fatalf("Unable to obtain an identity client: %v")
}
- allPages, err := services.List(client, nil).AllPages()
+ listOpts := services.ListOpts{
+ ServiceType: "identity",
+ }
+
+ allPages, err := services.List(client, listOpts).AllPages()
if err != nil {
t.Fatalf("Unable to list services: %v", err)
}
@@ -31,3 +35,43 @@ func TestServicesList(t *testing.T) {
}
}
+
+func TestServicesCRUD(t *testing.T) {
+ client, err := clients.NewIdentityV3Client()
+ if err != nil {
+ t.Fatalf("Unable to obtain an identity client: %v", err)
+ }
+
+ createOpts := services.CreateOpts{
+ Type: "testing",
+ Extra: map[string]interface{}{
+ "email": "testservice@example.com",
+ },
+ }
+
+ // Create service in the default domain
+ service, err := CreateService(t, client, &createOpts)
+ if err != nil {
+ t.Fatalf("Unable to create service: %v", err)
+ }
+ defer DeleteService(t, client, service.ID)
+
+ tools.PrintResource(t, service)
+ tools.PrintResource(t, service.Extra)
+
+ updateOpts := services.UpdateOpts{
+ Type: "testing2",
+ Extra: map[string]interface{}{
+ "description": "Test Users",
+ "email": "thetestservice@example.com",
+ },
+ }
+
+ newService, err := services.Update(client, service.ID, updateOpts).Extract()
+ if err != nil {
+ t.Fatalf("Unable to update service: %v", err)
+ }
+
+ tools.PrintResource(t, newService)
+ tools.PrintResource(t, newService.Extra)
+}
diff --git a/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/flavors/results.go b/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/flavors/results.go
index 47d58ccfb361..fb5c335b8eac 100644
--- a/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/flavors/results.go
+++ b/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/flavors/results.go
@@ -65,7 +65,7 @@ type Flavor struct {
VCPUs int `json:"vcpus"`
// IsPublic indicates whether the flavor is public.
- IsPublic bool `json:"is_public"`
+ IsPublic bool `json:"os-flavor-access:is_public"`
}
func (r *Flavor) UnmarshalJSON(b []byte) error {
diff --git a/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/flavors/testing/requests_test.go b/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/flavors/testing/requests_test.go
index 9b4992423716..9dfdbeaf5b7b 100644
--- a/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/flavors/testing/requests_test.go
+++ b/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/flavors/testing/requests_test.go
@@ -37,7 +37,7 @@ func TestListFlavors(t *testing.T) {
"disk": 1,
"ram": 512,
"swap":"",
- "is_public": true
+ "os-flavor-access:is_public": true
},
{
"id": "2",
@@ -46,7 +46,7 @@ func TestListFlavors(t *testing.T) {
"disk": 20,
"ram": 2048,
"swap": 1000,
- "is_public": true
+ "os-flavor-access:is_public": true
},
{
"id": "3",
@@ -55,7 +55,7 @@ func TestListFlavors(t *testing.T) {
"disk": 40,
"ram": 4096,
"swap": 1000,
- "is_public": false
+ "os-flavor-access:is_public": false
}
],
"flavors_links": [
diff --git a/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/servers/requests.go b/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/servers/requests.go
index c445f0ede0ef..626eb63e9104 100644
--- a/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/servers/requests.go
+++ b/vendor/github.com/gophercloud/gophercloud/openstack/compute/v2/servers/requests.go
@@ -515,7 +515,7 @@ func (opts ResizeOpts) ToServerResizeMap() (map[string]interface{}, error) {
// Note that this implies rebuilding it.
//
// Unfortunately, one cannot pass rebuild parameters to the resize function.
-// When the resize completes, the server will be in RESIZE_VERIFY state.
+// When the resize completes, the server will be in VERIFY_RESIZE state.
// While in this state, you can explore the use of the new server's
// configuration. If you like it, call ConfirmResize() to commit the resize
// permanently. Otherwise, call RevertResize() to restore the old configuration.
diff --git a/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/doc.go b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/doc.go
index b43c7bb6a79f..81702359ac8d 100644
--- a/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/doc.go
+++ b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/doc.go
@@ -24,7 +24,32 @@ Example to List Services
Example to Create a Service
- service, err := services.Create(identityClient, "compute").Extract()
+ createOpts := services.CreateOpts{
+ Type: "compute",
+ Extra: map[string]interface{}{
+ "name": "compute-service",
+ "description": "Compute Service",
+ },
+ }
+
+ service, err := services.Create(identityClient, createOpts).Extract()
+ if err != nil {
+ panic(err)
+ }
+
+Example to Update a Service
+
+ serviceID := "3c7bbe9a6ecb453ca1789586291380ed"
+
+ var iFalse bool = false
+ updateOpts := services.UpdateOpts{
+ Enabled: &iFalse,
+ Extra: map[string]interface{}{
+ "description": "Disabled Compute Service"
+ },
+ }
+
+ service, err := services.Update(identityClient, serviceID, updateOpts).Extract()
if err != nil {
panic(err)
}
@@ -36,5 +61,6 @@ Example to Delete a Service
if err != nil {
panic(err)
}
+
*/
package services
diff --git a/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/requests.go b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/requests.go
index a4401c5ad077..1a8b35232a1c 100644
--- a/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/requests.go
+++ b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/requests.go
@@ -5,10 +5,52 @@ import (
"github.com/gophercloud/gophercloud/pagination"
)
+// CreateOptsBuilder allows extensions to add additional parameters to
+// the Create request.
+type CreateOptsBuilder interface {
+ ToServiceCreateMap() (map[string]interface{}, error)
+}
+
+// CreateOpts provides options used to create a service.
+type CreateOpts struct {
+ // Type is the type of the service.
+ Type string `json:"type"`
+
+ // Enabled is whether or not the service is enabled.
+ Enabled *bool `json:"enabled,omitempty"`
+
+ // Extra is free-form extra key/value pairs to describe the service.
+ Extra map[string]interface{} `json:"-"`
+}
+
+// ToServiceCreateMap formats a CreateOpts into a create request.
+func (opts CreateOpts) ToServiceCreateMap() (map[string]interface{}, error) {
+ b, err := gophercloud.BuildRequestBody(opts, "service")
+ if err != nil {
+ return nil, err
+ }
+
+ if opts.Extra != nil {
+ if v, ok := b["service"].(map[string]interface{}); ok {
+ for key, value := range opts.Extra {
+ v[key] = value
+ }
+ }
+ }
+
+ return b, nil
+}
+
// Create adds a new service of the requested type to the catalog.
-func Create(client *gophercloud.ServiceClient, serviceType string) (r CreateResult) {
- b := map[string]string{"type": serviceType}
- _, r.Err = client.Post(listURL(client), b, &r.Body, nil)
+func Create(client *gophercloud.ServiceClient, opts CreateOptsBuilder) (r CreateResult) {
+ b, err := opts.ToServiceCreateMap()
+ if err != nil {
+ r.Err = err
+ return
+ }
+ _, r.Err = client.Post(createURL(client), &b, &r.Body, &gophercloud.RequestOpts{
+ OkCodes: []int{201},
+ })
return
}
@@ -20,9 +62,11 @@ type ListOptsBuilder interface {
// ListOpts provides options for filtering the List results.
type ListOpts struct {
+ // ServiceType filter the response by a type of service.
ServiceType string `q:"type"`
- PerPage int `q:"perPage"`
- Page int `q:"page"`
+
+ // Name filters the response by a service name.
+ Name string `q:"name"`
}
// ToServiceListMap builds a list query from the list options.
@@ -33,15 +77,15 @@ func (opts ListOpts) ToServiceListMap() (string, error) {
// List enumerates the services available to a specific user.
func List(client *gophercloud.ServiceClient, opts ListOptsBuilder) pagination.Pager {
- u := listURL(client)
+ url := listURL(client)
if opts != nil {
- q, err := opts.ToServiceListMap()
+ query, err := opts.ToServiceListMap()
if err != nil {
return pagination.Pager{Err: err}
}
- u += q
+ url += query
}
- return pagination.NewPager(client, u, func(r pagination.PageResult) pagination.Page {
+ return pagination.NewPager(client, url, func(r pagination.PageResult) pagination.Page {
return ServicePage{pagination.LinkedPageBase{PageResult: r}}
})
}
@@ -52,10 +96,52 @@ func Get(client *gophercloud.ServiceClient, serviceID string) (r GetResult) {
return
}
-// Update changes the service type of an existing service.
-func Update(client *gophercloud.ServiceClient, serviceID string, serviceType string) (r UpdateResult) {
- b := map[string]string{"type": serviceType}
- _, r.Err = client.Patch(serviceURL(client, serviceID), &b, &r.Body, nil)
+// UpdateOptsBuilder allows extensions to add additional parameters to
+// the Update request.
+type UpdateOptsBuilder interface {
+ ToServiceUpdateMap() (map[string]interface{}, error)
+}
+
+// UpdateOpts provides options for updating a service.
+type UpdateOpts struct {
+ // Type is the type of the service.
+ Type string `json:"type"`
+
+ // Enabled is whether or not the service is enabled.
+ Enabled *bool `json:"enabled,omitempty"`
+
+ // Extra is free-form extra key/value pairs to describe the service.
+ Extra map[string]interface{} `json:"-"`
+}
+
+// ToServiceUpdateMap formats a UpdateOpts into an update request.
+func (opts UpdateOpts) ToServiceUpdateMap() (map[string]interface{}, error) {
+ b, err := gophercloud.BuildRequestBody(opts, "service")
+ if err != nil {
+ return nil, err
+ }
+
+ if opts.Extra != nil {
+ if v, ok := b["service"].(map[string]interface{}); ok {
+ for key, value := range opts.Extra {
+ v[key] = value
+ }
+ }
+ }
+
+ return b, nil
+}
+
+// Update updates an existing Service.
+func Update(client *gophercloud.ServiceClient, serviceID string, opts UpdateOptsBuilder) (r UpdateResult) {
+ b, err := opts.ToServiceUpdateMap()
+ if err != nil {
+ r.Err = err
+ return
+ }
+ _, r.Err = client.Patch(updateURL(client, serviceID), &b, &r.Body, &gophercloud.RequestOpts{
+ OkCodes: []int{200},
+ })
return
}
diff --git a/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/results.go b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/results.go
index 2c4fa767558c..f3484d7a9677 100644
--- a/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/results.go
+++ b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/results.go
@@ -1,17 +1,20 @@
package services
import (
+ "encoding/json"
+
"github.com/gophercloud/gophercloud"
+ "github.com/gophercloud/gophercloud/internal"
"github.com/gophercloud/gophercloud/pagination"
)
-type commonResult struct {
+type serviceResult struct {
gophercloud.Result
}
// Extract interprets a GetResult, CreateResult or UpdateResult as a concrete
// Service. An error is returned if the original call or the extraction failed.
-func (r commonResult) Extract() (*Service, error) {
+func (r serviceResult) Extract() (*Service, error) {
var s struct {
Service *Service `json:"service"`
}
@@ -22,19 +25,19 @@ func (r commonResult) Extract() (*Service, error) {
// CreateResult is the response from a Create request. Call its Extract method
// to interpret it as a Service.
type CreateResult struct {
- commonResult
+ serviceResult
}
// GetResult is the response from a Get request. Call its Extract method
// to interpret it as a Service.
type GetResult struct {
- commonResult
+ serviceResult
}
// UpdateResult is the response from an Update request. Call its Extract method
// to interpret it as a Service.
type UpdateResult struct {
- commonResult
+ serviceResult
}
// DeleteResult is the response from a Delete request. Call its ExtractErr
@@ -45,17 +48,50 @@ type DeleteResult struct {
// Service represents an OpenStack Service.
type Service struct {
- // Description is a description of the service.
- Description string `json:"description"`
-
// ID is the unique ID of the service.
ID string `json:"id"`
- // Name is the name of the service.
- Name string `json:"name"`
-
// Type is the type of the service.
Type string `json:"type"`
+
+ // Enabled is whether or not the service is enabled.
+ Enabled bool `json:"enabled"`
+
+ // Links contains referencing links to the service.
+ Links map[string]interface{} `json:"links"`
+
+ // Extra is a collection of miscellaneous key/values.
+ Extra map[string]interface{} `json:"-"`
+}
+
+func (r *Service) UnmarshalJSON(b []byte) error {
+ type tmp Service
+ var s struct {
+ tmp
+ Extra map[string]interface{} `json:"extra"`
+ }
+ err := json.Unmarshal(b, &s)
+ if err != nil {
+ return err
+ }
+ *r = Service(s.tmp)
+
+ // Collect other fields and bundle them into Extra
+ // but only if a field titled "extra" wasn't sent.
+ if s.Extra != nil {
+ r.Extra = s.Extra
+ } else {
+ var result interface{}
+ err := json.Unmarshal(b, &result)
+ if err != nil {
+ return err
+ }
+ if resultMap, ok := result.(map[string]interface{}); ok {
+ r.Extra = internal.RemainingKeys(Service{}, resultMap)
+ }
+ }
+
+ return err
}
// ServicePage is a single page of Service results.
@@ -69,6 +105,21 @@ func (p ServicePage) IsEmpty() (bool, error) {
return len(services) == 0, err
}
+// NextPageURL extracts the "next" link from the links section of the result.
+func (r ServicePage) NextPageURL() (string, error) {
+ var s struct {
+ Links struct {
+ Next string `json:"next"`
+ Previous string `json:"previous"`
+ } `json:"links"`
+ }
+ err := r.ExtractInto(&s)
+ if err != nil {
+ return "", err
+ }
+ return s.Links.Next, err
+}
+
// ExtractServices extracts a slice of Services from a Collection acquired
// from List.
func ExtractServices(r pagination.Page) ([]Service, error) {
diff --git a/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/testing/fixtures.go b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/testing/fixtures.go
new file mode 100644
index 000000000000..fd1d632425d9
--- /dev/null
+++ b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/testing/fixtures.go
@@ -0,0 +1,209 @@
+package testing
+
+import (
+ "fmt"
+ "net/http"
+ "testing"
+
+ "github.com/gophercloud/gophercloud/openstack/identity/v3/services"
+ th "github.com/gophercloud/gophercloud/testhelper"
+ "github.com/gophercloud/gophercloud/testhelper/client"
+)
+
+// ListOutput provides a single page of Service results.
+const ListOutput = `
+{
+ "links": {
+ "next": null,
+ "previous": null
+ },
+ "services": [
+ {
+ "id": "1234",
+ "links": {
+ "self": "https://example.com/identity/v3/services/1234"
+ },
+ "type": "identity",
+ "enabled": false,
+ "extra": {
+ "name": "service-one",
+ "description": "Service One"
+ }
+ },
+ {
+ "id": "9876",
+ "links": {
+ "self": "https://example.com/identity/v3/services/9876"
+ },
+ "type": "compute",
+ "enabled": false,
+ "extra": {
+ "name": "service-two",
+ "description": "Service Two",
+ "email": "service@example.com"
+ }
+ }
+ ]
+}
+`
+
+// GetOutput provides a Get result.
+const GetOutput = `
+{
+ "service": {
+ "id": "9876",
+ "links": {
+ "self": "https://example.com/identity/v3/services/9876"
+ },
+ "type": "compute",
+ "enabled": false,
+ "extra": {
+ "name": "service-two",
+ "description": "Service Two",
+ "email": "service@example.com"
+ }
+ }
+}
+`
+
+// CreateRequest provides the input to a Create request.
+const CreateRequest = `
+{
+ "service": {
+ "description": "Service Two",
+ "email": "service@example.com",
+ "name": "service-two",
+ "type": "compute"
+ }
+}
+`
+
+// UpdateRequest provides the input to as Update request.
+const UpdateRequest = `
+{
+ "service": {
+ "type": "compute2",
+ "description": "Service Two Updated"
+ }
+}
+`
+
+// UpdateOutput provides an update result.
+const UpdateOutput = `
+{
+ "service": {
+ "id": "9876",
+ "links": {
+ "self": "https://example.com/identity/v3/services/9876"
+ },
+ "type": "compute2",
+ "enabled": false,
+ "extra": {
+ "name": "service-two",
+ "description": "Service Two Updated",
+ "email": "service@example.com"
+ }
+ }
+}
+`
+
+// FirstService is the first service in the List request.
+var FirstService = services.Service{
+ ID: "1234",
+ Links: map[string]interface{}{
+ "self": "https://example.com/identity/v3/services/1234",
+ },
+ Type: "identity",
+ Enabled: false,
+ Extra: map[string]interface{}{
+ "name": "service-one",
+ "description": "Service One",
+ },
+}
+
+// SecondService is the second service in the List request.
+var SecondService = services.Service{
+ ID: "9876",
+ Links: map[string]interface{}{
+ "self": "https://example.com/identity/v3/services/9876",
+ },
+ Type: "compute",
+ Enabled: false,
+ Extra: map[string]interface{}{
+ "name": "service-two",
+ "description": "Service Two",
+ "email": "service@example.com",
+ },
+}
+
+// SecondServiceUpdated is the SecondService should look after an Update.
+var SecondServiceUpdated = services.Service{
+ ID: "9876",
+ Links: map[string]interface{}{
+ "self": "https://example.com/identity/v3/services/9876",
+ },
+ Type: "compute2",
+ Enabled: false,
+ Extra: map[string]interface{}{
+ "name": "service-two",
+ "description": "Service Two Updated",
+ "email": "service@example.com",
+ },
+}
+
+// ExpectedServicesSlice is the slice of services to be returned from ListOutput.
+var ExpectedServicesSlice = []services.Service{FirstService, SecondService}
+
+// HandleListServicesSuccessfully creates an HTTP handler at `/services` on the
+// test handler mux that responds with a list of two services.
+func HandleListServicesSuccessfully(t *testing.T) {
+ th.Mux.HandleFunc("/services", func(w http.ResponseWriter, r *http.Request) {
+ th.TestMethod(t, r, "GET")
+ th.TestHeader(t, r, "Accept", "application/json")
+ th.TestHeader(t, r, "X-Auth-Token", client.TokenID)
+
+ w.Header().Set("Content-Type", "application/json")
+ w.WriteHeader(http.StatusOK)
+ fmt.Fprintf(w, ListOutput)
+ })
+}
+
+// HandleGetServiceSuccessfully creates an HTTP handler at `/services` on the
+// test handler mux that responds with a single service.
+func HandleGetServiceSuccessfully(t *testing.T) {
+ th.Mux.HandleFunc("/services/9876", func(w http.ResponseWriter, r *http.Request) {
+ th.TestMethod(t, r, "GET")
+ th.TestHeader(t, r, "Accept", "application/json")
+ th.TestHeader(t, r, "X-Auth-Token", client.TokenID)
+
+ w.Header().Set("Content-Type", "application/json")
+ w.WriteHeader(http.StatusOK)
+ fmt.Fprintf(w, GetOutput)
+ })
+}
+
+// HandleCreateServiceSuccessfully creates an HTTP handler at `/services` on the
+// test handler mux that tests service creation.
+func HandleCreateServiceSuccessfully(t *testing.T) {
+ th.Mux.HandleFunc("/services", func(w http.ResponseWriter, r *http.Request) {
+ th.TestMethod(t, r, "POST")
+ th.TestHeader(t, r, "X-Auth-Token", client.TokenID)
+ th.TestJSONRequest(t, r, CreateRequest)
+
+ w.WriteHeader(http.StatusCreated)
+ fmt.Fprintf(w, GetOutput)
+ })
+}
+
+// HandleUpdateServiceSuccessfully creates an HTTP handler at `/services` on the
+// test handler mux that tests service update.
+func HandleUpdateServiceSuccessfully(t *testing.T) {
+ th.Mux.HandleFunc("/services/9876", func(w http.ResponseWriter, r *http.Request) {
+ th.TestMethod(t, r, "PATCH")
+ th.TestHeader(t, r, "X-Auth-Token", client.TokenID)
+ th.TestJSONRequest(t, r, UpdateRequest)
+
+ w.WriteHeader(http.StatusOK)
+ fmt.Fprintf(w, UpdateOutput)
+ })
+}
diff --git a/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/testing/requests_test.go b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/testing/requests_test.go
index 0a065a2afc3d..2a8a89dd2417 100644
--- a/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/testing/requests_test.go
+++ b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/testing/requests_test.go
@@ -1,7 +1,6 @@
package testing
import (
- "fmt"
"net/http"
"testing"
@@ -14,162 +13,83 @@ import (
func TestCreateSuccessful(t *testing.T) {
th.SetupHTTP()
defer th.TeardownHTTP()
-
- th.Mux.HandleFunc("/services", func(w http.ResponseWriter, r *http.Request) {
- th.TestMethod(t, r, "POST")
- th.TestHeader(t, r, "X-Auth-Token", client.TokenID)
- th.TestJSONRequest(t, r, `{ "type": "compute" }`)
-
- w.Header().Add("Content-Type", "application/json")
- w.WriteHeader(http.StatusCreated)
- fmt.Fprintf(w, `{
- "service": {
- "description": "Here's your service",
- "id": "1234",
- "name": "InscrutableOpenStackProjectName",
- "type": "compute"
- }
- }`)
- })
-
- expected := &services.Service{
- Description: "Here's your service",
- ID: "1234",
- Name: "InscrutableOpenStackProjectName",
- Type: "compute",
+ HandleCreateServiceSuccessfully(t)
+
+ createOpts := services.CreateOpts{
+ Type: "compute",
+ Extra: map[string]interface{}{
+ "name": "service-two",
+ "description": "Service Two",
+ "email": "service@example.com",
+ },
}
- actual, err := services.Create(client.ServiceClient(), "compute").Extract()
- if err != nil {
- t.Fatalf("Unexpected error from Create: %v", err)
- }
- th.AssertDeepEquals(t, expected, actual)
+ actual, err := services.Create(client.ServiceClient(), createOpts).Extract()
+ th.AssertNoErr(t, err)
+ th.CheckDeepEquals(t, SecondService, *actual)
}
-func TestListSinglePage(t *testing.T) {
+func TestListServices(t *testing.T) {
th.SetupHTTP()
defer th.TeardownHTTP()
-
- th.Mux.HandleFunc("/services", func(w http.ResponseWriter, r *http.Request) {
- th.TestMethod(t, r, "GET")
- th.TestHeader(t, r, "X-Auth-Token", client.TokenID)
-
- w.Header().Add("Content-Type", "application/json")
- fmt.Fprintf(w, `
- {
- "links": {
- "next": null,
- "previous": null
- },
- "services": [
- {
- "description": "Service One",
- "id": "1234",
- "name": "service-one",
- "type": "identity"
- },
- {
- "description": "Service Two",
- "id": "9876",
- "name": "service-two",
- "type": "compute"
- }
- ]
- }
- `)
- })
+ HandleListServicesSuccessfully(t)
count := 0
err := services.List(client.ServiceClient(), services.ListOpts{}).EachPage(func(page pagination.Page) (bool, error) {
count++
+
actual, err := services.ExtractServices(page)
- if err != nil {
- return false, err
- }
-
- expected := []services.Service{
- {
- Description: "Service One",
- ID: "1234",
- Name: "service-one",
- Type: "identity",
- },
- {
- Description: "Service Two",
- ID: "9876",
- Name: "service-two",
- Type: "compute",
- },
- }
- th.AssertDeepEquals(t, expected, actual)
+ th.AssertNoErr(t, err)
+
+ th.CheckDeepEquals(t, ExpectedServicesSlice, actual)
+
return true, nil
})
th.AssertNoErr(t, err)
- th.AssertEquals(t, 1, count)
+ th.CheckEquals(t, count, 1)
}
-func TestGetSuccessful(t *testing.T) {
+func TestListServicesAllPages(t *testing.T) {
th.SetupHTTP()
defer th.TeardownHTTP()
+ HandleListServicesSuccessfully(t)
- th.Mux.HandleFunc("/services/12345", func(w http.ResponseWriter, r *http.Request) {
- th.TestMethod(t, r, "GET")
- th.TestHeader(t, r, "X-Auth-Token", client.TokenID)
-
- w.Header().Add("Content-Type", "application/json")
- fmt.Fprintf(w, `
- {
- "service": {
- "description": "Service One",
- "id": "12345",
- "name": "service-one",
- "type": "identity"
- }
- }
- `)
- })
-
- actual, err := services.Get(client.ServiceClient(), "12345").Extract()
+ allPages, err := services.List(client.ServiceClient(), nil).AllPages()
+ th.AssertNoErr(t, err)
+ actual, err := services.ExtractServices(allPages)
th.AssertNoErr(t, err)
+ th.CheckDeepEquals(t, ExpectedServicesSlice, actual)
+ th.AssertEquals(t, ExpectedServicesSlice[0].Extra["name"], "service-one")
+ th.AssertEquals(t, ExpectedServicesSlice[1].Extra["email"], "service@example.com")
+}
- expected := &services.Service{
- ID: "12345",
- Description: "Service One",
- Name: "service-one",
- Type: "identity",
- }
+func TestGetSuccessful(t *testing.T) {
+ th.SetupHTTP()
+ defer th.TeardownHTTP()
+ HandleGetServiceSuccessfully(t)
+
+ actual, err := services.Get(client.ServiceClient(), "9876").Extract()
- th.AssertDeepEquals(t, expected, actual)
+ th.AssertNoErr(t, err)
+ th.CheckDeepEquals(t, SecondService, *actual)
+ th.AssertEquals(t, SecondService.Extra["email"], "service@example.com")
}
func TestUpdateSuccessful(t *testing.T) {
th.SetupHTTP()
defer th.TeardownHTTP()
+ HandleUpdateServiceSuccessfully(t)
- th.Mux.HandleFunc("/services/12345", func(w http.ResponseWriter, r *http.Request) {
- th.TestMethod(t, r, "PATCH")
- th.TestHeader(t, r, "X-Auth-Token", client.TokenID)
- th.TestJSONRequest(t, r, `{ "type": "lasermagic" }`)
-
- w.Header().Add("Content-Type", "application/json")
- fmt.Fprintf(w, `
- {
- "service": {
- "id": "12345",
- "type": "lasermagic"
- }
- }
- `)
- })
-
- expected := &services.Service{
- ID: "12345",
- Type: "lasermagic",
+ updateOpts := services.UpdateOpts{
+ Type: "compute2",
+ Extra: map[string]interface{}{
+ "description": "Service Two Updated",
+ },
}
-
- actual, err := services.Update(client.ServiceClient(), "12345", "lasermagic").Extract()
+ actual, err := services.Update(client.ServiceClient(), "9876", updateOpts).Extract()
th.AssertNoErr(t, err)
- th.AssertDeepEquals(t, expected, actual)
+ th.CheckDeepEquals(t, SecondServiceUpdated, *actual)
+ th.AssertEquals(t, SecondServiceUpdated.Extra["description"], "Service Two Updated")
}
func TestDeleteSuccessful(t *testing.T) {
diff --git a/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/urls.go b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/urls.go
index c5ae2683793a..caa625a20838 100644
--- a/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/urls.go
+++ b/vendor/github.com/gophercloud/gophercloud/openstack/identity/v3/services/urls.go
@@ -6,6 +6,14 @@ func listURL(client *gophercloud.ServiceClient) string {
return client.ServiceURL("services")
}
+func createURL(client *gophercloud.ServiceClient) string {
+ return client.ServiceURL("services")
+}
+
func serviceURL(client *gophercloud.ServiceClient, serviceID string) string {
return client.ServiceURL("services", serviceID)
}
+
+func updateURL(client *gophercloud.ServiceClient, serviceID string) string {
+ return client.ServiceURL("services", serviceID)
+}
diff --git a/vendor/github.com/gophercloud/gophercloud/params.go b/vendor/github.com/gophercloud/gophercloud/params.go
index 6afc8f8b7215..687af3dc0ce6 100644
--- a/vendor/github.com/gophercloud/gophercloud/params.go
+++ b/vendor/github.com/gophercloud/gophercloud/params.go
@@ -347,12 +347,21 @@ func BuildQueryString(opts interface{}) (*url.URL, error) {
params.Add(tags[0], v.Index(i).String())
}
}
+ case reflect.Map:
+ if v.Type().Key().Kind() == reflect.String && v.Type().Elem().Kind() == reflect.String {
+ var s []string
+ for _, k := range v.MapKeys() {
+ value := v.MapIndex(k).String()
+ s = append(s, fmt.Sprintf("'%s':'%s'", k.String(), value))
+ }
+ params.Add(tags[0], fmt.Sprintf("{%s}", strings.Join(s, ", ")))
+ }
}
} else {
// Otherwise, the field is not set.
if len(tags) == 2 && tags[1] == "required" {
// And the field is required. Return an error.
- return nil, fmt.Errorf("Required query parameter [%s] not set.", f.Name)
+ return &url.URL{}, fmt.Errorf("Required query parameter [%s] not set.", f.Name)
}
}
}
diff --git a/vendor/github.com/gophercloud/gophercloud/testing/params_test.go b/vendor/github.com/gophercloud/gophercloud/testing/params_test.go
index 8757079c2a26..acf392f2ab5d 100644
--- a/vendor/github.com/gophercloud/gophercloud/testing/params_test.go
+++ b/vendor/github.com/gophercloud/gophercloud/testing/params_test.go
@@ -37,13 +37,14 @@ func TestBuildQueryString(t *testing.T) {
type testVar string
iFalse := false
opts := struct {
- J int `q:"j"`
- R string `q:"r,required"`
- C bool `q:"c"`
- S []string `q:"s"`
- TS []testVar `q:"ts"`
- TI []int `q:"ti"`
- F *bool `q:"f"`
+ J int `q:"j"`
+ R string `q:"r,required"`
+ C bool `q:"c"`
+ S []string `q:"s"`
+ TS []testVar `q:"ts"`
+ TI []int `q:"ti"`
+ F *bool `q:"f"`
+ M map[string]string `q:"m"`
}{
J: 2,
R: "red",
@@ -52,8 +53,9 @@ func TestBuildQueryString(t *testing.T) {
TS: []testVar{"a", "b"},
TI: []int{1, 2},
F: &iFalse,
+ M: map[string]string{"k1": "success1"},
}
- expected := &url.URL{RawQuery: "c=true&f=false&j=2&r=red&s=one&s=two&s=three&ti=1&ti=2&ts=a&ts=b"}
+ expected := &url.URL{RawQuery: "c=true&f=false&j=2&m=%7B%27k1%27%3A%27success1%27%7D&r=red&s=one&s=two&s=three&ti=1&ti=2&ts=a&ts=b"}
actual, err := gophercloud.BuildQueryString(&opts)
if err != nil {
t.Errorf("Error building query string: %v", err)
@@ -61,13 +63,14 @@ func TestBuildQueryString(t *testing.T) {
th.CheckDeepEquals(t, expected, actual)
opts = struct {
- J int `q:"j"`
- R string `q:"r,required"`
- C bool `q:"c"`
- S []string `q:"s"`
- TS []testVar `q:"ts"`
- TI []int `q:"ti"`
- F *bool `q:"f"`
+ J int `q:"j"`
+ R string `q:"r,required"`
+ C bool `q:"c"`
+ S []string `q:"s"`
+ TS []testVar `q:"ts"`
+ TI []int `q:"ti"`
+ F *bool `q:"f"`
+ M map[string]string `q:"m"`
}{
J: 2,
C: true,
diff --git a/vendor/github.com/openshift/api/route/v1/types.go b/vendor/github.com/openshift/api/route/v1/types.go
index ca03da480f89..6c14ae7187bb 100644
--- a/vendor/github.com/openshift/api/route/v1/types.go
+++ b/vendor/github.com/openshift/api/route/v1/types.go
@@ -229,6 +229,15 @@ const (
TLSTerminationPassthrough TLSTerminationType = "passthrough"
// TLSTerminationReencrypt terminate encryption at the edge router and re-encrypt it with a new certificate supplied by the destination
TLSTerminationReencrypt TLSTerminationType = "reencrypt"
+
+ // InsecureEdgeTerminationPolicyNone disables insecure connections for an edge-terminated route.
+ InsecureEdgeTerminationPolicyNone InsecureEdgeTerminationPolicyType = "None"
+ // InsecureEdgeTerminationPolicyAllow allows insecure connections for an edge-terminated route.
+ InsecureEdgeTerminationPolicyAllow InsecureEdgeTerminationPolicyType = "Allow"
+ // InsecureEdgeTerminationPolicyRedirect redirects insecure connections for an edge-terminated route.
+ // As an example, for routers that support HTTP and HTTPS, the
+ // insecure HTTP connections will be redirected to use HTTPS.
+ InsecureEdgeTerminationPolicyRedirect InsecureEdgeTerminationPolicyType = "Redirect"
)
// WildcardPolicyType indicates the type of wildcard support needed by routes.
diff --git a/vendor/github.com/openshift/imagebuilder/builder.go b/vendor/github.com/openshift/imagebuilder/builder.go
index 3077fbcd9195..1630907e4e98 100644
--- a/vendor/github.com/openshift/imagebuilder/builder.go
+++ b/vendor/github.com/openshift/imagebuilder/builder.go
@@ -19,6 +19,9 @@ import (
// Copy defines a copy operation required on the container.
type Copy struct {
+ // If true, this is a copy from the file system to the container. If false,
+ // the copy is from the context.
+ FromFS bool
Src []string
Dest string
Download bool
diff --git a/vendor/github.com/openshift/imagebuilder/dockerclient/client.go b/vendor/github.com/openshift/imagebuilder/dockerclient/client.go
index ddcd16b86c3d..6a972f8307bb 100644
--- a/vendor/github.com/openshift/imagebuilder/dockerclient/client.go
+++ b/vendor/github.com/openshift/imagebuilder/dockerclient/client.go
@@ -370,8 +370,9 @@ func (e *ClientExecutor) PopulateTransientMounts(opts docker.CreateContainerOpti
for i, mount := range transientMounts {
source := mount.SourcePath
copies = append(copies, imagebuilder.Copy{
- Src: []string{source},
- Dest: filepath.Join(e.ContainerTransientMount, strconv.Itoa(i)),
+ FromFS: true,
+ Src: []string{source},
+ Dest: filepath.Join(e.ContainerTransientMount, strconv.Itoa(i)),
})
}
if err := e.CopyContainer(container, nil, copies...); err != nil {
@@ -614,7 +615,7 @@ func (e *ClientExecutor) CopyContainer(container *docker.Container, excludes []s
// TODO: reuse source
for _, src := range c.Src {
glog.V(4).Infof("Archiving %s %t", src, c.Download)
- r, closer, err := e.Archive(src, c.Dest, c.Download, excludes)
+ r, closer, err := e.Archive(c.FromFS, src, c.Dest, c.Download, excludes)
if err != nil {
return err
}
@@ -648,16 +649,22 @@ func (c closers) Close() error {
}
// TODO: this does not support decompressing nested archives for ADD (when the source is a compressed file)
-func (e *ClientExecutor) Archive(src, dst string, allowDownload bool, excludes []string) (io.Reader, io.Closer, error) {
+func (e *ClientExecutor) Archive(fromFS bool, src, dst string, allowDownload bool, excludes []string) (io.Reader, io.Closer, error) {
if isURL(src) {
if !allowDownload {
return nil, nil, fmt.Errorf("source can't be a URL")
}
return archiveFromURL(src, dst, e.TempDir)
}
+ // the input is from the filesystem, use the source as the input
+ if fromFS {
+ return archiveFromDisk(src, ".", dst, allowDownload, excludes)
+ }
+ // if the context is in archive form, read from it without decompressing
if len(e.ContextArchive) > 0 {
return archiveFromFile(e.ContextArchive, src, dst, excludes)
}
+ // if the context is a directory, we only allow relative includes
return archiveFromDisk(e.Directory, src, dst, allowDownload, excludes)
}
diff --git a/vendor/github.com/openshift/imagebuilder/dockerclient/conformance_test.go b/vendor/github.com/openshift/imagebuilder/dockerclient/conformance_test.go
index 724de1748e85..1283b6a86ad0 100644
--- a/vendor/github.com/openshift/imagebuilder/dockerclient/conformance_test.go
+++ b/vendor/github.com/openshift/imagebuilder/dockerclient/conformance_test.go
@@ -33,12 +33,56 @@ type conformanceTest struct {
Name string
Dockerfile string
Git string
+ Mounts []Mount
ContextDir string
Args map[string]string
Ignore []ignoreFunc
PostClone func(dir string) error
}
+func TestMount(t *testing.T) {
+ tmpDir, err := ioutil.TempDir("", "dockerbuild-conformance-")
+ if err != nil {
+ t.Fatal(err)
+ }
+ defer os.RemoveAll(tmpDir)
+
+ c, err := docker.NewClientFromEnv()
+ if err != nil {
+ t.Fatal(err)
+ }
+
+ e := NewClientExecutor(c)
+ defer e.Release()
+
+ out := &bytes.Buffer{}
+ e.Out, e.ErrOut = out, out
+ e.Directory = tmpDir
+ e.Tag = filepath.Base(tmpDir)
+ e.TransientMounts = []Mount{
+ {SourcePath: "testdata/volume/", DestinationPath: "/tmp/test"},
+ }
+ b, node, err := imagebuilder.NewBuilderForFile("testdata/Dockerfile.mount", nil)
+ if err != nil {
+ t.Fatal(err)
+ }
+ if err := e.Prepare(b, node, ""); err != nil {
+ t.Fatal(err)
+ }
+ if err := e.Execute(b, node); err != nil {
+ t.Fatal(err)
+ }
+
+ expected := `91 /tmp/test/Dockerfile 644 regular file 0 0
+4 /tmp/test/file 644 regular file 0 0
+5 /tmp/test/file2 644 regular file 0 0
+`
+
+ if out.String() != expected {
+ t.Errorf("Unexpected build output:\n%s", out.String())
+ }
+}
+
// TestConformance* compares the result of running the direct build against a
// sequential docker build. A dockerfile and git repo is loaded, then each step
// in the file is run sequentially, committing after each step. The generated
diff --git a/vendor/github.com/openshift/imagebuilder/dockerclient/testdata/Dockerfile.mount b/vendor/github.com/openshift/imagebuilder/dockerclient/testdata/Dockerfile.mount
new file mode 100644
index 000000000000..6417ece82ed8
--- /dev/null
+++ b/vendor/github.com/openshift/imagebuilder/dockerclient/testdata/Dockerfile.mount
@@ -0,0 +1,2 @@
+FROM busybox
+RUN stat -c "%s %n %a %F %g %u" /tmp/test/*
diff --git a/vendor/k8s.io/kubernetes/CHANGELOG-1.2.md b/vendor/k8s.io/kubernetes/CHANGELOG-1.2.md
deleted file mode 100644
index 413a67c89ac8..000000000000
--- a/vendor/k8s.io/kubernetes/CHANGELOG-1.2.md
+++ /dev/null
@@ -1,584 +0,0 @@
-
-- [v1.2.7](#v127)
- - [Downloads for v1.2.7](#downloads-for-v127)
- - [Client Binaries](#client-binaries)
- - [Server Binaries](#server-binaries)
- - [Changelog since v1.2.6](#changelog-since-v126)
- - [Other notable changes](#other-notable-changes)
-- [v1.2.6](#v126)
- - [Downloads for v1.2.6](#downloads-for-v126)
- - [Changelog since v1.2.5](#changelog-since-v125)
- - [Other notable changes](#other-notable-changes-1)
-- [v1.2.5](#v125)
- - [Downloads for v1.2.5](#downloads-for-v125)
- - [Changes since v1.2.4](#changes-since-v124)
- - [Other notable changes](#other-notable-changes-2)
-- [v1.2.4](#v124)
- - [Downloads for v1.2.4](#downloads-for-v124)
- - [Changes since v1.2.3](#changes-since-v123)
- - [Other notable changes](#other-notable-changes-3)
-- [v1.2.3](#v123)
- - [Downloads for v1.2.3](#downloads-for-v123)
- - [Changes since v1.2.2](#changes-since-v122)
- - [Action Required](#action-required)
- - [Other notable changes](#other-notable-changes-4)
-- [v1.2.2](#v122)
- - [Downloads for v1.2.2](#downloads-for-v122)
- - [Changes since v1.2.1](#changes-since-v121)
- - [Other notable changes](#other-notable-changes-5)
-- [v1.2.1](#v121)
- - [Downloads for v1.2.1](#downloads-for-v121)
- - [Changes since v1.2.0](#changes-since-v120)
- - [Other notable changes](#other-notable-changes-6)
-- [v1.2.0](#v120)
- - [Downloads for v1.2.0](#downloads-for-v120)
- - [Changes since v1.1.1](#changes-since-v111)
- - [Major Themes](#major-themes)
- - [Other notable improvements](#other-notable-improvements)
- - [Experimental Features](#experimental-features)
- - [Action required](#action-required-1)
- - [Known Issues](#known-issues)
- - [Docker Known Issues](#docker-known-issues)
- - [1.9.1](#191)
- - [Provider-specific Notes](#provider-specific-notes)
- - [Various](#various)
- - [AWS](#aws)
- - [GCE](#gce)
-
-
-
-
-
-# v1.2.7
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.2/examples)
-
-## Downloads for v1.2.7
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.7/kubernetes.tar.gz) | `53db157923c17fa7a0addb3e4dfe7d1b9194b9266a87d371a251d5bb790a1832`
-[kubernetes-src.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.7/kubernetes-src.tar.gz) | `e6e46831706743d8263581d0575507cf5ffc265096d22e5e84cf1c3ae925db5e`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.7/kubernetes-client-darwin-386.tar.gz) | `8418767e45c62c2ef5f9b4479ed02af64e190ce07dcbafa1920e93e71f419c55`
-[kubernetes-client-darwin-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.7/kubernetes-client-darwin-amd64.tar.gz) | `41d742c2c55e7686311978eaaddee3844b990a0fe49fa8597158bcb0ee4c05c9`
-[kubernetes-client-linux-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.7/kubernetes-client-linux-386.tar.gz) | `619e0a450cddf10ed1d42ed1d6330d41a75b9c1e00eb654cbe4b0422cd6099c5`
-[kubernetes-client-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.7/kubernetes-client-linux-amd64.tar.gz) | `9a5fcd87514b88eb25173e574aef5b5343816c07ab5947d06787c9f12c40f54a`
-[kubernetes-client-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.7/kubernetes-client-linux-arm.tar.gz) | `fd6e39b4a56e03448382825f27f4f30a2e981a8d20f4a8cedbd084bbb4577d42`
-[kubernetes-client-windows-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.7/kubernetes-client-windows-386.tar.gz) | `862625cb3d9445cff1b09e4ebcdb60dd93b5b2dc34bb6022d2eeed7c8d8bc5d8`
-[kubernetes-client-windows-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.7/kubernetes-client-windows-amd64.tar.gz) | `054337e41187e39950de93e4670bc78a95b6901cc2f95c50ff437d9825ae94c5`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.7/kubernetes-server-linux-amd64.tar.gz) | `fef041e9cbe5bcf8fd708f81ee2e2783429af1ab9cfb151d645ef9be96e19b73`
-[kubernetes-server-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.7/kubernetes-server-linux-arm.tar.gz) | `ce02d7bcd75c31db4f7b9922c19ea2a3312b0ba579b0dcd96b279b661eca18a8`
-
-## Changelog since v1.2.6
-
-### Other notable changes
-
-* Test x509 intermediates correctly ([#34524](https://github.com/kubernetes/kubernetes/pull/34524), [@liggitt](https://github.com/liggitt))
-
-
-
-# v1.2.6
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.2/examples)
-
-## Downloads for v1.2.6
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.6/kubernetes.tar.gz) | `50023455d00af52c41a7158b4bd117b2dfd4a100` | `cf0411bcb620eb13b08b93578efffc43`
-
-## Changelog since v1.2.5
-
-### Other notable changes
-
-* Fix watch cache filtering ([#28967](https://github.com/kubernetes/kubernetes/pull/28967), [@liggitt](https://github.com/liggitt))
-* Fix problems with container restarts and flocker ([#25874](https://github.com/kubernetes/kubernetes/pull/25874), [@simonswine](https://github.com/simonswine))
-
-
-
-# v1.2.5
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.2/examples)
-
-## Downloads for v1.2.5
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.5/kubernetes.tar.gz) | `ddf12d7f37dfef25308798d71ad547761d0785ac` | `69d770df8fa4eceb57167e34df3962ca`
-
-## Changes since v1.2.4
-
-### Other notable changes
-
-* Retry Pod/RC updates in kubectl rolling-update ([#27509](https://github.com/kubernetes/kubernetes/pull/27509), [@janetkuo](https://github.com/janetkuo))
-* GCE provider: Create TargetPool with 200 instances, then update with rest ([#27865](https://github.com/kubernetes/kubernetes/pull/27865), [@zmerlynn](https://github.com/zmerlynn))
-* GCE provider: Limit Filter calls to regexps rather than large blobs ([#27741](https://github.com/kubernetes/kubernetes/pull/27741), [@zmerlynn](https://github.com/zmerlynn))
-* Fix strategic merge diff list diff bug ([#26418](https://github.com/kubernetes/kubernetes/pull/26418), [@AdoHe](https://github.com/AdoHe))
-* AWS: Fix long-standing bug in stringSetToPointers ([#26331](https://github.com/kubernetes/kubernetes/pull/26331), [@therc](https://github.com/therc))
-* AWS kube-up: Increase timeout waiting for docker start ([#25405](https://github.com/kubernetes/kubernetes/pull/25405), [@justinsb](https://github.com/justinsb))
-* Fix hyperkube flag parsing ([#25512](https://github.com/kubernetes/kubernetes/pull/25512), [@colhom](https://github.com/colhom))
-* kubectl rolling-update support for same image ([#24645](https://github.com/kubernetes/kubernetes/pull/24645), [@jlowdermilk](https://github.com/jlowdermilk))
-* Return "410 Gone" errors via watch stream when using watch cache ([#25369](https://github.com/kubernetes/kubernetes/pull/25369), [@liggitt](https://github.com/liggitt))
-
-
-
-# v1.2.4
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.2/examples)
-
-## Downloads for v1.2.4
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.4/kubernetes.tar.gz) | `f3aea83f8f0e16b2b41998a2edc09eb42fd8d945` | `ab0aca3a20e8eba43c8ff9d672793618`
-
-## Changes since v1.2.3
-
-### Other notable changes
-
-* Ensure status is not changed during an update of PV, PVC, HPA objects ([#24924](https://github.com/kubernetes/kubernetes/pull/24924), [@mqliang](https://github.com/mqliang))
-* GCI: Add two GCI specific metadata pairs ([#25105](https://github.com/kubernetes/kubernetes/pull/25105), [@andyzheng0831](https://github.com/andyzheng0831))
-* Add an entry to the salt config to allow Debian jessie on GCE. ([#25123](https://github.com/kubernetes/kubernetes/pull/25123), [@jlewi](https://github.com/jlewi))
- * As with the existing Wheezy image on GCE, docker is expected
- * to already be installed in the image.
-* Fix DeletingLoadBalancer event generation. ([#24833](https://github.com/kubernetes/kubernetes/pull/24833), [@a-robinson](https://github.com/a-robinson))
-* GCE: Prefer preconfigured node tags for firewalls, if available ([#25148](https://github.com/kubernetes/kubernetes/pull/25148), [@a-robinson](https://github.com/a-robinson))
-* Drain pods created from ReplicaSets in 'kubectl drain' ([#23689](https://github.com/kubernetes/kubernetes/pull/23689), [@maclof](https://github.com/maclof))
-* GCI: Update the command to get the image ([#24987](https://github.com/kubernetes/kubernetes/pull/24987), [@andyzheng0831](https://github.com/andyzheng0831))
-* Validate deletion timestamp doesn't change on update ([#24839](https://github.com/kubernetes/kubernetes/pull/24839), [@liggitt](https://github.com/liggitt))
-* Add support for running clusters on GCI ([#24893](https://github.com/kubernetes/kubernetes/pull/24893), [@andyzheng0831](https://github.com/andyzheng0831))
-* Trusty: Add retry in curl commands ([#24749](https://github.com/kubernetes/kubernetes/pull/24749), [@andyzheng0831](https://github.com/andyzheng0831))
-
-
-
-# v1.2.3
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.2/examples)
-
-## Downloads for v1.2.3
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.3/kubernetes.tar.gz) | `b2ce4e0c72562d09ba06e3c0913f0bd78da0285e` | `69e75650de30d5a52d144799e94a168d`
-
-## Changes since v1.2.2
-
-### Action Required
-
-* Make watch cache treat resourceVersion consistent with uncached watch ([#24008](https://github.com/kubernetes/kubernetes/pull/24008), [@liggitt](https://github.com/liggitt))
-
-### Other notable changes
-
-* Fix unintended change of Service.spec.ports[].nodePort during kubectl apply ([#24180](https://github.com/kubernetes/kubernetes/pull/24180), [@AdoHe](https://github.com/AdoHe))
-* Flush conntrack state for removed/changed UDP Services ([#22573](https://github.com/kubernetes/kubernetes/pull/22573), [@freehan](https://github.com/freehan))
-* Allow setting the Host header in a httpGet probe ([#24292](https://github.com/kubernetes/kubernetes/pull/24292), [@errm](https://github.com/errm))
-* Bridge off-cluster traffic into services by masquerading. ([#24429](https://github.com/kubernetes/kubernetes/pull/24429), [@cjcullen](https://github.com/cjcullen))
-* Version-guard Kubectl client Guestbook application test against deployments ([#24478](https://github.com/kubernetes/kubernetes/pull/24478), [@ihmccreery](https://github.com/ihmccreery))
-* Fix goroutine leak in ssh-tunnel healthcheck. ([#24487](https://github.com/kubernetes/kubernetes/pull/24487), [@cjcullen](https://github.com/cjcullen))
-* Fixed mounting with containerized kubelet ([#23435](https://github.com/kubernetes/kubernetes/pull/23435), [@jsafrane](https://github.com/jsafrane))
-* Do not throw creation errors for containers that fail immediately after being started ([#23894](https://github.com/kubernetes/kubernetes/pull/23894), [@vishh](https://github.com/vishh))
-* Honor starting resourceVersion in watch cache ([#24208](https://github.com/kubernetes/kubernetes/pull/24208), [@ncdc](https://github.com/ncdc))
-* Fix TerminationMessagePath ([#23658](https://github.com/kubernetes/kubernetes/pull/23658), [@Random-Liu](https://github.com/Random-Liu))
-* Fix gce.getDiskByNameUnknownZone logic. ([#24452](https://github.com/kubernetes/kubernetes/pull/24452), [@a-robinson](https://github.com/a-robinson))
-* kubelet: add RSS memory to the summary API ([#24015](https://github.com/kubernetes/kubernetes/pull/24015), [@yujuhong](https://github.com/yujuhong))
-* e2e: adapt kubelet_perf.go to use the new summary metrics API ([#24003](https://github.com/kubernetes/kubernetes/pull/24003), [@yujuhong](https://github.com/yujuhong))
-* e2e: fix error checking in kubelet stats ([#24205](https://github.com/kubernetes/kubernetes/pull/24205), [@yujuhong](https://github.com/yujuhong))
-* Trusty: Avoid unnecessary in-memory temp files ([#24144](https://github.com/kubernetes/kubernetes/pull/24144), [@andyzheng0831](https://github.com/andyzheng0831))
-* Allowing type object in kubectl swagger validation ([#24054](https://github.com/kubernetes/kubernetes/pull/24054), [@nikhiljindal](https://github.com/nikhiljindal))
-* Add ClusterUpgrade tests ([#24150](https://github.com/kubernetes/kubernetes/pull/24150), [@ihmccreery](https://github.com/ihmccreery))
-* Trusty: Do not create the docker-daemon cgroup ([#23996](https://github.com/kubernetes/kubernetes/pull/23996), [@andyzheng0831](https://github.com/andyzheng0831))
-
-
-
-# v1.2.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.2/examples)
-
-## Downloads for v1.2.2
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.2/kubernetes.tar.gz) | `8dede5833a1986434adea80749624f81a0db7bb4` | `72a5389f22827fb5133fdc3b7bfb9b3a`
-
-## Changes since v1.2.1
-
-### Other notable changes
-
-* Trusty: Update heapster manifest handling code ([#23434](https://github.com/kubernetes/kubernetes/pull/23434), [@andyzheng0831](https://github.com/andyzheng0831))
-* Support addon Deployments, make heapster a deployment with a nanny. ([#22893](https://github.com/kubernetes/kubernetes/pull/22893), [@Q-Lee](https://github.com/Q-Lee))
-* Create a new Deployment in kube-system for every version. ([#23512](https://github.com/kubernetes/kubernetes/pull/23512), [@Q-Lee](https://github.com/Q-Lee))
-* Use SCP to dump logs and parallelize a bit. ([#22835](https://github.com/kubernetes/kubernetes/pull/22835), [@spxtr](https://github.com/spxtr))
-* Trusty: Regional release .tar.gz support ([#23558](https://github.com/kubernetes/kubernetes/pull/23558), [@andyzheng0831](https://github.com/andyzheng0831))
-* Make ConfigMap volume readable as non-root ([#23793](https://github.com/kubernetes/kubernetes/pull/23793), [@pmorie](https://github.com/pmorie))
-* only include running and pending pods in daemonset should place calculation ([#23929](https://github.com/kubernetes/kubernetes/pull/23929), [@mikedanese](https://github.com/mikedanese))
-* A pod never terminated if a container image registry was unavailable ([#23746](https://github.com/kubernetes/kubernetes/pull/23746), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Update Dashboard UI addon to v1.0.1 ([#23724](https://github.com/kubernetes/kubernetes/pull/23724), [@maciaszczykm](https://github.com/maciaszczykm))
-* Ensure object returned by volume getCloudProvider incorporates cloud config ([#23769](https://github.com/kubernetes/kubernetes/pull/23769), [@saad-ali](https://github.com/saad-ali))
-* Add a timeout to the sshDialer to prevent indefinite hangs. ([#23843](https://github.com/kubernetes/kubernetes/pull/23843), [@cjcullen](https://github.com/cjcullen))
-* AWS kube-up: tolerate a lack of ephemeral volumes ([#23776](https://github.com/kubernetes/kubernetes/pull/23776), [@justinsb](https://github.com/justinsb))
-* Fix so setup-files don't recreate/invalidate certificates that already exist ([#23550](https://github.com/kubernetes/kubernetes/pull/23550), [@luxas](https://github.com/luxas))
-
-
-
-# v1.2.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.2/examples)
-
-## Downloads for v1.2.1
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.1/kubernetes.tar.gz) | `1639807c5788e1c6b1ab51fd30b723fb5debd865` | `235a1da47972c96a560d718d3256ca4f`
-
-
-## Changes since v1.2.0
-
-### Other notable changes
-
-* AWS: Fix problems with >2 security groups ([#23340](https://github.com/kubernetes/kubernetes/pull/23340), [@justinsb](https://github.com/justinsb))
-* IngressTLS: allow secretName to be blank for SNI routing ([#23500](https://github.com/kubernetes/kubernetes/pull/23500), [@tam7t](https://github.com/tam7t))
-* Heapster patch release to 1.0.2 ([#23487](https://github.com/kubernetes/kubernetes/pull/23487), [@piosz](https://github.com/piosz))
-* Remove unnecessary override of /etc/init.d/docker on containervm image. ([#23593](https://github.com/kubernetes/kubernetes/pull/23593), [@dchen1107](https://github.com/dchen1107))
-* Change kube-proxy & fluentd CPU request to 20m/80m. ([#23646](https://github.com/kubernetes/kubernetes/pull/23646), [@cjcullen](https://github.com/cjcullen))
-* make docker-checker more robust ([#23662](https://github.com/kubernetes/kubernetes/pull/23662), [@ArtfulCoder](https://github.com/ArtfulCoder))
-* validate that daemonsets don't have empty selectors on creation ([#23530](https://github.com/kubernetes/kubernetes/pull/23530), [@mikedanese](https://github.com/mikedanese))
-* don't sync deployment when pod selector is empty ([#23467](https://github.com/kubernetes/kubernetes/pull/23467), [@mikedanese](https://github.com/mikedanese))
-* Support differentiation of OS distro in e2e tests ([#23466](https://github.com/kubernetes/kubernetes/pull/23466), [@andyzheng0831](https://github.com/andyzheng0831))
-* don't sync daemonsets with selectors that match all pods ([#23223](https://github.com/kubernetes/kubernetes/pull/23223), [@mikedanese](https://github.com/mikedanese))
-* Trusty: Avoid reaching GCE custom metadata size limit ([#22818](https://github.com/kubernetes/kubernetes/pull/22818), [@andyzheng0831](https://github.com/andyzheng0831))
-* Update kubectl help for 1.2 resources ([#23305](https://github.com/kubernetes/kubernetes/pull/23305), [@janetkuo](https://github.com/janetkuo))
-* Removing URL query param from swagger UI to fix the XSS issue ([#23234](https://github.com/kubernetes/kubernetes/pull/23234), [@nikhiljindal](https://github.com/nikhiljindal))
-* Fix hairpin mode ([#23325](https://github.com/kubernetes/kubernetes/pull/23325), [@MurgaNikolay](https://github.com/MurgaNikolay))
-* Bump to container-vm-v20160321 ([#23313](https://github.com/kubernetes/kubernetes/pull/23313), [@zmerlynn](https://github.com/zmerlynn))
-* Remove the restart-kube-proxy and restart-apiserver functions ([#23180](https://github.com/kubernetes/kubernetes/pull/23180), [@roberthbailey](https://github.com/roberthbailey))
-* Copy annotations back from RS to Deployment on rollback ([#23160](https://github.com/kubernetes/kubernetes/pull/23160), [@janetkuo](https://github.com/janetkuo))
-* Trusty: Support hybrid cluster with nodes on ContainerVM ([#23079](https://github.com/kubernetes/kubernetes/pull/23079), [@andyzheng0831](https://github.com/andyzheng0831))
-* update expose command description to add deployment ([#23246](https://github.com/kubernetes/kubernetes/pull/23246), [@AdoHe](https://github.com/AdoHe))
-* Add a rate limiter to the GCE cloudprovider ([#23019](https://github.com/kubernetes/kubernetes/pull/23019), [@alex-mohr](https://github.com/alex-mohr))
-* Add a Deployment example for kubectl expose. ([#23222](https://github.com/kubernetes/kubernetes/pull/23222), [@madhusudancs](https://github.com/madhusudancs))
-* Use versioned object when computing patch ([#23145](https://github.com/kubernetes/kubernetes/pull/23145), [@liggitt](https://github.com/liggitt))
-* kubelet: send all recevied pods in one update ([#23141](https://github.com/kubernetes/kubernetes/pull/23141), [@yujuhong](https://github.com/yujuhong))
-* Add a SSHKey sync check to the master's healthz (when using SSHTunnels). ([#23167](https://github.com/kubernetes/kubernetes/pull/23167), [@cjcullen](https://github.com/cjcullen))
-* Validate minimum CPU limits to be >= 10m ([#23143](https://github.com/kubernetes/kubernetes/pull/23143), [@vishh](https://github.com/vishh))
-* Fix controller-manager race condition issue which cause endpoints flush during restart ([#23035](https://github.com/kubernetes/kubernetes/pull/23035), [@xinxiaogang](https://github.com/xinxiaogang))
-* MESOS: forward globally declared cadvisor housekeeping flags ([#22974](https://github.com/kubernetes/kubernetes/pull/22974), [@jdef](https://github.com/jdef))
-* Trusty: support developer workflow on base image ([#22960](https://github.com/kubernetes/kubernetes/pull/22960), [@andyzheng0831](https://github.com/andyzheng0831))
-
-
-
-# v1.2.0
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.2/examples)
-
-## Downloads for v1.2.0
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.2.0/kubernetes.tar.gz) | `52dd998e1191f464f581a9b87017d70ce0b058d9` | `c0ce9e6150e9d7a19455db82f3318b4c`
-
-## Changes since v1.1.1
-
-### Major Themes
-
- * Significant scale improvements. Increased cluster scale by 400% to 1000 nodes with 30,000 pods per cluster.
-Kubelet supports 100 pods per node with 4x reduced system overhead.
- * Simplified application deployment and management.
- * Dynamic Configuration (ConfigMap API in the core API group) enables application
-configuration to be stored as a Kubernetes API object and pulled dynamically on
-container startup, as an alternative to baking in command-line flags when a
-container is built.
- * Turnkey Deployments (Deployment API (Beta) in the Extensions API group)
-automate deployment and rolling updates of applications, specified
-declaratively. It handles versioning, multiple simultaneous rollouts,
-aggregating status across all pods, maintaining application availability, and
-rollback.
- * Automated cluster management:
- * Kubernetes clusters can now span zones within a cloud provider. Pods from a
-service will be automatically spread across zones, enabling applications to
-tolerate zone failure.
- * Simplified way to run a container on every node (DaemonSet API (Beta) in the
-Extensions API group): Kubernetes can schedule a service (such as a logging
-agent) that runs one, and only one, pod per node.
- * TLS and L7 support (Ingress API (Beta) in the Extensions API group): Kubernetes
-is now easier to integrate into custom networking environments by supporting
-TLS for secure communication and L7 http-based traffic routing.
- * Graceful Node Shutdown (aka drain) - The new “kubectl drain” command gracefully
-evicts pods from nodes in preparation for disruptive operations like kernel
-upgrades or maintenance.
- * Custom Metrics for Autoscaling (HorizontalPodAutoscaler API in the Autoscaling
-API group): The Horizontal Pod Autoscaling feature now supports custom metrics
-(Alpha), allowing you to specify application-level metrics and thresholds to
-trigger scaling up and down the number of pods in your application.
- * New GUI (dashboard) allows you to get started quickly and enables the same
-functionality found in the CLI as a more approachable and discoverable way of
-interacting with the system. Note: the GUI is enabled by default in 1.2 clusters.
-
-
-
-### Other notable improvements
-
- * Job was Beta in 1.1 and is GA in 1.2 .
- * apiVersion: batch/v1 is now available. You now do not need to specify the .spec.selector field — a [unique selector is automatically generated ](http://kubernetes.io/docs/user-guide/jobs/#pod-selector)for you.
- * The previous version, apiVersion: extensions/v1beta1, is still supported. Even if you roll back to 1.1, the objects created using
-the new apiVersion will still be accessible, using the old version. You can
-continue to use your existing JSON and YAML files until you are ready to switch
-to batch/v1. We may remove support for Jobs with apiVersion: extensions/v1beta1 in 1.3 or 1.4.
- * HorizontalPodAutoscaler was Beta in 1.1 and is GA in 1.2 .
- * apiVersion: autoscaling/v1 is now available. Changes in this version are:
- * Field CPUUtilization which was a nested structure CPUTargetUtilization in
-HorizontalPodAutoscalerSpec was replaced by TargetCPUUtilizationPercentage
-which is an integer.
- * ScaleRef of type SubresourceReference in HorizontalPodAutoscalerSpec which
-referred to scale subresource of the resource being scaled was replaced by
-ScaleTargetRef which points just to the resource being scaled.
- * In extensions/v1beta1 if CPUUtilization in HorizontalPodAutoscalerSpec was not
-specified it was set to 80 by default while in autoscaling/v1 HPA object
-without TargetCPUUtilizationPercentage specified is a valid object. Pod
-autoscaler controller will apply a default scaling policy in this case which is
-equivalent to the previous one but may change in the future.
- * The previous version, apiVersion: extensions/v1beta1, is still supported. Even if you roll back to 1.1, the objects created using
-the new apiVersions will still be accessible, using the old version. You can
-continue to use your existing JSON and YAML files until you are ready to switch
-to autoscaling/v1. We may remove support for HorizontalPodAutoscalers with apiVersion: extensions/v1beta1 in 1.3 or 1.4.
- * Kube-Proxy now defaults to an iptables-based proxy. If the --proxy-mode flag is
-specified while starting kube-proxy (‘userspace’ or ‘iptables’), the flag value
-will be respected. If the flag value is not specified, the kube-proxy respects
-the Node object annotation: ‘net.beta.kubernetes.io/proxy-mode’. If the
-annotation is not specified, then ‘iptables’ mode is the default. If kube-proxy
-is unable to start in iptables mode because system requirements are not met
-(kernel or iptables versions are insufficient), the kube-proxy will fall-back
-to userspace mode. Kube-proxy is much more performant and less
-resource-intensive in ‘iptables’ mode.
- * Node stability can be improved by reserving [resources](https://github.com/kubernetes/kubernetes/blob/release-1.2/docs/proposals/node-allocatable.md) for the base operating system using --system-reserved and --kube-reserved Kubelet flags
- * Liveness and readiness probes now support more configuration parameters:
-periodSeconds, successThreshold, failureThreshold
- * The new ReplicaSet API (Beta) in the Extensions API group is similar to
-ReplicationController, but its [selector](http://kubernetes.io/docs/user-guide/labels/#label-selectors) is more general (supports set-based selector; whereas ReplicationController
-only supports equality-based selector).
- * Scale subresource support is now expanded to ReplicaSets along with
-ReplicationControllers and Deployments. Scale now supports two different types
-of selectors to accommodate both [equality-based selectors](http://kubernetes.io/docs/user-guide/labels/#equality-based-requirement) supported by ReplicationControllers and [set-based selectors](http://kubernetes.io/docs/user-guide/labels/#set-based-requirement) supported by Deployments and ReplicaSets.
- * “kubectl run” now produces Deployments (instead of ReplicationControllers) and
-Jobs (instead of Pods) by default.
- * Pods can now consume Secret data in environment variables and inject those
-environment variables into a container’s command-line args.
- * Stable version of Heapster which scales up to 1000 nodes: more metrics, reduced
-latency, reduced cpu/memory consumption (~4mb per monitored node).
- * Pods now have a security context which allows users to specify:
- * attributes which apply to the whole pod:
- * User ID
- * Whether all containers should be non-root
- * Supplemental Groups
- * FSGroup - a special supplemental group
- * SELinux options
- * If a pod defines an FSGroup, that Pod’s system (emptyDir, secret, configMap,
-etc) volumes and block-device volumes will be owned by the FSGroup, and each
-container in the pod will run with the FSGroup as a supplemental group
- * Volumes that support SELinux labelling are now automatically relabeled with the
-Pod’s SELinux context, if specified
- * A stable client library release\_1\_2 is added. The library is [here](pkg/client/clientset_generated/), and detailed doc is [here](docs/devel/generating-clientset.md#released-clientsets). We will keep the interface of this go client stable.
- * New Azure File Service Volume Plugin enables mounting Microsoft Azure File
-Volumes (SMB 2.1 and 3.0) into a Pod. See [example](https://github.com/kubernetes/kubernetes/blob/release-1.2/examples/azure_file/README.md) for details.
- * Logs usage and root filesystem usage of a container, volumes usage of a pod and node disk usage are exposed through Kubelet new metrics API.
-
-### Experimental Features
-
- * Dynamic Provisioning of PersistentVolumes: Kubernetes previously required all
-volumes to be manually provisioned by a cluster administrator before use. With
-this feature, volume plugins that support it (GCE PD, AWS EBS, and Cinder) can
-automatically provision a PersistentVolume to bind to an unfulfilled
-PersistentVolumeClaim.
- * Run multiple schedulers in parallel, e.g. one or more custom schedulers
-alongside the default Kubernetes scheduler, using pod annotations to select
-among the schedulers for each pod. Documentation is [here](http://kubernetes.io/docs/admin/multiple-schedulers.md), design doc is [here](docs/proposals/multiple-schedulers.md).
- * More expressive node affinity syntax, and support for “soft” node affinity.
-Node selectors (to constrain pods to schedule on a subset of nodes) now support
-the operators {In, NotIn, Exists, DoesNotExist, Gt, Lt} instead of just conjunction of exact match on node label values. In
-addition, we’ve introduced a new “soft” kind of node selector that is just a
-hint to the scheduler; the scheduler will try to satisfy these requests but it
-does not guarantee they will be satisfied. Both the “hard” and “soft” variants
-of node affinity use the new syntax. Documentation is [here](http://kubernetes.io/docs/user-guide/node-selection/) (see section “Alpha feature in Kubernetes v1.2: Node Affinity“). Design doc is [here](https://github.com/kubernetes/kubernetes/blob/release-1.2/docs/design/nodeaffinity.md).
- * A pod can specify its own Hostname and Subdomain via annotations (pod.beta.kubernetes.io/hostname, pod.beta.kubernetes.io/subdomain). If the Subdomain matches the name of a [headless service](http://kubernetes.io/docs/user-guide/services/#headless-services) in the same namespace, a DNS A record is also created for the pod’s FQDN. More
-details can be found in the [DNS README](https://github.com/kubernetes/kubernetes/blob/release-1.2/cluster/saltbase/salt/kube-dns/README.md#a-records-and-hostname-based-on-pod-annotations---a-beta-feature-in-kubernetes-v12). Changes were introduced in PR [#20688](https://github.com/kubernetes/kubernetes/pull/20688).
- * New SchedulerExtender enables users to implement custom
-out-of-(the-scheduler)-process scheduling predicates and priority functions,
-for example to schedule pods based on resources that are not directly managed
-by Kubernetes. Changes were introduced in PR [#13580](https://github.com/kubernetes/kubernetes/pull/13580). Example configuration and documentation is available [here](docs/design/scheduler_extender.md). This is an alpha feature and may not be supported in its current form at beta
-or GA.
- * New Flex Volume Plugin enables users to use out-of-process volume plugins that
-are installed to “/usr/libexec/kubernetes/kubelet-plugins/volume/exec/” on
-every node, instead of being compiled into the Kubernetes binary. See [example](examples/volumes/flexvolume/README.md) for details.
- * vendor volumes into a pod. It expects vendor drivers are installed in the
-volume plugin path on each kubelet node. This is an alpha feature and may
-change in future.
- * Kubelet exposes a new Alpha metrics API - /stats/summary in a user friendly format with reduced system overhead. The measurement is done in PR [#22542](https://github.com/kubernetes/kubernetes/pull/22542).
-
-### Action required
-
- * Docker v1.9.1 is officially recommended. Docker v1.8.3 and Docker v1.10 are
-supported. If you are using an older release of Docker, please upgrade. Known
-issues with Docker 1.9.1 can be found below.
- * CPU hardcapping will be enabled by default for containers with CPU limit set,
-if supported by the kernel. You should either adjust your CPU limit, or set CPU
-request only, if you want to avoid hardcapping. If the kernel does not support
-CPU Quota, NodeStatus will contain a warning indicating that CPU Limits cannot
-be enforced.
- * The following applies only if you use the Go language client (/pkg/client/unversioned) to create Job by defining Go variables of type "k8s.io/kubernetes/pkg/apis/extensions".Job). We think this is not common, so if you are not sure what this means, you probably aren't doing this. If
-you do this, then, at the time you re-vendor the "k8s.io/kubernetes/" code, you will need to set job.Spec.ManualSelector = true, or else set job.Spec.Selector = nil. Otherwise, the jobs you create may be rejected. See [Specifying your own pod selector](http://kubernetes.io/docs/user-guide/jobs/#specifying-your-own-pod-selector).
- * Deployment was Alpha in 1.1 (though it had apiVersion extensions/v1beta1) and
-was disabled by default. Due to some non-backward-compatible API changes, any
-Deployment objects you created in 1.1 won’t work with in the 1.2 release.
- * Before upgrading to 1.2, delete all Deployment alpha-version resources, including the Replication Controllers and Pods the Deployment manages. Then
-create Deployment Beta resources after upgrading to 1.2. Not deleting the
-Deployment objects may cause the deployment controller to mistakenly match
-other pods and delete them, due to the selector API change.
- * Client (kubectl) and server versions must match (both 1.1 or both 1.2) for any
-Deployment-related operations.
- * Behavior change:
- * Deployment creates ReplicaSets instead of ReplicationControllers.
- * Scale subresource now has a new targetSelector field in its status. This field supports the new set-based selectors supported
-by Deployments, but in a serialized format.
- * Spec change:
- * Deployment’s [selector](http://kubernetes.io/docs/user-guide/labels/#label-selectors) is now more general (supports set-based selector; it only supported
-equality-based selector in 1.1).
- * .spec.uniqueLabelKey is removed -- users can’t customize unique label key --
-and its default value is changed from
-“deployment.kubernetes.io/podTemplateHash” to “pod-template-hash”.
- * .spec.strategy.rollingUpdate.minReadySeconds is moved to .spec.minReadySeconds
- * DaemonSet was Alpha in 1.1 (though it had apiVersion extensions/v1beta1) and
-was disabled by default. Due to some non-backward-compatible API changes, any
-DaemonSet objects you created in 1.1 won’t work with in the 1.2 release.
- * Before upgrading to 1.2, delete all DaemonSet alpha-version resources. If you do not want to disrupt the pods, use kubectl delete daemonset
---cascade=false. Then create DaemonSet Beta resources after upgrading to 1.2.
- * Client (kubectl) and server versions must match (both 1.1 or both 1.2) for any
-DaemonSet-related operations.
- * Behavior change:
- * DaemonSet pods will be created on nodes with .spec.unschedulable=true and will
-not be evicted from nodes whose Ready condition is false.
- * Updates to the pod template are now permitted. To perform a rolling update of a
-DaemonSet, update the pod template and then delete its pods one by one; they
-will be replaced using the updated template.
- * Spec change:
- * DaemonSet’s [selector](http://kubernetes.io/docs/user-guide/labels/#label-selectors) is now more general (supports set-based selector; it only supported
-equality-based selector in 1.1).
- * Running against a secured etcd requires these flags to be passed to
-kube-apiserver (instead of --etcd-config):
- * --etcd-certfile, --etcd-keyfile (if using client cert auth)
- * --etcd-cafile (if not using system roots)
- * As part of preparation in 1.2 for adding support for protocol buffers (and the
-direct YAML support in the API available today), the Content-Type and Accept
-headers are now properly handled as per the HTTP spec. As a consequence, if
-you had a client that was sending an invalid Content-Type or Accept header to
-the API, in 1.2 you will either receive a 415 or 406 error.
-The only client
-this is known to affect is curl when you use -d with JSON but don't set a
-content type, helpfully sends "application/x-www-urlencoded", which is not
-correct.
-Other client authors should double check that you are sending proper
-accept and content type headers, or set no value (in which case JSON is the
-default).
-An example using curl:
-curl -H "Content-Type: application/json" -XPOST -d
-'{"apiVersion":"v1","kind":"Namespace","metadata":{"name":"kube-system"}}' "[http://127.0.0.1:8080/api/v1/namespaces](http://127.0.0.1:8080/api/v1/namespaces)"
- * The version of InfluxDB is bumped from 0.8 to 0.9 which means storage schema
-change. More details [here](https://docs.influxdata.com/influxdb/v0.9/administration/upgrading/).
- * We have renamed “minions” to “nodes”. If you were specifying NUM\_MINIONS or
-MINION\_SIZE to kube-up, you should now specify NUM\_NODES or NODE\_SIZE.
-
-### Known Issues
-
- * Paused deployments can't be resized and don't clean up old ReplicaSets.
- * Minimum memory limit is 4MB. This is a docker limitation
- * Minimum CPU limits is 10m. This is a Linux Kernel limitation
- * “kubectl rollout undo” (i.e. rollback) will hang on paused deployments, because
-paused deployments can’t be rolled back (this is expected), and the command
-waits for rollback events to return the result. Users should use “kubectl
-rollout resume” to resume a deployment before rolling back.
- * “kubectl edit ” will open the editor multiple times, once for each
-resource in the list.
- * If you create HPA object using autoscaling/v1 API without specifying
-targetCPUUtilizationPercentage and read it using kubectl it will print default
-value as specified in extensions/v1beta1 (see details in [#23196](https://github.com/kubernetes/kubernetes/issues/23196)).
- * If a node or kubelet crashes with a volume attached, the volume will remain
-attached to that node. If that volume can only be attached to one node at a
-time (GCE PDs attached in RW mode, for example), then the volume must be
-manually detached before Kubernetes can attach it to other nodes.
- * If a volume is already attached to a node any subsequent attempts to attach it
-again (due to kubelet restart, for example) will fail. The volume must either
-be manually detached first or the pods referencing it deleted (which would
-trigger automatic volume detach).
- * In very large clusters it may happen that a few nodes won’t register in API
-server in a given timeframe for whatever reasons (networking issue, machine
-failure, etc.). Normally when kube-up script will encounter even one NotReady
-node it will fail, even though the cluster most likely will be working. We
-added an environmental variable to kube-up ALLOWED\_NOTREADY\_NODES that
-defines the number of nodes that if not Ready in time won’t cause kube-up
-failure.
- * “kubectl rolling-update” only supports Replication Controllers (it doesn’t
-support Replica Sets). It’s recommended to use Deployment 1.2 with “kubectl
-rollout” commands instead, if you want to rolling update Replica Sets.
- * When live upgrading Kubelet to 1.2 without draining the pods running on the node,
-the containers will be restarted by Kubelet (see details in [#23104](https://github.com/kubernetes/kubernetes/issues/23104)).
-
-#### Docker Known Issues
-
-##### 1.9.1
-
- * Listing containers can be slow at times which will affect kubelet performance.
-More information [here](https://github.com/docker/docker/issues/17720)
- * Docker daemon restarts can fail. Docker checkpoints have to deleted between
-restarts. More information [here](https://github.com/kubernetes/kubernetes/issues/20995)
- * Pod IP allocation-related issues. Deleting the docker checkpoint prior to
-restarting the daemon alleviates this issue, but hasn’t been verified to
-completely eliminate the IP allocation issue. More information [here](https://github.com/kubernetes/kubernetes/issues/21523#issuecomment-191498969)
- * Daemon becomes unresponsive (rarely) due to kernel deadlocks. More information [here](https://github.com/kubernetes/kubernetes/issues/21866#issuecomment-189492391)
-
-### Provider-specific Notes
-
-#### Various
-
- Core changes:
-
- * Support for load balancers with source ranges
-
-#### AWS
-
-Core changes:
-
- * Support for ELBs with complex configurations: better subnet selection with
-multiple subnets, and internal ELBs
- * Support for VPCs with private dns names
- * Multiple fixes to EBS volume mounting code for robustness, and to support
-mounting the full number of AWS recommended volumes.
- * Multiple fixes to avoid hitting AWS rate limits, and to throttle if we do
- * Support for the EC2 Container Registry (currently in us-east-1 only)
-
-With kube-up:
-
- * Automatically install updates on boot & reboot
- * Use optimized image based on Jessie by default
- * Add support for Ubuntu Wily
- * Master is configured with automatic restart-on-failure, via CloudWatch
- * Bootstrap reworked to be more similar to GCE; better supports reboots/restarts
- * Use an elastic IP for the master by default
- * Experimental support for node spot instances (set NODE\_SPOT\_PRICE=0.05)
-
-#### GCE
-
- * Ubuntu Trusty support added
-
-Please see the [Releases Page](https://github.com/kubernetes/kubernetes/releases) for older releases.
-
-
-[]()
diff --git a/vendor/k8s.io/kubernetes/CHANGELOG-1.3.md b/vendor/k8s.io/kubernetes/CHANGELOG-1.3.md
deleted file mode 100644
index 2427031ccc29..000000000000
--- a/vendor/k8s.io/kubernetes/CHANGELOG-1.3.md
+++ /dev/null
@@ -1,972 +0,0 @@
-
-- [v1.3.10](#v1310)
- - [Downloads for v1.3.10](#downloads-for-v1310)
- - [Client Binaries](#client-binaries)
- - [Server Binaries](#server-binaries)
- - [Changelog since v1.3.9](#changelog-since-v139)
- - [Other notable changes](#other-notable-changes)
-- [v1.3.9](#v139)
- - [Downloads](#downloads)
- - [Changelog since v1.3.8](#changelog-since-v138)
- - [Other notable changes](#other-notable-changes-1)
-- [v1.3.8](#v138)
- - [Downloads](#downloads-1)
- - [Changelog since v1.3.7](#changelog-since-v137)
- - [Other notable changes](#other-notable-changes-2)
-- [v1.3.7](#v137)
- - [Downloads](#downloads-2)
- - [Changelog since v1.3.6](#changelog-since-v136)
- - [Other notable changes](#other-notable-changes-3)
-- [v1.3.6](#v136)
- - [Downloads](#downloads-3)
- - [Changelog since v1.3.5](#changelog-since-v135)
- - [Other notable changes](#other-notable-changes-4)
-- [v1.3.5](#v135)
- - [Downloads](#downloads-4)
- - [Changelog since v1.3.4](#changelog-since-v134)
- - [Other notable changes](#other-notable-changes-5)
-- [v1.3.4](#v134)
- - [Downloads](#downloads-5)
- - [Changelog since v1.3.3](#changelog-since-v133)
- - [Other notable changes](#other-notable-changes-6)
-- [v1.3.3](#v133)
- - [Downloads](#downloads-6)
- - [Changelog since v1.3.2](#changelog-since-v132)
- - [Other notable changes](#other-notable-changes-7)
- - [Known Issues](#known-issues)
-- [v1.3.2](#v132)
- - [Downloads](#downloads-7)
- - [Changelog since v1.3.1](#changelog-since-v131)
- - [Other notable changes](#other-notable-changes-8)
-- [v1.3.1](#v131)
- - [Downloads](#downloads-8)
- - [Changelog since v1.3.0](#changelog-since-v130)
- - [Other notable changes](#other-notable-changes-9)
-- [v1.3.0](#v130)
- - [Downloads](#downloads-9)
- - [Highlights](#highlights)
- - [Known Issues and Important Steps before Upgrading](#known-issues-and-important-steps-before-upgrading)
- - [ThirdPartyResource](#thirdpartyresource)
- - [kubectl](#kubectl)
- - [kubernetes Core Known Issues](#kubernetes-core-known-issues)
- - [Docker runtime Known Issues](#docker-runtime-known-issues)
- - [Rkt runtime Known Issues](#rkt-runtime-known-issues)
- - [Provider-specific Notes](#provider-specific-notes)
- - [Previous Releases Included in v1.3.0](#previous-releases-included-in-v130)
-- [v1.3.0-beta.3](#v130-beta3)
- - [Downloads](#downloads-10)
- - [Changelog since v1.3.0-beta.2](#changelog-since-v130-beta2)
- - [Action Required](#action-required)
- - [Other notable changes](#other-notable-changes-10)
-- [v1.3.0-beta.2](#v130-beta2)
- - [Downloads](#downloads-11)
- - [Changes since v1.3.0-beta.1](#changes-since-v130-beta1)
- - [Experimental Features](#experimental-features)
- - [Other notable changes](#other-notable-changes-11)
-- [v1.3.0-beta.1](#v130-beta1)
- - [Downloads](#downloads-12)
- - [Changes since v1.3.0-alpha.5](#changes-since-v130-alpha5)
- - [Action Required](#action-required-1)
- - [Other notable changes](#other-notable-changes-12)
-- [v1.3.0-alpha.5](#v130-alpha5)
- - [Downloads](#downloads-13)
- - [Changes since v1.3.0-alpha.4](#changes-since-v130-alpha4)
- - [Action Required](#action-required-2)
- - [Other notable changes](#other-notable-changes-13)
-- [v1.3.0-alpha.4](#v130-alpha4)
- - [Downloads](#downloads-14)
- - [Changes since v1.3.0-alpha.3](#changes-since-v130-alpha3)
- - [Action Required](#action-required-3)
- - [Other notable changes](#other-notable-changes-14)
-- [v1.3.0-alpha.3](#v130-alpha3)
- - [Downloads](#downloads-15)
- - [Changes since v1.3.0-alpha.2](#changes-since-v130-alpha2)
- - [Action Required](#action-required-4)
- - [Other notable changes](#other-notable-changes-15)
-- [v1.3.0-alpha.2](#v130-alpha2)
- - [Downloads](#downloads-16)
- - [Changes since v1.3.0-alpha.1](#changes-since-v130-alpha1)
- - [Other notable changes](#other-notable-changes-16)
-- [v1.3.0-alpha.1](#v130-alpha1)
- - [Downloads](#downloads-17)
- - [Changes since v1.2.0](#changes-since-v120)
- - [Action Required](#action-required-5)
- - [Other notable changes](#other-notable-changes-17)
-
-
-
-
-
-# v1.3.10
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads for v1.3.10
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes.tar.gz) | `0f61517fbab1feafbe1024da0b88bfe16e61fed7e612285d70e3ecb53ce518cf`
-[kubernetes-src.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-src.tar.gz) | `7b1be0dcc12ae1b0cb1928b770c1025755fd0858ce7520907bacda19e5bfa53f`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-darwin-386.tar.gz) | `64a7012411a506ff7825e7b9c64b50197917d6f4e1128ea0e7b30a121059da47`
-[kubernetes-client-darwin-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-darwin-amd64.tar.gz) | `5d85843e643eaebe3e34e48810f4786430b5ecce915144e01ba2d8539aa77364`
-[kubernetes-client-linux-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-linux-386.tar.gz) | `06d478c601b1d4aa1fc539e9120adbcbbd2fb370d062516f84a064e465d8eadc`
-[kubernetes-client-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-linux-amd64.tar.gz) | `fe571542482b8ba3ff94b9e5e9657f6ab4fc0feb8971930dc80b7ae2548d669b`
-[kubernetes-client-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-linux-arm64.tar.gz) | `176b52d35150ca9f08a7e90e33e2839b7574afe350edf4fafa46745d77bb5aa4`
-[kubernetes-client-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-linux-arm.tar.gz) | `1c3bf4ac1e4eb0e02f785db725efd490beaf06c8acd26d694971ba510b60a94d`
-[kubernetes-client-linux-ppc64le.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-linux-ppc64le.tar.gz) | `172cd0af71fcba7c51e9476732dbe86ba251c03b1d74f912111e4e755be540ce`
-[kubernetes-client-windows-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-windows-386.tar.gz) | `f2d2f82d7e285c98d8cc58a8a6e13a1122c9f60bb2c73e4cefe3555f963e56cd`
-[kubernetes-client-windows-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-windows-amd64.tar.gz) | `ac0aa2b09dfeb8001e76f3aefe82c7bd2fda5bd0ef744ac3aed966b99c8dc8e5`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-server-linux-amd64.tar.gz) | `bf0d3924ff84c95c316fcb4b21876cc019bd648ca8ab87fd6b2712ccda30992b`
-[kubernetes-server-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-server-linux-arm64.tar.gz) | `45e88d1c8edc17d7f1deab8d040a769d8647203c465d76763abb1ce445a98773`
-[kubernetes-server-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-server-linux-arm.tar.gz) | `40ac46a265021615637f07d532cd563b4256dcf340a27c594bfd3501fe66b84c`
-[kubernetes-server-linux-ppc64le.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-server-linux-ppc64le.tar.gz) | `faa5075ab3e6688666bbbb274fa55a825513ee082a3b17bcddb5b8f4fd6f9aa0`
-
-## Changelog since v1.3.9
-
-### Other notable changes
-
-* gci: decouple from the built-in kubelet version ([#31367](https://github.com/kubernetes/kubernetes/pull/31367), [@Amey-D](https://github.com/Amey-D))
-* Bump GCE debian image to container-vm-v20161025 (CVE-2016-5195 Dirty… ([#35825](https://github.com/kubernetes/kubernetes/pull/35825), [@dchen1107](https://github.com/dchen1107))
-* Add RELEASE_INFRA_PUSH related code to support pushes from kubernetes/release. ([#28922](https://github.com/kubernetes/kubernetes/pull/28922), [@david-mcmahon](https://github.com/david-mcmahon))
-
-
-
-# v1.3.9
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.9/kubernetes.tar.gz) | `a994c732d2b852bbee55a78601d50d046323021a99b0801aea07dacf64c2c59a`
-
-## Changelog since v1.3.8
-
-### Other notable changes
-
-* Test x509 intermediates correctly ([#34524](https://github.com/kubernetes/kubernetes/pull/34524), [@liggitt](https://github.com/liggitt))
-* Remove headers that are unnecessary for proxy target ([#34076](https://github.com/kubernetes/kubernetes/pull/34076), [@mbohlool](https://github.com/mbohlool))
-
-
-
-# v1.3.8
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.8/kubernetes.tar.gz) | `66cf72d8f07e2f700acfcb11536694e0d904483611ff154f34a8380c63720a8d`
-
-## Changelog since v1.3.7
-
-### Other notable changes
-
-* AWS: fix volume device assignment race condition ([#31090](https://github.com/kubernetes/kubernetes/pull/31090), [@justinsb](https://github.com/justinsb))
-
-
-
-# v1.3.7
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.7/kubernetes.tar.gz) | `ad18566a09ff87b36107c2ea238fa5e20988d7a62c85df9c8598920679fec4a1`
-
-## Changelog since v1.3.6
-
-### Other notable changes
-
-* AWS: Add ap-south-1 to list of known AWS regions ([#28428](https://github.com/kubernetes/kubernetes/pull/28428), [@justinsb](https://github.com/justinsb))
-* Back porting critical vSphere bug fixes to release 1.3 ([#31993](https://github.com/kubernetes/kubernetes/pull/31993), [@dagnello](https://github.com/dagnello))
-* Back port - Openstack provider allowing more than one service port for lbaas v2 ([#32001](https://github.com/kubernetes/kubernetes/pull/32001), [@dagnello](https://github.com/dagnello))
-* Fix a bug in kubelet hostport logic which flushes KUBE-MARK-MASQ iptables chain ([#32413](https://github.com/kubernetes/kubernetes/pull/32413), [@freehan](https://github.com/freehan))
-* Fixes the panic that occurs in the federation controller manager when registering a GKE cluster to the federation. Fixes issue [#30790](https://github.com/kubernetes/kubernetes/pull/30790). ([#30940](https://github.com/kubernetes/kubernetes/pull/30940), [@madhusudancs](https://github.com/madhusudancs))
-
-
-
-# v1.3.6
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.6/kubernetes.tar.gz) | `2db7ace2f72a2e162329a6dc969a5a158bb8c5d0f8054c5b1b2b1063aa22020d`
-
-## Changelog since v1.3.5
-
-### Other notable changes
-
-* Addresses vSphere Volume Attach limits ([#29881](https://github.com/kubernetes/kubernetes/pull/29881), [@dagnello](https://github.com/dagnello))
-* Increase request timeout based on termination grace period ([#31275](https://github.com/kubernetes/kubernetes/pull/31275), [@dims](https://github.com/dims))
-* Skip safe to detach check if node API object no longer exists ([#30737](https://github.com/kubernetes/kubernetes/pull/30737), [@saad-ali](https://github.com/saad-ali))
-* Nodecontroller doesn't flip readiness on pods if kubeletVersion < 1.2.0 ([#30828](https://github.com/kubernetes/kubernetes/pull/30828), [@bprashanth](https://github.com/bprashanth))
-* Update cadvisor to v0.23.9 to fix a problem where attempting to gather container filesystem usage statistics could result in corrupted devicemapper thin pool storage for Docker. ([#30307](https://github.com/kubernetes/kubernetes/pull/30307), [@sjenning](https://github.com/sjenning))
-
-
-
-# v1.3.5
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.5/kubernetes.tar.gz) | `46be88ce927124f7cef7e280720b42c63051086880b7ebdba298b561dbe19f82`
-
-## Changelog since v1.3.4
-
-### Other notable changes
-
-* Update Dashboard UI to version v1.1.1 ([#30273](https://github.com/kubernetes/kubernetes/pull/30273), [@bryk](https://github.com/bryk))
-* allow restricting subresource access ([#30001](https://github.com/kubernetes/kubernetes/pull/30001), [@deads2k](https://github.com/deads2k))
-* Fix PVC.Status.Capacity and AccessModes after binding ([#29982](https://github.com/kubernetes/kubernetes/pull/29982), [@jsafrane](https://github.com/jsafrane))
-* oidc authentication plugin: don't trim issuer URLs with trailing slashes ([#29860](https://github.com/kubernetes/kubernetes/pull/29860), [@ericchiang](https://github.com/ericchiang))
-* network/cni: Bring up the `lo` interface for rkt ([#29310](https://github.com/kubernetes/kubernetes/pull/29310), [@euank](https://github.com/euank))
-* Fixing kube-up for CVM masters. ([#29140](https://github.com/kubernetes/kubernetes/pull/29140), [@maisem](https://github.com/maisem))
-
-
-
-# v1.3.4
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.4/kubernetes.tar.gz) | `818acc1a8ba61cff434d4c0c5aa3d342d06e6907b565cfd8651b8cfcf3f0a1e6`
-
-## Changelog since v1.3.3
-
-### Other notable changes
-
-* NetworkPolicy cherry-pick 1.3 ([#29556](https://github.com/kubernetes/kubernetes/pull/29556), [@caseydavenport](https://github.com/caseydavenport))
-* Allow mounts to run in parallel for non-attachable volumes ([#28939](https://github.com/kubernetes/kubernetes/pull/28939), [@saad-ali](https://github.com/saad-ali))
-* add enhanced volume and mount logging for block devices ([#24797](https://github.com/kubernetes/kubernetes/pull/24797), [@screeley44](https://github.com/screeley44))
-* kube-up: increase download timeout for kubernetes.tar.gz ([#29426](https://github.com/kubernetes/kubernetes/pull/29426), [@justinsb](https://github.com/justinsb))
-* Fix RBAC authorizer of ServiceAccount ([#29071](https://github.com/kubernetes/kubernetes/pull/29071), [@albatross0](https://github.com/albatross0))
-* Update docker engine-api to dea108d3aa ([#29144](https://github.com/kubernetes/kubernetes/pull/29144), [@ronnielai](https://github.com/ronnielai))
-* Assume volume is detached if node doesn't exist ([#29485](https://github.com/kubernetes/kubernetes/pull/29485), [@saad-ali](https://github.com/saad-ali))
-* Make PD E2E Tests Wait for Detach to Prevent Kernel Errors ([#29031](https://github.com/kubernetes/kubernetes/pull/29031), [@saad-ali](https://github.com/saad-ali))
-* Fix "PVC Volume not detached if pod deleted via namespace deletion" issue ([#29077](https://github.com/kubernetes/kubernetes/pull/29077), [@saad-ali](https://github.com/saad-ali))
-* append an abac rule for $KUBE_USER. ([#29164](https://github.com/kubernetes/kubernetes/pull/29164), [@cjcullen](https://github.com/cjcullen))
-
-
-
-# v1.3.3
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.3/kubernetes.tar.gz) | `a92a74a0d3f7d02d01ac2c8dfb5ee2e97b0485819e77b2110eb7c6b7c782478c`
-
-## Changelog since v1.3.2
-
-### Other notable changes
-
-* Removing images with multiple tags ([#29316](https://github.com/kubernetes/kubernetes/pull/29316), [@ronnielai](https://github.com/ronnielai))
-* kubectl: don't display an empty list when trying to get a single resource that isn't found ([#28294](https://github.com/kubernetes/kubernetes/pull/28294), [@ncdc](https://github.com/ncdc))
-* Fix working_set calculation in kubelet ([#29154](https://github.com/kubernetes/kubernetes/pull/29154), [@vishh](https://github.com/vishh))
-* Don't delete affinity when endpoints are empty ([#28655](https://github.com/kubernetes/kubernetes/pull/28655), [@freehan](https://github.com/freehan))
-* GCE bring-up: Differentiate NODE_TAGS from NODE_INSTANCE_PREFIX ([#29141](https://github.com/kubernetes/kubernetes/pull/29141), [@zmerlynn](https://github.com/zmerlynn))
-* Fix logrotate config on GCI ([#29139](https://github.com/kubernetes/kubernetes/pull/29139), [@adityakali](https://github.com/adityakali))
-* Do not query the metadata server to find out if running on GCE. Retry metadata server query for gcr if running on gce. ([#28871](https://github.com/kubernetes/kubernetes/pull/28871), [@vishh](https://github.com/vishh))
-* Fix GPU resource validation ([#28743](https://github.com/kubernetes/kubernetes/pull/28743), [@therc](https://github.com/therc))
-* Scale kube-proxy conntrack limits by cores (new default behavior) ([#28876](https://github.com/kubernetes/kubernetes/pull/28876), [@thockin](https://github.com/thockin))
-* Don't recreate lb cloud resources on kcm restart ([#29082](https://github.com/kubernetes/kubernetes/pull/29082), [@bprashanth](https://github.com/bprashanth))
-
-## Known Issues
-
-There are a number of known issues that have been found and are being worked on.
-Please be aware of them as you test your workloads.
-
-* PVC Volume not detached if pod deleted via namespace deletion ([29051](https://github.com/kubernetes/kubernetes/issues/29051))
-* Google Compute Engine PD Detach fails if node no longer exists ([29358](https://github.com/kubernetes/kubernetes/issues/29358))
-* Mounting (only 'default-token') volume takes a long time when creating a batch of pods (parallelization issue) ([28616](https://github.com/kubernetes/kubernetes/issues/28616))
-* Error while tearing down pod, "device or resource busy" on service account secret ([28750](https://github.com/kubernetes/kubernetes/issues/28750))
-
-
-
-# v1.3.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.2/kubernetes.tar.gz) | `f46664d04dc2966c77d8727bba57f57b5f917572` | `1a5b0639941054585d0432dd5ce3abc7`
-
-## Changelog since v1.3.1
-
-### Other notable changes
-
-* List all nodes and occupy cidr map before starting allocations ([#29062](https://github.com/kubernetes/kubernetes/pull/29062), [@bprashanth](https://github.com/bprashanth))
-* Fix watch cache filtering ([#28968](https://github.com/kubernetes/kubernetes/pull/28968), [@liggitt](https://github.com/liggitt))
-* Lock all possible kubecfg files at the beginning of ModifyConfig. ([#28232](https://github.com/kubernetes/kubernetes/pull/28232), [@cjcullen](https://github.com/cjcullen))
-
-
-
-# v1.3.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3.0/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.1/kubernetes.tar.gz) | `5645b12beda22137204439de8260c62c9925f89b` | `ae6e9902ec70c1322d9a0a29ef385190`
-
-## Changelog since v1.3.0
-
-### Other notable changes
-
-* Fix watch cache filtering ([#29046](https://github.com/kubernetes/kubernetes/pull/29046), [@liggitt](https://github.com/liggitt))
-
-
-
-# v1.3.0
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0/kubernetes.tar.gz) | `88249c443d438666928379aa7fe865b389ed72ea` | `9270f001aef8c03ff5db63456ca9eecc`
-
-## Highlights
-
-* Authorization:
- * **Alpha** RBAC authorization API group
-* Federation
- * federation api group is now **beta**
- * Services from all federated clusters are now registered in Cloud DNS (AWS and GCP).
-* Stateful Apps:
- * **alpha** PetSets manage stateful apps
- * **alpha** Init containers provide one-time setup for stateful containers
-* Updating:
- * Retry Pod/RC updates in kubectl rolling-update.
- * Stop 'kubectl drain' deleting pods with local storage.
- * Add `kubectl rollout status`
-* Security/Auth
- * L7 LB controller and disk attach controllers run on master, so nodes do not need those privileges.
- * Setting TLS1.2 minimum
- * `kubectl create secret tls` command
- * Webhook Token Authenticator
- * **beta** PodSecurityPolicy objects limits use of security-sensitive features by pods.
-* Kubectl
- * Display line number on JSON errors
- * Add flag -t as shorthand for --tty
-* Resources
- * Improved node stability by *optionally* evicting pods upon memory pressure - [Design Doc](https://github.com/kubernetes/kubernetes/blob/release-1.3/docs/proposals/kubelet-eviction.md)
- * **alpha**: NVIDIA GPU support ([#24836](https://github.com/kubernetes/kubernetes/pull/24836), [@therc](https://github.com/therc))
- * Adding loadBalancer services and nodeports services to quota system
-
-## Known Issues and Important Steps before Upgrading
-
-The following versions of Docker Engine are supported - *[v1.10](https://github.com/kubernetes/kubernetes/issues/19720)*, *[v1.11](https://github.com/kubernetes/kubernetes/issues/23397)*
-Although *v1.9* is still compatible, we recommend upgrading to one of the supported versions.
-All prior versions of docker will not be supported.
-
-#### ThirdPartyResource
-
-If you use ThirdPartyResource objects, they have moved from being namespaced-scoped to be cluster-scoped. Before upgrading to 1.3.0, export and delete any existing ThirdPartyResource objects using a 1.2.x client:
-
-kubectl get thirdpartyresource --all-namespaces -o yaml > tprs.yaml
-kubectl delete -f tprs.yaml
-
-After upgrading to 1.3.0, re-register the third party resource objects at the root scope (using a 1.3 server and client):
-
-kubectl create -f tprs.yaml
-
-#### kubectl
-
-Kubectl flag `--container-port` flag is deprecated: it will be removed in the future, please use `--target-port` instead.
-
-#### kubernetes Core Known Issues
-
-- Kube Proxy crashes infrequently due to a docker bug ([#24000](https://github.com/docker/docker/issues/24000))
- - This issue can be resolved by restarting docker daemon
-- CORS works only in insecure mode ([#24086](https://github.com/kubernetes/kubernetes/issues/24086))
-- Persistent volume claims gets added incorrectly after being deleted under stress. Happens very infrequently. ([#26082](https://github.com/kubernetes/kubernetes/issues/26082))
-
-#### Docker runtime Known Issues
-
-- Kernel crash with Aufs storage driver on Debian Jessie ([#27885](https://github.com/kubernetes/kubernetes/issues/27885))
- - Consider running the *new* [kubernetes node problem detector](https://github.com/kubernetes/node-problem-detector) to identify this (and other) kernel issues automatically.
-
-- File descriptors are leaked in docker v1.11 ([#275](https://github.com/docker/containerd/issues/275))
-- Additional memory overhead per container in docker v1.11 ([#21737](https://github.com/docker/docker/issues/21737))
-- [List of upstream fixes](https://github.com/docker/docker/compare/v1.10.3...runcom:docker-1.10.3-stable) for docker v1.10 identified by RedHat
-
-#### Rkt runtime Known Issues
-
-- A detailed list of known issues can be found [here](https://github.com/kubernetes/kubernetes.github.io/blob/release-1.3/docs/getting-started-guides/rkt/notes.md)
-
-*More Instructions coming soon*
-
-## Provider-specific Notes
-
-* AWS
- * Support for ap-northeast-2 region (Seoul)
- * Allow cross-region image pulling with ECR
- * More reliable kube-up/kube-down
- * Enable ICMP Type 3 Code 4 for ELBs
- * ARP caching fix
- * Use /dev/xvdXX names
- * ELB:
- * ELB proxy protocol support
- * mixed plaintext/encrypted ports support in ELBs
- * SSL support for ELB listeners
- * Allow VPC CIDR to be specified (experimental)
- * Fix problems with >2 security groups
-* GCP:
- * Enable using gcr.io as a Docker registry mirror.
- * Make bigger master root disks in GCE for large clusters.
- * Change default clusterCIDRs from /16 to /14 allowing 1000 Node clusters by default.
- * Allow Debian Jessie on GCE.
- * Node problem detector addon pod detects and reports kernel deadlocks.
-* OpenStack
- * Provider added.
-* VSphere:
- * Provider updated.
-
-## Previous Releases Included in v1.3.0
-
-- [v1.3.0-beta.3](CHANGELOG.md#v130-beta3)
-- [v1.3.0-beta.2](CHANGELOG.md#v130-beta2)
-- [v1.3.0-beta.1](CHANGELOG.md#v130-beta1)
-- [v1.3.0-alpha.5](CHANGELOG.md#v130-alpha5)
-- [v1.3.0-alpha.4](CHANGELOG.md#v130-alpha4)
-- [v1.3.0-alpha.3](CHANGELOG.md#v130-alpha3)
-- [v1.3.0-alpha.2](CHANGELOG.md#v130-alpha2)
-- [v1.3.0-alpha.1](CHANGELOG.md#v130-alpha1)
-
-
-
-# v1.3.0-beta.3
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-beta.3/kubernetes.tar.gz) | `9d18964a294f356bfdc841957dcad8ff35ed909c` | `ee5fcdf86645135ed132663967876dd6`
-
-## Changelog since v1.3.0-beta.2
-
-### Action Required
-
-* [kubelet] Allow opting out of automatic cloud provider detection in kubelet. By default kubelet will auto-detect cloud providers ([#28258](https://github.com/kubernetes/kubernetes/pull/28258), [@vishh](https://github.com/vishh))
-* If you use one of the kube-dns replication controller manifest in `cluster/saltbase/salt/kube-dns`, i.e. `cluster/saltbase/salt/kube-dns/{skydns-rc.yaml.base,skydns-rc.yaml.in}`, either substitute one of `__PILLAR__FEDERATIONS__DOMAIN__MAP__` or `{{ pillar['federations_domain_map'] }}` with the corresponding federation name to domain name value or remove them if you do not support cluster federation at this time. If you plan to substitute the parameter with its value, here is an example for `{{ pillar['federations_domain_map'] }` ([#28132](https://github.com/kubernetes/kubernetes/pull/28132), [@madhusudancs](https://github.com/madhusudancs))
- * pillar['federations_domain_map'] = "- --federations=myfederation=federation.test"
- * where `myfederation` is the name of the federation and `federation.test` is the domain name registered for the federation.
-* federation: Upgrading the groupversion to v1beta1 ([#28186](https://github.com/kubernetes/kubernetes/pull/28186), [@nikhiljindal](https://github.com/nikhiljindal))
-* Set Dashboard UI version to v1.1.0 ([#27869](https://github.com/kubernetes/kubernetes/pull/27869), [@bryk](https://github.com/bryk))
-
-### Other notable changes
-
-* Build: Add KUBE_GCS_RELEASE_BUCKET_MIRROR option to push-ci-build.sh ([#28172](https://github.com/kubernetes/kubernetes/pull/28172), [@zmerlynn](https://github.com/zmerlynn))
-* Image GC logic should compensate for reserved blocks ([#27996](https://github.com/kubernetes/kubernetes/pull/27996), [@ronnielai](https://github.com/ronnielai))
-* Bump minimum API version for docker to 1.21 ([#27208](https://github.com/kubernetes/kubernetes/pull/27208), [@yujuhong](https://github.com/yujuhong))
-* Adding lock files for kubeconfig updating ([#28034](https://github.com/kubernetes/kubernetes/pull/28034), [@krousey](https://github.com/krousey))
-* federation service controller: fixing the logic to update DNS records ([#27999](https://github.com/kubernetes/kubernetes/pull/27999), [@quinton-hoole](https://github.com/quinton-hoole))
-* federation: Updating KubeDNS to try finding a local service first for federation query ([#27708](https://github.com/kubernetes/kubernetes/pull/27708), [@nikhiljindal](https://github.com/nikhiljindal))
-* Support journal logs in fluentd-gcp on GCI ([#27981](https://github.com/kubernetes/kubernetes/pull/27981), [@a-robinson](https://github.com/a-robinson))
-* Copy and display source location prominently on Kubernetes instances ([#27985](https://github.com/kubernetes/kubernetes/pull/27985), [@maisem](https://github.com/maisem))
-* Federation e2e support for AWS ([#27791](https://github.com/kubernetes/kubernetes/pull/27791), [@colhom](https://github.com/colhom))
-* Copy and display source location prominently on Kubernetes instances ([#27840](https://github.com/kubernetes/kubernetes/pull/27840), [@zmerlynn](https://github.com/zmerlynn))
-* AWS/GCE: Spread PetSet volume creation across zones, create GCE volumes in non-master zones ([#27553](https://github.com/kubernetes/kubernetes/pull/27553), [@justinsb](https://github.com/justinsb))
-* GCE provider: Create TargetPool with 200 instances, then update with rest ([#27829](https://github.com/kubernetes/kubernetes/pull/27829), [@zmerlynn](https://github.com/zmerlynn))
-* Add sources to server tarballs. ([#27830](https://github.com/kubernetes/kubernetes/pull/27830), [@david-mcmahon](https://github.com/david-mcmahon))
-* Retry Pod/RC updates in kubectl rolling-update ([#27509](https://github.com/kubernetes/kubernetes/pull/27509), [@janetkuo](https://github.com/janetkuo))
-* AWS kube-up: Authorize route53 in the IAM policy ([#27794](https://github.com/kubernetes/kubernetes/pull/27794), [@justinsb](https://github.com/justinsb))
-* Allow conformance tests to run on non-GCE providers ([#26932](https://github.com/kubernetes/kubernetes/pull/26932), [@aaronlevy](https://github.com/aaronlevy))
-* AWS kube-up: move to Docker 1.11.2 ([#27676](https://github.com/kubernetes/kubernetes/pull/27676), [@justinsb](https://github.com/justinsb))
-* Fixed an issue that Deployment may be scaled down further than allowed by maxUnavailable when minReadySeconds is set. ([#27728](https://github.com/kubernetes/kubernetes/pull/27728), [@janetkuo](https://github.com/janetkuo))
-
-
-
-# v1.3.0-beta.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-beta.2/kubernetes.tar.gz) | `9c95762970b943d6c6547f0841c1e5471148b0e3` | `dc9e8560f24459b2313317b15910bee7`
-
-## Changes since v1.3.0-beta.1
-
-### Experimental Features
-
-* Init containers enable pod authors to perform tasks before their normal containers start. Each init container is started in order, and failing containers will prevent the application from starting. ([#23666](https://github.com/kubernetes/kubernetes/pull/23666), [@smarterclayton](https://github.com/smarterclayton))
-
-### Other notable changes
-
-* GCE provider: Limit Filter calls to regexps rather than large blobs ([#27741](https://github.com/kubernetes/kubernetes/pull/27741), [@zmerlynn](https://github.com/zmerlynn))
-* Show LASTSEEN, the sorting key, as the first column in `kubectl get event` output ([#27549](https://github.com/kubernetes/kubernetes/pull/27549), [@therc](https://github.com/therc))
-* GCI: fix kubectl permission issue [#27643](https://github.com/kubernetes/kubernetes/pull/27643) ([#27740](https://github.com/kubernetes/kubernetes/pull/27740), [@andyzheng0831](https://github.com/andyzheng0831))
-* Add federation api and cm servers to hyperkube ([#27586](https://github.com/kubernetes/kubernetes/pull/27586), [@colhom](https://github.com/colhom))
-* federation: Creating kubeconfig files to be used for creating secrets for clusters on aws and gke ([#27332](https://github.com/kubernetes/kubernetes/pull/27332), [@nikhiljindal](https://github.com/nikhiljindal))
-* AWS: Enable ICMP Type 3 Code 4 for ELBs ([#27677](https://github.com/kubernetes/kubernetes/pull/27677), [@justinsb](https://github.com/justinsb))
-* Bumped Heapster to v1.1.0. ([#27542](https://github.com/kubernetes/kubernetes/pull/27542), [@piosz](https://github.com/piosz))
- * More details about the release https://github.com/kubernetes/heapster/releases/tag/v1.1.0
-* Deleting federation-push.sh ([#27400](https://github.com/kubernetes/kubernetes/pull/27400), [@nikhiljindal](https://github.com/nikhiljindal))
-* Validate-cluster finishes shortly after at most ALLOWED_NOTREADY_NODE… ([#26778](https://github.com/kubernetes/kubernetes/pull/26778), [@gmarek](https://github.com/gmarek))
-* AWS kube-down: Issue warning if VPC not found ([#27518](https://github.com/kubernetes/kubernetes/pull/27518), [@justinsb](https://github.com/justinsb))
-* gce/kube-down: Parallelize IGM deletion, batch more ([#27302](https://github.com/kubernetes/kubernetes/pull/27302), [@zmerlynn](https://github.com/zmerlynn))
-* Enable dynamic allocation of heapster/eventer cpu request/limit ([#27185](https://github.com/kubernetes/kubernetes/pull/27185), [@gmarek](https://github.com/gmarek))
-* 'kubectl describe pv' now shows events ([#27431](https://github.com/kubernetes/kubernetes/pull/27431), [@jsafrane](https://github.com/jsafrane))
-* AWS kube-up: set net.ipv4.neigh.default.gc_thresh1=0 to avoid ARP over-caching ([#27682](https://github.com/kubernetes/kubernetes/pull/27682), [@justinsb](https://github.com/justinsb))
-* AWS volumes: Use /dev/xvdXX names with EC2 ([#27628](https://github.com/kubernetes/kubernetes/pull/27628), [@justinsb](https://github.com/justinsb))
-* Add a test config variable to specify desired Docker version to run on GCI. ([#26813](https://github.com/kubernetes/kubernetes/pull/26813), [@wonderfly](https://github.com/wonderfly))
-* Check for thin_is binary in path for devicemapper when using ThinPoolWatcher and fix uint64 overflow issue for CPU stats ([#27591](https://github.com/kubernetes/kubernetes/pull/27591), [@dchen1107](https://github.com/dchen1107))
-* Change default value of deleting-pods-burst to 1 ([#27606](https://github.com/kubernetes/kubernetes/pull/27606), [@gmarek](https://github.com/gmarek))
-* MESOS: fix race condition in contrib/mesos/pkg/queue/delay ([#24916](https://github.com/kubernetes/kubernetes/pull/24916), [@jdef](https://github.com/jdef))
-* including federation binaries in the list of images we push during release ([#27396](https://github.com/kubernetes/kubernetes/pull/27396), [@nikhiljindal](https://github.com/nikhiljindal))
-* fix updatePod() of RS and RC controllers ([#27415](https://github.com/kubernetes/kubernetes/pull/27415), [@caesarxuchao](https://github.com/caesarxuchao))
-* Change default value of deleting-pods-burst to 1 ([#27422](https://github.com/kubernetes/kubernetes/pull/27422), [@gmarek](https://github.com/gmarek))
-* A new volume manager was introduced in kubelet that synchronizes volume mount/unmount (and attach/detach, if attach/detach controller is not enabled). ([#26801](https://github.com/kubernetes/kubernetes/pull/26801), [@saad-ali](https://github.com/saad-ali))
- * This eliminates the race conditions between the pod creation loop and the orphaned volumes loops. It also removes the unmount/detach from the `syncPod()` path so volume clean up never blocks the `syncPod` loop.
-
-
-
-# v1.3.0-beta.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-beta.1/kubernetes.tar.gz) | `2b54995ee8f52d78dc31c3d7291e8dfa5c809fe7` | `f1022a84c3441cae4ebe1d295470be8f`
-
-## Changes since v1.3.0-alpha.5
-
-### Action Required
-
-* Fixing logic to generate ExternalHost in genericapiserver ([#26796](https://github.com/kubernetes/kubernetes/pull/26796), [@nikhiljindal](https://github.com/nikhiljindal))
-* federation: Updating federation-controller-manager to use secret to get federation-apiserver's kubeconfig ([#26819](https://github.com/kubernetes/kubernetes/pull/26819), [@nikhiljindal](https://github.com/nikhiljindal))
-
-### Other notable changes
-
-* federation: fix dns provider initialization issues ([#27252](https://github.com/kubernetes/kubernetes/pull/27252), [@mfanjie](https://github.com/mfanjie))
-* Updating federation up scripts to work in non e2e setup ([#27260](https://github.com/kubernetes/kubernetes/pull/27260), [@nikhiljindal](https://github.com/nikhiljindal))
-* version bump for gci to milestone 53 ([#27210](https://github.com/kubernetes/kubernetes/pull/27210), [@adityakali](https://github.com/adityakali))
-* kubectl apply: retry applying a patch if a version conflict error is encountered ([#26557](https://github.com/kubernetes/kubernetes/pull/26557), [@AdoHe](https://github.com/AdoHe))
-* Revert "Wait for arc.getArchive() to complete before running tests" ([#27130](https://github.com/kubernetes/kubernetes/pull/27130), [@pwittrock](https://github.com/pwittrock))
-* ResourceQuota BestEffort scope aligned with Pod level QoS ([#26969](https://github.com/kubernetes/kubernetes/pull/26969), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* The AWS cloudprovider will cache results from DescribeInstances() if the set of nodes hasn't changed ([#26900](https://github.com/kubernetes/kubernetes/pull/26900), [@therc](https://github.com/therc))
-* GCE provider: Log full contents of long operations ([#26962](https://github.com/kubernetes/kubernetes/pull/26962), [@zmerlynn](https://github.com/zmerlynn))
-* Fix system container detection in kubelet on systemd. ([#26586](https://github.com/kubernetes/kubernetes/pull/26586), [@derekwaynecarr](https://github.com/derekwaynecarr))
- * This fixed environments where CPU and Memory Accounting were not enabled on the unit that launched the kubelet or docker from reporting the root cgroup when monitoring usage stats for those components.
-* New default horizontalpodautoscaler/v1 generator for kubectl autoscale. ([#26775](https://github.com/kubernetes/kubernetes/pull/26775), [@piosz](https://github.com/piosz))
- * Use autoscaling/v1 in kubectl by default.
-* federation: Adding dnsprovider flags to federation-controller-manager ([#27158](https://github.com/kubernetes/kubernetes/pull/27158), [@nikhiljindal](https://github.com/nikhiljindal))
-* federation service controller: fixing a bug so that existing services are created in newly registered clusters ([#27028](https://github.com/kubernetes/kubernetes/pull/27028), [@mfanjie](https://github.com/mfanjie))
-* Rename environment variables (KUBE_)ENABLE_NODE_AUTOSCALER to (KUBE_)ENABLE_CLUSTER_AUTOSCALER. ([#27117](https://github.com/kubernetes/kubernetes/pull/27117), [@mwielgus](https://github.com/mwielgus))
-* support for mounting local-ssds on GCI ([#27143](https://github.com/kubernetes/kubernetes/pull/27143), [@adityakali](https://github.com/adityakali))
-* AWS: support mixed plaintext/encrypted ports in ELBs via service.beta.kubernetes.io/aws-load-balancer-ssl-ports annotation ([#26976](https://github.com/kubernetes/kubernetes/pull/26976), [@therc](https://github.com/therc))
-* Updating e2e docs with instructions on running federation tests ([#27072](https://github.com/kubernetes/kubernetes/pull/27072), [@colhom](https://github.com/colhom))
-* LBaaS v2 Support for Openstack Cloud Provider Plugin ([#25987](https://github.com/kubernetes/kubernetes/pull/25987), [@dagnello](https://github.com/dagnello))
-* GCI: add support for network plugin ([#27027](https://github.com/kubernetes/kubernetes/pull/27027), [@andyzheng0831](https://github.com/andyzheng0831))
-* Bump cAdvisor to v0.23.3 ([#27065](https://github.com/kubernetes/kubernetes/pull/27065), [@timstclair](https://github.com/timstclair))
-* Stop 'kubectl drain' deleting pods with local storage. ([#26667](https://github.com/kubernetes/kubernetes/pull/26667), [@mml](https://github.com/mml))
-* Networking e2es: Wait for all nodes to be schedulable in kubeproxy and networking tests ([#27008](https://github.com/kubernetes/kubernetes/pull/27008), [@zmerlynn](https://github.com/zmerlynn))
-* change clientset of service controller to versioned ([#26694](https://github.com/kubernetes/kubernetes/pull/26694), [@mfanjie](https://github.com/mfanjie))
-* Use gcr.io as a Docker registry mirror when setting up a cluster in GCE. ([#25841](https://github.com/kubernetes/kubernetes/pull/25841), [@ojarjur](https://github.com/ojarjur))
-* correction on rbd volume object and defaults ([#25490](https://github.com/kubernetes/kubernetes/pull/25490), [@rootfs](https://github.com/rootfs))
-* Bump GCE debian image to container-v1-3-v20160604 ([#26851](https://github.com/kubernetes/kubernetes/pull/26851), [@zmerlynn](https://github.com/zmerlynn))
-* Option to enable http2 on client connections. ([#25280](https://github.com/kubernetes/kubernetes/pull/25280), [@timothysc](https://github.com/timothysc))
-* kubectl get ingress output remove rules ([#26684](https://github.com/kubernetes/kubernetes/pull/26684), [@AdoHe](https://github.com/AdoHe))
-* AWS kube-up: Remove SecurityContextDeny admission controller (to mirror GCE) ([#25381](https://github.com/kubernetes/kubernetes/pull/25381), [@zquestz](https://github.com/zquestz))
-* Fix third party ([#25894](https://github.com/kubernetes/kubernetes/pull/25894), [@brendandburns](https://github.com/brendandburns))
-* AWS Route53 dnsprovider ([#26049](https://github.com/kubernetes/kubernetes/pull/26049), [@quinton-hoole](https://github.com/quinton-hoole))
-* GCI/Trusty: support the Docker registry mirror ([#26745](https://github.com/kubernetes/kubernetes/pull/26745), [@andyzheng0831](https://github.com/andyzheng0831))
-* Kubernetes v1.3 introduces a new Attach/Detach Controller. This controller manages attaching and detaching of volumes on-behalf of nodes. ([#26351](https://github.com/kubernetes/kubernetes/pull/26351), [@saad-ali](https://github.com/saad-ali))
- * This ensures that attachment and detachment of volumes is independent of any single nodes’ availability. Meaning, if a node or kubelet becomes unavailable for any reason, the volumes attached to that node will be detached so they are free to be attached to other nodes.
- * Specifically the new controller watches the API server for scheduled pods. It processes each pod and ensures that any volumes that implement the volume Attacher interface are attached to the node their pod is scheduled to.
- * When a pod is deleted, the controller waits for the volume to be safely unmounted by kubelet. It does this by waiting for the volume to no longer be present in the nodes Node.Status.VolumesInUse list. If the volume is not safely unmounted by kubelet within a pre-configured duration (3 minutes in Kubernetes v1.3), the controller unilaterally detaches the volume (this prevents volumes from getting stranded on nodes that become unavailable).
- * In order to remain backwards compatible, the new controller only manages attach/detach of volumes that are scheduled to nodes that opt-in to controller management. Nodes running v1.3 or higher of Kubernetes opt-in to controller management by default by setting the "volumes.kubernetes.io/controller-managed-attach-detach" annotation on the Node object on startup. This behavior is gated by a new kubelet flag, "enable-controller-attach-detach,” (default true).
- * In order to safely upgrade an existing Kubernetes cluster without interruption of volume attach/detach logic:
- * First upgrade the master to Kubernetes v1.3.
- * This will start the new attach/detach controller.
- * The new controller will initially ignore volumes for all nodes since they lack the "volumes.kubernetes.io/controller-managed-attach-detach" annotation.
- * Then upgrade nodes to Kubernetes v1.3.
- * As nodes are upgraded, they will automatically, by default, opt-in to attach/detach controller management, which will cause the controller to start managing attaches/detaches for volumes that get scheduled to those nodes.
-* Added DNS Reverse Record logic for service IPs ([#26226](https://github.com/kubernetes/kubernetes/pull/26226), [@ArtfulCoder](https://github.com/ArtfulCoder))
-* read gluster log to surface glusterfs plugin errors properly in describe events ([#24808](https://github.com/kubernetes/kubernetes/pull/24808), [@screeley44](https://github.com/screeley44))
-
-
-
-# v1.3.0-alpha.5
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-alpha.5/kubernetes.tar.gz) | `724bf5a4437ca9dc75d9297382f47a179e8dc5a6` | `2a8b4a5297df3007fce69f1e344fd87e`
-
-## Changes since v1.3.0-alpha.4
-
-### Action Required
-
-* Add direct serializer ([#26251](https://github.com/kubernetes/kubernetes/pull/26251), [@caesarxuchao](https://github.com/caesarxuchao))
-* Add a NodeCondition "NetworkUnavailable" to prevent scheduling onto a node until the routes have been created ([#26415](https://github.com/kubernetes/kubernetes/pull/26415), [@wojtek-t](https://github.com/wojtek-t))
-* Add garbage collector into kube-controller-manager ([#26341](https://github.com/kubernetes/kubernetes/pull/26341), [@caesarxuchao](https://github.com/caesarxuchao))
-* Add orphaning finalizer logic to GC ([#25599](https://github.com/kubernetes/kubernetes/pull/25599), [@caesarxuchao](https://github.com/caesarxuchao))
-* GCI-backed masters mount srv/kubernetes and srv/sshproxy in the right place ([#26238](https://github.com/kubernetes/kubernetes/pull/26238), [@ihmccreery](https://github.com/ihmccreery))
-* Updaing QoS policy to be at the pod level ([#14943](https://github.com/kubernetes/kubernetes/pull/14943), [@vishh](https://github.com/vishh))
-* add CIDR allocator for NodeController ([#19242](https://github.com/kubernetes/kubernetes/pull/19242), [@mqliang](https://github.com/mqliang))
-* Adding garbage collector controller ([#24509](https://github.com/kubernetes/kubernetes/pull/24509), [@caesarxuchao](https://github.com/caesarxuchao))
-
-### Other notable changes
-
-* Fix a bug with pluralization of third party resources ([#25374](https://github.com/kubernetes/kubernetes/pull/25374), [@brendandburns](https://github.com/brendandburns))
-* Run l7 controller on master ([#26048](https://github.com/kubernetes/kubernetes/pull/26048), [@bprashanth](https://github.com/bprashanth))
-* AWS: ELB proxy protocol support via annotation service.beta.kubernetes.io/aws-load-balancer-proxy-protocol ([#24569](https://github.com/kubernetes/kubernetes/pull/24569), [@williamsandrew](https://github.com/williamsandrew))
-* kubectl run --restart=Never creates pods ([#25253](https://github.com/kubernetes/kubernetes/pull/25253), [@soltysh](https://github.com/soltysh))
-* Add LabelSelector to PersistentVolumeClaimSpec ([#25917](https://github.com/kubernetes/kubernetes/pull/25917), [@pmorie](https://github.com/pmorie))
-* Removed metrics api group ([#26073](https://github.com/kubernetes/kubernetes/pull/26073), [@piosz](https://github.com/piosz))
-* Fixed check in kubectl autoscale: cpu consumption can be higher than 100%. ([#26162](https://github.com/kubernetes/kubernetes/pull/26162), [@jszczepkowski](https://github.com/jszczepkowski))
-* Add support for 3rd party objects to kubectl label ([#24882](https://github.com/kubernetes/kubernetes/pull/24882), [@brendandburns](https://github.com/brendandburns))
-* Move shell completion generation into 'kubectl completion' command ([#23801](https://github.com/kubernetes/kubernetes/pull/23801), [@sttts](https://github.com/sttts))
-* Fix strategic merge diff list diff bug ([#26418](https://github.com/kubernetes/kubernetes/pull/26418), [@AdoHe](https://github.com/AdoHe))
-* Setting TLS1.2 minimum because TLS1.0 and TLS1.1 are vulnerable ([#26169](https://github.com/kubernetes/kubernetes/pull/26169), [@victorgp](https://github.com/victorgp))
-* Kubelet: Periodically reporting image pulling progress in log ([#26145](https://github.com/kubernetes/kubernetes/pull/26145), [@Random-Liu](https://github.com/Random-Liu))
-* Federation service controller is one key component of federation controller manager, it watches federation service, creates/updates services to all registered clusters, and update DNS records to global DNS server. ([#26034](https://github.com/kubernetes/kubernetes/pull/26034), [@mfanjie](https://github.com/mfanjie))
-* Stabilize map order in kubectl describe ([#26046](https://github.com/kubernetes/kubernetes/pull/26046), [@timoreimann](https://github.com/timoreimann))
-* Google Cloud DNS dnsprovider - replacement for [#25389](https://github.com/kubernetes/kubernetes/pull/25389) ([#26020](https://github.com/kubernetes/kubernetes/pull/26020), [@quinton-hoole](https://github.com/quinton-hoole))
-* Fix system container detection in kubelet on systemd. ([#25982](https://github.com/kubernetes/kubernetes/pull/25982), [@derekwaynecarr](https://github.com/derekwaynecarr))
- * This fixed environments where CPU and Memory Accounting were not enabled on the unit
- * that launched the kubelet or docker from reporting the root cgroup when
- * monitoring usage stats for those components.
-* Added pods-per-core to kubelet. [#25762](https://github.com/kubernetes/kubernetes/pull/25762) ([#25813](https://github.com/kubernetes/kubernetes/pull/25813), [@rrati](https://github.com/rrati))
-* promote sourceRange into service spec ([#25826](https://github.com/kubernetes/kubernetes/pull/25826), [@freehan](https://github.com/freehan))
-* kube-controller-manager: Add configure-cloud-routes option ([#25614](https://github.com/kubernetes/kubernetes/pull/25614), [@justinsb](https://github.com/justinsb))
-* kubelet: reading cloudinfo from cadvisor ([#21373](https://github.com/kubernetes/kubernetes/pull/21373), [@enoodle](https://github.com/enoodle))
-* Disable cAdvisor event storage by default ([#24771](https://github.com/kubernetes/kubernetes/pull/24771), [@timstclair](https://github.com/timstclair))
-* Remove docker-multinode ([#26031](https://github.com/kubernetes/kubernetes/pull/26031), [@luxas](https://github.com/luxas))
-* nodecontroller: Fix log message on successful update ([#26207](https://github.com/kubernetes/kubernetes/pull/26207), [@zmerlynn](https://github.com/zmerlynn))
-* remove deprecated generated typed clients ([#26336](https://github.com/kubernetes/kubernetes/pull/26336), [@caesarxuchao](https://github.com/caesarxuchao))
-* Kubenet host-port support through iptables ([#25604](https://github.com/kubernetes/kubernetes/pull/25604), [@freehan](https://github.com/freehan))
-* Add metrics support for a GCE PD, EC2 EBS & Azure File volumes ([#25852](https://github.com/kubernetes/kubernetes/pull/25852), [@vishh](https://github.com/vishh))
-* Bump cAdvisor to v0.23.2 - See [changelog](https://github.com/google/cadvisor/blob/master/CHANGELOG.md) for details ([#25914](https://github.com/kubernetes/kubernetes/pull/25914), [@timstclair](https://github.com/timstclair))
-* Alpha version of "Role Based Access Control" API. ([#25634](https://github.com/kubernetes/kubernetes/pull/25634), [@ericchiang](https://github.com/ericchiang))
-* Add Seccomp API ([#25324](https://github.com/kubernetes/kubernetes/pull/25324), [@jfrazelle](https://github.com/jfrazelle))
-* AWS: Fix long-standing bug in stringSetToPointers ([#26331](https://github.com/kubernetes/kubernetes/pull/26331), [@therc](https://github.com/therc))
-* Add dnsmasq as a DNS cache in kube-dns pod ([#26114](https://github.com/kubernetes/kubernetes/pull/26114), [@ArtfulCoder](https://github.com/ArtfulCoder))
-* routecontroller: Add wait.NonSlidingUntil, use it ([#26301](https://github.com/kubernetes/kubernetes/pull/26301), [@zmerlynn](https://github.com/zmerlynn))
-* Attempt 2: Bump GCE containerVM to container-v1-3-v20160517 (Docker 1.11.1) again. ([#26001](https://github.com/kubernetes/kubernetes/pull/26001), [@dchen1107](https://github.com/dchen1107))
-* Downward API implementation for resources limits and requests ([#24179](https://github.com/kubernetes/kubernetes/pull/24179), [@aveshagarwal](https://github.com/aveshagarwal))
-* GCE clusters start using GCI as the default OS image for masters ([#26197](https://github.com/kubernetes/kubernetes/pull/26197), [@wonderfly](https://github.com/wonderfly))
-* Add a 'kubectl clusterinfo dump' option ([#20672](https://github.com/kubernetes/kubernetes/pull/20672), [@brendandburns](https://github.com/brendandburns))
-* Fixing heapster memory requirements. ([#26109](https://github.com/kubernetes/kubernetes/pull/26109), [@Q-Lee](https://github.com/Q-Lee))
-* Handle federated service name lookups in kube-dns. ([#25727](https://github.com/kubernetes/kubernetes/pull/25727), [@madhusudancs](https://github.com/madhusudancs))
-* Support sort-by timestamp in kubectl get ([#25600](https://github.com/kubernetes/kubernetes/pull/25600), [@janetkuo](https://github.com/janetkuo))
-* vSphere Volume Plugin Implementation ([#24947](https://github.com/kubernetes/kubernetes/pull/24947), [@abithap](https://github.com/abithap))
-* ResourceQuota controller uses rate limiter to prevent hot-loops in error situations ([#25748](https://github.com/kubernetes/kubernetes/pull/25748), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Fix hyperkube flag parsing ([#25512](https://github.com/kubernetes/kubernetes/pull/25512), [@colhom](https://github.com/colhom))
-* Add a kubectl create secret tls command ([#24719](https://github.com/kubernetes/kubernetes/pull/24719), [@bprashanth](https://github.com/bprashanth))
-* Introduce a new add-on pod NodeProblemDetector. ([#25986](https://github.com/kubernetes/kubernetes/pull/25986), [@Random-Liu](https://github.com/Random-Liu))
- * NodeProblemDetector is a DaemonSet running on each node, monitoring node health and reporting
- * node problems as NodeCondition and Event. Currently it already supports kernel log monitoring, and
- * will support more problem detection in the future. It is enabled by default on gce now.
-* Handle cAdvisor partial failures ([#25933](https://github.com/kubernetes/kubernetes/pull/25933), [@timstclair](https://github.com/timstclair))
-* Use SkyDNS as a library for a more integrated kube DNS ([#23930](https://github.com/kubernetes/kubernetes/pull/23930), [@ArtfulCoder](https://github.com/ArtfulCoder))
-* Introduce node memory pressure condition to scheduler ([#25531](https://github.com/kubernetes/kubernetes/pull/25531), [@ingvagabund](https://github.com/ingvagabund))
-* Fix detection of docker cgroup on RHEL ([#25907](https://github.com/kubernetes/kubernetes/pull/25907), [@ncdc](https://github.com/ncdc))
-* Kubelet evicts pods when available memory falls below configured eviction thresholds ([#25772](https://github.com/kubernetes/kubernetes/pull/25772), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Use protobufs by default to communicate with apiserver (still store JSONs in etcd) ([#25738](https://github.com/kubernetes/kubernetes/pull/25738), [@wojtek-t](https://github.com/wojtek-t))
-* Implement NetworkPolicy v1beta1 API object / client support. ([#25638](https://github.com/kubernetes/kubernetes/pull/25638), [@caseydavenport](https://github.com/caseydavenport))
-* Only expose top N images in `NodeStatus` ([#25328](https://github.com/kubernetes/kubernetes/pull/25328), [@resouer](https://github.com/resouer))
-* Extend secrets volumes with path control ([#25285](https://github.com/kubernetes/kubernetes/pull/25285), [@ingvagabund](https://github.com/ingvagabund))
-* With this PR, kubectl and other RestClient's using the AuthProvider framework can make OIDC authenticated requests, and, if there is a refresh token present, the tokens will be refreshed as needed. ([#25270](https://github.com/kubernetes/kubernetes/pull/25270), [@bobbyrullo](https://github.com/bobbyrullo))
-* Make addon-manager cross-platform and use it with hyperkube ([#25631](https://github.com/kubernetes/kubernetes/pull/25631), [@luxas](https://github.com/luxas))
-* kubelet: Optionally, have kubelet exit if lock file contention is observed, using --exit-on-lock-contention flag ([#25596](https://github.com/kubernetes/kubernetes/pull/25596), [@derekparker](https://github.com/derekparker))
-* Bump up glbc version to 0.6.2 ([#25446](https://github.com/kubernetes/kubernetes/pull/25446), [@bprashanth](https://github.com/bprashanth))
-* Add "kubectl set image" for easier updating container images (for pods or resources with pod templates). ([#25509](https://github.com/kubernetes/kubernetes/pull/25509), [@janetkuo](https://github.com/janetkuo))
-* NodeController doesn't evict Pods if no Nodes are Ready ([#25571](https://github.com/kubernetes/kubernetes/pull/25571), [@gmarek](https://github.com/gmarek))
-* Incompatible change of kube-up.sh: ([#25734](https://github.com/kubernetes/kubernetes/pull/25734), [@jszczepkowski](https://github.com/jszczepkowski))
- * when turning on cluster autoscaler by setting KUBE_ENABLE_NODE_AUTOSCALER=true,
- * KUBE_AUTOSCALER_MIN_NODES and KUBE_AUTOSCALER_MAX_NODES need to be set.
-* systemd node spec proposal ([#17688](https://github.com/kubernetes/kubernetes/pull/17688), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Bump GCE ContainerVM to container-v1-3-v20160517 (Docker 1.11.1) ([#25843](https://github.com/kubernetes/kubernetes/pull/25843), [@zmerlynn](https://github.com/zmerlynn))
-* AWS: Move enforcement of attached AWS device limit from kubelet to scheduler ([#23254](https://github.com/kubernetes/kubernetes/pull/23254), [@jsafrane](https://github.com/jsafrane))
-* Refactor persistent volume controller ([#24331](https://github.com/kubernetes/kubernetes/pull/24331), [@jsafrane](https://github.com/jsafrane))
-* Add support for running GCI on the GCE cloud provider ([#25425](https://github.com/kubernetes/kubernetes/pull/25425), [@andyzheng0831](https://github.com/andyzheng0831))
-* Implement taints and tolerations ([#24134](https://github.com/kubernetes/kubernetes/pull/24134), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Add init containers to pods ([#23567](https://github.com/kubernetes/kubernetes/pull/23567), [@smarterclayton](https://github.com/smarterclayton))
-
-
-
-# v1.3.0-alpha.4
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-alpha.4/kubernetes.tar.gz) | `758e97e7e50153840379ecd9f8fda1869543539f` | `4e18ae6a428c99fcc30e2137d7c41854`
-
-## Changes since v1.3.0-alpha.3
-
-### Action Required
-
-* validate third party resources ([#25007](https://github.com/kubernetes/kubernetes/pull/25007), [@liggitt](https://github.com/liggitt))
-* Automatically create the kube-system namespace ([#25196](https://github.com/kubernetes/kubernetes/pull/25196), [@luxas](https://github.com/luxas))
-* Make ThirdPartyResource a root scoped object ([#25006](https://github.com/kubernetes/kubernetes/pull/25006), [@liggitt](https://github.com/liggitt))
-* mark container-port flag as deprecated ([#25072](https://github.com/kubernetes/kubernetes/pull/25072), [@AdoHe](https://github.com/AdoHe))
-* Provide flags to use etcd3 backed storage ([#24455](https://github.com/kubernetes/kubernetes/pull/24455), [@hongchaodeng](https://github.com/hongchaodeng))
-
-### Other notable changes
-
-* Fix hyperkube's layer caching, and remove --make-symlinks at build time ([#25693](https://github.com/kubernetes/kubernetes/pull/25693), [@luxas](https://github.com/luxas))
-* AWS: More support for ap-northeast-2 region ([#24464](https://github.com/kubernetes/kubernetes/pull/24464), [@matthewrudy](https://github.com/matthewrudy))
-* Make bigger master root disks in GCE for large clusters ([#25670](https://github.com/kubernetes/kubernetes/pull/25670), [@gmarek](https://github.com/gmarek))
-* AWS kube-down: don't fail if ELB not in VPC - [#23784](https://github.com/kubernetes/kubernetes/pull/23784) ([#23785](https://github.com/kubernetes/kubernetes/pull/23785), [@ajohnstone](https://github.com/ajohnstone))
-* Build hyperkube in hack/local-up-cluster instead of separate binaries ([#25627](https://github.com/kubernetes/kubernetes/pull/25627), [@luxas](https://github.com/luxas))
-* enable recursive processing in kubectl rollout ([#25110](https://github.com/kubernetes/kubernetes/pull/25110), [@metral](https://github.com/metral))
-* Support struct,array,slice types when sorting kubectl output ([#25022](https://github.com/kubernetes/kubernetes/pull/25022), [@zhouhaibing089](https://github.com/zhouhaibing089))
-* federated api servers: Adding a discovery summarizer server ([#20358](https://github.com/kubernetes/kubernetes/pull/20358), [@nikhiljindal](https://github.com/nikhiljindal))
-* AWS: Allow cross-region image pulling with ECR ([#24369](https://github.com/kubernetes/kubernetes/pull/24369), [@therc](https://github.com/therc))
-* Automatically add node labels beta.kubernetes.io/{os,arch} ([#23684](https://github.com/kubernetes/kubernetes/pull/23684), [@luxas](https://github.com/luxas))
-* kubectl "rm" will suggest using "delete"; "ps" and "list" will suggest "get". ([#25181](https://github.com/kubernetes/kubernetes/pull/25181), [@janetkuo](https://github.com/janetkuo))
-* Add IPv6 address support for pods - does NOT include services ([#23090](https://github.com/kubernetes/kubernetes/pull/23090), [@tgraf](https://github.com/tgraf))
-* Use local disk for ConfigMap volume instead of tmpfs ([#25306](https://github.com/kubernetes/kubernetes/pull/25306), [@pmorie](https://github.com/pmorie))
-* Alpha support for scheduling pods on machines with NVIDIA GPUs whose kubelets use the `--experimental-nvidia-gpus` flag, using the alpha.kubernetes.io/nvidia-gpu resource ([#24836](https://github.com/kubernetes/kubernetes/pull/24836), [@therc](https://github.com/therc))
-* AWS: SSL support for ELB listeners through annotations ([#23495](https://github.com/kubernetes/kubernetes/pull/23495), [@therc](https://github.com/therc))
-* Implement `kubectl rollout status` that can be used to watch a deployment's rollout status ([#19946](https://github.com/kubernetes/kubernetes/pull/19946), [@janetkuo](https://github.com/janetkuo))
-* Webhook Token Authenticator ([#24902](https://github.com/kubernetes/kubernetes/pull/24902), [@cjcullen](https://github.com/cjcullen))
-* Update PodSecurityPolicy types and add admission controller that could enforce them ([#24600](https://github.com/kubernetes/kubernetes/pull/24600), [@pweil-](https://github.com/pweil-))
-* Introducing ScheduledJobs as described in [the proposal](docs/proposals/scheduledjob.md) as part of `batch/v2alpha1` version (experimental feature). ([#24970](https://github.com/kubernetes/kubernetes/pull/24970), [@soltysh](https://github.com/soltysh))
-* kubectl now supports validation of nested objects with different ApiGroups (e.g. objects in a List) ([#25172](https://github.com/kubernetes/kubernetes/pull/25172), [@pwittrock](https://github.com/pwittrock))
-* Change default clusterCIDRs from /16 to /14 in GCE configs allowing 1000 Node clusters by default. ([#25350](https://github.com/kubernetes/kubernetes/pull/25350), [@gmarek](https://github.com/gmarek))
-* Add 'kubectl set' ([#25444](https://github.com/kubernetes/kubernetes/pull/25444), [@janetkuo](https://github.com/janetkuo))
-* vSphere Cloud Provider Implementation ([#24703](https://github.com/kubernetes/kubernetes/pull/24703), [@dagnello](https://github.com/dagnello))
-* Added JobTemplate, a preliminary step for ScheduledJob and Workflow ([#21675](https://github.com/kubernetes/kubernetes/pull/21675), [@soltysh](https://github.com/soltysh))
-* Openstack provider ([#21737](https://github.com/kubernetes/kubernetes/pull/21737), [@zreigz](https://github.com/zreigz))
-* AWS kube-up: Allow VPC CIDR to be specified (experimental) ([#23362](https://github.com/kubernetes/kubernetes/pull/23362), [@miguelfrde](https://github.com/miguelfrde))
-* Return "410 Gone" errors via watch stream when using watch cache ([#25369](https://github.com/kubernetes/kubernetes/pull/25369), [@liggitt](https://github.com/liggitt))
-* GKE provider: Add cluster-ipv4-cidr and arbitrary flags ([#25437](https://github.com/kubernetes/kubernetes/pull/25437), [@zmerlynn](https://github.com/zmerlynn))
-* AWS kube-up: Increase timeout waiting for docker start ([#25405](https://github.com/kubernetes/kubernetes/pull/25405), [@justinsb](https://github.com/justinsb))
-* Sort resources in quota errors to avoid duplicate events ([#25161](https://github.com/kubernetes/kubernetes/pull/25161), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Display line number on JSON errors ([#25038](https://github.com/kubernetes/kubernetes/pull/25038), [@mfojtik](https://github.com/mfojtik))
-* If the cluster node count exceeds the GCE TargetPool maximum (currently 1000), ([#25178](https://github.com/kubernetes/kubernetes/pull/25178), [@zmerlynn](https://github.com/zmerlynn))
- * randomly select which nodes are members of Kubernetes External Load Balancers.
-* Clarify supported version skew between masters, nodes, and clients ([#25087](https://github.com/kubernetes/kubernetes/pull/25087), [@ihmccreery](https://github.com/ihmccreery))
-* Move godeps to vendor/ ([#24242](https://github.com/kubernetes/kubernetes/pull/24242), [@thockin](https://github.com/thockin))
-* Introduce events flag for describers ([#24554](https://github.com/kubernetes/kubernetes/pull/24554), [@ingvagabund](https://github.com/ingvagabund))
-* run kube-addon-manager in a static pod ([#23600](https://github.com/kubernetes/kubernetes/pull/23600), [@mikedanese](https://github.com/mikedanese))
-* Reimplement 'pause' in C - smaller footprint all around ([#23009](https://github.com/kubernetes/kubernetes/pull/23009), [@uluyol](https://github.com/uluyol))
-* Add subPath to mount a child dir or file of a volumeMount ([#22575](https://github.com/kubernetes/kubernetes/pull/22575), [@MikaelCluseau](https://github.com/MikaelCluseau))
-* Handle image digests in node status and image GC ([#25088](https://github.com/kubernetes/kubernetes/pull/25088), [@ncdc](https://github.com/ncdc))
-* PLEG: reinspect pods that failed prior inspections ([#25077](https://github.com/kubernetes/kubernetes/pull/25077), [@ncdc](https://github.com/ncdc))
-* Fix kubectl create secret/configmap to allow = values ([#24989](https://github.com/kubernetes/kubernetes/pull/24989), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Upgrade installed packages when building hyperkube to improve the security profile ([#25114](https://github.com/kubernetes/kubernetes/pull/25114), [@aaronlevy](https://github.com/aaronlevy))
-* GCI/Trusty: Support ABAC authorization ([#24950](https://github.com/kubernetes/kubernetes/pull/24950), [@andyzheng0831](https://github.com/andyzheng0831))
-* fix cinder volume dir umount issue [#24717](https://github.com/kubernetes/kubernetes/pull/24717) ([#24718](https://github.com/kubernetes/kubernetes/pull/24718), [@chengyli](https://github.com/chengyli))
-* Inter pod topological affinity and anti-affinity implementation ([#22985](https://github.com/kubernetes/kubernetes/pull/22985), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* start etcd compactor in background ([#25010](https://github.com/kubernetes/kubernetes/pull/25010), [@hongchaodeng](https://github.com/hongchaodeng))
-* GCI: Add two GCI specific metadata pairs ([#25105](https://github.com/kubernetes/kubernetes/pull/25105), [@andyzheng0831](https://github.com/andyzheng0831))
-* Ensure status is not changed during an update of PV, PVC, HPA objects ([#24924](https://github.com/kubernetes/kubernetes/pull/24924), [@mqliang](https://github.com/mqliang))
-* GCE: Prefer preconfigured node tags for firewalls, if available ([#25148](https://github.com/kubernetes/kubernetes/pull/25148), [@a-robinson](https://github.com/a-robinson))
-* kubectl rolling-update support for same image ([#24645](https://github.com/kubernetes/kubernetes/pull/24645), [@jlowdermilk](https://github.com/jlowdermilk))
-* Add an entry to the salt config to allow Debian jessie on GCE. ([#25123](https://github.com/kubernetes/kubernetes/pull/25123), [@jlewi](https://github.com/jlewi))
- * As with the existing Wheezy image on GCE, docker is expected
- * to already be installed in the image.
-* Mark kube-push.sh as broken ([#25095](https://github.com/kubernetes/kubernetes/pull/25095), [@ihmccreery](https://github.com/ihmccreery))
-* AWS: Add support for ap-northeast-2 region (Seoul) ([#24457](https://github.com/kubernetes/kubernetes/pull/24457), [@leokhoa](https://github.com/leokhoa))
-* GCI: Update the command to get the image ([#24987](https://github.com/kubernetes/kubernetes/pull/24987), [@andyzheng0831](https://github.com/andyzheng0831))
-* Port-forward: use out and error streams instead of glog ([#17030](https://github.com/kubernetes/kubernetes/pull/17030), [@csrwng](https://github.com/csrwng))
-* Promote Pod Hostname & Subdomain to fields (were annotations) ([#24362](https://github.com/kubernetes/kubernetes/pull/24362), [@ArtfulCoder](https://github.com/ArtfulCoder))
-* Validate deletion timestamp doesn't change on update ([#24839](https://github.com/kubernetes/kubernetes/pull/24839), [@liggitt](https://github.com/liggitt))
-* Add flag -t as shorthand for --tty ([#24365](https://github.com/kubernetes/kubernetes/pull/24365), [@janetkuo](https://github.com/janetkuo))
-* Add support for running clusters on GCI ([#24893](https://github.com/kubernetes/kubernetes/pull/24893), [@andyzheng0831](https://github.com/andyzheng0831))
-* Switch to ABAC authorization from AllowAll ([#24210](https://github.com/kubernetes/kubernetes/pull/24210), [@cjcullen](https://github.com/cjcullen))
-* Fix DeletingLoadBalancer event generation. ([#24833](https://github.com/kubernetes/kubernetes/pull/24833), [@a-robinson](https://github.com/a-robinson))
-
-
-
-# v1.3.0-alpha.3
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-alpha.3/kubernetes.tar.gz) | `01e0dc68653173614dc99f44875173478f837b38` | `ae22c35f3a963743d21daa17683e0288`
-
-## Changes since v1.3.0-alpha.2
-
-### Action Required
-
-* Updating go-restful to generate "type":"object" instead of "type":"any" in swagger-spec (breaks kubectl 1.1) ([#22897](https://github.com/kubernetes/kubernetes/pull/22897), [@nikhiljindal](https://github.com/nikhiljindal))
-* Make watch cache treat resourceVersion consistent with uncached watch ([#24008](https://github.com/kubernetes/kubernetes/pull/24008), [@liggitt](https://github.com/liggitt))
-
-### Other notable changes
-
-* Trusty: Add retry in curl commands ([#24749](https://github.com/kubernetes/kubernetes/pull/24749), [@andyzheng0831](https://github.com/andyzheng0831))
-* Collect and expose runtime's image storage usage via Kubelet's /stats/summary endpoint ([#23595](https://github.com/kubernetes/kubernetes/pull/23595), [@vishh](https://github.com/vishh))
-* Adding loadBalancer services to quota system ([#24247](https://github.com/kubernetes/kubernetes/pull/24247), [@sdminonne](https://github.com/sdminonne))
-* Enforce --max-pods in kubelet admission; previously was only enforced in scheduler ([#24674](https://github.com/kubernetes/kubernetes/pull/24674), [@gmarek](https://github.com/gmarek))
-* All clients under ClientSet share one RateLimiter. ([#24166](https://github.com/kubernetes/kubernetes/pull/24166), [@gmarek](https://github.com/gmarek))
-* Remove requirement that Endpoints IPs be IPv4 ([#23317](https://github.com/kubernetes/kubernetes/pull/23317), [@aanm](https://github.com/aanm))
-* Fix unintended change of Service.spec.ports[].nodePort during kubectl apply ([#24180](https://github.com/kubernetes/kubernetes/pull/24180), [@AdoHe](https://github.com/AdoHe))
-* Don't log private SSH key ([#24506](https://github.com/kubernetes/kubernetes/pull/24506), [@timstclair](https://github.com/timstclair))
-* Incremental improvements to kubelet e2e tests ([#24426](https://github.com/kubernetes/kubernetes/pull/24426), [@pwittrock](https://github.com/pwittrock))
-* Bridge off-cluster traffic into services by masquerading. ([#24429](https://github.com/kubernetes/kubernetes/pull/24429), [@cjcullen](https://github.com/cjcullen))
-* Flush conntrack state for removed/changed UDP Services ([#22573](https://github.com/kubernetes/kubernetes/pull/22573), [@freehan](https://github.com/freehan))
-* Allow setting the Host header in a httpGet probe ([#24292](https://github.com/kubernetes/kubernetes/pull/24292), [@errm](https://github.com/errm))
-* Fix goroutine leak in ssh-tunnel healthcheck. ([#24487](https://github.com/kubernetes/kubernetes/pull/24487), [@cjcullen](https://github.com/cjcullen))
-* Fix gce.getDiskByNameUnknownZone logic. ([#24452](https://github.com/kubernetes/kubernetes/pull/24452), [@a-robinson](https://github.com/a-robinson))
-* Make etcd cache size configurable ([#23914](https://github.com/kubernetes/kubernetes/pull/23914), [@jsravn](https://github.com/jsravn))
-* Drain pods created from ReplicaSets in 'kubectl drain' ([#23689](https://github.com/kubernetes/kubernetes/pull/23689), [@maclof](https://github.com/maclof))
-* Make kubectl edit not convert GV on edits ([#23437](https://github.com/kubernetes/kubernetes/pull/23437), [@DirectXMan12](https://github.com/DirectXMan12))
-* don't ship kube-registry-proxy and pause images in tars. ([#23605](https://github.com/kubernetes/kubernetes/pull/23605), [@mikedanese](https://github.com/mikedanese))
-* Do not throw creation errors for containers that fail immediately after being started ([#23894](https://github.com/kubernetes/kubernetes/pull/23894), [@vishh](https://github.com/vishh))
-* Add a client flag to delete "--now" for grace period 0 ([#23756](https://github.com/kubernetes/kubernetes/pull/23756), [@smarterclayton](https://github.com/smarterclayton))
-* add act-as powers ([#23549](https://github.com/kubernetes/kubernetes/pull/23549), [@deads2k](https://github.com/deads2k))
-* Build Kubernetes, etcd and flannel for arm64 and ppc64le ([#23931](https://github.com/kubernetes/kubernetes/pull/23931), [@luxas](https://github.com/luxas))
-* Honor starting resourceVersion in watch cache ([#24208](https://github.com/kubernetes/kubernetes/pull/24208), [@ncdc](https://github.com/ncdc))
-* Update the pause image to build for arm64 and ppc64le ([#23697](https://github.com/kubernetes/kubernetes/pull/23697), [@luxas](https://github.com/luxas))
-* Return more useful error information when a persistent volume fails to mount ([#23122](https://github.com/kubernetes/kubernetes/pull/23122), [@screeley44](https://github.com/screeley44))
-* Trusty: Avoid unnecessary in-memory temp files ([#24144](https://github.com/kubernetes/kubernetes/pull/24144), [@andyzheng0831](https://github.com/andyzheng0831))
-* e2e: fix error checking in kubelet stats ([#24205](https://github.com/kubernetes/kubernetes/pull/24205), [@yujuhong](https://github.com/yujuhong))
-* Fixed mounting with containerized kubelet ([#23435](https://github.com/kubernetes/kubernetes/pull/23435), [@jsafrane](https://github.com/jsafrane))
-* Adding nodeports services to quota ([#22154](https://github.com/kubernetes/kubernetes/pull/22154), [@sdminonne](https://github.com/sdminonne))
-* e2e: adapt kubelet_perf.go to use the new summary metrics API ([#24003](https://github.com/kubernetes/kubernetes/pull/24003), [@yujuhong](https://github.com/yujuhong))
-* kubelet: add RSS memory to the summary API ([#24015](https://github.com/kubernetes/kubernetes/pull/24015), [@yujuhong](https://github.com/yujuhong))
-
-
-
-# v1.3.0-alpha.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-alpha.2/kubernetes.tar.gz) | `305c8c2af7e99d463dbbe4208ecfe2b50585e796` | `aadb8d729d855e69212008f8fda628c0`
-
-## Changes since v1.3.0-alpha.1
-
-### Other notable changes
-
-* Make kube2sky and skydns docker images cross-platform ([#19376](https://github.com/kubernetes/kubernetes/pull/19376), [@luxas](https://github.com/luxas))
-* Allowing type object in kubectl swagger validation ([#24054](https://github.com/kubernetes/kubernetes/pull/24054), [@nikhiljindal](https://github.com/nikhiljindal))
-* Fix TerminationMessagePath ([#23658](https://github.com/kubernetes/kubernetes/pull/23658), [@Random-Liu](https://github.com/Random-Liu))
-* Trusty: Do not create the docker-daemon cgroup ([#23996](https://github.com/kubernetes/kubernetes/pull/23996), [@andyzheng0831](https://github.com/andyzheng0831))
-* Make ConfigMap volume readable as non-root ([#23793](https://github.com/kubernetes/kubernetes/pull/23793), [@pmorie](https://github.com/pmorie))
-* only include running and pending pods in daemonset should place calculation ([#23929](https://github.com/kubernetes/kubernetes/pull/23929), [@mikedanese](https://github.com/mikedanese))
-* Upgrade to golang 1.6 ([#22149](https://github.com/kubernetes/kubernetes/pull/22149), [@luxas](https://github.com/luxas))
-* Cross-build hyperkube and debian-iptables for ARM. Also add a flannel image ([#21617](https://github.com/kubernetes/kubernetes/pull/21617), [@luxas](https://github.com/luxas))
-* Add a timeout to the sshDialer to prevent indefinite hangs. ([#23843](https://github.com/kubernetes/kubernetes/pull/23843), [@cjcullen](https://github.com/cjcullen))
-* Ensure object returned by volume getCloudProvider incorporates cloud config ([#23769](https://github.com/kubernetes/kubernetes/pull/23769), [@saad-ali](https://github.com/saad-ali))
-* Update Dashboard UI addon to v1.0.1 ([#23724](https://github.com/kubernetes/kubernetes/pull/23724), [@maciaszczykm](https://github.com/maciaszczykm))
-* Add zsh completion for kubectl ([#23797](https://github.com/kubernetes/kubernetes/pull/23797), [@sttts](https://github.com/sttts))
-* AWS kube-up: tolerate a lack of ephemeral volumes ([#23776](https://github.com/kubernetes/kubernetes/pull/23776), [@justinsb](https://github.com/justinsb))
-* duplicate kube-apiserver to federated-apiserver ([#23509](https://github.com/kubernetes/kubernetes/pull/23509), [@jianhuiz](https://github.com/jianhuiz))
-* Kubelet: Start using the official docker engine-api ([#23506](https://github.com/kubernetes/kubernetes/pull/23506), [@Random-Liu](https://github.com/Random-Liu))
-* Fix so setup-files don't recreate/invalidate certificates that already exist ([#23550](https://github.com/kubernetes/kubernetes/pull/23550), [@luxas](https://github.com/luxas))
-* A pod never terminated if a container image registry was unavailable ([#23746](https://github.com/kubernetes/kubernetes/pull/23746), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Fix jsonpath to handle maps with key of nonstring types ([#23358](https://github.com/kubernetes/kubernetes/pull/23358), [@aveshagarwal](https://github.com/aveshagarwal))
-* Trusty: Regional release .tar.gz support ([#23558](https://github.com/kubernetes/kubernetes/pull/23558), [@andyzheng0831](https://github.com/andyzheng0831))
-* Add support for 3rd party objects to kubectl ([#18835](https://github.com/kubernetes/kubernetes/pull/18835), [@brendandburns](https://github.com/brendandburns))
-* Remove unnecessary override of /etc/init.d/docker on containervm image. ([#23593](https://github.com/kubernetes/kubernetes/pull/23593), [@dchen1107](https://github.com/dchen1107))
-* make docker-checker more robust ([#23662](https://github.com/kubernetes/kubernetes/pull/23662), [@ArtfulCoder](https://github.com/ArtfulCoder))
-* Change kube-proxy & fluentd CPU request to 20m/80m. ([#23646](https://github.com/kubernetes/kubernetes/pull/23646), [@cjcullen](https://github.com/cjcullen))
-* Create a new Deployment in kube-system for every version. ([#23512](https://github.com/kubernetes/kubernetes/pull/23512), [@Q-Lee](https://github.com/Q-Lee))
-* IngressTLS: allow secretName to be blank for SNI routing ([#23500](https://github.com/kubernetes/kubernetes/pull/23500), [@tam7t](https://github.com/tam7t))
-* don't sync deployment when pod selector is empty ([#23467](https://github.com/kubernetes/kubernetes/pull/23467), [@mikedanese](https://github.com/mikedanese))
-* AWS: Fix problems with >2 security groups ([#23340](https://github.com/kubernetes/kubernetes/pull/23340), [@justinsb](https://github.com/justinsb))
-
-
-
-# v1.3.0-alpha.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/HEAD/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-alpha.1/kubernetes.tar.gz) | `e0041b08e220a4704ea2ad90a6ec7c8f2120c2d3` | `7bb2df32aea94678f72a8d1f43a12098`
-
-## Changes since v1.2.0
-
-### Action Required
-
-* Disabling swagger ui by default on apiserver. Adding a flag that can enable it ([#23025](https://github.com/kubernetes/kubernetes/pull/23025), [@nikhiljindal](https://github.com/nikhiljindal))
-* restore ability to run against secured etcd ([#21535](https://github.com/kubernetes/kubernetes/pull/21535), [@AdoHe](https://github.com/AdoHe))
-
-### Other notable changes
-
-* validate that daemonsets don't have empty selectors on creation ([#23530](https://github.com/kubernetes/kubernetes/pull/23530), [@mikedanese](https://github.com/mikedanese))
-* Trusty: Update heapster manifest handling code ([#23434](https://github.com/kubernetes/kubernetes/pull/23434), [@andyzheng0831](https://github.com/andyzheng0831))
-* Support differentiation of OS distro in e2e tests ([#23466](https://github.com/kubernetes/kubernetes/pull/23466), [@andyzheng0831](https://github.com/andyzheng0831))
-* don't sync daemonsets with selectors that match all pods ([#23223](https://github.com/kubernetes/kubernetes/pull/23223), [@mikedanese](https://github.com/mikedanese))
-* Trusty: Avoid reaching GCE custom metadata size limit ([#22818](https://github.com/kubernetes/kubernetes/pull/22818), [@andyzheng0831](https://github.com/andyzheng0831))
-* Update kubectl help for 1.2 resources ([#23305](https://github.com/kubernetes/kubernetes/pull/23305), [@janetkuo](https://github.com/janetkuo))
-* Support addon Deployments, make heapster a deployment with a nanny. ([#22893](https://github.com/kubernetes/kubernetes/pull/22893), [@Q-Lee](https://github.com/Q-Lee))
-* Removing URL query param from swagger UI to fix the XSS issue ([#23234](https://github.com/kubernetes/kubernetes/pull/23234), [@nikhiljindal](https://github.com/nikhiljindal))
-* Fix hairpin mode ([#23325](https://github.com/kubernetes/kubernetes/pull/23325), [@MurgaNikolay](https://github.com/MurgaNikolay))
-* Bump to container-vm-v20160321 ([#23313](https://github.com/kubernetes/kubernetes/pull/23313), [@zmerlynn](https://github.com/zmerlynn))
-* Remove the restart-kube-proxy and restart-apiserver functions ([#23180](https://github.com/kubernetes/kubernetes/pull/23180), [@roberthbailey](https://github.com/roberthbailey))
-* Copy annotations back from RS to Deployment on rollback ([#23160](https://github.com/kubernetes/kubernetes/pull/23160), [@janetkuo](https://github.com/janetkuo))
-* Trusty: Support hybrid cluster with nodes on ContainerVM ([#23079](https://github.com/kubernetes/kubernetes/pull/23079), [@andyzheng0831](https://github.com/andyzheng0831))
-* update expose command description to add deployment ([#23246](https://github.com/kubernetes/kubernetes/pull/23246), [@AdoHe](https://github.com/AdoHe))
-* Add a rate limiter to the GCE cloudprovider ([#23019](https://github.com/kubernetes/kubernetes/pull/23019), [@alex-mohr](https://github.com/alex-mohr))
-* Add a Deployment example for kubectl expose. ([#23222](https://github.com/kubernetes/kubernetes/pull/23222), [@madhusudancs](https://github.com/madhusudancs))
-* Use versioned object when computing patch ([#23145](https://github.com/kubernetes/kubernetes/pull/23145), [@liggitt](https://github.com/liggitt))
-* kubelet: send all recevied pods in one update ([#23141](https://github.com/kubernetes/kubernetes/pull/23141), [@yujuhong](https://github.com/yujuhong))
-* Add a SSHKey sync check to the master's healthz (when using SSHTunnels). ([#23167](https://github.com/kubernetes/kubernetes/pull/23167), [@cjcullen](https://github.com/cjcullen))
-* Validate minimum CPU limits to be >= 10m ([#23143](https://github.com/kubernetes/kubernetes/pull/23143), [@vishh](https://github.com/vishh))
-* Fix controller-manager race condition issue which cause endpoints flush during restart ([#23035](https://github.com/kubernetes/kubernetes/pull/23035), [@xinxiaogang](https://github.com/xinxiaogang))
-* MESOS: forward globally declared cadvisor housekeeping flags ([#22974](https://github.com/kubernetes/kubernetes/pull/22974), [@jdef](https://github.com/jdef))
-* Trusty: support developer workflow on base image ([#22960](https://github.com/kubernetes/kubernetes/pull/22960), [@andyzheng0831](https://github.com/andyzheng0831))
-* Bumped Heapster to stable version 1.0.0 ([#22993](https://github.com/kubernetes/kubernetes/pull/22993), [@piosz](https://github.com/piosz))
-* Deprecating --api-version flag ([#22410](https://github.com/kubernetes/kubernetes/pull/22410), [@nikhiljindal](https://github.com/nikhiljindal))
-* allow resource.version.group in kubectl ([#22853](https://github.com/kubernetes/kubernetes/pull/22853), [@deads2k](https://github.com/deads2k))
-* Use SCP to dump logs and parallelize a bit. ([#22835](https://github.com/kubernetes/kubernetes/pull/22835), [@spxtr](https://github.com/spxtr))
-* update wide option output ([#22772](https://github.com/kubernetes/kubernetes/pull/22772), [@AdoHe](https://github.com/AdoHe))
-* Change scheduler logic from random to round-robin ([#22430](https://github.com/kubernetes/kubernetes/pull/22430), [@gmarek](https://github.com/gmarek))
-
-Please see the [Releases Page](https://github.com/kubernetes/kubernetes/releases) for older releases.
-
-Release notes of older releases can be found in:
-- [CHANGELOG-1.2.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.2.md)
-
-[]()
diff --git a/vendor/k8s.io/kubernetes/CHANGELOG-1.4.md b/vendor/k8s.io/kubernetes/CHANGELOG-1.4.md
deleted file mode 100644
index 8c229de490bf..000000000000
--- a/vendor/k8s.io/kubernetes/CHANGELOG-1.4.md
+++ /dev/null
@@ -1,1436 +0,0 @@
-
-- [v1.4.12](#v1412)
- - [Downloads for v1.4.12](#downloads-for-v1412)
- - [Client Binaries](#client-binaries)
- - [Server Binaries](#server-binaries)
- - [Node Binaries](#node-binaries)
- - [Changelog since v1.4.9](#changelog-since-v149)
- - [Other notable changes](#other-notable-changes)
-- [v1.4.9](#v149)
- - [Downloads for v1.4.9](#downloads-for-v149)
- - [Client Binaries](#client-binaries-1)
- - [Server Binaries](#server-binaries-1)
- - [Changelog since v1.4.8](#changelog-since-v148)
- - [Other notable changes](#other-notable-changes-1)
-- [v1.4.8](#v148)
- - [Downloads for v1.4.8](#downloads-for-v148)
- - [Client Binaries](#client-binaries-2)
- - [Server Binaries](#server-binaries-2)
- - [Changelog since v1.4.7](#changelog-since-v147)
- - [Other notable changes](#other-notable-changes-2)
-- [v1.4.7](#v147)
- - [Downloads for v1.4.7](#downloads-for-v147)
- - [Client Binaries](#client-binaries-3)
- - [Server Binaries](#server-binaries-3)
- - [Changelog since v1.4.6](#changelog-since-v146)
- - [Other notable changes](#other-notable-changes-3)
-- [v1.4.6](#v146)
- - [Downloads for v1.4.6](#downloads-for-v146)
- - [Client Binaries](#client-binaries-4)
- - [Server Binaries](#server-binaries-4)
- - [Changelog since v1.4.5](#changelog-since-v145)
- - [Other notable changes](#other-notable-changes-4)
-- [v1.4.5](#v145)
- - [Downloads for v1.4.5](#downloads-for-v145)
- - [Client Binaries](#client-binaries-5)
- - [Server Binaries](#server-binaries-5)
- - [Changelog since v1.4.4](#changelog-since-v144)
- - [Other notable changes](#other-notable-changes-5)
-- [v1.4.4](#v144)
- - [Downloads for v1.4.4](#downloads-for-v144)
- - [Client Binaries](#client-binaries-6)
- - [Server Binaries](#server-binaries-6)
- - [Changelog since v1.4.3](#changelog-since-v143)
- - [Other notable changes](#other-notable-changes-6)
-- [v1.4.3](#v143)
- - [Downloads](#downloads)
- - [Changelog since v1.4.2-beta.1](#changelog-since-v142-beta1)
- - [Other notable changes](#other-notable-changes-7)
-- [v1.4.2](#v142)
- - [Downloads](#downloads-1)
- - [Changelog since v1.4.2-beta.1](#changelog-since-v142-beta1-1)
- - [Other notable changes](#other-notable-changes-8)
-- [v1.4.2-beta.1](#v142-beta1)
- - [Downloads](#downloads-2)
- - [Changelog since v1.4.1](#changelog-since-v141)
- - [Other notable changes](#other-notable-changes-9)
-- [v1.4.1](#v141)
- - [Downloads](#downloads-3)
- - [Changelog since v1.4.1-beta.2](#changelog-since-v141-beta2)
-- [v1.4.1-beta.2](#v141-beta2)
- - [Downloads](#downloads-4)
- - [Changelog since v1.4.0](#changelog-since-v140)
- - [Other notable changes](#other-notable-changes-10)
-- [v1.4.0](#v140)
- - [Downloads](#downloads-5)
- - [Major Themes](#major-themes)
- - [Features](#features)
- - [Known Issues](#known-issues)
- - [Notable Changes to Existing Behavior](#notable-changes-to-existing-behavior)
- - [Deployments](#deployments)
- - [kubectl rolling-update: < v1.4.0 client vs >=v1.4.0 cluster](#kubectl-rolling-update--v140-client-vs-v140-cluster)
- - [kubectl delete: < v1.4.0 client vs >=v1.4.0 cluster](#kubectl-delete--v140-client-vs-v140-cluster)
- - [DELETE operation in REST API](#delete-operation-in-rest-api)
- - [Action Required Before Upgrading](#action-required-before-upgrading)
-- [optionally, remove the old secret](#optionally-remove-the-old-secret)
- - [Previous Releases Included in v1.4.0](#previous-releases-included-in-v140)
-- [v1.4.0-beta.11](#v140-beta11)
- - [Downloads](#downloads-6)
- - [Changelog since v1.4.0-beta.10](#changelog-since-v140-beta10)
-- [v1.4.0-beta.10](#v140-beta10)
- - [Downloads](#downloads-7)
- - [Changelog since v1.4.0-beta.8](#changelog-since-v140-beta8)
- - [Other notable changes](#other-notable-changes-11)
-- [v1.4.0-beta.8](#v140-beta8)
- - [Downloads](#downloads-8)
- - [Changelog since v1.4.0-beta.7](#changelog-since-v140-beta7)
-- [v1.4.0-beta.7](#v140-beta7)
- - [Downloads](#downloads-9)
- - [Changelog since v1.4.0-beta.6](#changelog-since-v140-beta6)
- - [Other notable changes](#other-notable-changes-12)
-- [v1.4.0-beta.6](#v140-beta6)
- - [Downloads](#downloads-10)
- - [Changelog since v1.4.0-beta.5](#changelog-since-v140-beta5)
- - [Other notable changes](#other-notable-changes-13)
-- [v1.4.0-beta.5](#v140-beta5)
- - [Downloads](#downloads-11)
- - [Changelog since v1.4.0-beta.3](#changelog-since-v140-beta3)
- - [Other notable changes](#other-notable-changes-14)
-- [v1.4.0-beta.3](#v140-beta3)
- - [Downloads](#downloads-12)
- - [Changelog since v1.4.0-beta.2](#changelog-since-v140-beta2)
- - [Behavior changes caused by enabling the garbage collector](#behavior-changes-caused-by-enabling-the-garbage-collector)
- - [kubectl rolling-update](#kubectl-rolling-update)
- - [kubectl delete](#kubectl-delete)
- - [DELETE operation in REST API](#delete-operation-in-rest-api-1)
-- [v1.4.0-beta.2](#v140-beta2)
- - [Downloads](#downloads-13)
- - [Changelog since v1.4.0-beta.1](#changelog-since-v140-beta1)
- - [Other notable changes](#other-notable-changes-15)
-- [v1.4.0-beta.1](#v140-beta1)
- - [Downloads](#downloads-14)
- - [Changelog since v1.4.0-alpha.3](#changelog-since-v140-alpha3)
- - [Action Required](#action-required)
- - [Other notable changes](#other-notable-changes-16)
-- [v1.4.0-alpha.3](#v140-alpha3)
- - [Downloads](#downloads-15)
- - [Changelog since v1.4.0-alpha.2](#changelog-since-v140-alpha2)
- - [Action Required](#action-required-1)
- - [Other notable changes](#other-notable-changes-17)
-- [v1.4.0-alpha.2](#v140-alpha2)
- - [Downloads](#downloads-16)
- - [Changelog since v1.4.0-alpha.1](#changelog-since-v140-alpha1)
- - [Action Required](#action-required-2)
- - [Other notable changes](#other-notable-changes-18)
-- [v1.4.0-alpha.1](#v140-alpha1)
- - [Downloads](#downloads-17)
- - [Changelog since v1.3.0](#changelog-since-v130)
- - [Experimental Features](#experimental-features)
- - [Action Required](#action-required-3)
- - [Other notable changes](#other-notable-changes-19)
-
-
-
-
-
-# v1.4.12
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.4/examples)
-
-## Downloads for v1.4.12
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes.tar.gz) | `f0d7ca7e1c92174c900d49087347d043b817eb589803eacc7727a84df9280ed2`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-src.tar.gz) | `251835f258d79f186d8c715b18f2ccb93312270b35c22434b4ff27bc1de50eda`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-darwin-386.tar.gz) | `e91c76b6281fe7b488f2f30aeaeecde58a6df1a0e23f6c431b6dc9d1adc1ff1a`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-darwin-amd64.tar.gz) | `4504bc965bd1b5bcea91d18c3a879252026796fdd251b72e3541499c65ac20e0`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-linux-386.tar.gz) | `adf1f939db2da0b87bca876d9bee69e0d6bf4ca4a78e64195e9a08960e5ef010`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-linux-amd64.tar.gz) | `5419bdbba8144b55bf7bf2af1aefa531e25279f31a02d692f19b505862d0204f`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-linux-arm64.tar.gz) | `98ae30ac2e447b9e3c2768cac6861de5368d80cbd2db1983697c5436a2a2fe75`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-linux-arm.tar.gz) | `ed8e9901c130aebfd295a6016cccb123ee42d826619815250a6add2d03942c69`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-windows-386.tar.gz) | `bdca3096bed1a4c485942ab1d3f9351f5de00962058adefbb5297d50071461d4`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-windows-amd64.tar.gz) | `a74934eca20dd2e753d385ddca912e76dafbfff2a65e3e3a1ec3c5c40fd92bc8`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-server-linux-amd64.tar.gz) | `bf8aa3e2e204c1f782645f7df9338767daab7be3ab47a4670e2df08ee410ee7f`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-server-linux-arm64.tar.gz) | `7c5cfe06fe1fcfe11bd754921e88582d16887aacb6cee0eb82573c88debce65e`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-server-linux-arm.tar.gz) | `551c2bc2e3d1c0b8fa30cc0b0c8fae1acf561b5e303e9ddaf647e49239a97e6e`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node*.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-node*.tar.gz) | ``
-
-## Changelog since v1.4.9
-
-### Other notable changes
-
-* kube-apiserver now drops unneeded path information if an older version of Windows kubectl sends it. ([#44586](https://github.com/kubernetes/kubernetes/pull/44586), [@mml](https://github.com/mml))
-* Bump gcr.io/google_containers/glbc from 0.8.0 to 0.9.2. Release notes: [0.9.0](https://github.com/kubernetes/ingress/releases/tag/0.9.0), [0.9.1](https://github.com/kubernetes/ingress/releases/tag/0.9.1), [0.9.2](https://github.com/kubernetes/ingress/releases/tag/0.9.2) ([#43098](https://github.com/kubernetes/kubernetes/pull/43098), [@timstclair](https://github.com/timstclair))
-* Patch CVE-2016-8859 in alpine based images: ([#42937](https://github.com/kubernetes/kubernetes/pull/42937), [@timstclair](https://github.com/timstclair))
- * - gcr.io/google-containers/etcd-empty-dir-cleanup
- * - gcr.io/google-containers/kube-dnsmasq-amd64
-* Check if pathExists before performing Unmount ([#39311](https://github.com/kubernetes/kubernetes/pull/39311), [@rkouj](https://github.com/rkouj))
-* Unmount operation should not fail if volume is already unmounted ([#38547](https://github.com/kubernetes/kubernetes/pull/38547), [@rkouj](https://github.com/rkouj))
-* Updates base image used for `kube-addon-manager` to latest `python:2.7-slim` and embedded `kubectl` to `v1.3.10`. No functionality changes expected. ([#42842](https://github.com/kubernetes/kubernetes/pull/42842), [@ixdy](https://github.com/ixdy))
-* list-resources: don't fail if the grep fails to match any resources ([#41933](https://github.com/kubernetes/kubernetes/pull/41933), [@ixdy](https://github.com/ixdy))
-* Update gcr.io/google-containers/rescheduler to v0.2.2, which uses busybox as a base image instead of ubuntu. ([#41911](https://github.com/kubernetes/kubernetes/pull/41911), [@ixdy](https://github.com/ixdy))
-* Backporting TPR fix to 1.4 ([#42380](https://github.com/kubernetes/kubernetes/pull/42380), [@foxish](https://github.com/foxish))
-* Fix AWS device allocator to only use valid device names ([#41455](https://github.com/kubernetes/kubernetes/pull/41455), [@gnufied](https://github.com/gnufied))
-* Reverts to looking up the current VM in vSphere using the machine's UUID, either obtained via sysfs or via the `vm-uuid` parameter in the cloud configuration file. ([#40892](https://github.com/kubernetes/kubernetes/pull/40892), [@robdaemon](https://github.com/robdaemon))
-* We change the default attach_detach_controller sync period to 1 minute to reduce the query frequency through cloud provider to check whether volumes are attached or not. ([#41363](https://github.com/kubernetes/kubernetes/pull/41363), [@jingxu97](https://github.com/jingxu97))
-* Bump GCI to gci-stable-56-9000-84-2: Fixed google-accounts-daemon breaks on GCI when network is unavailable. Fixed iptables-restore performance regression. ([#41831](https://github.com/kubernetes/kubernetes/pull/41831), [@freehan](https://github.com/freehan))
-* Update fluentd-gcp addon to 1.25.2 ([#41863](https://github.com/kubernetes/kubernetes/pull/41863), [@ixdy](https://github.com/ixdy))
-* Bump GCE ContainerVM to container-vm-v20170214 to address CVE-2016-9962. ([#41449](https://github.com/kubernetes/kubernetes/pull/41449), [@zmerlynn](https://github.com/zmerlynn))
-
-
-
-# v1.4.9
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.4/examples)
-
-## Downloads for v1.4.9
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes.tar.gz) | `9d385d555073c7cf509a92ce3aa96d0414a93c21c51bcf020744c70b4b290aa2`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-src.tar.gz) | `6fd7d33775356f0245d06b401ac74d8227a92abd07cc5a0ef362bac16e01f011`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-darwin-386.tar.gz) | `16b362f3cf56dee7b0c291188767222fd65176ed9573a8b87e8acf7eb6b22ed9`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-darwin-amd64.tar.gz) | `537e5c5d8a9148cd464f5d6d0a796e214add04c185b859ea9e39a4cc7264394c`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-linux-386.tar.gz) | `e9d2e55b42e002771c32d9f26e8eb0b65c257ea257e8ab19f7fd928f21caace8`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-linux-amd64.tar.gz) | `1ba81d64d1ae165b73375d61d364c642068385d6a1d68196d90e42a8d0fd6c7d`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-linux-arm64.tar.gz) | `d0398d2b11ed591575adde3ce9e1ad877fe37b8b56bd2be5b2aee344a35db330`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-linux-arm.tar.gz) | `714b06319bf047084514803531edab6a0a262c5f38a0d0bfda0a8e59672595b6`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-windows-386.tar.gz) | `16a7224313889d2f98a7d072f328198790531fd0e724eaeeccffe82521ae63b8`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-windows-amd64.tar.gz) | `dc19651287701ea6dcbd7b4949db2331468f730e8ebe951de1216f1105761d97`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-server-linux-amd64.tar.gz) | `6a104d143f8568a8ce16c979d1cb2eb357263d96ab43bd399b05d28f8da2b961`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-server-linux-arm64.tar.gz) | `8137ecde19574e6aba0cd9efe127f3b3eb02c312d7691745df3a23e40b7a5d72`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-server-linux-arm.tar.gz) | `085195abeb9133cb43f0e6198e638ded7f15beca44d19503c2836339a7e604aa`
-
-## Changelog since v1.4.8
-
-### Other notable changes
-
-* Bump GCE ContainerVM to container-vm-v20170201 to address CVE-2016-9962. ([#40828](https://github.com/kubernetes/kubernetes/pull/40828), [@zmerlynn](https://github.com/zmerlynn))
-* Bump GCI to gci-beta-56-9000-80-0 ([#41027](https://github.com/kubernetes/kubernetes/pull/41027), [@dchen1107](https://github.com/dchen1107))
-* Fix for detach volume when node is not present/ powered off ([#40118](https://github.com/kubernetes/kubernetes/pull/40118), [@BaluDontu](https://github.com/BaluDontu))
-* Bump GCI to gci-beta-56-9000-80-0 ([#41027](https://github.com/kubernetes/kubernetes/pull/41027), [@dchen1107](https://github.com/dchen1107))
-* Move b.gcr.io/k8s_authenticated_test to gcr.io/k8s-authenticated-test ([#40335](https://github.com/kubernetes/kubernetes/pull/40335), [@zmerlynn](https://github.com/zmerlynn))
-* Prep node_e2e for GCI to COS name change ([#41088](https://github.com/kubernetes/kubernetes/pull/41088), [@jessfraz](https://github.com/jessfraz))
-* If ExperimentalCriticalPodAnnotation=True flag gate is set, kubelet will ensure that pods with `scheduler.alpha.kubernetes.io/critical-pod` annotation will be admitted even under resource pressure, will not be evicted, and are reasonably protected from system OOMs. ([#41052](https://github.com/kubernetes/kubernetes/pull/41052), [@vishh](https://github.com/vishh))
-* Fix resync goroutine leak in ListAndWatch ([#35672](https://github.com/kubernetes/kubernetes/pull/35672), [@tatsuhiro-t](https://github.com/tatsuhiro-t))
-* Kubelet will no longer set hairpin mode on every interface on the machine when an error occurs in setting up hairpin for a specific interface. ([#36990](https://github.com/kubernetes/kubernetes/pull/36990), [@bboreham](https://github.com/bboreham))
-* Bump GCE ContainerVM to container-vm-v20170201 to address CVE-2016-9962. ([#40828](https://github.com/kubernetes/kubernetes/pull/40828), [@zmerlynn](https://github.com/zmerlynn))
-* Adding vmdk file extension for vmDiskPath in vsphere DeleteVolume ([#40538](https://github.com/kubernetes/kubernetes/pull/40538), [@divyenpatel](https://github.com/divyenpatel))
-* Prevent hotloops on error conditions, which could fill up the disk faster than log rotation can free space. ([#40497](https://github.com/kubernetes/kubernetes/pull/40497), [@lavalamp](https://github.com/lavalamp))
-* Update GCE ContainerVM deployment to container-vm-v20170117 to pick up CVE fixes in base image. ([#40094](https://github.com/kubernetes/kubernetes/pull/40094), [@zmerlynn](https://github.com/zmerlynn))
-* Update kube-proxy image to be based off of Debian 8.6 base image. ([#39695](https://github.com/kubernetes/kubernetes/pull/39695), [@ixdy](https://github.com/ixdy))
-* Update amd64 kube-proxy base image to debian-iptables-amd64:v5 ([#39725](https://github.com/kubernetes/kubernetes/pull/39725), [@ixdy](https://github.com/ixdy))
-
-
-
-# v1.4.8
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.4/examples)
-
-## Downloads for v1.4.8
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes.tar.gz) | `888d2e6c5136e8805805498729a1da55cf89addfd28f098e0d2cf3f28697ab5c`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-src.tar.gz) | `0992c3f4f4cb21011fea32187c909babc1a3806f35cec86aacfe9c3d8bef2485`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-darwin-386.tar.gz) | `8b1c9931544b7b42df64ea98e0d8e1430d09eea3c9f78309834e4e18b091dc18`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-darwin-amd64.tar.gz) | `a306a687979013b8a27acae244d000de9a77f73714ccf96510ecf0398d677051`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-linux-386.tar.gz) | `81fc5e1b5aba4e0aead37c82c7e45891c4493c7df51da5200f83462b6f7ad98f`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-linux-amd64.tar.gz) | `704a5f8424190406821b69283f802ade95e39944efcce10bcaf4bd7b3183abc4`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-linux-arm64.tar.gz) | `7f3e5e8dadb51257afa8650bcd3db3e8f3bc60e767c1a13d946b88fa8625a326`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-linux-arm.tar.gz) | `461d359067cd90542ce2ceb46a4b2ec9d92dd8fd1e7d21a9d9f469c98f446e56`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-windows-386.tar.gz) | `894a9c8667e4c4942cb25ac32d10c4f6de8477c6bbbad94e9e6f47121151f5df`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-windows-amd64.tar.gz) | `b2bd4afdd3eaea305c03b94b0864c5622abf19113c6794dedff4ad85327fda01`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-server-linux-amd64.tar.gz) | `c3dc0e26c00bbe40bd19f61d2d7faeaa56384355c58a0efc4227a360b3eb2da2`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-server-linux-arm64.tar.gz) | `745d7ba03bb9c6b57a5a36b389f6467a0707f0a1476d7536ad47417c853eeffd`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-server-linux-arm.tar.gz) | `dc21f9c659f1d762cad9d0cce0a32146c11cd0d41c58eb2dcbfb0c9f9707349f`
-
-## Changelog since v1.4.7
-
-### Other notable changes
-
-* AWS: recognize eu-west-2 region ([#38746](https://github.com/kubernetes/kubernetes/pull/38746), [@justinsb](https://github.com/justinsb))
-* Add path exist check in getPodVolumePathListFromDisk ([#38909](https://github.com/kubernetes/kubernetes/pull/38909), [@jingxu97](https://github.com/jingxu97))
-* Update fluentd-gcp addon to 1.21.1/1.25.1. ([#39705](https://github.com/kubernetes/kubernetes/pull/39705), [@ixdy](https://github.com/ixdy))
-* Admit critical pods in the kubelet ([#38836](https://github.com/kubernetes/kubernetes/pull/38836), [@bprashanth](https://github.com/bprashanth))
-* assign -998 as the oom_score_adj for critical pods (e.g. kube-proxy) ([#39114](https://github.com/kubernetes/kubernetes/pull/39114), [@dchen1107](https://github.com/dchen1107))
-* Don't evict static pods ([#39059](https://github.com/kubernetes/kubernetes/pull/39059), [@bprashanth](https://github.com/bprashanth))
-* Provide kubernetes-controller-manager flags to control volume attach/detach reconciler sync. The duration of the syncs can be controlled, and the syncs can be shut off as well. ([#39551](https://github.com/kubernetes/kubernetes/pull/39551), [@chrislovecnm](https://github.com/chrislovecnm))
-* AWS: Recognize ca-central-1 region ([#38410](https://github.com/kubernetes/kubernetes/pull/38410), [@justinsb](https://github.com/justinsb))
-* Add TLS conf for Go1.7 ([#38600](https://github.com/kubernetes/kubernetes/pull/38600), [@k82cn](https://github.com/k82cn))
-* Fix fsGroup to vSphere ([#38655](https://github.com/kubernetes/kubernetes/pull/38655), [@abrarshivani](https://github.com/abrarshivani))
-* Only set sysctls for infra containers ([#32383](https://github.com/kubernetes/kubernetes/pull/32383), [@sttts](https://github.com/sttts))
-* fix kubectl taint e2e flake: add retries for removing taint ([#33872](https://github.com/kubernetes/kubernetes/pull/33872), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* portfordwardtester: avoid data loss during send+close+exit ([#37103](https://github.com/kubernetes/kubernetes/pull/37103), [@sttts](https://github.com/sttts))
-* Wait for the port to be ready before starting ([#38260](https://github.com/kubernetes/kubernetes/pull/38260), [@fraenkel](https://github.com/fraenkel))
-* Ensure the GCI metadata files do not have newline at the end ([#38727](https://github.com/kubernetes/kubernetes/pull/38727), [@Amey-D](https://github.com/Amey-D))
-* Fix nil pointer dereference in test framework ([#37583](https://github.com/kubernetes/kubernetes/pull/37583), [@mtaufen](https://github.com/mtaufen))
-* Kubelet: Add image cache. ([#38375](https://github.com/kubernetes/kubernetes/pull/38375), [@Random-Liu](https://github.com/Random-Liu))
-* Collect logs for dead kubelets too ([#37671](https://github.com/kubernetes/kubernetes/pull/37671), [@mtaufen](https://github.com/mtaufen))
-
-
-
-# v1.4.7
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.4/examples)
-
-## Downloads for v1.4.7
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes.tar.gz) | `d193f76e70322010b3e86ac61c7a893175f9e62d37bece87cfd14ea068c8d187`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-src.tar.gz) | `7c7ef45e903ed2691c73bb2752805f190b4042ba233a6260f2cdeab7d0ac9bd3`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-darwin-386.tar.gz) | `a5a3ec9f5270156cf507b4c6bf2d08da67062a2ed9cb5f21e8891f2fd83f438a`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-darwin-amd64.tar.gz) | `e5328781640b19e86b59aa8afd665dd21999c6740acbee8332cfa20745d6a5ce`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-linux-386.tar.gz) | `61082afc6aee2dc5bbd35bfda2e5991bd9f9730192f1c9396b6db500fc64e121`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-linux-amd64.tar.gz) | `36232c9e21298f5f53dbf4851520a8cc53a2d6b6d2be8810cf5258a067570314`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-linux-arm64.tar.gz) | `802d0c5e7bb55dacdd19afe73ed71d0726960ec9933c49e77051df7e2594790b`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-linux-arm.tar.gz) | `f42d8d2d918b31564d12d742bce2263df0c93807619bd03194028ff2714f1a17`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-windows-386.tar.gz) | `b45dcdfe0ba0177fad5419b4fd6b5b80bf9bca0e56e7fe19d2bc217c9aae1f9d`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-windows-amd64.tar.gz) | `ae4666aea8fa74ef1cce746d1d90cbadc972850560b65a8eeff4417fdede6b4e`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-server-linux-amd64.tar.gz) | `56e01e9788d1ef0499b1783768022cb188b5bb840d1499a62e9f0a18c2bd2bd5`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-server-linux-arm64.tar.gz) | `6654ef3c142694a79ec2596929ceec36a399407e1fb74b09be1a67c59b30ca42`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-server-linux-arm.tar.gz) | `b10e78286dea804d69311e3805c35f5414b0669094edec7a2e0ba99170a5d04a`
-
-## Changelog since v1.4.6
-
-### Other notable changes
-
-* Exit with error if is not the final parameter. ([#37723](https://github.com/kubernetes/kubernetes/pull/37723), [@mtaufen](https://github.com/mtaufen))
-* Fix GCI mounter issue ([#38124](https://github.com/kubernetes/kubernetes/pull/38124), [@jingxu97](https://github.com/jingxu97))
-* Fix space issue in volumePath with vSphere Cloud Provider ([#38338](https://github.com/kubernetes/kubernetes/pull/38338), [@BaluDontu](https://github.com/BaluDontu))
-* Fix panic in vSphere cloud provider ([#38423](https://github.com/kubernetes/kubernetes/pull/38423), [@BaluDontu](https://github.com/BaluDontu))
-* Changed default scsi controller type in vSphere Cloud Provider ([#38426](https://github.com/kubernetes/kubernetes/pull/38426), [@abrarshivani](https://github.com/abrarshivani))
-* Fix unmountDevice issue caused by shared mount in GCI ([#38411](https://github.com/kubernetes/kubernetes/pull/38411), [@jingxu97](https://github.com/jingxu97))
-* Implement CanMount() for gfsMounter for linux ([#36686](https://github.com/kubernetes/kubernetes/pull/36686), [@rkouj](https://github.com/rkouj))
-* Better messaging for missing volume binaries on host ([#36280](https://github.com/kubernetes/kubernetes/pull/36280), [@rkouj](https://github.com/rkouj))
-* fix mesos unit tests ([#38196](https://github.com/kubernetes/kubernetes/pull/38196), [@deads2k](https://github.com/deads2k))
-* Fix Service Update on LoadBalancerSourceRanges Field ([#37720](https://github.com/kubernetes/kubernetes/pull/37720), [@freehan](https://github.com/freehan))
-* Include serial port output in GCP log-dump ([#37248](https://github.com/kubernetes/kubernetes/pull/37248), [@mtaufen](https://github.com/mtaufen))
-* Collect installation and configuration service logs for tests ([#37401](https://github.com/kubernetes/kubernetes/pull/37401), [@mtaufen](https://github.com/mtaufen))
-* Use shasum if sha1sum doesn't exist in the path ([#37362](https://github.com/kubernetes/kubernetes/pull/37362), [@roberthbailey](https://github.com/roberthbailey))
-* Guard the ready replica checking by server version ([#37303](https://github.com/kubernetes/kubernetes/pull/37303), [@krousey](https://github.com/krousey))
-* Fix issue when attempting to unmount a wrong vSphere volume ([#37413](https://github.com/kubernetes/kubernetes/pull/37413), [@BaluDontu](https://github.com/BaluDontu))
-* Fix issue in converting AWS volume ID from mount paths ([#36840](https://github.com/kubernetes/kubernetes/pull/36840), [@jingxu97](https://github.com/jingxu97))
-* Correct env var name in configure-helper ([#33848](https://github.com/kubernetes/kubernetes/pull/33848), [@mtaufen](https://github.com/mtaufen))
-* wait until the pods are deleted completely ([#34778](https://github.com/kubernetes/kubernetes/pull/34778), [@ymqytw](https://github.com/ymqytw))
-* AWS: recognize us-east-2 region ([#35013](https://github.com/kubernetes/kubernetes/pull/35013), [@justinsb](https://github.com/justinsb))
-* Replace controller presence checking logic ([#36924](https://github.com/kubernetes/kubernetes/pull/36924), [@krousey](https://github.com/krousey))
-* Fix a bug in scheduler happening after retrying unsuccessful bindings ([#37293](https://github.com/kubernetes/kubernetes/pull/37293), [@wojtek-t](https://github.com/wojtek-t))
-* Try self-repair scheduler cache or panic ([#37379](https://github.com/kubernetes/kubernetes/pull/37379), [@wojtek-t](https://github.com/wojtek-t))
-* Ignore mirror pods with RestartPolicy == Never in restart tests ([#34462](https://github.com/kubernetes/kubernetes/pull/34462), [@yujuhong](https://github.com/yujuhong))
-* Change image-puller restart policy to OnFailure ([#37070](https://github.com/kubernetes/kubernetes/pull/37070), [@gmarek](https://github.com/gmarek))
-* Filter out non-RestartAlways mirror pod in restart test. ([#37203](https://github.com/kubernetes/kubernetes/pull/37203), [@Random-Liu](https://github.com/Random-Liu))
-* Validate volume spec before returning azure mounter ([#37018](https://github.com/kubernetes/kubernetes/pull/37018), [@rootfs](https://github.com/rootfs))
-* Networking test rewrite ([#31559](https://github.com/kubernetes/kubernetes/pull/31559), [@bprashanth](https://github.com/bprashanth))
-* Fix the equality checks for numeric values in cluster/gce/util.sh. ([#37638](https://github.com/kubernetes/kubernetes/pull/37638), [@roberthbailey](https://github.com/roberthbailey))
-* Use gsed on the Mac ([#37562](https://github.com/kubernetes/kubernetes/pull/37562), [@roberthbailey](https://github.com/roberthbailey))
-* Fix TestServiceAlloc flakes ([#37487](https://github.com/kubernetes/kubernetes/pull/37487), [@wojtek-t](https://github.com/wojtek-t))
-* Change ScheduledJob POD name suffix from hash to Unix Epoch ([#36883](https://github.com/kubernetes/kubernetes/pull/36883), [@jakub-d](https://github.com/jakub-d))
-* Add support for NFSv4 and GlusterFS in GCI base image ([#37336](https://github.com/kubernetes/kubernetes/pull/37336), [@jingxu97](https://github.com/jingxu97))
-* Use generous limits in the resource usage tracking tests ([#36623](https://github.com/kubernetes/kubernetes/pull/36623), [@yujuhong](https://github.com/yujuhong))
-
-
-
-# v1.4.6
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads for v1.4.6
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes.tar.gz) | `6f8242aa29493e1f824997748419e4a287c28b06ed13f17b1ba94bf07fdfa3be`
-[kubernetes-src.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-src.tar.gz) | `a2a2d885d246300b52adb5d7e1471b382c77d90a816618518c2a6e9941208e40`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-client-darwin-386.tar.gz) | `4db6349c976f893d0000dcb5b2ab09327824d0c38b3beab961711a0951cdfc82`
-[kubernetes-client-darwin-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-client-darwin-amd64.tar.gz) | `2d31dea858569f518410effb20d3c3b9a6798d706dacbafd85f1f67f9ccbe288`
-[kubernetes-client-linux-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-client-linux-386.tar.gz) | `7980cf6132a7a6bf3816b8fd60d7bc1c9cb447d45196c31312b9d73567010909`
-[kubernetes-client-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-client-linux-amd64.tar.gz) | `95b3cbd339f7d104d5b69b08d53060bfc78bd4ee7a94ede7ba4c0a76b615f8b1`
-[kubernetes-client-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-client-linux-arm64.tar.gz) | `0f03cff262b0f4cc218b0f79294b4cbd8f92146c31137c75a27012d956864c79`
-[kubernetes-client-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-client-linux-arm.tar.gz) | `f8c76fe8c41a5084cc1a1ab3e08d7e2d815f7baedfadac0dc6f9157ed2c607c9`
-[kubernetes-client-windows-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-client-windows-386.tar.gz) | `c29b3c8c8a72246852db048e922ad2221f35e1c309571f73fd9f3d9b01be5f79`
-[kubernetes-client-windows-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-client-windows-amd64.tar.gz) | `95bf20bdbe354476bbd3647adf72985698ded53a59819baa8268b5811e19f952`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-server-linux-amd64.tar.gz) | `f0a60c45f3360696431288826e56df3b8c18c1dc6fc3f0ea83409f970395e38f`
-[kubernetes-server-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-server-linux-arm64.tar.gz) | `8c667d4792fcfee821a2041e5d0356e1abc2b3fa6fe7b69c5479e48c858ba29c`
-[kubernetes-server-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.6/kubernetes-server-linux-arm.tar.gz) | `c57246d484b5f98d6aa16591f2b4c4c1a01ebbc7be05bce8690a4f3b88582844`
-
-## Changelog since v1.4.5
-
-### Other notable changes
-
-* Fix issue in reconstruct volume data when kubelet restarts ([#36616](https://github.com/kubernetes/kubernetes/pull/36616), [@jingxu97](https://github.com/jingxu97))
-* Add sync state loop in master's volume reconciler ([#34859](https://github.com/kubernetes/kubernetes/pull/34859), [@jingxu97](https://github.com/jingxu97))
-* AWS: strong-typing for k8s vs aws volume ids ([#35883](https://github.com/kubernetes/kubernetes/pull/35883), [@justinsb](https://github.com/justinsb))
-* Bump GCI version to gci-beta-55-8872-47-0 ([#36679](https://github.com/kubernetes/kubernetes/pull/36679), [@mtaufen](https://github.com/mtaufen))
-
-```
- gci-beta-55-8872-47-0:
- Date: Nov 11, 2016
- Kernel: ChromiumOS-4.4
- Kubernetes: v1.4.5
- Docker: v1.11.2
- Changelog (vs 55-8872-18-0)
- * Cherry-pick runc PR#608: Eliminate redundant parsing of mountinfo
- * Updated kubernetes to v1.4.5
- * Fixed a bug in e2fsprogs that caused mke2fs to take a very long time. Upstream fix: http://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?h=next&id=d33e690fe7a6cbeb51349d9f2c7fb16a6ebec9c2
-```
-
-* Fix fetching pids running in a cgroup, which caused problems with OOM score adjustments & setting the /system cgroup ("misc" in the summary API). ([#36614](https://github.com/kubernetes/kubernetes/pull/36614), [@timstclair](https://github.com/timstclair))
-* DELETE requests can now pass in their DeleteOptions as a query parameter or a body parameter, rather than just as a body parameter. ([#35806](https://github.com/kubernetes/kubernetes/pull/35806), [@bdbauer](https://github.com/bdbauer))
-* rkt: Convert image name to be a valid acidentifier ([#34375](https://github.com/kubernetes/kubernetes/pull/34375), [@euank](https://github.com/euank))
-* Remove stale volumes if endpoint/svc creation fails. ([#35285](https://github.com/kubernetes/kubernetes/pull/35285), [@humblec](https://github.com/humblec))
-* Remove Job also from .status.active for Replace strategy ([#35420](https://github.com/kubernetes/kubernetes/pull/35420), [@soltysh](https://github.com/soltysh))
-* Update PodAntiAffinity to ignore calls to subresources ([#35608](https://github.com/kubernetes/kubernetes/pull/35608), [@soltysh](https://github.com/soltysh))
-* Adds TCPCloseWaitTimeout option to kube-proxy for sysctl nf_conntrack_tcp_timeout_time_wait ([#35919](https://github.com/kubernetes/kubernetes/pull/35919), [@bowei](https://github.com/bowei))
-* Fix how we iterate over active jobs when removing them for Replace policy ([#36161](https://github.com/kubernetes/kubernetes/pull/36161), [@soltysh](https://github.com/soltysh))
-* Bump GCI version to latest m55 version in GCE for K8s 1.4 ([#36302](https://github.com/kubernetes/kubernetes/pull/36302), [@mtaufen](https://github.com/mtaufen))
-* Add a check for file size if the reading content returns empty ([#33976](https://github.com/kubernetes/kubernetes/pull/33976), [@jingxu97](https://github.com/jingxu97))
-* Add a retry when reading a file content from a container ([#35560](https://github.com/kubernetes/kubernetes/pull/35560), [@jingxu97](https://github.com/jingxu97))
-* Skip CLOSE_WAIT e2e test if server is 1.4.5 ([#36404](https://github.com/kubernetes/kubernetes/pull/36404), [@bowei](https://github.com/bowei))
-* Adds etcd3 changes ([#36232](https://github.com/kubernetes/kubernetes/pull/36232), [@wojtek-t](https://github.com/wojtek-t))
-* Adds TCPCloseWaitTimeout option to kube-proxy for sysctl nf_conntrack_tcp_timeout_time_wait ([#36099](https://github.com/kubernetes/kubernetes/pull/36099), [@bowei](https://github.com/bowei))
-
-
-
-# v1.4.5
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads for v1.4.5
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes.tar.gz) | `339f4d1c7a374ddb32334268c4af8dae0b86d1567a9c812087d672a7defe233c`
-[kubernetes-src.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-src.tar.gz) | `69b1b022400794d491200a9365ea9bf735567348d0299920462cf7167c76ba61`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-client-darwin-386.tar.gz) | `6012dab54687f7eb41ce9cd6b4676e15b774fbfbeadb7e00c806ba3f63fe10ce`
-[kubernetes-client-darwin-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-client-darwin-amd64.tar.gz) | `981b321f4393fc9892c6558321e1d8ee6d8256b85f09266c8794fdcee9cb1c07`
-[kubernetes-client-linux-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-client-linux-386.tar.gz) | `75ce408ef9f4b277718701c025955cd628eeee4180d8e9e7fd8ecf008878429f`
-[kubernetes-client-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-client-linux-amd64.tar.gz) | `0c0768d7646cec490ca1e47a4e2f519724fc75d984d411aa92fe17a82356532b`
-[kubernetes-client-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-client-linux-arm64.tar.gz) | `910a6465b1ecbf1aae8f6cd16e35ac7ad7b0e598557941937d02d16520e2e37c`
-[kubernetes-client-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-client-linux-arm.tar.gz) | `29644cca627cdce6c7aad057d9680eee87d21b1bbd6af02f7277f24eccbc95f7`
-[kubernetes-client-windows-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-client-windows-386.tar.gz) | `dc249cc0f6cbb0e0705f7b43929461b6702ae91148218da070bb99e8a8f6f108`
-[kubernetes-client-windows-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-client-windows-amd64.tar.gz) | `d60d275ad5f45ebe83a458912de96fd8381540d4bcf91023fe2173af6acd535b`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-server-linux-amd64.tar.gz) | `25e12aaf3f93c320f6aa640bb1430d4c0e99e3b0e83bcef660d2a513bdef2c20`
-[kubernetes-server-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-server-linux-arm64.tar.gz) | `e768146c9476b96f092409030349b4c5bb9682287567fe2732888ad5ed1d3ede`
-[kubernetes-server-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.5/kubernetes-server-linux-arm.tar.gz) | `26581dc0fc31542c831a588baad9ad391598e5b2ff299a0fc92a2c04990b3edd`
-
-## Changelog since v1.4.4
-
-### Other notable changes
-
-* Fix volume states out of sync problem after kubelet restarts ([#33616](https://github.com/kubernetes/kubernetes/pull/33616), [@jingxu97](https://github.com/jingxu97))
-* cross: add IsNotMountPoint() to mount_unsupported.go ([#35566](https://github.com/kubernetes/kubernetes/pull/35566), [@rootfs](https://github.com/rootfs))
-* Bump GCE debian image to container-vm-v20161025 (CVE-2016-5195 Dirty COW) ([#35825](https://github.com/kubernetes/kubernetes/pull/35825), [@dchen1107](https://github.com/dchen1107))
-* Avoid overriding system and kubelet cgroups on GCI ([#35319](https://github.com/kubernetes/kubernetes/pull/35319), [@vishh](https://github.com/vishh))
- * Make the kubectl from k8s release the default on GCI
-* kubelet summary rootfs now refers to the filesystem that contains the Kubelet RootDirectory (var/lib/kubelet) instead of cadvisor's rootfs ( / ), since they may be different filesystems. ([#35136](https://github.com/kubernetes/kubernetes/pull/35136), [@dashpole](https://github.com/dashpole))
-* Fix cadvisor_unsupported and the crossbuild ([#35817](https://github.com/kubernetes/kubernetes/pull/35817), [@luxas](https://github.com/luxas))
-* kubenet: SyncHostports for both running and ready to run pods. ([#31388](https://github.com/kubernetes/kubernetes/pull/31388), [@yifan-gu](https://github.com/yifan-gu))
-* GC pod ips ([#35572](https://github.com/kubernetes/kubernetes/pull/35572), [@bprashanth](https://github.com/bprashanth))
-* Fix version string generation for local version different from release and not based on `-alpha.no` or `-beta.no` suffixed tag. ([#34612](https://github.com/kubernetes/kubernetes/pull/34612), [@jellonek](https://github.com/jellonek))
-* Node status updater should SetNodeStatusUpdateNeeded if it fails to update status ([#34368](https://github.com/kubernetes/kubernetes/pull/34368), [@jingxu97](https://github.com/jingxu97))
-* Fixed flakes caused by petset tests. ([#35158](https://github.com/kubernetes/kubernetes/pull/35158), [@foxish](https://github.com/foxish))
-* Added rkt binary to GCI ([#35321](https://github.com/kubernetes/kubernetes/pull/35321), [@vishh](https://github.com/vishh))
-* Bump container-vm version in config-test.sh ([#35705](https://github.com/kubernetes/kubernetes/pull/35705), [@mtaufen](https://github.com/mtaufen))
-* Delete all firewall rules (and optionally network) on GCE/GKE cluster teardown ([#34577](https://github.com/kubernetes/kubernetes/pull/34577), [@ixdy](https://github.com/ixdy))
-* Fixed mutation warning in Attach/Detach controller ([#35273](https://github.com/kubernetes/kubernetes/pull/35273), [@jsafrane](https://github.com/jsafrane))
-* Dynamic provisioning for vSphere ([#30836](https://github.com/kubernetes/kubernetes/pull/30836), [@abrarshivani](https://github.com/abrarshivani))
-* Update grafana version used by default in kubernetes to 3.1.1 ([#35435](https://github.com/kubernetes/kubernetes/pull/35435), [@Crassirostris](https://github.com/Crassirostris))
-* vSphere Kube-up: resolve vm-names on all nodes ([#35365](https://github.com/kubernetes/kubernetes/pull/35365), [@kerneltime](https://github.com/kerneltime))
-* Improve source IP preservation test, fail the test instead of panic. ([#34030](https://github.com/kubernetes/kubernetes/pull/34030), [@MrHohn](https://github.com/MrHohn))
-* Fix [#31085](https://github.com/kubernetes/kubernetes/pull/31085), include output checking in retry loop ([#34107](https://github.com/kubernetes/kubernetes/pull/34107), [@MrHohn](https://github.com/MrHohn))
-* vSphere kube-up: Wait for cbr0 configuration to complete before setting up routes. ([#35232](https://github.com/kubernetes/kubernetes/pull/35232), [@kerneltime](https://github.com/kerneltime))
-* Substitute gcloud regex with regexp ([#35346](https://github.com/kubernetes/kubernetes/pull/35346), [@bprashanth](https://github.com/bprashanth))
-* Fix PDB e2e test, off-by-one ([#35274](https://github.com/kubernetes/kubernetes/pull/35274), [@soltysh](https://github.com/soltysh))
-* etcd3: API storage - decouple decorator from filter ([#31189](https://github.com/kubernetes/kubernetes/pull/31189), [@hongchaodeng](https://github.com/hongchaodeng))
-* etcd3: v3client + grpc client leak fix ([#31704](https://github.com/kubernetes/kubernetes/pull/31704), [@timothysc](https://github.com/timothysc))
-* etcd3: watcher logging error ([#32831](https://github.com/kubernetes/kubernetes/pull/32831), [@hongchaodeng](https://github.com/hongchaodeng))
-* etcd: watcher centralize error handling ([#32907](https://github.com/kubernetes/kubernetes/pull/32907), [@hongchaodeng](https://github.com/hongchaodeng))
-* etcd: stop watcher when watch channel is closed ([#33003](https://github.com/kubernetes/kubernetes/pull/33003), [@hongchaodeng](https://github.com/hongchaodeng))
-* etcd3: dereference the UID pointer for a readable error message. ([#33349](https://github.com/kubernetes/kubernetes/pull/33349), [@madhusudancs](https://github.com/madhusudancs))
-* etcd3: pass SelectionPredicate instead of Filter to storage layer ([#31190](https://github.com/kubernetes/kubernetes/pull/31190), [@hongchaodeng](https://github.com/hongchaodeng))
-* etcd3: make gets for previous value in watch serialize-able ([#34089](https://github.com/kubernetes/kubernetes/pull/34089), [@wojtek-t](https://github.com/wojtek-t))
-* etcd3: minor cleanups ([#34234](https://github.com/kubernetes/kubernetes/pull/34234), [@wojtek-t](https://github.com/wojtek-t))
-* etcd3: update etcd godep to 3.0.9 to address TestWatch issues ([#32822](https://github.com/kubernetes/kubernetes/pull/32822), [@timothysc](https://github.com/timothysc))
-* etcd3: update to etcd 3.0.10 ([#33393](https://github.com/kubernetes/kubernetes/pull/33393), [@timothysc](https://github.com/timothysc))
-* etcd3: use PrevKV to remove additional get ([#34246](https://github.com/kubernetes/kubernetes/pull/34246), [@hongchaodeng](https://github.com/hongchaodeng))
-* etcd3: avoid unnecessary decoding in etcd3 client ([#34435](https://github.com/kubernetes/kubernetes/pull/34435), [@wojtek-t](https://github.com/wojtek-t))
-* etcd3: fix suite ([#32477](https://github.com/kubernetes/kubernetes/pull/32477), [@wojtek-t](https://github.com/wojtek-t))
-
-
-
-# v1.4.4
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads for v1.4.4
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes.tar.gz) | `2732bfc56ceabc872b6af3f460cbda68c2384c95a1c0c72eb33e5ff0e03dc9da`
-[kubernetes-src.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-src.tar.gz) | `29c6cf1567e6b7f6c3ecb71acead083b7535b22ac20bd8166b29074e8a0f6441`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-client-darwin-386.tar.gz) | `e983b1837e4165e4bc8e361000468421f16dbd5ae90b0c49af6280dbcecf57b1`
-[kubernetes-client-darwin-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-client-darwin-amd64.tar.gz) | `8c58231c8340e546336b70d86b6a76285b9f7a0c13b802b350b68610dfaedb35`
-[kubernetes-client-linux-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-client-linux-386.tar.gz) | `33e5d2da52325367db08bcc80791cef2e21fdae176b496b063b3a37115f3f075`
-[kubernetes-client-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-client-linux-amd64.tar.gz) | `5fd6215ef0673f5a8e385660cf233d67d26dd79568c69e2328b103fbf1bd752a`
-[kubernetes-client-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-client-linux-arm64.tar.gz) | `2d6d0400cd59b042e2da074cbd3b13b9dc61da1dbba04468d67119294cf72435`
-[kubernetes-client-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-client-linux-arm.tar.gz) | `ff99f26082a77e37caa66aa07ec56bfc7963e6ac782550be5090a8b158f7e89a`
-[kubernetes-client-windows-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-client-windows-386.tar.gz) | `82e762727a8f607180a1e339e058cc9739ad55960d3517c5170bcd5b64179f13`
-[kubernetes-client-windows-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-client-windows-amd64.tar.gz) | `4de735ba72c729589efbcd2b8fc4920786fffd96850173c13cbf469819d00808`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-server-linux-amd64.tar.gz) | `6d5ff37941328df33c0efc5876bb7b82722bc584f1976fe632915db7bf3f316a`
-[kubernetes-server-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-server-linux-arm64.tar.gz) | `6ec40848ea29c0982b89c746d716b0958438a6eb774aea20a5ef7885a7060aed`
-[kubernetes-server-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.4/kubernetes-server-linux-arm.tar.gz) | `43d6a3260d73cfe652af2ffa7b7092444fe57429cb45e90eb99f0a70012ee033`
-
-## Changelog since v1.4.3
-
-### Other notable changes
-
-* Update the GCI image to gci-dev-55-8872-18-0 ([#35243](https://github.com/kubernetes/kubernetes/pull/35243), [@maisem](https://github.com/maisem))
-* Change merge key for VolumeMount to mountPath ([#35071](https://github.com/kubernetes/kubernetes/pull/35071), [@thockin](https://github.com/thockin))
-* Turned-off etcd listening on public ports as potentially insecure. Removed ([#35192](https://github.com/kubernetes/kubernetes/pull/35192), [@jszczepkowski](https://github.com/jszczepkowski))
- * experimental support for master replication.
-* Add support for vSphere Cloud Provider when deploying via kubeup on vSphere. ([#31467](https://github.com/kubernetes/kubernetes/pull/31467), [@kerneltime](https://github.com/kerneltime))
-* Fix kube vsphere.kerneltime ([#34997](https://github.com/kubernetes/kubernetes/pull/34997), [@kerneltime](https://github.com/kerneltime))
-* HPA: fixed wrong count for target replicas calculations ([#34821](https://github.com/kubernetes/kubernetes/pull/34821)). ([#34955](https://github.com/kubernetes/kubernetes/pull/34955), [@jszczepkowski](https://github.com/jszczepkowski))
-* Fix leaking ingress resources in federated ingress e2e test. ([#34652](https://github.com/kubernetes/kubernetes/pull/34652), [@quinton-hoole](https://github.com/quinton-hoole))
-* azure: add PrimaryAvailabilitySet to config, only use nodes in that set in the loadbalancer pool ([#34526](https://github.com/kubernetes/kubernetes/pull/34526), [@colemickens](https://github.com/colemickens))
-* azure: lower log priority for skipped nic update message ([#34730](https://github.com/kubernetes/kubernetes/pull/34730), [@colemickens](https://github.com/colemickens))
-
-
-
-# v1.4.3
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.3/kubernetes.tar.gz) | `c3dccccc005bc22eaf814ccb8e72b4f876167ab38ac594bb7e44c98f162a0f1c`
-
-## Changelog since v1.4.2-beta.1
-
-### Other notable changes
-
-* Fix non-starting node controller in 1.4 branch ([#34895](https://github.com/kubernetes/kubernetes/pull/34895), [@wojtek-t](https://github.com/wojtek-t))
-* Cherrypick [#34851](https://github.com/kubernetes/kubernetes/pull/34851) "Only wait for cache syncs once in NodeController" ([#34861](https://github.com/kubernetes/kubernetes/pull/34861), [@jessfraz](https://github.com/jessfraz))
-* NodeController waits for informer sync before doing anything ([#34809](https://github.com/kubernetes/kubernetes/pull/34809), [@gmarek](https://github.com/gmarek))
-* Make NodeController recognize deletion tombstones ([#34786](https://github.com/kubernetes/kubernetes/pull/34786), [@davidopp](https://github.com/davidopp))
-* Fix panic in NodeController caused by receiving DeletedFinalStateUnknown object from the cache. ([#34694](https://github.com/kubernetes/kubernetes/pull/34694), [@gmarek](https://github.com/gmarek))
-* Update GlusterFS provisioning readme with endpoint/service details ([#31854](https://github.com/kubernetes/kubernetes/pull/31854), [@humblec](https://github.com/humblec))
-* Add logging for enabled/disabled API Groups ([#32198](https://github.com/kubernetes/kubernetes/pull/32198), [@deads2k](https://github.com/deads2k))
-* New federation deployment mechanism now allows non-GCP clusters. ([#34620](https://github.com/kubernetes/kubernetes/pull/34620), [@madhusudancs](https://github.com/madhusudancs))
- * Writes the federation kubeconfig to the local kubeconfig file.
-
-
-
-# v1.4.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.2/kubernetes.tar.gz) | `0730e207944ca96c9d9588a571a5eff0f8fdbb0e1287423513a2b2a4baca9f77`
-
-## Changelog since v1.4.2-beta.1
-
-### Other notable changes
-
-* Cherrypick [#34851](https://github.com/kubernetes/kubernetes/pull/34851) "Only wait for cache syncs once in NodeController" ([#34861](https://github.com/kubernetes/kubernetes/pull/34861), [@jessfraz](https://github.com/jessfraz))
-* NodeController waits for informer sync before doing anything ([#34809](https://github.com/kubernetes/kubernetes/pull/34809), [@gmarek](https://github.com/gmarek))
-* Make NodeController recognize deletion tombstones ([#34786](https://github.com/kubernetes/kubernetes/pull/34786), [@davidopp](https://github.com/davidopp))
-* Fix panic in NodeController caused by receiving DeletedFinalStateUnknown object from the cache. ([#34694](https://github.com/kubernetes/kubernetes/pull/34694), [@gmarek](https://github.com/gmarek))
-* Update GlusterFS provisioning readme with endpoint/service details ([#31854](https://github.com/kubernetes/kubernetes/pull/31854), [@humblec](https://github.com/humblec))
-* Add logging for enabled/disabled API Groups ([#32198](https://github.com/kubernetes/kubernetes/pull/32198), [@deads2k](https://github.com/deads2k))
-* New federation deployment mechanism now allows non-GCP clusters. ([#34620](https://github.com/kubernetes/kubernetes/pull/34620), [@madhusudancs](https://github.com/madhusudancs))
- * Writes the federation kubeconfig to the local kubeconfig file.
-
-
-
-# v1.4.2-beta.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.2-beta.1/kubernetes.tar.gz) | `b72986a0adcb7e08feb580c5d72de129ac2ecc128c154fd79785bac2d2e760f7`
-
-## Changelog since v1.4.1
-
-### Other notable changes
-
-* Fix base image pinning during upgrades via cluster/gce/upgrade.sh ([#33147](https://github.com/kubernetes/kubernetes/pull/33147), [@vishh](https://github.com/vishh))
-* Fix upgrade.sh image setup ([#34468](https://github.com/kubernetes/kubernetes/pull/34468), [@mtaufen](https://github.com/mtaufen))
-* Add `cifs-utils` to the hyperkube image. ([#34416](https://github.com/kubernetes/kubernetes/pull/34416), [@colemickens](https://github.com/colemickens))
-* Match GroupVersionKind against specific version ([#34010](https://github.com/kubernetes/kubernetes/pull/34010), [@soltysh](https://github.com/soltysh))
-* Fixed an issue that caused a credential error when deploying federation control plane onto a GKE cluster. ([#31747](https://github.com/kubernetes/kubernetes/pull/31747), [@madhusudancs](https://github.com/madhusudancs))
-* Test x509 intermediates correctly ([#34524](https://github.com/kubernetes/kubernetes/pull/34524), [@liggitt](https://github.com/liggitt))
-
-
-
-# v1.4.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.1/kubernetes.tar.gz) | `b51971d872426ba71bb09b9a9191bb95fc0e48390dc287a9080e3876c8e19a95`
-
-## Changelog since v1.4.1-beta.2
-
-**No notable changes for this release**
-
-
-
-# v1.4.1-beta.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.1-beta.2/kubernetes.tar.gz) | `708fbaabf17a69c69c2c9a715e152a29d47334b8c98d217ba17e9b42d6770f25`
-
-## Changelog since v1.4.0
-
-### Other notable changes
-
-* Update GCI base image: ([#34156](https://github.com/kubernetes/kubernetes/pull/34156), [@adityakali](https://github.com/adityakali))
- * Enabled VXLAN and IP_SET config options in kernel to support some networking tools (ebtools)
- * OpenSSL CVE fixes
-* ContainerVm/GCI image: try to use ifdown/ifup if available ([#33595](https://github.com/kubernetes/kubernetes/pull/33595), [@freehan](https://github.com/freehan))
-* Make the informer library available for the go client library. ([#32718](https://github.com/kubernetes/kubernetes/pull/32718), [@mikedanese](https://github.com/mikedanese))
-* Enforce Disk based pod eviction with GCI base image in Kubelet ([#33520](https://github.com/kubernetes/kubernetes/pull/33520), [@vishh](https://github.com/vishh))
-* Fix nil pointer issue when getting metrics from volume mounter ([#34251](https://github.com/kubernetes/kubernetes/pull/34251), [@jingxu97](https://github.com/jingxu97))
-* Enable kubectl describe rs to work when apiserver does not support pods ([#33794](https://github.com/kubernetes/kubernetes/pull/33794), [@nikhiljindal](https://github.com/nikhiljindal))
-* Increase timeout for federated ingress test. ([#33610](https://github.com/kubernetes/kubernetes/pull/33610), [@quinton-hoole](https://github.com/quinton-hoole))
-* Remove headers that are unnecessary for proxy target ([#34076](https://github.com/kubernetes/kubernetes/pull/34076), [@mbohlool](https://github.com/mbohlool))
-* Support graceful termination in kube-dns ([#31894](https://github.com/kubernetes/kubernetes/pull/31894), [@MrHohn](https://github.com/MrHohn))
-* Added --log-facility flag to enhance dnsmasq logging ([#32422](https://github.com/kubernetes/kubernetes/pull/32422), [@MrHohn](https://github.com/MrHohn))
-* Split dns healthcheck into two different urls ([#32406](https://github.com/kubernetes/kubernetes/pull/32406), [@MrHohn](https://github.com/MrHohn))
-* Tune down initialDelaySeconds for readinessProbe. ([#33146](https://github.com/kubernetes/kubernetes/pull/33146), [@MrHohn](https://github.com/MrHohn))
-* Bump up addon kube-dns to v20 for graceful termination ([#33774](https://github.com/kubernetes/kubernetes/pull/33774), [@MrHohn](https://github.com/MrHohn))
-* Send recycle events from pod to pv. ([#27714](https://github.com/kubernetes/kubernetes/pull/27714), [@jsafrane](https://github.com/jsafrane))
-* Limit the number of names per image reported in the node status ([#32914](https://github.com/kubernetes/kubernetes/pull/32914), [@yujuhong](https://github.com/yujuhong))
-* Fixes in HPA: consider only running pods; proper denominator in avg request calculations. ([#33735](https://github.com/kubernetes/kubernetes/pull/33735), [@jszczepkowski](https://github.com/jszczepkowski))
-* Fix audit_test regex for iso8601 timestamps ([#32593](https://github.com/kubernetes/kubernetes/pull/32593), [@johnbieren](https://github.com/johnbieren))
-* Limit the number of names per image reported in the node status ([#32914](https://github.com/kubernetes/kubernetes/pull/32914), [@yujuhong](https://github.com/yujuhong))
-* Fix the DOCKER_OPTS appending bug. ([#33163](https://github.com/kubernetes/kubernetes/pull/33163), [@DjangoPeng](https://github.com/DjangoPeng))
-* Remove cpu limits for dns pod to avoid CPU starvation ([#33227](https://github.com/kubernetes/kubernetes/pull/33227), [@vishh](https://github.com/vishh))
-* Fixes memory/goroutine leak in Federation Service controller. ([#33359](https://github.com/kubernetes/kubernetes/pull/33359), [@shashidharatd](https://github.com/shashidharatd))
-* Use UpdateStatus, not Update, to add LoadBalancerStatus to Federated Ingress. ([#33605](https://github.com/kubernetes/kubernetes/pull/33605), [@quinton-hoole](https://github.com/quinton-hoole))
-* Initialize podsWithAffinity to avoid scheduler panic ([#33967](https://github.com/kubernetes/kubernetes/pull/33967), [@xiang90](https://github.com/xiang90))
-* Heal the namespaceless ingresses in federation e2e. ([#33977](https://github.com/kubernetes/kubernetes/pull/33977), [@quinton-hoole](https://github.com/quinton-hoole))
-* Add missing argument to log message in federated ingress controller. ([#34158](https://github.com/kubernetes/kubernetes/pull/34158), [@quinton-hoole](https://github.com/quinton-hoole))
-* Fix issue in updating device path when volume is attached multiple times ([#33796](https://github.com/kubernetes/kubernetes/pull/33796), [@jingxu97](https://github.com/jingxu97))
-* To reduce memory usage to reasonable levels in smaller clusters, kube-apiserver now sets the deserialization cache size based on the target memory usage. ([#34000](https://github.com/kubernetes/kubernetes/pull/34000), [@wojtek-t](https://github.com/wojtek-t))
-* Fix possible panic in PodAffinityChecker ([#33086](https://github.com/kubernetes/kubernetes/pull/33086), [@ivan4th](https://github.com/ivan4th))
-* Fix race condition in setting node statusUpdateNeeded flag ([#32807](https://github.com/kubernetes/kubernetes/pull/32807), [@jingxu97](https://github.com/jingxu97))
-* kube-proxy: Add a lower-bound for conntrack (128k default) ([#33051](https://github.com/kubernetes/kubernetes/pull/33051), [@thockin](https://github.com/thockin))
-* Use patched golang1.7.1 for cross-builds targeting darwin ([#33803](https://github.com/kubernetes/kubernetes/pull/33803), [@ixdy](https://github.com/ixdy))
-* Move HighWaterMark to the top of the struct in order to fix arm ([#33117](https://github.com/kubernetes/kubernetes/pull/33117), [@luxas](https://github.com/luxas))
-* Move HighWaterMark to the top of the struct in order to fix arm, second time ([#33376](https://github.com/kubernetes/kubernetes/pull/33376), [@luxas](https://github.com/luxas))
-
-
-
-# v1.4.0
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0/kubernetes.tar.gz) | `6cf3d78230f7659b87fa399a56a7aaed1fde6a73be9d05e25feedacfbd8d5a16`
-
-## Major Themes
-
-- **Simplified User Experience**
- - Easier to get a cluster up and running (eg: `kubeadm`, intra-cluster bootstrapping)
- - Easier to understand a cluster (eg: API audit logs, server-based API defaults)
-- **Stateful Appplication Support**
- - Enhanced persistence capabilities (eg: `StorageClasses`, new volume plugins)
- - New resources and scheduler features (eg: `ScheduledJob` resource, pod/node affinity/anti-affinity)
-- **Cluster Federation**
- - Global Multi-cluster HTTP(S) Ingress across GCE and GKE clusters.
- - Expanded support for federated hybrid-cloud resources including ReplicaSets, Secrets, Namespaces and Events.
-- **Security**
- - Increased pod-level security granularity (eg: Container Image Policies, AppArmor and `sysctl` support)
- - Increased cluster-level security granularity (eg: Access Review API)
-
-## Features
-
-This is the first release tracked via the use of the [kubernetes/features](https://github.com/kubernetes/features) issues repo. Each Feature issue is owned by a Special Interest Group from [kubernetes/community](https://github.com/kubernetes/community)
-
-- **API Machinery**
- - [alpha] Generate audit logs for every request user performs against secured API server endpoint. ([docs](http://kubernetes.io/docs/admin/audit/)) ([kubernetes/features#22](https://github.com/kubernetes/features/issues/22))
- - [beta] `kube-apiserver` now publishes a swagger 2.0 spec in addition to a swagger 1.2 spec ([kubernetes/features#53](https://github.com/kubernetes/features/issues/53))
- - [beta] Server-side garbage collection is enabled by default. See [user-guide](http://kubernetes.io/docs/user-guide/garbage-collection/)
-- **Apps**
- - [alpha] Introducing 'ScheduledJobs', which allow running time based Jobs, namely once at a specified time or repeatedly at specified point in time. ([docs](http://kubernetes.io/docs/user-guide/scheduled-jobs/)) ([kubernetes/features#19](https://github.com/kubernetes/features/issues/19))
-- **Auth**
- - [alpha] Container Image Policy allows an access controller to determine whether a pod may be scheduled based on a policy ([docs](http://kubernetes.io/docs/admin/admission-controllers/#imagepolicywebhook)) ([kubernetes/features#59](https://github.com/kubernetes/features/issues/59))
- - [alpha] Access Review APIs expose authorization engine to external inquiries for delegation, inspection, and debugging ([docs](http://kubernetes.io/docs/admin/authorization/)) ([kubernetes/features#37](https://github.com/kubernetes/features/issues/37))
-- **Cluster Lifecycle**
- - [alpha] Ensure critical cluster infrastructure pods (Heapster, DNS, etc.) can schedule by evicting regular pods when necessary to make the critical pods schedule. ([docs](http://kubernetes.io/docs/admin/rescheduler/#guaranteed-scheduling-of-critical-add-on-pods)) ([kubernetes/features#62](https://github.com/kubernetes/features/issues/62))
- - [alpha] Simplifies bootstrapping of TLS secured communication between the API server and kubelet. ([docs](http://kubernetes.io/docs/admin/master-node-communication/#kubelet-tls-bootstrap)) ([kubernetes/features#43](https://github.com/kubernetes/features/issues/43))
- - [alpha] The `kubeadm` tool makes it much easier to bootstrap Kubernetes. ([docs](http://kubernetes.io/docs/getting-started-guides/kubeadm/)) ([kubernetes/features#11](https://github.com/kubernetes/features/issues/11))
-- **Federation**
- - [alpha] Creating a `Federated Ingress` is as simple as submitting
- an `Ingress` creation request to the Federation API Server. The
- Federation control system then creates and maintains a single
- global virtual IP to load balance incoming HTTP(S) traffic across
- some or all the registered clusters, across all regions. Google's
- GCE L7 LoadBalancer is the first supported implementation, and
- is available in this release.
- ([docs](http://kubernetes.io/docs/user-guide/federation/federated-ingress.md))
- ([kubernetes/features#82](https://github.com/kubernetes/features/issues/82))
- - [beta] `Federated Replica Sets` create and maintain matching
- `Replica Set`s in some or all clusters in a federation, with the
- desired replica count distributed equally or according to
- specified per-cluster weights.
- ([docs](http://kubernetes.io/docs/user-guide/federation/federated-replicasets.md))
- ([kubernetes/features#46](https://github.com/kubernetes/features/issues/46))
- - [beta] `Federated Secrets` are created and kept consistent across all clusters in a federation.
- ([docs](http://kubernetes.io/docs/user-guide/federation/federated-secrets.md))
- ([kubernetes/features#68](https://github.com/kubernetes/features/issues/68))
- - [beta] Federation API server gained support for events and many
- federation controllers now report important events.
- ([docs](http://kubernetes.io/docs/user-guide/federation/events))
- ([kubernetes/features#70](https://github.com/kubernetes/features/issues/70))
- - [alpha] Creating a `Federated Namespace` causes matching
- `Namespace`s to be created and maintained in all the clusters registered with that federation. ([docs](http://kubernetes.io/docs/user-guide/federation/federated-namespaces.md)) ([kubernetes/features#69](https://github.com/kubernetes/features/issues/69))
- - [alpha] ingress has alpha support for a single master multi zone cluster ([docs](http://kubernetes.io/docs/user-guide/ingress.md#failing-across-availability-zones)) ([kubernetes/features#52](https://github.com/kubernetes/features/issues/52))
-- **Network**
- - [alpha] Service LB now has alpha support for preserving client source IP ([docs](http://kubernetes.io/docs/user-guide/load-balancer/)) ([kubernetes/features#27](https://github.com/kubernetes/features/issues/27))
-- **Node**
- - [alpha] Publish node performance dashboard at http://node-perf-dash.k8s.io/#/builds ([docs](https://github.com/kubernetes/contrib/blob/master/node-perf-dash/README.md)) ([kubernetes/features#83](https://github.com/kubernetes/features/issues/83))
- - [alpha] Pods now have alpha support for setting whitelisted, safe sysctls. Unsafe sysctls can be whitelisted on the kubelet. ([docs](http://kubernetes.io/docs/admin/sysctls/)) ([kubernetes/features#34](https://github.com/kubernetes/features/issues/34))
- - [beta] AppArmor profiles can be specified & applied to pod containers ([docs](http://kubernetes.io/docs/admin/apparmor/)) ([kubernetes/features#24](https://github.com/kubernetes/features/issues/24))
- - [beta] Cluster policy to control access and defaults of security related features ([docs](http://kubernetes.io/docs/user-guide/pod-security-policy/)) ([kubernetes/features#5](https://github.com/kubernetes/features/issues/5))
- - [stable] kubelet is able to evict pods when it observes disk pressure ([docs](http://kubernetes.io/docs/admin/out-of-resource/)) ([kubernetes/features#39](https://github.com/kubernetes/features/issues/39))
- - [stable] Automated docker validation results posted to https://k8s-testgrid.appspot.com/docker [kubernetes/features#57](https://github.com/kubernetes/features/issues/57)
-- **Scheduling**
- - [alpha] Allows pods to require or prohibit (or prefer or prefer not) co-scheduling on the same node (or zone or other topology domain) as another set of pods. ([docs](http://kubernetes.io/docs/user-guide/node-selection/) ([kubernetes/features#51](https://github.com/kubernetes/features/issues/51))
-- **Storage**
- - [beta] Persistent Volume provisioning now supports multiple provisioners using StorageClass configuration. ([docs](http://kubernetes.io/docs/user-guide/persistent-volumes/)) ([kubernetes/features#36](https://github.com/kubernetes/features/issues/36))
- - [stable] New volume plugin for the Quobyte Distributed File System ([docs](http://kubernetes.io/docs/user-guide/volumes/#quobyte)) ([kubernetes/features#80](https://github.com/kubernetes/features/issues/80))
- - [stable] New volume plugin for Azure Data Disk ([docs](http://kubernetes.io/docs/user-guide/volumes/#azurediskvolume)) ([kubernetes/features#79](https://github.com/kubernetes/features/issues/79))
-- **UI**
- - [stable] Kubernetes Dashboard UI - a great looking Kubernetes Dashboard UI with 90% CLI parity for at-a-glance management. [docs](https://github.com/kubernetes/dashboard)
- - [stable] `kubectl` no longer applies defaults before sending objects to the server in create and update requests, allowing the server to apply the defaults. ([kubernetes/features#55](https://github.com/kubernetes/features/issues/55))
-
-## Known Issues
-
-- Completed pods lose logs across node upgrade ([#32324](https://github.com/kubernetes/kubernetes/issues/32324))
-- Pods are deleted across node upgrade ([#32323](https://github.com/kubernetes/kubernetes/issues/32323))
-- Secure master -> node communication ([#11816](https://github.com/kubernetes/kubernetes/issues/11816))
-- upgrading master doesn't upgrade kubectl ([#32538](https://github.com/kubernetes/kubernetes/issues/32538))
-- Specific error message on failed rolling update issued by older kubectl against 1.4 master ([#32751](https://github.com/kubernetes/kubernetes/issues/32751))
-- bump master cidr range from /30 to /29 ([#32886](https://github.com/kubernetes/kubernetes/issues/32886))
-- non-hostNetwork daemonsets will almost always have a pod that fails to schedule ([#32900](https://github.com/kubernetes/kubernetes/issues/32900))
-- Service loadBalancerSourceRanges doesn't respect updates ([#33033](https://github.com/kubernetes/kubernetes/issues/33033))
-- disallow user to update loadbalancerSourceRanges ([#33346](https://github.com/kubernetes/kubernetes/issues/33346))
-
-## Notable Changes to Existing Behavior
-
-### Deployments
-
-- ReplicaSets of paused Deployments are now scaled while the Deployment is paused. This is retroactive to existing Deployments.
-- When scaling a Deployment during a rollout, the ReplicaSets of all Deployments are now scaled proportionally based on the number of replicas they each have instead of only scaling the newest ReplicaSet.
-
-### kubectl rolling-update: < v1.4.0 client vs >=v1.4.0 cluster
-
-Old version kubectl's rolling-update command is compatible with Kubernetes 1.4 and higher only if you specify a new replication controller name. You will need to update to kubectl 1.4 or higher to use the rolling update command against a 1.4 cluster if you want to keep the original name, or you'll have to do two rolling updates.
-
-If you do happen to use old version kubectl's rolling update against a 1.4 cluster, it will fail, usually with an error message that will direct you here. If you saw that error, then don't worry, the operation succeeded except for the part where the new replication controller is renamed back to the old name. You can just do another rolling update using kubectl 1.4 or higher to change the name back: look for a replication controller that has the original name plus a random suffix.
-
-Unfortunately, there is a much rarer second possible failure mode: the replication controller gets renamed to the old name, but there is a duplicated set of pods in the cluster. kubectl will not report an error since it thinks its job is done.
-
-If this happens to you, you can wait at most 10 minutes for the replication controller to start a resync, the extra pods will then be deleted. Or, you can manually trigger a resync by change the replicas in the spec of the replication controller.
-
-### kubectl delete: < v1.4.0 client vs >=v1.4.0 cluster
-
-If you use an old version kubectl to delete a replication controller or replicaset, then after the delete command has returned, the replication controller or the replicaset will continue to exist in the key-value store for a short period of time (<1s). You probably will not notice any difference if you use kubectl manually, but you might notice it if you are using kubectl in a script.
-
-### DELETE operation in REST API
-
-* **Replication controller & Replicaset**: the DELETE request of a replication controller or a replicaset becomes asynchronous by default. The object will continue to exist in the key-value store for some time. The API server will set its metadata.deletionTimestamp, add the "orphan" finalizer to its metadata.finalizers. The object will be deleted from the key-value store after the garbage collector orphans its dependents. Please refer to this [user-guide](http://kubernetes.io/docs/user-guide/garbage-collector/) for more information regarding the garbage collection.
-
-* **Other objects**: no changes unless you explicitly request orphaning.
-
-## Action Required Before Upgrading
-
-- If you are using Kubernetes to manage `docker` containers, please be aware Kubernetes has been validated to work with docker 1.9.1, docker 1.11.2 (#23397), and docker 1.12.0 (#28698)
-- If you upgrade your apiserver to 1.4.x but leave your kubelets at 1.3.x, they will not report init container status, but init containers will work properly. Upgrading kubelets to 1.4.x fixes this.
-- The NamespaceExists and NamespaceAutoProvision admission controllers have been removed, use the NamespaceLifecycle admission controller instead (#31250, @derekwaynecarr)
-- If upgrading Cluster Federation components from 1.3.x, the `federation-apiserver` and `federation-controller-manager` binaries have been folded into `hyperkube`. Please switch to using that instead. (#29929, @madhusudancs)
-- If you are using the PodSecurityPolicy feature (eg: `kubectl get podsecuritypolicy` does not error, and returns one or more objects), be aware that init containers have moved from alpha to beta. If there are any pods with the key `pods.beta.kubernetes.io/init-containers`, then that pod may not have been filtered by the PodSecurityPolicy. You should find such pods and either delete them or audit them to ensure they do not use features that you intend to be blocked by PodSecurityPolicy. (#31026, @erictune)
-- If upgrading Cluster Federation components from 1.3.x, please ensure your cluster name is a valid DNS label (#30956, @nikhiljindal)
-- kubelet's `--config` flag has been deprecated, use `--pod-manifest-path` instead (#29999, @mtaufen)
-- If upgrading Cluster Federation components from 1.3.x, be aware the federation-controller-manager now looks for a different secret name. Run the following to migrate (#28938, @madhusudancs)
-
-```
-kubectl --namespace=federation get secret federation-apiserver-secret -o json | sed 's/federation-apiserver-secret/federation-apiserver-kubeconfig/g' | kubectl create -f -
-# optionally, remove the old secret
-kubectl delete secret --namespace=federation federation-apiserver-secret
-```
-
-- Kubernetes components no longer handle panics, and instead actively crash. All Kubernetes components should be run by something that actively restarts them. This is true of the default setups, but those with custom environments may need to double-check (#28800, @lavalamp)
-- kubelet now defaults to `--cloud-provider=auto-detect`, use `--cloud-provider=''` to preserve previous default of no cloud provider (#28258, @vishh)
-
-## Previous Releases Included in v1.4.0
-
-For a detailed list of all changes that were included in this release, please refer to the following CHANGELOG entries:
-
-- [v1.4.0-beta.10](CHANGELOG.md#v140-beta10)
-- [v1.4.0-beta.8](CHANGELOG.md#v140-beta8)
-- [v1.4.0-beta.7](CHANGELOG.md#v140-beta7)
-- [v1.4.0-beta.6](CHANGELOG.md#v140-beta6)
-- [v1.4.0-beta.5](CHANGELOG.md#v140-beta5)
-- [v1.4.0-beta.3](CHANGELOG.md#v140-beta3)
-- [v1.4.0-beta.2](CHANGELOG.md#v140-beta2)
-- [v1.4.0-beta.1](CHANGELOG.md#v140-beta1)
-- [v1.4.0-alpha.3](CHANGELOG.md#v140-alpha3)
-- [v1.4.0-alpha.2](CHANGELOG.md#v140-alpha2)
-- [v1.4.0-alpha.1](CHANGELOG.md#v140-alpha1)
-
-
-
-# v1.4.0-beta.11
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-beta.11/kubernetes.tar.gz) | `993e785f501d2fa86c9035b55a875c420059b3541a32b5822acf5fefb9a61916`
-
-## Changelog since v1.4.0-beta.10
-
-**No notable changes for this release**
-
-
-
-# v1.4.0-beta.10
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-beta.10/kubernetes.tar.gz) | `f3f1f0e5cf8234d640c8e9444c73343f04be8685f92b6a1ad66190f84de2e3a7`
-
-## Changelog since v1.4.0-beta.8
-
-### Other notable changes
-
-* Remove cpu limits for dns pod to avoid CPU starvation ([#33227](https://github.com/kubernetes/kubernetes/pull/33227), [@vishh](https://github.com/vishh))
-* Resolves x509 verification issue with masters dialing nodes when started with --kubelet-certificate-authority ([#33141](https://github.com/kubernetes/kubernetes/pull/33141), [@liggitt](https://github.com/liggitt))
-* Upgrading Container-VM base image for k8s on GCE. Brief changelog as follows: ([#32738](https://github.com/kubernetes/kubernetes/pull/32738), [@Amey-D](https://github.com/Amey-D))
- * - Fixed performance regression in veth device driver
- * - Docker and related binaries are statically linked
- * - Fixed the issue of systemd being oom-killable
-* Update cAdvisor to v0.24.0 - see the [cAdvisor changelog](https://github.com/google/cadvisor/blob/v0.24.0/CHANGELOG.md) for the full list of changes. ([#33052](https://github.com/kubernetes/kubernetes/pull/33052), [@timstclair](https://github.com/timstclair))
-
-
-
-# v1.4.0-beta.8
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-beta.8/kubernetes.tar.gz) | `31701c5c675c137887b58d7914e39b4c8a9c03767c0c3d89198a52f4476278ca`
-
-## Changelog since v1.4.0-beta.7
-
-**No notable changes for this release**
-
-
-
-# v1.4.0-beta.7
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-beta.7/kubernetes.tar.gz) | `51e8f3ebe55cfcfbe582dd6e5ea60ae125d89373477571c0faee70eff51bab31`
-
-## Changelog since v1.4.0-beta.6
-
-### Other notable changes
-
-* Use a patched go1.7.1 for building linux/arm ([#32517](https://github.com/kubernetes/kubernetes/pull/32517), [@luxas](https://github.com/luxas))
-* Specific error message on failed rolling update issued by older kubectl against 1.4 master ([#32751](https://github.com/kubernetes/kubernetes/pull/32751), [@caesarxuchao](https://github.com/caesarxuchao))
-
-
-
-# v1.4.0-beta.6
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-beta.6/kubernetes.tar.gz) | `0b0158e4745663b48c55527247d3e64cc3649f875fa7611fc7b38fa5c3b736bd`
-
-## Changelog since v1.4.0-beta.5
-
-### Other notable changes
-
-* Set Dashboard UI to final 1.4 version ([#32666](https://github.com/kubernetes/kubernetes/pull/32666), [@bryk](https://github.com/bryk))
-
-
-
-# v1.4.0-beta.5
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-beta.5/kubernetes.tar.gz) | `ec6b233b0448472e05e6820b8ea1644119ae4f9fe3a1516cf978117c19bad0a9`
-
-## Changelog since v1.4.0-beta.3
-
-### Other notable changes
-
-* Bumped Heapster to v1.2.0. ([#32649](https://github.com/kubernetes/kubernetes/pull/32649), [@piosz](https://github.com/piosz))
- * More details about the release https://github.com/kubernetes/heapster/releases/tag/v1.2.0
-* Docker digest validation is too strict ([#32627](https://github.com/kubernetes/kubernetes/pull/32627), [@smarterclayton](https://github.com/smarterclayton))
-* Added new kubelet flags `--cni-bin-dir` and `--cni-conf-dir` to specify where CNI files are located. ([#32151](https://github.com/kubernetes/kubernetes/pull/32151), [@bboreham](https://github.com/bboreham))
- * Fixed CNI configuration on GCI platform when using CNI.
-* make --runtime-config=api/all=true|false work ([#32582](https://github.com/kubernetes/kubernetes/pull/32582), [@jlowdermilk](https://github.com/jlowdermilk))
-* AWS: Change default networking for kube-up to kubenet ([#32239](https://github.com/kubernetes/kubernetes/pull/32239), [@zmerlynn](https://github.com/zmerlynn))
-
-
-
-# v1.4.0-beta.3
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-beta.3/kubernetes.tar.gz) | `5a6802703c6b0b652e72166a4347fee7899c46205463f6797dc78f8086876465`
-
-## Changelog since v1.4.0-beta.2
-
-**No notable changes for this release**
-
-## Behavior changes caused by enabling the garbage collector
-
-### kubectl rolling-update
-
-Old version kubectl's rolling-update command is compatible with Kubernetes 1.4 and higher **only if** you specify a new replication controller name. You will need to update to kubectl 1.4 or higher to use the rolling update command against a 1.4 cluster if you want to keep the original name, or you'll have to do two rolling updates.
-
-If you do happen to use old version kubectl's rolling update against a 1.4 cluster, it will fail, usually with an error message that will direct you here. If you saw that error, then don't worry, the operation succeeded except for the part where the new replication controller is renamed back to the old name. You can just do another rolling update using kubectl 1.4 or higher to change the name back: look for a replication controller that has the original name plus a random suffix.
-
-Unfortunately, there is a much rarer second possible failure mode: the replication controller gets renamed to the old name, but there is a duplicate set of pods in the cluster. kubectl will not report an error since it thinks its job is done.
-
-If this happens to you, you can wait at most 10 minutes for the replication controller to start a resync, the extra pods will then be deleted. Or, you can manually trigger a resync by change the replicas in the spec of the replication controller.
-
-### kubectl delete
-
-If you use an old version kubectl to delete a replication controller or a replicaset, then after the delete command has returned, the replication controller or the replicaset will continue to exist in the key-value store for a short period of time (<1s). You probably will not notice any difference if you use kubectl manually, but you might notice it if you are using kubectl in a script. To fix it, you can poll the API server to confirm the object is deleted.
-
-### DELETE operation in REST API
-
-* **Replication controller & Replicaset**: the DELETE request of a replication controller or a replicaset becomes asynchronous by default. The object will continue to exist in the key-value store for some time. The API server will set its metadata.deletionTimestamp, add the "orphan" finalizer to its metadata.finalizers. The object will be deleted from the key-value store after the garbage collector orphans its dependents. Please refer to this [user-guide](http://kubernetes.io/docs/user-guide/garbage-collector/) for more information regarding the garbage collection.
-
-* **Other objects**: no changes unless you explicitly request orphaning.
-
-
-# v1.4.0-beta.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-beta.2/kubernetes.tar.gz) | `0c6f54eb9059090c88f10a448ed5bcb6ef663abbd76c79281fd8dcb72faa6315`
-
-## Changelog since v1.4.0-beta.1
-
-### Other notable changes
-
-* Fix a bug in kubelet hostport logic which flushes KUBE-MARK-MASQ iptables chain ([#32413](https://github.com/kubernetes/kubernetes/pull/32413), [@freehan](https://github.com/freehan))
-* Stick to 2.2.1 etcd ([#32404](https://github.com/kubernetes/kubernetes/pull/32404), [@caesarxuchao](https://github.com/caesarxuchao))
-* Use etcd 2.3.7 ([#32359](https://github.com/kubernetes/kubernetes/pull/32359), [@wojtek-t](https://github.com/wojtek-t))
-* AWS: Change default networking for kube-up to kubenet ([#32239](https://github.com/kubernetes/kubernetes/pull/32239), [@zmerlynn](https://github.com/zmerlynn))
-* Make sure finalizers prevent deletion on storage that supports graceful deletion ([#32351](https://github.com/kubernetes/kubernetes/pull/32351), [@caesarxuchao](https://github.com/caesarxuchao))
-* Some components like kube-dns and kube-proxy could fail to load the service account token when started within a pod. Properly handle empty configurations to try loading the service account config. ([#31947](https://github.com/kubernetes/kubernetes/pull/31947), [@smarterclayton](https://github.com/smarterclayton))
-* Use federated namespace instead of the bootstrap cluster's namespace in Ingress e2e tests. ([#32105](https://github.com/kubernetes/kubernetes/pull/32105), [@madhusudancs](https://github.com/madhusudancs))
-
-
-
-# v1.4.0-beta.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-beta.1/kubernetes.tar.gz) | `837296455933629b6792a8954f2c5b17d55c1149c12b644101f2f02549d06d25`
-
-## Changelog since v1.4.0-alpha.3
-
-### Action Required
-
-* The NamespaceExists and NamespaceAutoProvision admission controllers have been removed. ([#31250](https://github.com/kubernetes/kubernetes/pull/31250), [@derekwaynecarr](https://github.com/derekwaynecarr))
- * All cluster operators should use NamespaceLifecycle.
-* Federation binaries and their corresponding docker images - `federation-apiserver` and `federation-controller-manager` are now folded in to the `hyperkube` binary. If you were using one of these binaries or docker images, please switch to using the `hyperkube` version. Please refer to the federation manifests - `federation/manifests/federation-apiserver.yaml` and `federation/manifests/federation-controller-manager-deployment.yaml` for examples. ([#29929](https://github.com/kubernetes/kubernetes/pull/29929), [@madhusudancs](https://github.com/madhusudancs))
-* Use upgraded container-vm by default on worker nodes for GCE k8s clusters ([#31023](https://github.com/kubernetes/kubernetes/pull/31023), [@vishh](https://github.com/vishh))
-
-### Other notable changes
-
-* Enable kubelet eviction whenever inodes free is < 5% on GCE ([#31545](https://github.com/kubernetes/kubernetes/pull/31545), [@vishh](https://github.com/vishh))
-* Move StorageClass to a storage group ([#31886](https://github.com/kubernetes/kubernetes/pull/31886), [@deads2k](https://github.com/deads2k))
-* Some components like kube-dns and kube-proxy could fail to load the service account token when started within a pod. Properly handle empty configurations to try loading the service account config. ([#31947](https://github.com/kubernetes/kubernetes/pull/31947), [@smarterclayton](https://github.com/smarterclayton))
-* Removed comments in json config when using kubectl edit with -o json ([#31685](https://github.com/kubernetes/kubernetes/pull/31685), [@jellonek](https://github.com/jellonek))
-* fixes invalid null selector issue in sysdig example yaml ([#31393](https://github.com/kubernetes/kubernetes/pull/31393), [@baldwinSPC](https://github.com/baldwinSPC))
-* Rescheduler which ensures that critical pods are always scheduled enabled by default in GCE. ([#31974](https://github.com/kubernetes/kubernetes/pull/31974), [@piosz](https://github.com/piosz))
-* retry oauth token fetch in gce cloudprovider ([#32021](https://github.com/kubernetes/kubernetes/pull/32021), [@mikedanese](https://github.com/mikedanese))
-* Deprecate the old cbr0 and flannel networking modes ([#31197](https://github.com/kubernetes/kubernetes/pull/31197), [@freehan](https://github.com/freehan))
-* AWS: fix volume device assignment race condition ([#31090](https://github.com/kubernetes/kubernetes/pull/31090), [@justinsb](https://github.com/justinsb))
-* The certificates API group has been renamed to certificates.k8s.io ([#31887](https://github.com/kubernetes/kubernetes/pull/31887), [@liggitt](https://github.com/liggitt))
-* Increase Dashboard UI version to v1.4.0-beta2 ([#31518](https://github.com/kubernetes/kubernetes/pull/31518), [@bryk](https://github.com/bryk))
-* Fixed incomplete kubectl bash completion. ([#31333](https://github.com/kubernetes/kubernetes/pull/31333), [@xingzhou](https://github.com/xingzhou))
-* Added liveness probe to Heapster service. ([#31878](https://github.com/kubernetes/kubernetes/pull/31878), [@mksalawa](https://github.com/mksalawa))
-* Adding clusters to the list of valid resources printed by kubectl help ([#31719](https://github.com/kubernetes/kubernetes/pull/31719), [@nikhiljindal](https://github.com/nikhiljindal))
-* Kubernetes server components using `kubeconfig` files no longer default to `http://localhost:8080`. Administrators must specify a server value in their kubeconfig files. ([#30808](https://github.com/kubernetes/kubernetes/pull/30808), [@smarterclayton](https://github.com/smarterclayton))
-* Update influxdb to 0.12 ([#31519](https://github.com/kubernetes/kubernetes/pull/31519), [@piosz](https://github.com/piosz))
-* Include security options in the container created event ([#31557](https://github.com/kubernetes/kubernetes/pull/31557), [@timstclair](https://github.com/timstclair))
-* Federation can now be deployed using the `federation/deploy/deploy.sh` script. This script does not depend on any of the development environment shell library/scripts. This is an alternative to the current `federation-up.sh`/`federation-down.sh` scripts. Both the scripts are going to co-exist in this release, but the `federation-up.sh`/`federation-down.sh` scripts might be removed in a future release in favor of `federation/deploy/deploy.sh` script. ([#30744](https://github.com/kubernetes/kubernetes/pull/30744), [@madhusudancs](https://github.com/madhusudancs))
-* Add get/delete cluster, delete context to kubectl config ([#29821](https://github.com/kubernetes/kubernetes/pull/29821), [@alexbrand](https://github.com/alexbrand))
-* rkt: Force `rkt fetch` to fetch from remote to conform the image pull policy. ([#31378](https://github.com/kubernetes/kubernetes/pull/31378), [@yifan-gu](https://github.com/yifan-gu))
-* Allow services which use same port, different protocol to use the same nodePort for both ([#30253](https://github.com/kubernetes/kubernetes/pull/30253), [@AdoHe](https://github.com/AdoHe))
-* Handle overlapping deployments gracefully ([#30730](https://github.com/kubernetes/kubernetes/pull/30730), [@janetkuo](https://github.com/janetkuo))
-* Remove environment variables and internal Kubernetes Docker labels from cAdvisor Prometheus metric labels. ([#31064](https://github.com/kubernetes/kubernetes/pull/31064), [@grobie](https://github.com/grobie))
- * Old behavior:
- * - environment variables explicitly whitelisted via --docker-env-metadata-whitelist were exported as `container_env_*=*`. Default is zero so by default non were exported
- * - all docker labels were exported as `container_label_*=*`
- * New behavior:
- * - Only `container_name`, `pod_name`, `namespace`, `id`, `image`, and `name` labels are exposed
- * - no environment variables will be exposed ever via /metrics, even if whitelisted
-* Filter duplicate network packets in promiscuous bridge mode (with ebtables) ([#28717](https://github.com/kubernetes/kubernetes/pull/28717), [@freehan](https://github.com/freehan))
-* Refactor to simplify the hard-traveled path of the KubeletConfiguration object ([#29216](https://github.com/kubernetes/kubernetes/pull/29216), [@mtaufen](https://github.com/mtaufen))
-* Fix overflow issue in controller-manager rate limiter ([#31396](https://github.com/kubernetes/kubernetes/pull/31396), [@foxish](https://github.com/foxish))
-
-
-
-# v1.4.0-alpha.3
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-alpha.3/kubernetes.tar.gz) | `8055f0373e3b6bdee865749ef9bcfc765396a40f39ec2fa3cd31b675d1bbf5d9`
-
-## Changelog since v1.4.0-alpha.2
-
-### Action Required
-
-* Moved init-container feature from alpha to beta. ([#31026](https://github.com/kubernetes/kubernetes/pull/31026), [@erictune](https://github.com/erictune))
- * Security Action Required:
- * This only applies to you if you use the PodSecurityPolicy feature. You are using that feature if `kubectl get podsecuritypolicy` returns one or more objects. If it returns an error, you are not using it.
- * If there are any pods with the key `pods.beta.kubernetes.io/init-containers`, then that pod may not have been filtered by the PodSecurityPolicy. You should find such pods and either delete them or audit them to ensure they do not use features that you intend to be blocked by PodSecurityPolicy.
- * Explanation of Feature
- * In 1.3, an init container is specified with this annotation key
- * on the pod or pod template: `pods.alpha.kubernetes.io/init-containers`.
- * In 1.4, either that key or this key: `pods.beta.kubernetes.io/init-containers`,
- * can be used.
- * When you GET an object, you will see both annotation keys with the same values.
- * You can safely roll back from 1.4 to 1.3, and things with init-containers
- * will still work (pods, deployments, etc).
- * If you are running 1.3, only use the alpha annotation, or it may be lost when
- * rolling forward.
- * The status has moved from annotation key
- * `pods.beta.kubernetes.io/init-container-statuses` to
- * `pods.beta.kubernetes.io/init-container-statuses`.
- * Any code that inspects this annotation should be changed to use the new key.
- * State of Initialization will continue to be reported in both pods.alpha.kubernetes.io/initialized
- * and in `podStatus.conditions.{status: "True", type: Initialized}`
-* Action required: federation-only: Please update your cluster name to be a valid DNS label. ([#30956](https://github.com/kubernetes/kubernetes/pull/30956), [@nikhiljindal](https://github.com/nikhiljindal))
- * Updating federation.v1beta1.Cluster API to disallow subdomains as valid cluster names. Only DNS labels are allowed as valid cluster names now.
-* [Kubelet] Rename `--config` to `--pod-manifest-path`. `--config` is deprecated. ([#29999](https://github.com/kubernetes/kubernetes/pull/29999), [@mtaufen](https://github.com/mtaufen))
-
-### Other notable changes
-
-* rkt: Improve support for privileged pod (pod whose all containers are privileged) ([#31286](https://github.com/kubernetes/kubernetes/pull/31286), [@yifan-gu](https://github.com/yifan-gu))
-* The pod annotation `security.alpha.kubernetes.io/sysctls` now allows customization of namespaced and well isolated kernel parameters (sysctls), starting with `kernel.shm_rmid_forced`, `net.ipv4.ip_local_port_range` and `net.ipv4.tcp_syncookies` for Kubernetes 1.4. ([#27180](https://github.com/kubernetes/kubernetes/pull/27180), [@sttts](https://github.com/sttts))
- * The pod annotation `security.alpha.kubernetes.io/unsafe-sysctls` allows customization of namespaced sysctls where isolation is unclear. Unsafe sysctls must be enabled at-your-own-risk on the kubelet with the `--experimental-allowed-unsafe-sysctls` flag. Future versions will improve on resource isolation and more sysctls will be considered safe.
-* Increase request timeout based on termination grace period ([#31275](https://github.com/kubernetes/kubernetes/pull/31275), [@dims](https://github.com/dims))
-* Fixed two issues of kubectl bash completion. ([#31135](https://github.com/kubernetes/kubernetes/pull/31135), [@xingzhou](https://github.com/xingzhou))
-* Reduced size of fluentd images. ([#31239](https://github.com/kubernetes/kubernetes/pull/31239), [@aledbf](https://github.com/aledbf))
-* support Azure data disk volume ([#29836](https://github.com/kubernetes/kubernetes/pull/29836), [@rootfs](https://github.com/rootfs))
-* fix Openstack provider to allow more than one service port for lbaas v2 ([#30649](https://github.com/kubernetes/kubernetes/pull/30649), [@dagnello](https://github.com/dagnello))
-* Add kubelet --network-plugin-mtu flag for MTU selection ([#30376](https://github.com/kubernetes/kubernetes/pull/30376), [@justinsb](https://github.com/justinsb))
-* Let Services preserve client IPs and not double-hop from external LBs (alpha) ([#29409](https://github.com/kubernetes/kubernetes/pull/29409), [@girishkalele](https://github.com/girishkalele))
-* [Kubelet] Optionally consume configuration from named config maps ([#30090](https://github.com/kubernetes/kubernetes/pull/30090), [@mtaufen](https://github.com/mtaufen))
-* [GarbageCollector] Allow per-resource default garbage collection behavior ([#30838](https://github.com/kubernetes/kubernetes/pull/30838), [@caesarxuchao](https://github.com/caesarxuchao))
-* Action required: If you have a running federation control plane, you will have to ensure that for all federation resources, the corresponding namespace exists in federation control plane. ([#31139](https://github.com/kubernetes/kubernetes/pull/31139), [@nikhiljindal](https://github.com/nikhiljindal))
- * federation-apiserver now supports NamespaceLifecycle admission control, which is enabled by default. Set the --admission-control flag on the server to change that.
-* Configure webhook ([#30923](https://github.com/kubernetes/kubernetes/pull/30923), [@Q-Lee](https://github.com/Q-Lee))
-* Federated Ingress Controller ([#30419](https://github.com/kubernetes/kubernetes/pull/30419), [@quinton-hoole](https://github.com/quinton-hoole))
-* Federation replicaset controller ([#29741](https://github.com/kubernetes/kubernetes/pull/29741), [@jianhuiz](https://github.com/jianhuiz))
-* AWS: More ELB attributes via service annotations ([#30695](https://github.com/kubernetes/kubernetes/pull/30695), [@krancour](https://github.com/krancour))
-* Impersonate user extra ([#30881](https://github.com/kubernetes/kubernetes/pull/30881), [@deads2k](https://github.com/deads2k))
-* DNS, Heapster and UI are critical addons ([#30995](https://github.com/kubernetes/kubernetes/pull/30995), [@piosz](https://github.com/piosz))
-* AWS: Support HTTP->HTTP mode for ELB ([#30563](https://github.com/kubernetes/kubernetes/pull/30563), [@knarz](https://github.com/knarz))
-* kube-up: Allow IP restrictions for SSH and HTTPS API access on AWS. ([#27061](https://github.com/kubernetes/kubernetes/pull/27061), [@Naddiseo](https://github.com/Naddiseo))
-* Add readyReplicas to replica sets ([#29481](https://github.com/kubernetes/kubernetes/pull/29481), [@kargakis](https://github.com/kargakis))
-* The implicit registration of Prometheus metrics for request count and latency have been removed, and a plug-able interface was added. If you were using our client libraries in your own binaries and want these metrics, add the following to your imports in the main package: "k8s.io/pkg/client/metrics/prometheus". ([#30638](https://github.com/kubernetes/kubernetes/pull/30638), [@krousey](https://github.com/krousey))
-* Add support for --image-pull-policy to 'kubectl run' ([#30614](https://github.com/kubernetes/kubernetes/pull/30614), [@AdoHe](https://github.com/AdoHe))
-* x509 authenticator: get groups from subject's organization field ([#30392](https://github.com/kubernetes/kubernetes/pull/30392), [@ericchiang](https://github.com/ericchiang))
-* Add initial support for TokenFile to to the client config file. ([#29696](https://github.com/kubernetes/kubernetes/pull/29696), [@brendandburns](https://github.com/brendandburns))
-* update kubectl help output for better organization ([#25524](https://github.com/kubernetes/kubernetes/pull/25524), [@AdoHe](https://github.com/AdoHe))
-* daemonset controller should respect taints ([#31020](https://github.com/kubernetes/kubernetes/pull/31020), [@mikedanese](https://github.com/mikedanese))
-* Implement TLS bootstrap for kubelet using `--experimental-bootstrap-kubeconfig` (2nd take) ([#30922](https://github.com/kubernetes/kubernetes/pull/30922), [@yifan-gu](https://github.com/yifan-gu))
-* rkt: Support subPath volume mounts feature ([#30934](https://github.com/kubernetes/kubernetes/pull/30934), [@yifan-gu](https://github.com/yifan-gu))
-* Return container command exit codes in kubectl run/exec ([#26541](https://github.com/kubernetes/kubernetes/pull/26541), [@sttts](https://github.com/sttts))
-* Fix kubectl describe to display a container's resource limit env vars as node allocatable when the limits are not set ([#29849](https://github.com/kubernetes/kubernetes/pull/29849), [@aveshagarwal](https://github.com/aveshagarwal))
-* The `valueFrom.fieldRef.name` field on environment variables in pods and objects with pod templates now allows two additional fields to be used: ([#27880](https://github.com/kubernetes/kubernetes/pull/27880), [@smarterclayton](https://github.com/smarterclayton))
- * `spec.nodeName` will return the name of the node this pod is running on
- * `spec.serviceAccountName` will return the name of the service account this pod is running under
-* Adding ImagePolicyWebhook admission controller. ([#30631](https://github.com/kubernetes/kubernetes/pull/30631), [@ecordell](https://github.com/ecordell))
-* Validate involvedObject.Namespace matches event.Namespace ([#30533](https://github.com/kubernetes/kubernetes/pull/30533), [@liggitt](https://github.com/liggitt))
-* allow group impersonation ([#30803](https://github.com/kubernetes/kubernetes/pull/30803), [@deads2k](https://github.com/deads2k))
-* Always return command output for exec probes and kubelet RunInContainer ([#30731](https://github.com/kubernetes/kubernetes/pull/30731), [@ncdc](https://github.com/ncdc))
-* Enable the garbage collector by default ([#30480](https://github.com/kubernetes/kubernetes/pull/30480), [@caesarxuchao](https://github.com/caesarxuchao))
-* use valid_resources to replace kubectl.PossibleResourceTypes ([#30955](https://github.com/kubernetes/kubernetes/pull/30955), [@lojies](https://github.com/lojies))
-* oidc auth provider: don't trim issuer URL ([#30944](https://github.com/kubernetes/kubernetes/pull/30944), [@ericchiang](https://github.com/ericchiang))
-* Add a short `-n` for `kubectl --namespace` ([#30630](https://github.com/kubernetes/kubernetes/pull/30630), [@silasbw](https://github.com/silasbw))
-* Federated secret controller ([#30669](https://github.com/kubernetes/kubernetes/pull/30669), [@kshafiee](https://github.com/kshafiee))
-* Add Events for operation_executor to show status of mounts, failed/successful to show in describe events ([#27778](https://github.com/kubernetes/kubernetes/pull/27778), [@screeley44](https://github.com/screeley44))
-* Alpha support for OpenAPI (aka. Swagger 2.0) specification served on /swagger.json (enabled by default) ([#30233](https://github.com/kubernetes/kubernetes/pull/30233), [@mbohlool](https://github.com/mbohlool))
-* Disable linux/ppc64le compilation by default ([#30659](https://github.com/kubernetes/kubernetes/pull/30659), [@ixdy](https://github.com/ixdy))
-* Implement dynamic provisioning (beta) of PersistentVolumes via StorageClass ([#29006](https://github.com/kubernetes/kubernetes/pull/29006), [@jsafrane](https://github.com/jsafrane))
-* Allow setting permission mode bits on secrets, configmaps and downwardAPI files ([#28936](https://github.com/kubernetes/kubernetes/pull/28936), [@rata](https://github.com/rata))
-* Skip safe to detach check if node API object no longer exists ([#30737](https://github.com/kubernetes/kubernetes/pull/30737), [@saad-ali](https://github.com/saad-ali))
-* The Kubelet now supports the `--require-kubeconfig` option which reads all client config from the provided `--kubeconfig` file and will cause the Kubelet to exit with error code 1 on error. It also forces the Kubelet to use the server URL from the kubeconfig file rather than the `--api-servers` flag. Without this flag set, a failure to read the kubeconfig file would only result in a warning message. ([#30798](https://github.com/kubernetes/kubernetes/pull/30798), [@smarterclayton](https://github.com/smarterclayton))
- * In a future release, the value of this flag will be defaulted to `true`.
-* Adding container image verification webhook API. ([#30241](https://github.com/kubernetes/kubernetes/pull/30241), [@Q-Lee](https://github.com/Q-Lee))
-* Nodecontroller doesn't flip readiness on pods if kubeletVersion < 1.2.0 ([#30828](https://github.com/kubernetes/kubernetes/pull/30828), [@bprashanth](https://github.com/bprashanth))
-* AWS: Handle kube-down case where the LaunchConfig is dangling ([#30816](https://github.com/kubernetes/kubernetes/pull/30816), [@zmerlynn](https://github.com/zmerlynn))
-* kubectl will no longer do client-side defaulting on create and replace. ([#30250](https://github.com/kubernetes/kubernetes/pull/30250), [@krousey](https://github.com/krousey))
-* Added warning msg for `kubectl get` ([#28352](https://github.com/kubernetes/kubernetes/pull/28352), [@vefimova](https://github.com/vefimova))
-* Removed support for HPA in extensions client. ([#30504](https://github.com/kubernetes/kubernetes/pull/30504), [@piosz](https://github.com/piosz))
-* Implement DisruptionController. ([#25921](https://github.com/kubernetes/kubernetes/pull/25921), [@mml](https://github.com/mml))
-* [Kubelet] Check if kubelet is running as uid 0 ([#30466](https://github.com/kubernetes/kubernetes/pull/30466), [@vishh](https://github.com/vishh))
-* Fix third party APIResource reporting ([#29724](https://github.com/kubernetes/kubernetes/pull/29724), [@brendandburns](https://github.com/brendandburns))
-* speed up RC scaler ([#30383](https://github.com/kubernetes/kubernetes/pull/30383), [@deads2k](https://github.com/deads2k))
-* Set pod state as "unknown" when CNI plugin fails ([#30137](https://github.com/kubernetes/kubernetes/pull/30137), [@nhlfr](https://github.com/nhlfr))
-* Cluster Federation components can now be built and deployed using the make command. Please see federation/README.md for details. ([#29515](https://github.com/kubernetes/kubernetes/pull/29515), [@madhusudancs](https://github.com/madhusudancs))
-* Adding events to federation control plane ([#30421](https://github.com/kubernetes/kubernetes/pull/30421), [@nikhiljindal](https://github.com/nikhiljindal))
-* [kubelet] Introduce --protect-kernel-defaults flag to make the tunable behaviour configurable ([#27874](https://github.com/kubernetes/kubernetes/pull/27874), [@ingvagabund](https://github.com/ingvagabund))
-* Add support for kube-up.sh to deploy Calico network policy to GCI masters ([#29037](https://github.com/kubernetes/kubernetes/pull/29037), [@matthewdupre](https://github.com/matthewdupre))
-* Added 'kubectl top' command showing the resource usage metrics. ([#28844](https://github.com/kubernetes/kubernetes/pull/28844), [@mksalawa](https://github.com/mksalawa))
-* Add basic audit logging ([#27087](https://github.com/kubernetes/kubernetes/pull/27087), [@soltysh](https://github.com/soltysh))
-* Marked NodePhase deprecated. ([#30005](https://github.com/kubernetes/kubernetes/pull/30005), [@dchen1107](https://github.com/dchen1107))
-* Name the job created by scheduledjob (sj) deterministically with sj's name and a hash of job's scheduled time. ([#30420](https://github.com/kubernetes/kubernetes/pull/30420), [@janetkuo](https://github.com/janetkuo))
-* add metrics for workqueues ([#30296](https://github.com/kubernetes/kubernetes/pull/30296), [@deads2k](https://github.com/deads2k))
-* Adding ingress resource to federation apiserver ([#30112](https://github.com/kubernetes/kubernetes/pull/30112), [@nikhiljindal](https://github.com/nikhiljindal))
-* Update Dashboard UI to version v1.1.1 ([#30273](https://github.com/kubernetes/kubernetes/pull/30273), [@bryk](https://github.com/bryk))
-* Update etcd 2.2 references to use 3.0.x ([#29399](https://github.com/kubernetes/kubernetes/pull/29399), [@timothysc](https://github.com/timothysc))
-* HPA: ignore scale targets whose replica count is 0 ([#29212](https://github.com/kubernetes/kubernetes/pull/29212), [@sjenning](https://github.com/sjenning))
-* Add total inodes to kubelet summary api ([#30231](https://github.com/kubernetes/kubernetes/pull/30231), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Updates required for juju kubernetes to use the tls-terminated etcd charm. ([#30104](https://github.com/kubernetes/kubernetes/pull/30104), [@mbruzek](https://github.com/mbruzek))
-* Fix PVC.Status.Capacity and AccessModes after binding ([#29982](https://github.com/kubernetes/kubernetes/pull/29982), [@jsafrane](https://github.com/jsafrane))
-* allow a read-only rbd image mounted by multiple pods ([#29622](https://github.com/kubernetes/kubernetes/pull/29622), [@rootfs](https://github.com/rootfs))
-* [kubelet] Auto-discover node IP if neither cloud provider exists and IP is not explicitly specified ([#29907](https://github.com/kubernetes/kubernetes/pull/29907), [@luxas](https://github.com/luxas))
-* kubectl config set-crentials: add arguments for auth providers ([#30007](https://github.com/kubernetes/kubernetes/pull/30007), [@ericchiang](https://github.com/ericchiang))
-* Scheduledjob controller ([#29137](https://github.com/kubernetes/kubernetes/pull/29137), [@janetkuo](https://github.com/janetkuo))
-* add subjectaccessreviews resource ([#20573](https://github.com/kubernetes/kubernetes/pull/20573), [@deads2k](https://github.com/deads2k))
-* AWS/GCE: Rework use of master name ([#30047](https://github.com/kubernetes/kubernetes/pull/30047), [@zmerlynn](https://github.com/zmerlynn))
-* Add density (batch pods creation latency and resource) and resource performance tests to `test-e2e-node' built for Linux only ([#30026](https://github.com/kubernetes/kubernetes/pull/30026), [@coufon](https://github.com/coufon))
-* Clean up items from moving local cluster setup guides ([#30035](https://github.com/kubernetes/kubernetes/pull/30035), [@pwittrock](https://github.com/pwittrock))
-* federation: Adding secret API ([#29138](https://github.com/kubernetes/kubernetes/pull/29138), [@kshafiee](https://github.com/kshafiee))
-* Introducing ScheduledJobs as described in [the proposal](docs/proposals/scheduledjob.md) as part of `batch/v2alpha1` version (experimental feature). ([#25816](https://github.com/kubernetes/kubernetes/pull/25816), [@soltysh](https://github.com/soltysh))
-* Node disk pressure should induce image gc ([#29880](https://github.com/kubernetes/kubernetes/pull/29880), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* oidc authentication plugin: don't trim issuer URLs with trailing slashes ([#29860](https://github.com/kubernetes/kubernetes/pull/29860), [@ericchiang](https://github.com/ericchiang))
-* Allow leading * in ingress hostname ([#29204](https://github.com/kubernetes/kubernetes/pull/29204), [@aledbf](https://github.com/aledbf))
-* Rewrite service controller to apply best controller pattern ([#25189](https://github.com/kubernetes/kubernetes/pull/25189), [@mfanjie](https://github.com/mfanjie))
-* Fix issue with kubectl annotate when --resource-version is provided. ([#29319](https://github.com/kubernetes/kubernetes/pull/29319), [@juanvallejo](https://github.com/juanvallejo))
-* Reverted conversion of influx-db to Pet Set, it is now a Replication Controller. ([#30080](https://github.com/kubernetes/kubernetes/pull/30080), [@jszczepkowski](https://github.com/jszczepkowski))
-* rbac validation: rules can't combine non-resource URLs and regular resources ([#29930](https://github.com/kubernetes/kubernetes/pull/29930), [@ericchiang](https://github.com/ericchiang))
-* VSAN support for VSphere Volume Plugin ([#29172](https://github.com/kubernetes/kubernetes/pull/29172), [@abrarshivani](https://github.com/abrarshivani))
-* Addresses vSphere Volume Attach limits ([#29881](https://github.com/kubernetes/kubernetes/pull/29881), [@dagnello](https://github.com/dagnello))
-* allow restricting subresource access ([#29988](https://github.com/kubernetes/kubernetes/pull/29988), [@deads2k](https://github.com/deads2k))
-* Add density (batch pods creation latency and resource) and resource performance tests to `test-e2e-node' ([#29764](https://github.com/kubernetes/kubernetes/pull/29764), [@coufon](https://github.com/coufon))
-* Allow Secret & ConfigMap keys to contain caps, dots, and underscores ([#25458](https://github.com/kubernetes/kubernetes/pull/25458), [@errm](https://github.com/errm))
-* allow watching old resources with kubectl ([#27392](https://github.com/kubernetes/kubernetes/pull/27392), [@sjenning](https://github.com/sjenning))
-* azure: kube-up respects AZURE_RESOURCE_GROUP ([#28700](https://github.com/kubernetes/kubernetes/pull/28700), [@colemickens](https://github.com/colemickens))
-* Modified influxdb petset to provision persistent volume. ([#28840](https://github.com/kubernetes/kubernetes/pull/28840), [@jszczepkowski](https://github.com/jszczepkowski))
-* Allow service names up to 63 characters (RFC 1035) ([#29523](https://github.com/kubernetes/kubernetes/pull/29523), [@fraenkel](https://github.com/fraenkel))
-* Change eviction policies in NodeController: ([#28897](https://github.com/kubernetes/kubernetes/pull/28897), [@gmarek](https://github.com/gmarek))
- * - add a "partialDisruption" mode, when more than 33% of Nodes in the zone are not Ready
- * - add "fullDisruption" mode, when all Nodes in the zone are not Ready
- * Eviction behavior depends on the mode in which NodeController is operating:
- * - if the new state is "partialDisruption" or "fullDisruption" we call a user defined function that returns a new QPS to use (default 1/10 of the default rate, and the default rate respectively),
- * - if the new state is "normal" we resume normal operation (go back to default limiter settings),
- * - if all zones in the cluster are in "fullDisruption" state we stop all evictions.
-* Add a flag for `kubectl expose`to set ClusterIP and allow headless services ([#28239](https://github.com/kubernetes/kubernetes/pull/28239), [@ApsOps](https://github.com/ApsOps))
-* Add support to quota pvc storage requests ([#28636](https://github.com/kubernetes/kubernetes/pull/28636), [@derekwaynecarr](https://github.com/derekwaynecarr))
-
-
-
-# v1.4.0-alpha.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-alpha.2/kubernetes.tar.gz) | `787ce63a5149a1cb47d14c55450172e3a045d85349682d2e17ff492de9e415b9`
-
-## Changelog since v1.4.0-alpha.1
-
-### Action Required
-
-* Federation API server kubeconfig secret consumed by federation-controller-manager has a new name. ([#28938](https://github.com/kubernetes/kubernetes/pull/28938), [@madhusudancs](https://github.com/madhusudancs))
- * If you are upgrading your Cluster Federation components from v1.3.x, please run this command to migrate the federation-apiserver-secret to federation-apiserver-kubeconfig serect;
- * $ kubectl --namespace=federation get secret federation-apiserver-secret -o json | sed 's/federation-apiserver-secret/federation-apiserver-kubeconfig/g' | kubectl create -f -
- * You might also want to delete the old secret using this command:
- * $ kubectl delete secret --namespace=federation federation-apiserver-secret
-* Stop eating panics ([#28800](https://github.com/kubernetes/kubernetes/pull/28800), [@lavalamp](https://github.com/lavalamp))
-
-### Other notable changes
-
-* Add API for StorageClasses ([#29694](https://github.com/kubernetes/kubernetes/pull/29694), [@childsb](https://github.com/childsb))
-* Fix kubectl help command ([#29737](https://github.com/kubernetes/kubernetes/pull/29737), [@andreykurilin](https://github.com/andreykurilin))
-* add shorthand cm for configmaps ([#29652](https://github.com/kubernetes/kubernetes/pull/29652), [@lojies](https://github.com/lojies))
-* Bump cadvisor dependencies to latest head. ([#29492](https://github.com/kubernetes/kubernetes/pull/29492), [@Random-Liu](https://github.com/Random-Liu))
-* If a service of type node port declares multiple ports, quota on "services.nodeports" will charge for each port in the service. ([#29457](https://github.com/kubernetes/kubernetes/pull/29457), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Add an Azure CloudProvider Implementation ([#28821](https://github.com/kubernetes/kubernetes/pull/28821), [@colemickens](https://github.com/colemickens))
-* Add support for kubectl create quota command ([#28351](https://github.com/kubernetes/kubernetes/pull/28351), [@sttts](https://github.com/sttts))
-* Assume volume is detached if node doesn't exist ([#29485](https://github.com/kubernetes/kubernetes/pull/29485), [@saad-ali](https://github.com/saad-ali))
-* kube-up: increase download timeout for kubernetes.tar.gz ([#29426](https://github.com/kubernetes/kubernetes/pull/29426), [@justinsb](https://github.com/justinsb))
-* Allow multiple APIs to register for the same API Group ([#28414](https://github.com/kubernetes/kubernetes/pull/28414), [@brendandburns](https://github.com/brendandburns))
-* Fix a problem with multiple APIs clobbering each other in registration. ([#28431](https://github.com/kubernetes/kubernetes/pull/28431), [@brendandburns](https://github.com/brendandburns))
-* Removing images with multiple tags ([#29316](https://github.com/kubernetes/kubernetes/pull/29316), [@ronnielai](https://github.com/ronnielai))
-* add enhanced volume and mount logging for block devices ([#24797](https://github.com/kubernetes/kubernetes/pull/24797), [@screeley44](https://github.com/screeley44))
-* append an abac rule for $KUBE_USER. ([#29164](https://github.com/kubernetes/kubernetes/pull/29164), [@cjcullen](https://github.com/cjcullen))
-* add tokenreviews endpoint to implement webhook ([#28788](https://github.com/kubernetes/kubernetes/pull/28788), [@deads2k](https://github.com/deads2k))
-* Fix "PVC Volume not detached if pod deleted via namespace deletion" issue ([#29077](https://github.com/kubernetes/kubernetes/pull/29077), [@saad-ali](https://github.com/saad-ali))
-* Allow mounts to run in parallel for non-attachable volumes ([#28939](https://github.com/kubernetes/kubernetes/pull/28939), [@saad-ali](https://github.com/saad-ali))
-* Fix working_set calculation in kubelet ([#29153](https://github.com/kubernetes/kubernetes/pull/29153), [@vishh](https://github.com/vishh))
-* Fix RBAC authorizer of ServiceAccount ([#29071](https://github.com/kubernetes/kubernetes/pull/29071), [@albatross0](https://github.com/albatross0))
-* kubectl proxy changed to now allow urls to pods with "attach" or "exec" in the pod name ([#28765](https://github.com/kubernetes/kubernetes/pull/28765), [@nhlfr](https://github.com/nhlfr))
-* AWS: Added experimental option to skip zone check ([#28417](https://github.com/kubernetes/kubernetes/pull/28417), [@kevensen](https://github.com/kevensen))
-* Ubuntu: Enable ssh compression when downloading binaries during cluster creation ([#26746](https://github.com/kubernetes/kubernetes/pull/26746), [@MHBauer](https://github.com/MHBauer))
-* Add extensions/replicaset to federation-apiserver ([#24764](https://github.com/kubernetes/kubernetes/pull/24764), [@jianhuiz](https://github.com/jianhuiz))
-* federation: Adding namespaces API ([#26298](https://github.com/kubernetes/kubernetes/pull/26298), [@nikhiljindal](https://github.com/nikhiljindal))
-* Improve quota controller performance by eliminating unneeded list calls ([#29134](https://github.com/kubernetes/kubernetes/pull/29134), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Make Daemonset use GeneralPredicates ([#28803](https://github.com/kubernetes/kubernetes/pull/28803), [@lukaszo](https://github.com/lukaszo))
-* Update docker engine-api to dea108d3aa ([#29144](https://github.com/kubernetes/kubernetes/pull/29144), [@ronnielai](https://github.com/ronnielai))
-* Fixing kube-up for CVM masters. ([#29140](https://github.com/kubernetes/kubernetes/pull/29140), [@maisem](https://github.com/maisem))
-* Fix logrotate config on GCI ([#29139](https://github.com/kubernetes/kubernetes/pull/29139), [@adityakali](https://github.com/adityakali))
-* GCE bring-up: Differentiate NODE_TAGS from NODE_INSTANCE_PREFIX ([#29141](https://github.com/kubernetes/kubernetes/pull/29141), [@zmerlynn](https://github.com/zmerlynn))
-* hyperkube: fix build for 3rd party registry (again) ([#28489](https://github.com/kubernetes/kubernetes/pull/28489), [@liyimeng](https://github.com/liyimeng))
-* Detect flakes in PR builder e2e runs ([#27898](https://github.com/kubernetes/kubernetes/pull/27898), [@lavalamp](https://github.com/lavalamp))
-* Remove examples moved to docs site ([#23513](https://github.com/kubernetes/kubernetes/pull/23513), [@erictune](https://github.com/erictune))
-* Do not query the metadata server to find out if running on GCE. Retry metadata server query for gcr if running on gce. ([#28871](https://github.com/kubernetes/kubernetes/pull/28871), [@vishh](https://github.com/vishh))
-* Change maxsize to size in logrotate. ([#29128](https://github.com/kubernetes/kubernetes/pull/29128), [@bprashanth](https://github.com/bprashanth))
-* Change setting "kubectl --record=false" to stop updating the change-cause when a previous change-cause is found. ([#28234](https://github.com/kubernetes/kubernetes/pull/28234), [@damemi](https://github.com/damemi))
-* Add "kubectl --overwrite" flag to automatically resolve conflicts between the modified and live configuration using values from the modified configuration. ([#26136](https://github.com/kubernetes/kubernetes/pull/26136), [@AdoHe](https://github.com/AdoHe))
-* Make discovery summarizer call servers in parallel ([#26705](https://github.com/kubernetes/kubernetes/pull/26705), [@nebril](https://github.com/nebril))
-* Don't recreate lb cloud resources on kcm restart ([#29082](https://github.com/kubernetes/kubernetes/pull/29082), [@bprashanth](https://github.com/bprashanth))
-* List all nodes and occupy cidr map before starting allocations ([#29062](https://github.com/kubernetes/kubernetes/pull/29062), [@bprashanth](https://github.com/bprashanth))
-* Fix GPU resource validation ([#28743](https://github.com/kubernetes/kubernetes/pull/28743), [@therc](https://github.com/therc))
-* Make PD E2E Tests Wait for Detach to Prevent Kernel Errors ([#29031](https://github.com/kubernetes/kubernetes/pull/29031), [@saad-ali](https://github.com/saad-ali))
-* Scale kube-proxy conntrack limits by cores (new default behavior) ([#28876](https://github.com/kubernetes/kubernetes/pull/28876), [@thockin](https://github.com/thockin))
-* [Kubelet] Improving QOS in kubelet by introducing QoS level Cgroups - `--cgroups-per-qos` ([#27853](https://github.com/kubernetes/kubernetes/pull/27853), [@dubstack](https://github.com/dubstack))
-* AWS: Add ap-south-1 to list of known AWS regions ([#28428](https://github.com/kubernetes/kubernetes/pull/28428), [@justinsb](https://github.com/justinsb))
-* Add RELEASE_INFRA_PUSH related code to support pushes from kubernetes/release. ([#28922](https://github.com/kubernetes/kubernetes/pull/28922), [@david-mcmahon](https://github.com/david-mcmahon))
-* Fix watch cache filtering ([#28966](https://github.com/kubernetes/kubernetes/pull/28966), [@liggitt](https://github.com/liggitt))
-* Deprecate deleting-pods-burst ControllerManager flag ([#28882](https://github.com/kubernetes/kubernetes/pull/28882), [@gmarek](https://github.com/gmarek))
-* Add support for terminal resizing for exec, attach, and run. Note that for Docker, exec sessions ([#25273](https://github.com/kubernetes/kubernetes/pull/25273), [@ncdc](https://github.com/ncdc))
- * inherit the environment from the primary process, so if the container was created with tty=false,
- * that means the exec session's TERM variable will default to "dumb". Users can override this by
- * setting TERM=xterm (or whatever is appropriate) to get the correct "smart" terminal behavior.
-* Implement alpha version of PreferAvoidPods ([#20699](https://github.com/kubernetes/kubernetes/pull/20699), [@jiangyaoguo](https://github.com/jiangyaoguo))
-* Retry when apiserver fails to listen on insecure port ([#28797](https://github.com/kubernetes/kubernetes/pull/28797), [@aaronlevy](https://github.com/aaronlevy))
-* Add SSH_OPTS to config ssh and scp port ([#28872](https://github.com/kubernetes/kubernetes/pull/28872), [@lojies](https://github.com/lojies))
-* kube-up: install new Docker pre-requisite (libltdl7) when not in image ([#28745](https://github.com/kubernetes/kubernetes/pull/28745), [@justinsb](https://github.com/justinsb))
-* Separate rate limiters for Pod evictions for different zones in NodeController ([#28843](https://github.com/kubernetes/kubernetes/pull/28843), [@gmarek](https://github.com/gmarek))
-* Add --quiet to hide the 'waiting for pods to be running' message in kubectl run ([#28801](https://github.com/kubernetes/kubernetes/pull/28801), [@janetkuo](https://github.com/janetkuo))
-* Controllers doesn't take any actions when being deleted. ([#27438](https://github.com/kubernetes/kubernetes/pull/27438), [@gmarek](https://github.com/gmarek))
-* Add "deploy" abbrev for deployments to kubectl ([#24087](https://github.com/kubernetes/kubernetes/pull/24087), [@Frostman](https://github.com/Frostman))
-* --no-header available now for custom-column ([#26696](https://github.com/kubernetes/kubernetes/pull/26696), [@gitfred](https://github.com/gitfred))
-
-
-
-# v1.4.0-alpha.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.4.0-alpha.1/kubernetes.tar.gz) | `11a199208c5164a291c1767a1b9e64e45fdea747` | `334f349daf9268d8ac091d7fcc8e4626`
-
-## Changelog since v1.3.0
-
-### Experimental Features
-
-* An alpha implementation of the TLS bootstrap API described in docs/proposals/kubelet-tls-bootstrap.md. ([#25562](https://github.com/kubernetes/kubernetes/pull/25562), [@gtank](https://github.com/gtank))
-
-### Action Required
-
-* [kubelet] Allow opting out of automatic cloud provider detection in kubelet. By default kubelet will auto-detect cloud providers ([#28258](https://github.com/kubernetes/kubernetes/pull/28258), [@vishh](https://github.com/vishh))
-* If you use one of the kube-dns replication controller manifest in `cluster/saltbase/salt/kube-dns`, i.e. `cluster/saltbase/salt/kube-dns/{skydns-rc.yaml.base,skydns-rc.yaml.in}`, either substitute one of `__PILLAR__FEDERATIONS__DOMAIN__MAP__` or `{{ pillar['federations_domain_map'] }}` with the corresponding federation name to domain name value or remove them if you do not support cluster federation at this time. If you plan to substitute the parameter with its value, here is an example for `{{ pillar['federations_domain_map'] }` ([#28132](https://github.com/kubernetes/kubernetes/pull/28132), [@madhusudancs](https://github.com/madhusudancs))
- * pillar['federations_domain_map'] = "- --federations=myfederation=federation.test"
- * where `myfederation` is the name of the federation and `federation.test` is the domain name registered for the federation.
-* Proportionally scale paused and rolling deployments ([#20273](https://github.com/kubernetes/kubernetes/pull/20273), [@kargakis](https://github.com/kargakis))
-
-### Other notable changes
-
-* Support --all-namespaces in kubectl describe ([#26315](https://github.com/kubernetes/kubernetes/pull/26315), [@dims](https://github.com/dims))
-* Add checks in Create and Update Cgroup methods ([#28566](https://github.com/kubernetes/kubernetes/pull/28566), [@dubstack](https://github.com/dubstack))
-* Update coreos node e2e image to a version that uses cgroupfs ([#28661](https://github.com/kubernetes/kubernetes/pull/28661), [@dubstack](https://github.com/dubstack))
-* Don't delete affinity when endpoints are empty ([#28655](https://github.com/kubernetes/kubernetes/pull/28655), [@freehan](https://github.com/freehan))
-* Enable memory based pod evictions by default on the kubelet. ([#28607](https://github.com/kubernetes/kubernetes/pull/28607), [@derekwaynecarr](https://github.com/derekwaynecarr))
- * Trigger pod eviction when available memory falls below 100Mi.
-* Enable extensions/v1beta1/NetworkPolicy by default ([#28549](https://github.com/kubernetes/kubernetes/pull/28549), [@caseydavenport](https://github.com/caseydavenport))
-* MESOS: Support a pre-installed km binary at a well known, agent-local path ([#28447](https://github.com/kubernetes/kubernetes/pull/28447), [@k82cn](https://github.com/k82cn))
-* kubectl should print usage at the bottom ([#25640](https://github.com/kubernetes/kubernetes/pull/25640), [@dims](https://github.com/dims))
-* A new command "kubectl config get-contexts" has been added. ([#25463](https://github.com/kubernetes/kubernetes/pull/25463), [@asalkeld](https://github.com/asalkeld))
-* kubectl: ignore only update conflicts in the scaler ([#27048](https://github.com/kubernetes/kubernetes/pull/27048), [@kargakis](https://github.com/kargakis))
-* Declare out of disk when there is no free inodes ([#28176](https://github.com/kubernetes/kubernetes/pull/28176), [@ronnielai](https://github.com/ronnielai))
-* Includes the number of free inodes in stat summary ([#28173](https://github.com/kubernetes/kubernetes/pull/28173), [@ronnielai](https://github.com/ronnielai))
-* kubectl: don't display an empty list when trying to get a single resource that isn't found ([#28294](https://github.com/kubernetes/kubernetes/pull/28294), [@ncdc](https://github.com/ncdc))
-* Graceful deletion bumps object's generation ([#27269](https://github.com/kubernetes/kubernetes/pull/27269), [@gmarek](https://github.com/gmarek))
-* Allow specifying secret data using strings ([#28263](https://github.com/kubernetes/kubernetes/pull/28263), [@liggitt](https://github.com/liggitt))
-* kubectl help now provides "Did you mean this?" suggestions for typo/invalid command names. ([#27049](https://github.com/kubernetes/kubernetes/pull/27049), [@andreykurilin](https://github.com/andreykurilin))
-* Lock all possible kubecfg files at the beginning of ModifyConfig. ([#28232](https://github.com/kubernetes/kubernetes/pull/28232), [@cjcullen](https://github.com/cjcullen))
-* Enable HTTP2 by default ([#28114](https://github.com/kubernetes/kubernetes/pull/28114), [@timothysc](https://github.com/timothysc))
-* Influxdb migrated to PetSet and PersistentVolumes. ([#28109](https://github.com/kubernetes/kubernetes/pull/28109), [@jszczepkowski](https://github.com/jszczepkowski))
-* Change references to gs://kubernetes-release/ci ([#28193](https://github.com/kubernetes/kubernetes/pull/28193), [@zmerlynn](https://github.com/zmerlynn))
-* Build: Add KUBE_GCS_RELEASE_BUCKET_MIRROR option to push-ci-build.sh ([#28172](https://github.com/kubernetes/kubernetes/pull/28172), [@zmerlynn](https://github.com/zmerlynn))
-* Skip multi-zone e2e tests unless provider is GCE, GKE or AWS ([#27871](https://github.com/kubernetes/kubernetes/pull/27871), [@lukaszo](https://github.com/lukaszo))
-* Making DHCP_OPTION_SET_ID creation optional ([#27278](https://github.com/kubernetes/kubernetes/pull/27278), [@activars](https://github.com/activars))
-* Convert service account token controller to use a work queue ([#23858](https://github.com/kubernetes/kubernetes/pull/23858), [@liggitt](https://github.com/liggitt))
-* Adding OWNERS for federation ([#28042](https://github.com/kubernetes/kubernetes/pull/28042), [@nikhiljindal](https://github.com/nikhiljindal))
-* Modifying the default container GC policy parameters ([#27881](https://github.com/kubernetes/kubernetes/pull/27881), [@ronnielai](https://github.com/ronnielai))
-* Kubelet can retrieve host IP even when apiserver has not been contacted ([#27508](https://github.com/kubernetes/kubernetes/pull/27508), [@aaronlevy](https://github.com/aaronlevy))
-* Add the Patch method to the generated clientset. ([#27293](https://github.com/kubernetes/kubernetes/pull/27293), [@caesarxuchao](https://github.com/caesarxuchao))
-* let patch use --local flag like `kubectl set image` ([#26722](https://github.com/kubernetes/kubernetes/pull/26722), [@deads2k](https://github.com/deads2k))
-* enable recursive processing in kubectl edit ([#25085](https://github.com/kubernetes/kubernetes/pull/25085), [@metral](https://github.com/metral))
-* Image GC logic should compensate for reserved blocks ([#27996](https://github.com/kubernetes/kubernetes/pull/27996), [@ronnielai](https://github.com/ronnielai))
-* Bump minimum API version for docker to 1.21 ([#27208](https://github.com/kubernetes/kubernetes/pull/27208), [@yujuhong](https://github.com/yujuhong))
-* Adding lock files for kubeconfig updating ([#28034](https://github.com/kubernetes/kubernetes/pull/28034), [@krousey](https://github.com/krousey))
-
-Please see the [Releases Page](https://github.com/kubernetes/kubernetes/releases) for older releases.
-
-Release notes of older releases can be found in:
-- [CHANGELOG-1.2.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.2.md)
-- [CHANGELOG-1.3.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.3.md)
-
-[]()
diff --git a/vendor/k8s.io/kubernetes/CHANGELOG-1.5.md b/vendor/k8s.io/kubernetes/CHANGELOG-1.5.md
deleted file mode 100644
index dd3b580688ee..000000000000
--- a/vendor/k8s.io/kubernetes/CHANGELOG-1.5.md
+++ /dev/null
@@ -1,1327 +0,0 @@
-
-- [v1.5.8](#v158)
- - [Downloads for v1.5.8](#downloads-for-v158)
- - [Client Binaries](#client-binaries)
- - [Server Binaries](#server-binaries)
- - [Node Binaries](#node-binaries)
- - [Changelog since v1.5.7](#changelog-since-v157)
- - [Other notable changes](#other-notable-changes)
-- [v1.5.7](#v157)
- - [Downloads for v1.5.7](#downloads-for-v157)
- - [Client Binaries](#client-binaries-1)
- - [Server Binaries](#server-binaries-1)
- - [Node Binaries](#node-binaries-1)
- - [Changelog since v1.5.6](#changelog-since-v156)
- - [Other notable changes](#other-notable-changes-1)
-- [v1.5.6](#v156)
- - [Downloads for v1.5.6](#downloads-for-v156)
- - [Client Binaries](#client-binaries-2)
- - [Server Binaries](#server-binaries-2)
- - [Changelog since v1.5.5](#changelog-since-v155)
- - [Other notable changes](#other-notable-changes-2)
-- [v1.5.5](#v155)
- - [Downloads for v1.5.5](#downloads-for-v155)
- - [Client Binaries](#client-binaries-3)
- - [Server Binaries](#server-binaries-3)
- - [Changelog since v1.5.4](#changelog-since-v154)
-- [v1.5.4](#v154)
- - [Downloads for v1.5.4](#downloads-for-v154)
- - [Client Binaries](#client-binaries-4)
- - [Server Binaries](#server-binaries-4)
- - [Changelog since v1.5.3](#changelog-since-v153)
- - [Other notable changes](#other-notable-changes-3)
-- [v1.5.3](#v153)
- - [Downloads for v1.5.3](#downloads-for-v153)
- - [Client Binaries](#client-binaries-5)
- - [Server Binaries](#server-binaries-5)
- - [Node Binaries](#node-binaries-2)
- - [Changelog since v1.5.2](#changelog-since-v152)
- - [Other notable changes](#other-notable-changes-4)
-- [v1.5.2](#v152)
- - [Downloads for v1.5.2](#downloads-for-v152)
- - [Client Binaries](#client-binaries-6)
- - [Server Binaries](#server-binaries-6)
- - [Changelog since v1.5.1](#changelog-since-v151)
- - [Other notable changes](#other-notable-changes-5)
-- [v1.5.1](#v151)
- - [Downloads for v1.5.1](#downloads-for-v151)
- - [Client Binaries](#client-binaries-7)
- - [Server Binaries](#server-binaries-7)
- - [Changelog since v1.5.0](#changelog-since-v150)
- - [Other notable changes](#other-notable-changes-6)
- - [Known Issues for v1.5.1](#known-issues-for-v151)
-- [v1.5.0](#v150)
- - [Downloads for v1.5.0](#downloads-for-v150)
- - [Client Binaries](#client-binaries-8)
- - [Server Binaries](#server-binaries-8)
- - [Major Themes](#major-themes)
- - [Features](#features)
- - [Known Issues](#known-issues)
- - [Notable Changes to Existing Behavior](#notable-changes-to-existing-behavior)
- - [Deprecations](#deprecations)
- - [Action Required Before Upgrading](#action-required-before-upgrading)
- - [External Dependency Version Information](#external-dependency-version-information)
- - [Changelog since v1.5.0-beta.3](#changelog-since-v150-beta3)
- - [Other notable changes](#other-notable-changes-7)
- - [Previous Releases Included in v1.5.0](#previous-releases-included-in-v150)
-- [v1.5.0-beta.3](#v150-beta3)
- - [Downloads for v1.5.0-beta.3](#downloads-for-v150-beta3)
- - [Client Binaries](#client-binaries-9)
- - [Server Binaries](#server-binaries-9)
- - [Changelog since v1.5.0-beta.2](#changelog-since-v150-beta2)
- - [Other notable changes](#other-notable-changes-8)
-- [v1.5.0-beta.2](#v150-beta2)
- - [Downloads for v1.5.0-beta.2](#downloads-for-v150-beta2)
- - [Client Binaries](#client-binaries-10)
- - [Server Binaries](#server-binaries-10)
- - [Changelog since v1.5.0-beta.1](#changelog-since-v150-beta1)
- - [Other notable changes](#other-notable-changes-9)
-- [v1.5.0-beta.1](#v150-beta1)
- - [Downloads for v1.5.0-beta.1](#downloads-for-v150-beta1)
- - [Client Binaries](#client-binaries-11)
- - [Server Binaries](#server-binaries-11)
- - [Changelog since v1.5.0-alpha.2](#changelog-since-v150-alpha2)
- - [Action Required](#action-required)
- - [Other notable changes](#other-notable-changes-10)
-- [v1.5.0-alpha.2](#v150-alpha2)
- - [Downloads for v1.5.0-alpha.2](#downloads-for-v150-alpha2)
- - [Client Binaries](#client-binaries-12)
- - [Server Binaries](#server-binaries-12)
- - [Changelog since v1.5.0-alpha.1](#changelog-since-v150-alpha1)
- - [Action Required](#action-required-1)
- - [Other notable changes](#other-notable-changes-11)
-- [v1.5.0-alpha.1](#v150-alpha1)
- - [Downloads](#downloads)
- - [Changelog since v1.4.0-alpha.3](#changelog-since-v140-alpha3)
- - [Experimental Features](#experimental-features)
- - [Action Required](#action-required-2)
- - [Other notable changes](#other-notable-changes-12)
-
-
-
-
-
-# v1.5.8
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.5/examples)
-
-## Downloads for v1.5.8
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes.tar.gz) | `6a3fad3dcc3c59f926e5c0110d16edfc323fdd5482c83102b3f8068b420702db`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-src.tar.gz) | `0a1fea0278f77a7ede1f64c05e8c69ba5ea2a9403d579db2247963e7869ff9e5`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-client-darwin-386.tar.gz) | `95061ccf35dfe1d9aac0dd55c542c8f1b04874892196b0b71185ba3ea61ec424`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-client-darwin-amd64.tar.gz) | `37b14062a8f3701efa12cb2ae9eecef2831d31881990a15bbb526689b0fd2712`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-client-linux-386.tar.gz) | `4c1b83462cc9c11144c957beca3479a16162ccd283462d3b6b2afcfa40550137`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-client-linux-amd64.tar.gz) | `0baefc8e2c01bddf550764a77d6fb345df331bbc4f2f56efb036d3dd50b64562`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-client-linux-arm64.tar.gz) | `f0fa7369d03b330bc655f5055e8527e7211936baf3277444947e3b7c9441568e`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-client-linux-arm.tar.gz) | `40e1c8e89cc93ed072858afb80eac48524282f9d6a7d2510676ddb319458d0a5`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-client-windows-386.tar.gz) | `8ca51905157ff3e9fff9bbd0930678c6c9ef885a14ae8580a1595aa56ac66284`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-client-windows-amd64.tar.gz) | `b4120b9691a13188cf1328d364d7878f0b8d893636b58e3388291142a000e69f`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-server-linux-amd64.tar.gz) | `7e17b17e967722546541fdaeead4dc40037ddce4107aa2b2a561ea577aa62101`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-server-linux-arm64.tar.gz) | `2928098e581d2ffba2750222a238d4c4e93ab31efd09977d0447964d25cc14bd`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-server-linux-arm.tar.gz) | `65b23196a1e55e2ab3893b9e147568aaa35cbf46bc588cb0913349a93b70678c`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-node-linux-amd64.tar.gz) | `4d73ccd2ecac0f2e161f88e4d77004298d10a009f9b5fa0203fa7bff70a82e30`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-node-linux-arm64.tar.gz) | `03244b9c4149d6153eb9459e3774a4a0257fd66d3532add5721223925b6fa26f`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-node-linux-arm.tar.gz) | `d071b710ec898b5630c776f0f6f88f44c3c72e6494c235a7c5cd5807df8fb0cb`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.8/kubernetes-node-windows-amd64.tar.gz) | `59448d44c86002386450c8804757bfd63f4c943670d7cf15e9221efa53ee0ef5`
-
-## Changelog since v1.5.7
-
-### Other notable changes
-
-* Update dnsmasq to the latest version. ([#53149](https://github.com/kubernetes/kubernetes/pull/53149), [@bowei](https://github.com/bowei))
-* On GCP platforms, e2e testing now logs which OS images the cluster was found to have. ([#48310](https://github.com/kubernetes/kubernetes/pull/48310), [@abgworrall](https://github.com/abgworrall))
-* Update cluster-proportional-autoscaler, etcd-empty-dir-cleanup, fluentd-gcp, and kube-addon-manager addons with refreshed base images containing fixes for CVE-2015-8271, CVE-2016-7543, CVE-2016-9841, CVE-2016-9843, CVE-2017-1000366, CVE-2017-2616, and CVE-2017-7507. ([#48011](https://github.com/kubernetes/kubernetes/pull/48011), [@ixdy](https://github.com/ixdy))
-* Bump GLBC version to 0.9.5 - fixes [loss of manually modified GCLB health check settings](https://github.com/kubernetes/kubernetes/issues/47559) upon upgrade from pre-1.6.4 to either 1.6.4 or 1.6.5. ([#47567](https://github.com/kubernetes/kubernetes/pull/47567), [@nicksardo](https://github.com/nicksardo))
-* Upgrade golang version to 1.7.6 ([#46408](https://github.com/kubernetes/kubernetes/pull/46408), [@cblecker](https://github.com/cblecker))
-
-
-
-# v1.5.7
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.5/examples)
-
-## Downloads for v1.5.7
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes.tar.gz) | `36bc0bcdce4060546f3fef7186f1207d30d5fd340e72113ff592966bd6684827`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-src.tar.gz) | `b329b02e9542049b9b85f8083a466e51799691bcf06fdf172b9c0f1cb61bdb6d`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-client-darwin-386.tar.gz) | `824ea7e5987e4ac7915b11fcd86658221a5a1e942a3f5210383435953509f96f`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-client-darwin-amd64.tar.gz) | `251a91eff457640066dd395393b16aae81850225db29207c07321b62fd9213ab`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-client-linux-386.tar.gz) | `84c69d23010304308459ad520375fd017f57562f8a78b6157ef0ea093636a8b6`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-client-linux-amd64.tar.gz) | `991e1eab65d1817ca3600e3ba3bc63ed86cf139a4669f84899f593ff684fb36c`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-client-linux-arm64.tar.gz) | `afe9c001a41b88da351ddf0cb3d506d3d8da7d9a94ae2d4b05062b2927c81fec`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-client-linux-arm.tar.gz) | `a936578c04887a2e1fe0a25e05f4d9663cd673d3fbac0c522bf75710d7f39f9b`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-client-windows-386.tar.gz) | `529ae014f0603868c82ee89601668fac17fa55932535d5925a7b61b1f301e61f`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-client-windows-amd64.tar.gz) | `f1f7e588dca059a4cbe97b4a28a983d346f93fc2bb0d4a1dbbb7d55a3e33caef`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-server-linux-amd64.tar.gz) | `ae18d659811da316d4a8bbdce15c4396fdee0068f9d3247a72c3a23433fee44c`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-server-linux-arm64.tar.gz) | `d56187d19b42848b7ff09e82c0452120c173ae56709cae88f96312ee7c41b0c4`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-server-linux-arm.tar.gz) | `aaa4d9414620bb1834401a17f2b877fe1347a4f8fc37c940092ac7f112e22934`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-node-linux-amd64.tar.gz) | `40c294ef5af4d548d37a599ee7fa07462f116fa5784d2b1501d95eeb04b8d34d`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-node-linux-arm64.tar.gz) | `37482d5933c99fca526d0d47f0cfb2b69101f2e60dd5240b490b9768c8e4171e`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-node-linux-arm.tar.gz) | `786ddb390a9fac6e41caa4bb8054240ddb5255b9937bb37d01d77e23857bb407`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.7/kubernetes-node-windows-amd64.tar.gz) | `c3e89390c8026845fcf72765e84b7e3cd383de705ef46f4e3d422b343d66bd47`
-
-## Changelog since v1.5.6
-
-### Other notable changes
-
-* kube-apiserver now drops unneeded path information if an older version of Windows kubectl sends it. ([#44585](https://github.com/kubernetes/kubernetes/pull/44585), [@mml](https://github.com/mml))
-* Fix for kube-proxy healthcheck handling an update that simultaneously removes one port and adds another. ([#44365](https://github.com/kubernetes/kubernetes/pull/44365), [@MrHohn](https://github.com/MrHohn))
-* Fix [broken service accounts when using dedicated service account key](https://github.com/kubernetes/kubernetes/issues/44285). ([#44169](https://github.com/kubernetes/kubernetes/pull/44169), [@mikedanese](https://github.com/mikedanese))
-* Update to fluentd-gcp:1.28.3, rebased on ubuntu-slim:0.8 ([#43928](https://github.com/kubernetes/kubernetes/pull/43928), [@ixdy](https://github.com/ixdy))
-* Fix polarity of NodePort logic to avoid leaked ports ([#43259](https://github.com/kubernetes/kubernetes/pull/43259), [@thockin](https://github.com/thockin))
-* Upgrade golang versions to 1.7.5 ([#41771](https://github.com/kubernetes/kubernetes/pull/41771), [@cblecker](https://github.com/cblecker))
-
-
-
-# v1.5.6
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.5/examples)
-
-## Downloads for v1.5.6
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes.tar.gz) | `14a514bb9ed331eb1854a1d66cfaa53290c382641e154c901bcb14eb2cd683b4`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-src.tar.gz) | `cf3d85bcfd148ed6a54c64b4102a10cc4e54332907fb3d9a6c6e2658a31ca2e9`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-client-darwin-386.tar.gz) | `30b819eb1427317be38a4f534fc2c369d43e67499e5df79cdd5d4cfac14f8d36`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-client-darwin-amd64.tar.gz) | `3eedf919b2feff4c21edcadb493247013274a3672f6a3d46f19e13af211cea4e`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-client-linux-386.tar.gz) | `351bb189f6be835baadda3b87909472c4a9f522ece6e6425250ef227937f2d58`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-client-linux-amd64.tar.gz) | `d7c3508dc5029c6fefb1bf6f381af92d8626ac5a4b7246009832c03768ae670f`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-client-linux-arm64.tar.gz) | `2eaf838ab853c94f05c362a8ce089f32acdb6062356399a6f5fe7cdb13a6fa0c`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-client-linux-arm.tar.gz) | `e5212f6d9577bd090c88a7124edba86f925e08c710865623d9fb914a5b72e67f`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-client-windows-386.tar.gz) | `5a4fdbf0cb88f0e889d8dca1e6c073c167a8c3c7d7b1caad10dbe0dc2eb46677`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-client-windows-amd64.tar.gz) | `b1170a33c5c6fe2c3f71e820f11cf877f0ee72b60a6546aaf989267c89598656`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-server-linux-amd64.tar.gz) | `995959c43661c22b0f2ede45b62061f37c25a53388bcdd8988f928574070390a`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-server-linux-arm64.tar.gz) | `c6b20af2f0c5e3abe20c18aac734846923c8ff3afda637ef1fbd6d3b3820e3b7`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.5.6/kubernetes-server-linux-arm.tar.gz) | `7d439b2012a0280d40441a5871b25a07b540f5e84c561d2bf8c67725ebbf115d`
-
-## Changelog since v1.5.5
-
-### Other notable changes
-
-* kube-up (with gce/gci and gce/coreos providers) now ensures the authentication token file contains correct tokens for the control plane components, even if the file already exists (ensures upgrades and downgrades work successfully) ([#43676](https://github.com/kubernetes/kubernetes/pull/43676), [@liggitt](https://github.com/liggitt))
-* Patch CVE-2016-8859 in alpine based images: ([#42936](https://github.com/kubernetes/kubernetes/pull/42936), [@timstclair](https://github.com/timstclair))
- * - gcr.io/google-containers/cluster-proportional-autoscaler-amd64
- * - gcr.io/google-containers/dnsmasq-metrics-amd64
- * - gcr.io/google-containers/etcd-empty-dir-cleanup
- * - gcr.io/google-containers/kube-addon-manager
- * - gcr.io/google-containers/kube-dnsmasq-amd64
-* - Disable thin_ls due to excessive iops ([#43113](https://github.com/kubernetes/kubernetes/pull/43113), [@dashpole](https://github.com/dashpole))
- * - Ignore .mount cgroups, fixing dissappearing stats
- * - Fix wc goroutine leak
- * - Update aws-sdk-go dependency to 1.6.10
-* PodSecurityPolicy authorization is correctly enforced by the PodSecurityPolicy admission plugin. ([#43489](https://github.com/kubernetes/kubernetes/pull/43489), [@liggitt](https://github.com/liggitt))
-* Bump gcr.io/google_containers/glbc from 0.9.1 to 0.9.2. Release notes: [0.9.2](https://github.com/kubernetes/ingress/releases/tag/0.9.2) ([#43097](https://github.com/kubernetes/kubernetes/pull/43097), [@timstclair](https://github.com/timstclair))
-* Update gcr.io/google-containers/rescheduler to v0.2.2, which uses busybox as a base image instead of ubuntu. ([#41911](https://github.com/kubernetes/kubernetes/pull/41911), [@ixdy](https://github.com/ixdy))
-* restored normalization of custom `--etcd-prefix` when `--storage-backend` is set to etcd3 ([#42506](https://github.com/kubernetes/kubernetes/pull/42506), [@liggitt](https://github.com/liggitt))
-
-
-
-# v1.5.5
-
-This release contains a fix for a PodSecurityPolicy vulnerability which allows users to make use of any existing PodSecurityPolicy object, even ones they are not authorized to use.
-
-Other then that, this release contains no other changes from 1.5.4.
-
-The vulnerability is tracked in http://issue.k8s.io/43459.
-
-**Who is affected?**
-
-Only Kubernetes 1.5.0-1.5.4 installations that do all of the following:
-* Enable the PodSecurityPolicy API (which is not enabled by default):
- * `--runtime-config=extensions/v1beta1/podsecuritypolicy=true`
-* Enable the PodSecurityPolicy admission plugin (which is not enabled by default):
- * `--admission-control=...,PodSecurityPolicy,...`
-* Use authorization to limit users' ability to use specific PodSecurityPolicy objects
-
-**What is the impact?**
-
-A user that is authorized to create pods can make use of any existing PodSecurityPolicy, even ones they are not authorized to use.
-
-**How can I mitigate this prior to installing 1.5.5?**
-
-1. Export existing PodSecurityPolicy objects:
- * `kubectl get podsecuritypolicies -o yaml > psp.yaml`
-2. Review and delete any PodSecurityPolicy objects you do not want all pod-creating users to be able to use (NOTE: Privileged users that were making use of those policies will also lose access to those policies). For example:
- * `kubectl delete podsecuritypolicies/my-privileged-policy`
-3. After upgrading to 1.5.5, re-create the exported PodSecurityPolicy objects:
- * `kubectl create -f psp.yaml`
-
-## Downloads for v1.5.5
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes.tar.gz) | `ff171d53b6dba2aace899dbfa06044d3a54d798896f7b6dd483f20d2c05374ed`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-src.tar.gz) | `25207344982bcf76172c7d156106357a7113b3909ac851e19b437dbba9402af6`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-client-darwin-386.tar.gz) | `92eb19b1464674078927263642205498a9b4e496909138626de721f8ff2eb3f1`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-client-darwin-amd64.tar.gz) | `dd2076d8a3062459b82481bf064d80a198df580f2c34efe7132a091c19d8084c`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-client-linux-386.tar.gz) | `8366a72910c987e4140db42244741752efac8e06f0e13f5d0cbc1cc9bec9733c`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-client-linux-amd64.tar.gz) | `73536e200fee9f4de19ebfd7d2e063a04f5ccb93073982032e79dc47ae92e89a`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-client-linux-arm64.tar.gz) | `8f679bd012ecbc58f0a916f393d3fc79de6dc2624320b04edc1b9249213a49f8`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-client-linux-arm.tar.gz) | `1998d6398aef02898babc5ff20484fe7c538f75f78c650631afea1a555aee8d1`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-client-windows-386.tar.gz) | `dff6fe02a6090feb949acc5753633891bcbdb7ecfb2bff3fa132d025713cbd55`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-client-windows-amd64.tar.gz) | `bd7c7c39122135b58da89a700580475a3cadbb31aa1b35175ff2f80067bedc0d`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-server-linux-amd64.tar.gz) | `578977b62af58639548d743991cd2f71b0fd58f9caa729131824f8dde85b5c6e`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-server-linux-arm64.tar.gz) | `01a1104d8c5a22c26b8b0a402bf0362d749b7d13a636b31c64fb51bb61ea3a01`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.5.5/kubernetes-server-linux-arm.tar.gz) | `06c5ca1f962f368219835ed6d075ef6e3a72685f2f0988823f44dd2e602e1980`
-
-## Changelog since v1.5.4
-
-**No notable changes for this release**
-
-
-
-# v1.5.4
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.5/examples)
-
-## Downloads for v1.5.4
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes.tar.gz) | `2ff668c687c1bdf8351dcae102901b1d46cc50e446bde08a244c2e65739de4c3`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-src.tar.gz) | `172d33787ec2d11345d152becdc96982d3057ed16426910302c1b103980b634b`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-client-darwin-386.tar.gz) | `53e7c4839025ad04c1104b99e1f8b45f4fe639397c623e2e050acb53cb0a8cbd`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-client-darwin-amd64.tar.gz) | `6fac39282c9599566874d63c57b305798e4096a42ef83a8965f615c1d709559c`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-client-linux-386.tar.gz) | `80719626f7e6db6d2d04e57bb7edad3077b774a11ebccea3fcddadaa48cbf0a6`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-client-linux-amd64.tar.gz) | `24001bc0c7ddb32cd72ac9bed55543830424fba734587ac23b812d8d047a9091`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-client-linux-arm64.tar.gz) | `094ff4fe7a10e23a397803869a11a3cc508f3990d9e3b4fbccaefe44be2ad81a`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-client-linux-arm.tar.gz) | `b12b823d12942d7fccaf791343e9c9854073de3e03cc57a7e4bd7b03fec9806b`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-client-windows-386.tar.gz) | `e5ae9775cfe695d2d855b29c01f19b0fd0fad008071d8e95f47f70beb16291a8`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-client-windows-amd64.tar.gz) | `40cc26a8216e703217264194b68d6b5af28ffa1b9b48b23232027c5d63d8b28c`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-server-linux-amd64.tar.gz) | `a61cb36d64c8a4111cf04f9d1aac5d8418d07a7c8a682522203b0dfa76f9c806`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-server-linux-arm64.tar.gz) | `abaa5052f9d0daaebf6b7375c9667c9160355b8ea074daac76ba8a79a24cab37`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.5.4/kubernetes-server-linux-arm.tar.gz) | `ffff55a0f5f5848fdde32a2766dc63cdf26629ca4f91db458381ffb55cf49535`
-
-## Changelog since v1.5.3
-
-### Other notable changes
-
-* Fix AWS device allocator to only use valid device names ([#41455](https://github.com/kubernetes/kubernetes/pull/41455), [@gnufied](https://github.com/gnufied))
-* The kube-apiserver [basic audit log](https://kubernetes.io/docs/admin/audit/) can be enabled in GCE by exporting the environment variable `ENABLE_APISERVER_BASIC_AUDIT=true` before running `cluster/kube-up.sh`. This will log to `/var/log/kube-apiserver-audit.log` and use the same `logrotate` settings as `/var/log/kube-apiserver.log`. ([#41211](https://github.com/kubernetes/kubernetes/pull/41211), [@enisoc](https://github.com/enisoc))
-* list-resources: don't fail if the grep fails to match any resources ([#41933](https://github.com/kubernetes/kubernetes/pull/41933), [@ixdy](https://github.com/ixdy))
-* Bump GCE ContainerVM to container-vm-v20170214 to address CVE-2016-9962. ([#41449](https://github.com/kubernetes/kubernetes/pull/41449), [@zmerlynn](https://github.com/zmerlynn))
-
-
-
-# v1.5.3
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.5/examples)
-
-## Downloads for v1.5.3
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes.tar.gz) | `a4d997be9e3ac0f9838a58fb80d08c2ab02e00afb9d16d3db18d99c85b88b316`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-src.tar.gz) | `a23636ee40a60c1bb3255a03177f522c28133f74c6d09a5437f6b56b7e1d5296`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-client-darwin-386.tar.gz) | `2f8eeb772c22c7dad5a32d6ee17e8b309503b56fbcb0abdc74e1f94e86b33520`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-client-darwin-amd64.tar.gz) | `b044240271223aa93f8bdb8054824a48ba5571460d2e6c90688dccd0892e5c7e`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-client-linux-386.tar.gz) | `d2649a41e4a64c2027e321254e4ef3e690371bd0c7eece12d3395e49d8171617`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-client-linux-amd64.tar.gz) | `eaf386a46eeee324bb71349bba7d5d3f41d7d19af75537cf9e4e7045d7068f68`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-client-linux-arm64.tar.gz) | `2f2d45296651e5696f373838ba019e8b8bb11b2a2772a55f0a6e367ec6c18e2d`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-client-linux-arm.tar.gz) | `56b8b207fd914dc7c16fdb675a3917ab9bff0efbe745ee1675abbff2b5854d32`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-client-windows-386.tar.gz) | `fe3136e3c6bd983e55396341c451f896e478e8c9d0b3d1418e1d1fccee3d7b75`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-client-windows-amd64.tar.gz) | `8e315cb48135a4ed26585e9d8cf88f550ac51e3658b981bb53cb0952e9b3393a`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-server-linux-amd64.tar.gz) | `ad4d101bec0ef981a7e1efbe11223e502ff644368d70ad54915e15fcb3ad6735`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-server-linux-arm64.tar.gz) | `bfd66c57d1071bdd213d4c6d124d491959ae3509994e5a23cc2720a8ad18526d`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-server-linux-arm.tar.gz) | `12b335637b7a4aa019cee600b0161d51e6317a87bec0500e1f9d85990f6352d5`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-node-linux-amd64.tar.gz) | `3f54e2d101b6351513ce9425a23f9a196e965326c3a7f78a98ef1dad452e5830`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-node-linux-arm.tar.gz) | `6508b64755dc0ff90f23921d2b8bb6c0c321c38edeaf24fd4c22282880a87a11`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-node-linux-arm64.tar.gz) | `578ef8a6958fb4bf2e0438cdef7707d12456186a1b8c4b18aa66f47b9221a713`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.3/kubernetes-node-windows-amd64.tar.gz) | `aa166b275b3d0f80cbf23fbee7f42358b6176f37fd9ef66837f38910d4626079`
-
-## Changelog since v1.5.2
-
-### Other notable changes
-
-* We change the default attach_detach_controller sync period to 1 minute to reduce the query frequency through cloud provider to check whether volumes are attached or not. ([#41363](https://github.com/kubernetes/kubernetes/pull/41363), [@jingxu97](https://github.com/jingxu97))
-* Added configurable etcd initial-cluster-state to kube-up script ([#41320](https://github.com/kubernetes/kubernetes/pull/41320), [@jszczepkowski](https://github.com/jszczepkowski))
-* If ExperimentalCriticalPodAnnotation=True flag gate is set, kubelet will ensure that pods with `scheduler.alpha.kubernetes.io/critical-pod` annotation will be admitted even under resource pressure, will not be evicted, and are reasonably protected from system OOMs. ([#41052](https://github.com/kubernetes/kubernetes/pull/41052), [@vishh](https://github.com/vishh))
-* Reverts to looking up the current VM in vSphere using the machine's UUID, either obtained via sysfs or via the `vm-uuid` parameter in the cloud configuration file. ([#40892](https://github.com/kubernetes/kubernetes/pull/40892), [@robdaemon](https://github.com/robdaemon))
-* Fix for detach volume when node is not present/ powered off ([#40118](https://github.com/kubernetes/kubernetes/pull/40118), [@BaluDontu](https://github.com/BaluDontu))
-* Move b.gcr.io/k8s_authenticated_test to gcr.io/k8s-authenticated-test ([#40335](https://github.com/kubernetes/kubernetes/pull/40335), [@zmerlynn](https://github.com/zmerlynn))
-* Bump up GLBC version from 0.9.0-beta to 0.9.1 ([#41037](https://github.com/kubernetes/kubernetes/pull/41037), [@bprashanth](https://github.com/bprashanth))
-* azure: fix Azure Container Registry integration ([#40142](https://github.com/kubernetes/kubernetes/pull/40142), [@colemickens](https://github.com/colemickens))
-* azure disk: restrict name length for Azure specifications ([#40030](https://github.com/kubernetes/kubernetes/pull/40030), [@colemickens](https://github.com/colemickens))
-* Bump GCI to gci-beta-56-9000-80-0 ([#41027](https://github.com/kubernetes/kubernetes/pull/41027), [@dchen1107](https://github.com/dchen1107))
-* Bump up glbc version to 0.9.0-beta.1 ([#40565](https://github.com/kubernetes/kubernetes/pull/40565), [@bprashanth](https://github.com/bprashanth))
-* Enable lazy inode table and journal initialization for ext3 and ext4 ([#38865](https://github.com/kubernetes/kubernetes/pull/38865), [@codablock](https://github.com/codablock))
-* Kubelet will no longer set hairpin mode on every interface on the machine when an error occurs in setting up hairpin for a specific interface. ([#36990](https://github.com/kubernetes/kubernetes/pull/36990), [@bboreham](https://github.com/bboreham))
-* The SubjectAccessReview API passes subresource and resource name information to the authorizer to answer authorization queries. ([#40935](https://github.com/kubernetes/kubernetes/pull/40935), [@liggitt](https://github.com/liggitt))
-* Bump GCE ContainerVM to container-vm-v20170201 to address CVE-2016-9962. ([#40828](https://github.com/kubernetes/kubernetes/pull/40828), [@zmerlynn](https://github.com/zmerlynn))
-* Reduce time needed to attach Azure disks ([#40066](https://github.com/kubernetes/kubernetes/pull/40066), [@codablock](https://github.com/codablock))
-* Fixes request header authenticator by presenting the request header client CA so that the front proxy will authenticate using its client certificate. ([#40301](https://github.com/kubernetes/kubernetes/pull/40301), [@deads2k](https://github.com/deads2k))
-* Fix failing load balancers in Azure ([#40405](https://github.com/kubernetes/kubernetes/pull/40405), [@codablock](https://github.com/codablock))
-* Add a KUBERNETES_NODE_* section to build kubelet/kube-proxy for windows ([#38919](https://github.com/kubernetes/kubernetes/pull/38919), [@brendandburns](https://github.com/brendandburns))
-* Update GCE ContainerVM deployment to container-vm-v20170117 to pick up CVE fixes in base image. ([#40094](https://github.com/kubernetes/kubernetes/pull/40094), [@zmerlynn](https://github.com/zmerlynn))
-* Adding vmdk file extension for vmDiskPath in vsphere DeleteVolume ([#40538](https://github.com/kubernetes/kubernetes/pull/40538), [@divyenpatel](https://github.com/divyenpatel))
-* AWS: Remove duplicate calls to DescribeInstance during volume operations ([#39842](https://github.com/kubernetes/kubernetes/pull/39842), [@gnufied](https://github.com/gnufied))
-* Caching added to the OIDC client auth plugin to fix races and reduce the time kubectl commands using this plugin take by several seconds. ([#38167](https://github.com/kubernetes/kubernetes/pull/38167), [@ericchiang](https://github.com/ericchiang))
-* Actually fix local-cluster-up on 1.5 branch ([#40501](https://github.com/kubernetes/kubernetes/pull/40501), [@lavalamp](https://github.com/lavalamp))
-* Prevent hotloops on error conditions, which could fill up the disk faster than log rotation can free space. ([#40497](https://github.com/kubernetes/kubernetes/pull/40497), [@lavalamp](https://github.com/lavalamp))
-* Fix issue with PodDisruptionBudgets in which `minAvailable` specified as a percentage did not work with StatefulSet Pods. ([#39454](https://github.com/kubernetes/kubernetes/pull/39454), [@foxish](https://github.com/foxish))
-* Fix panic in vSphere cloud provider ([#38423](https://github.com/kubernetes/kubernetes/pull/38423), [@BaluDontu](https://github.com/BaluDontu))
-* Allow missing keys in templates by default ([#39486](https://github.com/kubernetes/kubernetes/pull/39486), [@ncdc](https://github.com/ncdc))
-* Fix kubectl get -f -o so it prints all items in the file ([#39038](https://github.com/kubernetes/kubernetes/pull/39038), [@ncdc](https://github.com/ncdc))
-* Endpoints, that tolerate unready Pods, are now listing Pods in state Terminating as well ([#37093](https://github.com/kubernetes/kubernetes/pull/37093), [@simonswine](https://github.com/simonswine))
-* Add path exist check in getPodVolumePathListFromDisk ([#38909](https://github.com/kubernetes/kubernetes/pull/38909), [@jingxu97](https://github.com/jingxu97))
-* Ensure the GCI metadata files do not have newline at the end ([#38727](https://github.com/kubernetes/kubernetes/pull/38727), [@Amey-D](https://github.com/Amey-D))
-* AWS: recognize eu-west-2 region ([#38746](https://github.com/kubernetes/kubernetes/pull/38746), [@justinsb](https://github.com/justinsb))
-* Fix space issue in volumePath with vSphere Cloud Provider ([#38338](https://github.com/kubernetes/kubernetes/pull/38338), [@BaluDontu](https://github.com/BaluDontu))
-* Fix issue when attempting to unmount a wrong vSphere volume ([#37413](https://github.com/kubernetes/kubernetes/pull/37413), [@BaluDontu](https://github.com/BaluDontu))
-* Changed default scsi controller type in vSphere Cloud Provider ([#38426](https://github.com/kubernetes/kubernetes/pull/38426), [@abrarshivani](https://github.com/abrarshivani))
-* Fixes API compatibility issue with empty lists incorrectly returning a null `items` field instead of an empty array. ([#39834](https://github.com/kubernetes/kubernetes/pull/39834), [@liggitt](https://github.com/liggitt))
-* AWS: Add sequential allocator for device names. ([#38818](https://github.com/kubernetes/kubernetes/pull/38818), [@jsafrane](https://github.com/jsafrane))
-* Fix fsGroup to vSphere ([#38655](https://github.com/kubernetes/kubernetes/pull/38655), [@abrarshivani](https://github.com/abrarshivani))
-
-
-
-# v1.5.2
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.5/examples)
-
-## Downloads for v1.5.2
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes.tar.gz) | `67344958325a70348db5c4e35e59f9c3552232cdc34defb8a0a799ed91c671a3`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-src.tar.gz) | `93241d0f7b69de71d68384699b225ed8a5439bde03dc154827a2b7a6a343791e`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-client-darwin-386.tar.gz) | `1e8a3186907fe5e00f8afcd2ca7a207703d5c499d86c80839333cd7cc4eee9ad`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-client-darwin-amd64.tar.gz) | `64ebd769d96aa5a12f13c4d8c4f6ddce58eae90765c55b7942872dc91447e4d7`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-client-linux-386.tar.gz) | `a8ecb343a7baf9e01459cd903c09291dbbe72e12431e259e60e11b243b2740f7`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-client-linux-amd64.tar.gz) | `9d5b6edebb5ee09b20f35d821d3d233ff4d5935880fc8ea8f1fa654d5fd23e51`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-client-linux-arm64.tar.gz) | `03fd45f96e5d2b66c568b213d0ab6a216aad8c383d5ea4654f7ba8ef5c4d6747`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-client-linux-arm.tar.gz) | `527fbf42e2e4a2785ad367484a4db619b04484621006fa098cde0ffc3ad3496f`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-client-windows-386.tar.gz) | `3afe8d3ef470e81a4d793539c2a05fbbca9f0710ced1c132b1105469924e3cea`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-client-windows-amd64.tar.gz) | `dbb63c5211d62512b412efcb52d0a394f19a8417f3e5cd153a7f04c619eb5b41`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-server-linux-amd64.tar.gz) | `8c4be20caa87530fdd17e539abe6f2d3cfccaef9156d262d4d9859ca8b6e3a38`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-server-linux-arm64.tar.gz) | `e0251c3209acebf55e98db521cf29aaa74076a4119b1b19780620faf81d18f44`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.5.2/kubernetes-server-linux-arm.tar.gz) | `548ad7e061263ff53b80f3ab10a3c7f9289e89a4c56b5a8f49ae513ba88ea93a`
-
-## Changelog since v1.5.1
-
-### Other notable changes
-
-* Fixes NotAuthenticated errors that appear in the kubelet and kube-controller-manager due to never logging in to vSphere ([#36169](https://github.com/kubernetes/kubernetes/pull/36169), [@robdaemon](https://github.com/robdaemon))
-* Update amd64 kube-proxy base image to debian-iptables-amd64:v5 ([#39725](https://github.com/kubernetes/kubernetes/pull/39725), [@ixdy](https://github.com/ixdy))
-* Update kube-proxy image to be based off of Debian 8.6 base image. ([#39695](https://github.com/kubernetes/kubernetes/pull/39695), [@ixdy](https://github.com/ixdy))
-* Fixes an HPA-related panic due to division-by-zero. ([#39694](https://github.com/kubernetes/kubernetes/pull/39694), [@DirectXMan12](https://github.com/DirectXMan12))
-* Update fluentd-gcp addon to 1.28.1 ([#39706](https://github.com/kubernetes/kubernetes/pull/39706), [@ixdy](https://github.com/ixdy))
-* Provide kubernetes-controller-manager flags to control volume attach/detach reconciler sync. The duration of the syncs can be controlled, and the syncs can be shut off as well. ([#39551](https://github.com/kubernetes/kubernetes/pull/39551), [@chrislovecnm](https://github.com/chrislovecnm))
-* AWS: Recognize ca-central-1 region ([#38410](https://github.com/kubernetes/kubernetes/pull/38410), [@justinsb](https://github.com/justinsb))
-* fix nil dereference when doing a volume type check on persistent volumes ([#39529](https://github.com/kubernetes/kubernetes/pull/39529), [@sjenning](https://github.com/sjenning))
-* Generate OpenAPI definition for inlined types ([#39466](https://github.com/kubernetes/kubernetes/pull/39466), [@mbohlool](https://github.com/mbohlool))
-* Admit critical pods in the kubelet ([#38836](https://github.com/kubernetes/kubernetes/pull/38836), [@bprashanth](https://github.com/bprashanth))
-* assign -998 as the oom_score_adj for critical pods (e.g. kube-proxy) ([#39114](https://github.com/kubernetes/kubernetes/pull/39114), [@dchen1107](https://github.com/dchen1107))
-* Don't evict static pods ([#39059](https://github.com/kubernetes/kubernetes/pull/39059), [@bprashanth](https://github.com/bprashanth))
-* Fix an issue where AWS tear-down leaks an DHCP Option Set. ([#38645](https://github.com/kubernetes/kubernetes/pull/38645), [@zmerlynn](https://github.com/zmerlynn))
-* Give apply the versioned struct that generated from the type defined in the restmapping. ([#38982](https://github.com/kubernetes/kubernetes/pull/38982), [@ymqytw](https://github.com/ymqytw))
-* Add support for Azure Container Registry, update Azure dependencies ([#37783](https://github.com/kubernetes/kubernetes/pull/37783), [@brendandburns](https://github.com/brendandburns))
-* Fixes an issue where `hack/local-up-cluster.sh` would fail on the API server start with ([#38898](https://github.com/kubernetes/kubernetes/pull/38898), [@deads2k](https://github.com/deads2k))
- * !!! [1215 15:42:56] Timed out waiting for apiserver: to answer at https://localhost:6443/version; tried 10 waiting 1 between each
-* Since `kubernetes.tar.gz` no longer includes client or server binaries, `cluster/kube-{up,down,push}.sh` now automatically download released binaries if they are missing. ([#38730](https://github.com/kubernetes/kubernetes/pull/38730), [@ixdy](https://github.com/ixdy))
-* Fixed validation of multizone cluster for GCE ([#38695](https://github.com/kubernetes/kubernetes/pull/38695), [@jszczepkowski](https://github.com/jszczepkowski))
-* Fix nil pointer dereference in test framework ([#37583](https://github.com/kubernetes/kubernetes/pull/37583), [@mtaufen](https://github.com/mtaufen))
-* Fixed detection of master during creation of multizone nodes cluster by kube-up. ([#38617](https://github.com/kubernetes/kubernetes/pull/38617), [@jszczepkowski](https://github.com/jszczepkowski))
-* Kubelet: Add image cache. ([#38375](https://github.com/kubernetes/kubernetes/pull/38375), [@Random-Liu](https://github.com/Random-Liu))
-
-
-
-# v1.5.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.5/examples)
-
-## Downloads for v1.5.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes.tar.gz) | `adc4f6ec1fc8f97ed19f474ffcc0af2d050f92dc20ecec2799741802019205ec`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-src.tar.gz) | `27e5009b906b9f233a7be1efcf51140be945446d828c006c171d03fe07e43565`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-client-darwin-386.tar.gz) | `06f8155f0df381bca3b4e27bbd28834f7601e32cbe3d0c1f24be90516c5b8a3b`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-client-darwin-amd64.tar.gz) | `3ede7d74c5f2f918547bca4d813901e33580c8b8f19828da21a5c2296ff4b8be`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-client-linux-386.tar.gz) | `b96c3c359146e4fc4d8ff4cf09216bbbb9dbaf3f405488d4aaa45ac741c98f99`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-client-linux-amd64.tar.gz) | `662fc57057290deb38ec49dd7daf4a4a5b91def2dbdb7ee7a4494dec611379a5`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-client-linux-arm64.tar.gz) | `c33936b7a27f296c7b85bbfac1fe303573580a948dd1f3174916da9a5a954d49`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-client-linux-arm.tar.gz) | `31ea3e4cbcc9574a37566a2cc3c809105d56a739e9cbd387bf878acacedf9ec8`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-client-windows-386.tar.gz) | `95420d0d49e2875703ac09a1b6021252644ba162349c6c506b06f2677852de5d`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-client-windows-amd64.tar.gz) | `534a3c5bdde989c7339df05c4e7793c6c50e5ebc0a663b1a9cdd25bce43a5a74`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-server-linux-amd64.tar.gz) | `871a9f35e1c73f571b7113e01a91d7bfc5bfe3501e910c921a18313774b25fd1`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-server-linux-arm64.tar.gz) | `e13b070ef70d2cea512a839095dbf95249d2f7b5dcbfb378539548c888efe196`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.5.1/kubernetes-server-linux-arm.tar.gz) | `c54cf106e919149731a23da60ad354eadc53b3bf544ab91d4d48ff0c87fdaa7e`
-
-## Changelog since v1.5.0
-
-### Other notable changes
-
-* Changes the default value of the "anonymous-auth" flag to a safer default value of false. This affects kube apiserver and federation apiserver. See https://groups.google.com/forum/#!topic/kubernetes-announce/iclRj-6Nfsg for more details. ([#38708](https://github.com/kubernetes/kubernetes/pull/38708), [@erictune](https://github.com/erictune))
-* Fixes issue where if the audit log is enabled and anonymous authentication is disabled, then an unauthenticated user request will cause a panic and crash the `kube-apiserver`. ([#38717](https://github.com/kubernetes/kubernetes/pull/38717), [@deads2k](https://github.com/deads2k))
-
-## Known Issues for v1.5.1
-
-- `hack/local-up-cluster.sh` script times out waiting for apiserver to answer, see [#38847](https://github.com/kubernetes/kubernetes/issues/38847).
- To workaround this, modify the script to pass `--anonymous-auth=true` to `sudo -E "${GO_OUT}/hyperkube" apiserver ...` when starting `kube-apiserver`.
-
-# v1.5.0
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.5/examples)
-
-## Downloads for v1.5.0
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes.tar.gz) | `52b7df98ea05fb3ebbababf1ccb7f6d4e6f4cad00b8d09350f270aa7e3ad7e85`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-src.tar.gz) | `fbefb2544667f96045c346cee595b0f315282dfdbd41a8f2d5ccc74054a4078e`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-client-darwin-386.tar.gz) | `27d71bb6b16a26387ee30272bd4ee5758deccafafdc91b38f3d0dc19a34e129e`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-client-darwin-amd64.tar.gz) | `5fa8550235919568d7d839b19de00e9bdd72a97cfde21dbdbe07fefd6d6290dc`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-client-linux-386.tar.gz) | `032a17701c014b8bbbb83c7da1046d8992a41031628cf7e1959a94378f5f195b`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-client-linux-amd64.tar.gz) | `afae4fadb7bbb1532967f88fef1de6458abda17219f634cc2c41608fd83ae7f6`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-client-linux-arm64.tar.gz) | `acca7607dae678a0165b7e10685e0eff0d418beebe7c25eaffe18c85717b5cc4`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-client-linux-arm.tar.gz) | `fbc182b6d9ae476c7c509486d773074fd1007032886a8177735e08010c43f89d`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-client-windows-386.tar.gz) | `a8ddea329bc8d57267294464c163d8c2f7837f6353f8c685271864ed8b8bc54d`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-client-windows-amd64.tar.gz) | `bc3a76f1414fa1f4b2fb92732de2100d346edb7b870ed5414ea062bb401a8ebd`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-server-linux-amd64.tar.gz) | `b9c122d709c0556c1e19d31d98bf26ee530f91c0119f4454fb930cef5a0c1aa7`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-server-linux-arm64.tar.gz) | `3bbba5c8dedc47db8f9ebdfac5468398cce2470617de9d550affef9702b724c9`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.5.0/kubernetes-server-linux-arm.tar.gz) | `3ff9ccdd641690fd1c8878408cd369beca1f9f8b212198e251862d40cf2dadc0`
-
-## Major Themes
-
-- StatefulSets (ex-PetSets)
- - StatefulSets are beta now (fixes and stabilization)
-- Improved Federation Support
- - New command: `kubefed`
- - DaemonSets
- - Deployments
- - ConfigMaps
-- Simplified Cluster Deployment
- - Improvements to `kubeadm`
- - HA Setup for Master
-- Node Robustness and Extensibility
- - Windows Server Container support
- - CRI for pluggable container runtimes
- - `kubelet` API supports authentication and authorization
-
-## Features
-
-Features for this release were tracked via the use of the [kubernetes/features](https://github.com/kubernetes/features) issues repo. Each Feature issue is owned by a Special Interest Group from [kubernetes/community](https://github.com/kubernetes/community)
-
-- **API Machinery**
- - [beta] `kube-apiserver` support for the OpenAPI spec is moving from alpha to beta. The first [non-go client](https://github.com/kubernetes-incubator/client-python) is based on it ([kubernetes/features#53](https://github.com/kubernetes/features/issues/53))
-- **Apps**
- - [stable] When replica sets cannot create pods, they will now report detail via the API about the underlying reason ([kubernetes/features#120](https://github.com/kubernetes/features/issues/120))
- - [stable] `kubectl apply` is now able to delete resources you no longer need with `--prune` ([kubernetes/features#128](https://github.com/kubernetes/features/issues/128))
- - [beta] Deployments that cannot make progress in rolling out the newest version will now indicate via the API they are blocked ([docs](http://kubernetes.io/docs/user-guide/deployments/#failed-deployment)) ([kubernetes/features#122](https://github.com/kubernetes/features/issues/122))
- - [beta] StatefulSets allow workloads that require persistent identity or per-instance storage to be created and managed on Kubernetes. ([docs](http://kubernetes.io/docs/concepts/abstractions/controllers/statefulsets/)) ([kubernetes/features#137](https://github.com/kubernetes/features/issues/137))
- - [beta] In order to preserve safety guarantees the cluster no longer force deletes pods on un-responsive nodes and users are now warned if they try to force delete pods via the CLI. ([docs](http://kubernetes.io/docs/tasks/manage-stateful-set/scale-stateful-set/)) ([kubernetes/features#119](https://github.com/kubernetes/features/issues/119))
-- **Auth**
- - [alpha] Further polishing of the Role-based access control alpha API including a default set of cluster roles. ([docs](http://kubernetes.io/docs/admin/authorization/)) ([kubernetes/features#2](https://github.com/kubernetes/features/issues/2))
- - [beta] Added ability to authenticate/authorize access to the Kubelet API ([docs](http://kubernetes.io/docs/admin/kubelet-authentication-authorization/)) ([kubernetes/features#89](https://github.com/kubernetes/features/issues/89))
-- **AWS**
- - [stable] Roles should appear in kubectl get nodes ([kubernetes/features#113](https://github.com/kubernetes/features/issues/113))
-- **Cluster Lifecycle**
- - [alpha] Improved UX and usability for the kubeadm binary that makes it easy to get a new cluster running. ([docs](http://kubernetes.io/docs/getting-started-guides/kubeadm/)) ([changelog](https://github.com/kubernetes/kubeadm/blob/master/CHANGELOG.md)) ([kubernetes/features#11](https://github.com/kubernetes/features/issues/11))
-- **Cluster Ops**
- - [alpha] Added ability to create/remove clusters w/highly available (replicated) masters on GCE using kube-up/kube-down scripts. ([docs](http://kubernetes.io/docs/admin/ha-master-gce/)) ([kubernetes/features#48](https://github.com/kubernetes/features/issues/48))
-- **Federation**
- - [alpha] Support for ConfigMaps in federation. ([docs](http://kubernetes.io/docs/user-guide/federation/configmap/)) ([kubernetes/features#105](https://github.com/kubernetes/features/issues/105))
- - [alpha] Alpha level support for DaemonSets in federation. ([docs](http://kubernetes.io/docs/user-guide/federation/daemonsets/)) ([kubernetes/features#101](https://github.com/kubernetes/features/issues/101))
- - [alpha] Alpha level support for Deployments in federation. ([docs](http://kubernetes.io/docs/user-guide/federation/deployment/)) ([kubernetes/features#100](https://github.com/kubernetes/features/issues/100))
- - [alpha] Cluster federation: Added support for DeleteOptions.OrphanDependents for federation resources. ([docs](http://kubernetes.io/docs/user-guide/federation/#cascading-deletion)) ([kubernetes/features#99](https://github.com/kubernetes/features/issues/99))
- - [alpha] Introducing `kubefed`, a new command line tool to simplify federation control plane. ([docs](http://kubernetes.io/docs/admin/federation/kubefed/)) ([kubernetes/features#97](https://github.com/kubernetes/features/issues/97))
-- **Network**
- - [stable] Services can reference another service by DNS name, rather than being hosted in pods ([kubernetes/features#33](https://github.com/kubernetes/features/issues/33))
- - [beta] Opt in source ip preservation for Services with Type NodePort or LoadBalancer ([docs](http://kubernetes.io/docs/tutorials/services/source-ip/)) ([kubernetes/features#27](https://github.com/kubernetes/features/issues/27))
- - [stable] Enable DNS Horizontal Autoscaling with beta ConfigMap parameters support ([docs](http://kubernetes.io/docs/tasks/administer-cluster/dns-horizontal-autoscaling/))
-- **Node**
- - [alpha] Added ability to preserve access to host userns when userns remapping is enabled in container runtime ([kubernetes/features#127](https://github.com/kubernetes/features/issues/127))
- - [alpha] Introducing the v1alpha1 CRI API to allow pluggable container runtimes; an experimental docker-CRI integration is ready for testing and feedback. ([docs](https://github.com/kubernetes/community/blob/master/contributors/devel/container-runtime-interface.md)) ([kubernetes/features#54](https://github.com/kubernetes/features/issues/54))
- - [alpha] Kubelet launches container in a per pod cgroup hierarchy based on quality of service tier ([kubernetes/features#126](https://github.com/kubernetes/features/issues/126))
- - [beta] Kubelet integrates with memcg notification API to detect when a hard eviction threshold is crossed ([kubernetes/features#125](https://github.com/kubernetes/features/issues/125))
- - [beta] Introducing the beta version containerized node conformance test gcr.io/google_containers/node-test:0.2 for users to verify node setup. ([docs](http://kubernetes.io/docs/admin/node-conformance/)) ([kubernetes/features#84](https://github.com/kubernetes/features/issues/84))
-- **Scheduling**
- - [alpha] Added support for accounting opaque integer resources. ([docs](http://kubernetes.io/docs/user-guide/compute-resources/#opaque-integer-resources-alpha-feature)) ([kubernetes/features#76](https://github.com/kubernetes/features/issues/76))
- - [beta] PodDisruptionBudget has been promoted to beta, can be used to safely drain nodes while respecting application SLO's ([docs](http://kubernetes.io/docs/tasks/administer-cluster/safely-drain-node/)) ([kubernetes/features#85](https://github.com/kubernetes/features/issues/85))
-- **UI**
- - [stable] Dashboard UI now shows all user facing objects and their resource usage. ([docs](http://kubernetes.io/docs/user-guide/ui/)) ([kubernetes/features#136](https://github.com/kubernetes/features/issues/136))
-- **Windows**
- - [alpha] Added support for Windows Server 2016 nodes and scheduling Windows Server Containers ([docs](http://kubernetes.io/docs/getting-started-guides/windows/)) ([kubernetes/features#116](https://github.com/kubernetes/features/issues/116))
-
-## Known Issues
-
-Populated via [v1.5.0 known issues / FAQ accumulator](https://github.com/kubernetes/kubernetes/issues/37134)
-
-* CRI [known issues and
- limitations](https://github.com/kubernetes/community/blob/master/contributors/devel/container-runtime-interface.md#kubernetes-v15-release-cri-v1alpha1)
-* getDeviceNameFromMount() function doesn't return the volume path correctly when the volume path contains spaces [#37712](https://github.com/kubernetes/kubernetes/issues/37712)
-* Federation alpha features do not have feature gates defined and
-are hence enabled by default. This will be fixed in a future release.
-[#38593](https://github.com/kubernetes/kubernetes/issues/38593)
-* Federation control plane can be upgraded by updating the image
-fields in the `Deployment` specs of the control plane components.
-However, federation control plane upgrades were not tested in this
-release [38537](https://github.com/kubernetes/kubernetes/issues/38537)
-
-## Notable Changes to Existing Behavior
-
-* Node controller no longer force-deletes pods from the api-server. ([#35235](https://github.com/kubernetes/kubernetes/pull/35235), [@foxish](https://github.com/foxish))
- * For StatefulSet (previously PetSet), this change means creation of
- replacement pods is blocked until old pods are definitely not running
- (indicated either by the kubelet returning from partitioned state,
- deletion of the Node object, deletion of the instance in the cloud provider,
- or force deletion of the pod from the api-server).
- This helps prevent "split brain" scenarios in clustered applications by
- ensuring that unreachable pods will not be presumed dead unless some
- "fencing" operation has provided one of the above indications.
- * For all other existing controllers except StatefulSet, this has no effect on
- the ability of the controller to replace pods because the controllers do not
- reuse pod names (they use generate-name).
- * User-written controllers that reuse names of pod objects should evaluate this change.
- * When deleting an object with `kubectl delete ... --grace-period=0`, the client will
- begin a graceful deletion and wait until the resource is fully deleted. To force
- deletion immediately, use the `--force` flag. This prevents users from accidentally
- allowing two Stateful Set pods to share the same persistent volume which could lead to data
- corruption [#37263](https://github.com/kubernetes/kubernetes/pull/37263)
-
-
-* Allow anonymous API server access, decorate authenticated users with system:authenticated group ([#32386](https://github.com/kubernetes/kubernetes/pull/32386), [@liggitt](https://github.com/liggitt))
- * kube-apiserver learned the '--anonymous-auth' flag, which defaults to true. When enabled, requests to the secure port that are not rejected by other configured authentication methods are treated as anonymous requests, and given a username of 'system:anonymous' and a group of 'system:unauthenticated'.
- * Authenticated users are decorated with a 'system:authenticated' group.
- * **IMPORTANT**: See Action Required for important actions related to this change.
-
-* kubectl get -o jsonpath=... will now throw an error if the path is to a field not present in the json, even if the path is for a field valid for the type. This is a change from the pre-1.5 behavior, which would return the default value for some fields even if they were not present in the json. ([#37991](https://github.com/kubernetes/kubernetes/pull/37991), [@pwittrock](https://github.com/pwittrock))
-
-* The strategicmerge patchMergeKey for VolumeMounts was changed from "name" to "mountPath". This was necessary because the name field refers to the name of the Volume, and is not a unique key for the VolumeMount. Multiple VolumeMounts will have the same Volume name if mounting the same volume more than once. The "mountPath" is verified to be unique and can act as the mergekey. ([#35071](https://github.com/kubernetes/kubernetes/pull/35071), [@pwittrock](https://github.com/pwittrock))
-
-## Deprecations
-
-* extensions/v1beta1.Jobs is deprecated, use batch/v1.Job instead ([#36355](https://github.com/kubernetes/kubernetes/pull/36355), [@soltysh](https://github.com/soltysh))
-* The kubelet --reconcile-cdir flag is deprecated because it has no function anymore. ([#35523](https://github.com/kubernetes/kubernetes/pull/35523), [@luxas](https://github.com/luxas))
-* Notice of deprecation for recycler [#36760](https://github.com/kubernetes/kubernetes/pull/36760)
-* The init-container (pod.beta.kubernetes.io/init-containers) annotations used to accept capitalized field names that could be accidentally generated by the k8s.io/kubernetes/pkg/api package. Using an upper case field name will now return an error and all users should use the versioned API types from `pkg/api/v1` when serializing from Golang.
-
-## Action Required Before Upgrading
-
-* **Important Security-related changes before upgrading
- * You *MUST* set `--anonymous-auth=false` flag on your kube-apiserver unless you are a developer testing this feature and understand it.
- If you do not, you risk allowing unauthorized users to access your apiserver.
- * You *MUST* set `--anonymous-auth=false` flag on your federation apiserver unless you are a developer testing this feature and understand it.
- If you do not, you risk allowing unauthorized users to access your federation apiserver.
- * You do not need to adjust this flag on Kubelet: there was no authorization for the Kubelet APIs in 1.4.
-* batch/v2alpha1.ScheduledJob has been renamed, use batch/v2alpha1.CronJob instead ([#36021](https://github.com/kubernetes/kubernetes/pull/36021), [@soltysh](https://github.com/soltysh))
-* PetSet has been renamed to StatefulSet.
- If you have existing PetSets, **you must perform extra migration steps** both
- before and after upgrading to convert them to StatefulSets. ([docs](http://kubernetes.io/docs/tasks/manage-stateful-set/upgrade-pet-set-to-stateful-set/)) ([#35663](https://github.com/kubernetes/kubernetes/pull/35663), [@janetkuo](https://github.com/janetkuo))
-* If you are upgrading your Cluster Federation components from v1.4.x, please update your `federation-apiserver` and `federation-controller-manager` manifests to the new version ([#30601](https://github.com/kubernetes/kubernetes/pull/30601), [@madhusudancs](https://github.com/madhusudancs))
-* The deprecated kubelet --configure-cbr0 flag has been removed, and with that the "classic" networking mode as well. If you depend on this mode, please investigate whether the other network plugins `kubenet` or `cni` meet your needs. ([#34906](https://github.com/kubernetes/kubernetes/pull/34906), [@luxas](https://github.com/luxas))
-* New client-go structure, refer to kubernetes/client-go for versioning policy ([#34989](https://github.com/kubernetes/kubernetes/pull/34989), [@caesarxuchao](https://github.com/caesarxuchao))
-* The deprecated kube-scheduler --bind-pods-qps and --bind-pods burst flags have been removed, use --kube-api-qps and --kube-api-burst instead ([#34471](https://github.com/kubernetes/kubernetes/pull/34471), [@timothysc](https://github.com/timothysc))
-* If you used the [PodDisruptionBudget](http://kubernetes.io/docs/admin/disruptions/) feature in 1.4 (i.e. created `PodDisruptionBudget` objects), then **BEFORE** upgrading from 1.4 to 1.5, you must delete all `PodDisruptionBudget` objects (`policy/v1alpha1/PodDisruptionBudget`) that you have created. It is not possible to delete these objects after you upgrade, and their presence will prevent you from using the beta PodDisruptionBudget feature in 1.5 (which uses `policy/v1beta1/PodDisruptionBudget`). If you have already upgraded, you will need to downgrade the master to 1.4 to delete the `policy/v1alpha1/PodDisruptionBudget` objects.
-
-## External Dependency Version Information
-
-Continuous integration builds have used the following versions of external dependencies, however, this is not a strong recommendation and users should consult an appropriate installation or upgrade guide before deciding what versions of etcd, docker or rkt to use.
-
-* Docker versions 1.10.3 - 1.12.3
- * Docker version 1.11.2 known issues
- - Kernel crash with Aufs storage driver on Debian Jessie ([#27885]((https://github.com/kubernetes/kubernetes/issues/27885))
- which can be identified by the [node problem detector](http://kubernetes.io/docs/admin/node-problem/)
- - Leaked File descriptors ([#275](https://github.com/docker/containerd/issues/275))
- - Additional memory overhead per container ([#21737]((https://github.com/docker/docker/issues/21737))
- * Docker version 1.12.1 [has been validated](https://github.com/kubernetes/kubernetes/issues/28698) through the Kubernetes docker automated validation framework as has Docker version 1.12.3
- * Docker 1.10.3 contains [backports provided by RedHat](https://github.com/docker/docker/compare/v1.10.3...runcom:docker-1.10.3-stable) for known issues
- * Docker versions as old as may 1.9.1 work with [known issues](CHANGELOG.md#191) but this is not guaranteed
-* rkt version 1.21.0
- * known issues with the rkt runtime are [listed here](http://kubernetes.io/docs/getting-started-guides/rkt/notes/)
-* etcd version 2.2.1
- * etcd version 3.0.14 [has also been validated](https://k8s-gubernator.appspot.com/builds/kubernetes-jenkins/logs/ci-kubernetes-e2e-gce-etcd3/) but does require [specific configuration steps](https://coreos.com/blog/migrating-applications-etcd-v3.html)
-
-## Changelog since v1.5.0-beta.3
-
-### Other notable changes
-
-* Bump GCE debian image to container-vm-v20161208 ([release notes](https://cloud.google.com/compute/docs/containers/container_vms#changelog)) ([#38444](https://github.com/kubernetes/kubernetes/pull/38444), [@timstclair](https://github.com/timstclair))
-* Fix unmountDevice issue caused by shared mount in GCI ([#38411](https://github.com/kubernetes/kubernetes/pull/38411), [@jingxu97](https://github.com/jingxu97))
-
-### Previous Releases Included in v1.5.0
-
-- [v1.5.0-beta.3](CHANGELOG.md#v150-beta3)
-- [v1.5.0-beta.2](CHANGELOG.md#v150-beta2)
-- [v1.5.0-beta.1](CHANGELOG.md#v150-beta1)
-- [v1.5.0-alpha.2](CHANGELOG.md#v150-alpha2)
-- [v1.5.0-alpha.1](CHANGELOG.md#v150-alpha1)
-
-
-
-# v1.5.0-beta.3
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.5/examples)
-
-## Downloads for v1.5.0-beta.3
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes.tar.gz) | `c2b29b38d29829b7b2591559d0d36495d463de0e18a2611bd1d66f2baea6352c`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-src.tar.gz) | `0b3327b6f0b024c989aba1e546d50d56fc89ed6df74c09fc55b9f9c4a667b771`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-client-darwin-386.tar.gz) | `82a7144ae1371c3320019c8e6a76e95242d85aae9dedccc4884b677cda544c0e`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-client-darwin-amd64.tar.gz) | `3aeea90acfbaf776e2c812e34df4c11a44720e4c5b86c4c0e9a8aaf221149335`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-client-linux-386.tar.gz) | `d55fb1dfe64e62bffbf03f1a7c8bd666562014ad0d438049f0f801f5fa583914`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-client-linux-amd64.tar.gz) | `779b2f1c0eb3eca7dd60332972ccfc79e557e34f080c210dfb6aa6e18e71bbf4`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-client-linux-arm64.tar.gz) | `b5f0a3b23d7082eaefe7090d7a8f9952fd8b00d44a90137200bc5a91001b6e95`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-client-linux-arm.tar.gz) | `ccadbef7ce7c89fc48988c57585c0ccb7488d2dcc7e96f4e43c5bb64e44b9e29`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-client-windows-386.tar.gz) | `da1428b6ed138134358c72af570a65565c5188a1c6e50cee42becb1a48441d91`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-client-windows-amd64.tar.gz) | `7b74aeb215b0f0ff86bae262af5bafe7083a44293e1ab2545f5de3ac42deda0b`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-server-linux-amd64.tar.gz) | `c56aa39fd4e732c86a2729aa427ca2fc95130bd788053aa8e8f6a8efd9e1310e`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-server-linux-arm64.tar.gz) | `9f55082ca5face2db2d6d54bed2a831622e747e1aa527ee8adc61d0ed3fcfab8`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.5.0-beta.3/kubernetes-server-linux-arm.tar.gz) | `4a7c037ac221531eee4e47b66a2aa12fce4044d2d4acbef0e48b09e0a8fe950b`
-
-## Changelog since v1.5.0-beta.2
-
-### Other notable changes
-
-* Better compat with very old iptables (e.g. CentOS 6) ([#37594](https://github.com/kubernetes/kubernetes/pull/37594), [@thockin](https://github.com/thockin))
-* fix permissions when using fsGroup ([#37009](https://github.com/kubernetes/kubernetes/pull/37009), [@sjenning](https://github.com/sjenning))
-* Fix GCI mounter issue ([#38124](https://github.com/kubernetes/kubernetes/pull/38124), [@jingxu97](https://github.com/jingxu97))
-* fix mesos unit tests ([#38196](https://github.com/kubernetes/kubernetes/pull/38196), [@deads2k](https://github.com/deads2k))
-* Fix Service Update on LoadBalancerSourceRanges Field ([#37720](https://github.com/kubernetes/kubernetes/pull/37720), [@freehan](https://github.com/freehan))
-* Fix Service Update on LoadBalancerSourceRanges Field ([#37720](https://github.com/kubernetes/kubernetes/pull/37720), [@freehan](https://github.com/freehan))
-* Set kernel.softlockup_panic =1 based on the flag. ([#38001](https://github.com/kubernetes/kubernetes/pull/38001), [@dchen1107](https://github.com/dchen1107))
-* Fix logic error in graceful deletion ([#37721](https://github.com/kubernetes/kubernetes/pull/37721), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Enable containerized mounter only for nfs and glusterfs types ([#37990](https://github.com/kubernetes/kubernetes/pull/37990), [@jingxu97](https://github.com/jingxu97))
-* GCI: Remove /var/lib/docker/network ([#37593](https://github.com/kubernetes/kubernetes/pull/37593), [@yujuhong](https://github.com/yujuhong))
-* kubelet: don't reject pods without adding them to the pod manager ([#37661](https://github.com/kubernetes/kubernetes/pull/37661), [@yujuhong](https://github.com/yujuhong))
-* Fix photon controller plugin to construct with correct PdID ([#37167](https://github.com/kubernetes/kubernetes/pull/37167), [@luomiao](https://github.com/luomiao))
-* Fix the equality checks for numeric values in cluster/gce/util.sh. ([#37638](https://github.com/kubernetes/kubernetes/pull/37638), [@roberthbailey](https://github.com/roberthbailey))
-* federation service controller: stop deleting services from underlying clusters when federated service is deleted. ([#37353](https://github.com/kubernetes/kubernetes/pull/37353), [@nikhiljindal](https://github.com/nikhiljindal))
-* Set Dashboard UI version to v1.5.0 ([#37684](https://github.com/kubernetes/kubernetes/pull/37684), [@rf232](https://github.com/rf232))
-* When deleting an object with `--grace-period=0`, the client will begin a graceful deletion and wait until the resource is fully deleted. To force deletion, use the `--force` flag. ([#37263](https://github.com/kubernetes/kubernetes/pull/37263), [@smarterclayton](https://github.com/smarterclayton))
-* Removes shorthand flag -w from kubectl apply ([#37345](https://github.com/kubernetes/kubernetes/pull/37345), [@MrHohn](https://github.com/MrHohn))
-* Update doc for kubectl apply ([#37397](https://github.com/kubernetes/kubernetes/pull/37397), [@ymqytw](https://github.com/ymqytw))
-* Try self-repair scheduler cache or panic ([#37379](https://github.com/kubernetes/kubernetes/pull/37379), [@wojtek-t](https://github.com/wojtek-t))
-* Use gsed on the Mac ([#37562](https://github.com/kubernetes/kubernetes/pull/37562), [@roberthbailey](https://github.com/roberthbailey))
-* Fix TestServiceAlloc flakes ([#37487](https://github.com/kubernetes/kubernetes/pull/37487), [@wojtek-t](https://github.com/wojtek-t))
-
-
-
-# v1.5.0-beta.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.5/examples)
-
-## Downloads for v1.5.0-beta.2
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes.tar.gz) | `4a6cb512dee2312ffe291f4209759309576ca477cf51fb8447b30a7cb2a887ed`
-[kubernetes-src.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-src.tar.gz) | `fe71f19b607183da4abf5f537e7ccbe72ac3306b0933ee1f519253c78bf9252f`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-client-darwin-386.tar.gz) | `37bcd12754a28ba6b4d030c68526bc6369f1fa3b7b0e405277bb13989ed0f9da`
-[kubernetes-client-darwin-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-client-darwin-amd64.tar.gz) | `760817040ca040dd4ba8929cfb714b8bf6704c6ac2ec9985b56fa77b4da03d2c`
-[kubernetes-client-linux-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-client-linux-386.tar.gz) | `87d694445a3e532748d07e0d0da05c1ae8b84b46c54ec1415c9603533747a465`
-[kubernetes-client-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-client-linux-amd64.tar.gz) | `b2bcd07a525428fe24da628afca22b019b8f2847d1999da8fce72b7342cf64ed`
-[kubernetes-client-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-client-linux-arm64.tar.gz) | `262c4fa70039389aa5d5b73a0def325471bd24b858157d60c0389fbee5ca671e`
-[kubernetes-client-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-client-linux-arm.tar.gz) | `52c9341c1e6aa923aed4497c061121c192f209c90fcf31135edc45241a684bfa`
-[kubernetes-client-windows-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-client-windows-386.tar.gz) | `7d8e3bcdfa9dc3d5fde70c60a37e543cc59d23b25e2b0a2274e672d0bae013c2`
-[kubernetes-client-windows-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-client-windows-amd64.tar.gz) | `75143c176bc817fc49a79229dfae8c7429d0a3deeaba54a397dddce3e37e8550`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-server-linux-amd64.tar.gz) | `61c209048da1612796a30b880076b7f9b59038821da63bbecac4c56f24216312`
-[kubernetes-server-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-server-linux-arm64.tar.gz) | `2c6952e16c0b0c153ca3d424b3deca9b43a8e421b1a59359bc10260309bf470c`
-[kubernetes-server-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.2/kubernetes-server-linux-arm.tar.gz) | `cf3e37a89358cae1d2d36aaad10f3e906269bc3df611279dbed9f50e81449fad`
-
-## Changelog since v1.5.0-beta.1
-
-### Other notable changes
-
-* Modify GCI mounter to enable NFSv3 ([#36610](https://github.com/kubernetes/kubernetes/pull/36610), [@jingxu97](https://github.com/jingxu97))
-* Third party resources are now deleted when a namespace is deleted. ([#35947](https://github.com/kubernetes/kubernetes/pull/35947), [@brendandburns](https://github.com/brendandburns))
-* kube-dns ([#36775](https://github.com/kubernetes/kubernetes/pull/36775), [@bowei](https://github.com/bowei))
- * Added --config-map and --config-map-namespace command line options.
- * If --config-map is set, kube-dns will load dynamic configuration from the config map
- * referenced by --config-map-namespace, --config-map. The config-map supports
- * the following properties: "federations".
- * --federations flag is now deprecated. Prefer to set federations via the config-map.
- * Federations can be configured by settings the "federations" field to the value currently
- * set in the command line.
- * Example:
- * kind: ConfigMap
- * apiVersion: v1
- * metadata:
- * name: kube-dns
- * namespace: kube-system
- * data:
- * federations: abc=def
-* azure: support multiple ipconfigs on a NIC ([#36841](https://github.com/kubernetes/kubernetes/pull/36841), [@colemickens](https://github.com/colemickens))
-* Fix issue in converting AWS volume ID from mount paths ([#36840](https://github.com/kubernetes/kubernetes/pull/36840), [@jingxu97](https://github.com/jingxu97))
-* fix leaking memory backed volumes of terminated pods ([#36779](https://github.com/kubernetes/kubernetes/pull/36779), [@sjenning](https://github.com/sjenning))
-* Default logging subsystem's resiliency was greatly improved, fluentd memory consumption and OOM error probability was reduced. ([#37021](https://github.com/kubernetes/kubernetes/pull/37021), [@Crassirostris](https://github.com/Crassirostris))
-
-
-
-# v1.5.0-beta.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.5/examples)
-
-## Downloads for v1.5.0-beta.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes.tar.gz) | `62c51bcee460794cda30e720c65509b679b51015c62c075e6e735fe29d089e2b`
-[kubernetes-src.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-src.tar.gz) | `8c950c7377eb40670d0438ccb68bbeaf1100ed2e919e012bc98479ff07ddd393`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-client-darwin-386.tar.gz) | `e71af85542837842ff3b0fb8137332f4e1ce4c453d225da292e1fa781f1c74d7`
-[kubernetes-client-darwin-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | `033d02c1382553f977057827b6a5b82f1b69aecd44b649c937781d1cccb763d1`
-[kubernetes-client-linux-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-client-linux-386.tar.gz) | `1e7a435f2f7d06e3de9bd8c8d0457b6548aa15ad5cdab4241391f290a28b804f`
-[kubernetes-client-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | `3c07a89e8eb785a7b37842d4b0bc0471fcc7b4e3a4bd973e6f8936cbc6030d76`
-[kubernetes-client-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | `680a2786d9782395b613e27509df2d0f671a2471a43533ccdbc6b71cfb332072`
-[kubernetes-client-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-client-linux-arm.tar.gz) | `2a5b10fbd69ce9b1da0403a80d71684ee2cf4d75298a5ec19e069ae826da81ed`
-[kubernetes-client-windows-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-client-windows-386.tar.gz) | `10acbf09ffbc04f549d1cffff98a533b456562d5c09a2d0f315523b70072c35d`
-[kubernetes-client-windows-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | `3317f90da242b0fb95a3cbc669fc4941d7b56b5ff90ac528c166e915bee31fdf`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | `fdb257c0bbf64304441fd377a5ee330de10696aa0b5c1b6c27fa73a6c00121ae`
-[kubernetes-server-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | `a174cf6c9351da786b8780f5edca158a4e021d4af597bcc66f238601fb37c2b1`
-[kubernetes-server-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-beta.1/kubernetes-server-linux-arm.tar.gz) | `1dc520b9a4428321225ba6cfa0f79b702965d7f6994357c15e0195c5af1528ff`
-
-## Changelog since v1.5.0-alpha.2
-
-### Action Required
-
-* Deprecate extensions/v1beta1.Jobs ([#36355](https://github.com/kubernetes/kubernetes/pull/36355), [@soltysh](https://github.com/soltysh))
-* Rename ScheduledJobs to CronJobs. ([#36021](https://github.com/kubernetes/kubernetes/pull/36021), [@soltysh](https://github.com/soltysh))
-* Read the federation controller manager kubeconfig from a filesystem path ([#30601](https://github.com/kubernetes/kubernetes/pull/30601), [@madhusudancs](https://github.com/madhusudancs))
-* Node controller to not force delete pods ([#35235](https://github.com/kubernetes/kubernetes/pull/35235), [@foxish](https://github.com/foxish))
-* Add perma-failed deployments API ([#19343](https://github.com/kubernetes/kubernetes/pull/19343), [@kargakis](https://github.com/kargakis))
-
-### Other notable changes
-
-* Federation: allow specification of dns zone by ID ([#36336](https://github.com/kubernetes/kubernetes/pull/36336), [@justinsb](https://github.com/justinsb))
-* K8s 1.5 keeps container-vm as the default node image on GCE for backwards compatibility reasons. Please beware that container-vm is officially deprecated (supported with security patches only) and you should replace it with GCI if at all possible. You can review the migration guide here for more detail: https://cloud.google.com/container-engine/docs/node-image-migration ([#36822](https://github.com/kubernetes/kubernetes/pull/36822), [@mtaufen](https://github.com/mtaufen))
-* Add a flag allowing contention profiling of the API server ([#36756](https://github.com/kubernetes/kubernetes/pull/36756), [@gmarek](https://github.com/gmarek))
-* Rename `--cgroups-per-qos` to `--experimental-cgroups-per-qos` in Kubelet ([#36767](https://github.com/kubernetes/kubernetes/pull/36767), [@vishh](https://github.com/vishh))
-* Implement CanMount() for gfsMounter for linux ([#36686](https://github.com/kubernetes/kubernetes/pull/36686), [@rkouj](https://github.com/rkouj))
-* Default host user namespace via experimental flag ([#31169](https://github.com/kubernetes/kubernetes/pull/31169), [@pweil-](https://github.com/pweil-))
-* Use generous limits in the resource usage tracking tests ([#36623](https://github.com/kubernetes/kubernetes/pull/36623), [@yujuhong](https://github.com/yujuhong))
-* Update Dashboard UI version to 1.4.2 ([#35895](https://github.com/kubernetes/kubernetes/pull/35895), [@rf232](https://github.com/rf232))
-* Add support for service load balancer source ranges to Azure load balancers. ([#36696](https://github.com/kubernetes/kubernetes/pull/36696), [@brendandburns](https://github.com/brendandburns))
-* gci-dev-56-8977-0-0: ([#36681](https://github.com/kubernetes/kubernetes/pull/36681), [@mtaufen](https://github.com/mtaufen))
- * Date: Nov 03, 2016
- * Kernel: ChromiumOS-4.4
- * Kubernetes: v1.4.5
- * Docker: v1.11.2
- * Changelog (vs 55-8872-18-0)
- * Updated kubernetes to v1.4.5
- * Fixed a bug in e2fsprogs that caused mke2fs to take a very long time. Upstream fix: http://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?h=next&id=d33e690fe7a6cbeb51349d9f2c7fb16a6ebec9c2
-* Fix strategic patch for list of primitive type with merge sementic ([#35647](https://github.com/kubernetes/kubernetes/pull/35647), [@ymqytw](https://github.com/ymqytw))
-* Fix issue in reconstruct volume data when kubelet restarts ([#36616](https://github.com/kubernetes/kubernetes/pull/36616), [@jingxu97](https://github.com/jingxu97))
-* Ensure proper serialization of updates and creates in federation test watcher ([#36613](https://github.com/kubernetes/kubernetes/pull/36613), [@mwielgus](https://github.com/mwielgus))
-* Add support for SourceIP preservation in Azure LBs ([#36557](https://github.com/kubernetes/kubernetes/pull/36557), [@brendandburns](https://github.com/brendandburns))
-* Fix fetching pids running in a cgroup, which caused problems with OOM score adjustments & setting the /system cgroup ("misc" in the summary API). ([#36551](https://github.com/kubernetes/kubernetes/pull/36551), [@timstclair](https://github.com/timstclair))
-* federation: Adding support for DeleteOptions.OrphanDependents for federated replicasets and deployments. Setting it to false while deleting a federated replicaset or deployment also deletes the corresponding resource from all registered clusters. ([#36476](https://github.com/kubernetes/kubernetes/pull/36476), [@nikhiljindal](https://github.com/nikhiljindal))
-* kubectl: show node label if defined ([#35901](https://github.com/kubernetes/kubernetes/pull/35901), [@justinsb](https://github.com/justinsb))
-* Migrates addons from RCs to Deployments ([#36008](https://github.com/kubernetes/kubernetes/pull/36008), [@MrHohn](https://github.com/MrHohn))
-* Avoid setting S_ISGID on files in volumes ([#36386](https://github.com/kubernetes/kubernetes/pull/36386), [@sjenning](https://github.com/sjenning))
-* federation: Adding support for DeleteOptions.OrphanDependents for federated daemonsets and ingresses. Setting it to false while deleting a federated daemonset or ingress also deletes the corresponding resource from all registered clusters. ([#36330](https://github.com/kubernetes/kubernetes/pull/36330), [@nikhiljindal](https://github.com/nikhiljindal))
-* Add authz to psp admission ([#33080](https://github.com/kubernetes/kubernetes/pull/33080), [@pweil-](https://github.com/pweil-))
-* Better messaging for missing volume binaries on host ([#36280](https://github.com/kubernetes/kubernetes/pull/36280), [@rkouj](https://github.com/rkouj))
-* Add Windows support to kube-proxy ([#36079](https://github.com/kubernetes/kubernetes/pull/36079), [@jbhurat](https://github.com/jbhurat))
-* Support persistent volume usage for kubernetes running on Photon Controller platform ([#36133](https://github.com/kubernetes/kubernetes/pull/36133), [@luomiao](https://github.com/luomiao))
-* GCI nodes use an external mounter script to mount NFS & GlusterFS storage volumes ([#36267](https://github.com/kubernetes/kubernetes/pull/36267), [@vishh](https://github.com/vishh))
-* Add retry to node scheduability marking. ([#36211](https://github.com/kubernetes/kubernetes/pull/36211), [@brendandburns](https://github.com/brendandburns))
-* specify custom ca file to verify the keystone server ([#35488](https://github.com/kubernetes/kubernetes/pull/35488), [@dixudx](https://github.com/dixudx))
-* AWS: Support default value for ExternalHost ([#33568](https://github.com/kubernetes/kubernetes/pull/33568), [@justinsb](https://github.com/justinsb))
-* HPA: Consider unready pods separately ([#33593](https://github.com/kubernetes/kubernetes/pull/33593), [@DirectXMan12](https://github.com/DirectXMan12))
-* Node Conformance Test: Containerize the node e2e test ([#31093](https://github.com/kubernetes/kubernetes/pull/31093), [@Random-Liu](https://github.com/Random-Liu))
-* federation: Adding support for DeleteOptions.OrphanDependents for federated secrets. Setting it to false while deleting a federated secret also deletes the corresponding secrets from all registered clusters. ([#36296](https://github.com/kubernetes/kubernetes/pull/36296), [@nikhiljindal](https://github.com/nikhiljindal))
-* Deploy kube-dns with cluster-proportional-autoscaler ([#33239](https://github.com/kubernetes/kubernetes/pull/33239), [@MrHohn](https://github.com/MrHohn))
-* Adds support for StatefulSets in kubectl drain. ([#35483](https://github.com/kubernetes/kubernetes/pull/35483), [@ymqytw](https://github.com/ymqytw))
- * Switches to use the eviction sub-resource instead of deletion in kubectl drain, if server supports.
-* azure: load balancer preserves destination ip address ([#36256](https://github.com/kubernetes/kubernetes/pull/36256), [@colemickens](https://github.com/colemickens))
-* LegacyHostIP will be deprecated in 1.7. ([#36095](https://github.com/kubernetes/kubernetes/pull/36095), [@caesarxuchao](https://github.com/caesarxuchao))
-* Fix LBaaS version detection in openstack cloudprovider ([#36249](https://github.com/kubernetes/kubernetes/pull/36249), [@sjenning](https://github.com/sjenning))
-* Node Conformance Test: Add system verification ([#32427](https://github.com/kubernetes/kubernetes/pull/32427), [@Random-Liu](https://github.com/Random-Liu))
-* kubelet bootstrap: start hostNetwork pods before we have PodCIDR ([#35526](https://github.com/kubernetes/kubernetes/pull/35526), [@justinsb](https://github.com/justinsb))
-* Enable HPA controller based on autoscaling/v1 api group ([#36215](https://github.com/kubernetes/kubernetes/pull/36215), [@piosz](https://github.com/piosz))
-* Remove unused WaitForDetach from Detacher interface and plugins ([#35629](https://github.com/kubernetes/kubernetes/pull/35629), [@kiall](https://github.com/kiall))
-* Initial work on running windows containers on Kubernetes ([#31707](https://github.com/kubernetes/kubernetes/pull/31707), [@alexbrand](https://github.com/alexbrand))
-* Per Volume Inode Accounting ([#35132](https://github.com/kubernetes/kubernetes/pull/35132), [@dashpole](https://github.com/dashpole))
-* [AppArmor] Hold bad AppArmor pods in pending rather than rejecting ([#35342](https://github.com/kubernetes/kubernetes/pull/35342), [@timstclair](https://github.com/timstclair))
-* Federation: separate notion of zone-name & dns-suffix ([#35372](https://github.com/kubernetes/kubernetes/pull/35372), [@justinsb](https://github.com/justinsb))
-* In order to bypass graceful deletion of pods (to immediately remove the pod from the API) the user must now provide the `--force` flag in addition to `--grace-period=0`. This prevents users from accidentally force deleting pods without being aware of the consequences of force deletion. Force deleting pods for resources like StatefulSets can result in multiple pods with the same name having running processes in the cluster, which may lead to data corruption or data inconsistency when using shared storage or common API endpoints. ([#35484](https://github.com/kubernetes/kubernetes/pull/35484), [@smarterclayton](https://github.com/smarterclayton))
-* NPD: Add e2e test for NPD v0.2. ([#35740](https://github.com/kubernetes/kubernetes/pull/35740), [@Random-Liu](https://github.com/Random-Liu))
-* DELETE requests can now pass in their DeleteOptions as a query parameter or a body parameter, rather than just as a body parameter. ([#35806](https://github.com/kubernetes/kubernetes/pull/35806), [@bdbauer](https://github.com/bdbauer))
-* make using service account credentials from controllers optional ([#35970](https://github.com/kubernetes/kubernetes/pull/35970), [@deads2k](https://github.com/deads2k))
-* AWS: strong-typing for k8s vs aws volume ids ([#35883](https://github.com/kubernetes/kubernetes/pull/35883), [@justinsb](https://github.com/justinsb))
-* Controller changes for perma failed deployments ([#35691](https://github.com/kubernetes/kubernetes/pull/35691), [@kargakis](https://github.com/kargakis))
-* Proxy min sync period ([#35334](https://github.com/kubernetes/kubernetes/pull/35334), [@timothysc](https://github.com/timothysc))
-* Federated ConfigMap controller ([#35635](https://github.com/kubernetes/kubernetes/pull/35635), [@mwielgus](https://github.com/mwielgus))
-* have basic kubectl crud agnostic of registered types ([#36085](https://github.com/kubernetes/kubernetes/pull/36085), [@deads2k](https://github.com/deads2k))
-* Fix how we iterate over active jobs when removing them for Replace policy ([#36161](https://github.com/kubernetes/kubernetes/pull/36161), [@soltysh](https://github.com/soltysh))
-* Adds TCPCloseWaitTimeout option to kube-proxy for sysctl nf_conntrack_tcp_timeout_time_wait ([#35919](https://github.com/kubernetes/kubernetes/pull/35919), [@bowei](https://github.com/bowei))
-* Pods that are terminating due to eviction by the nodecontroller (typically due to unresponsive kubelet, or network partition) now surface in `kubectl get` output ([#36017](https://github.com/kubernetes/kubernetes/pull/36017), [@foxish](https://github.com/foxish))
- * as being in state "Unknown", along with a longer description in `kubectl describe` output.
-* The hostname of the node (as autodetected by the kubelet, specified via --hostname-override, or determined by the cloudprovider) is now recorded as an address of type "Hostname" in the status of the Node API object. The hostname is expected to be resolveable from the apiserver. ([#25532](https://github.com/kubernetes/kubernetes/pull/25532), [@mkulke](https://github.com/mkulke))
-* [Kubelet] Add alpha support for `--cgroups-per-qos` using the configured `--cgroup-driver`. Disabled by default. ([#31546](https://github.com/kubernetes/kubernetes/pull/31546), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Move Statefulset (previously PetSet) to v1beta1 ([#35731](https://github.com/kubernetes/kubernetes/pull/35731), [@janetkuo](https://github.com/janetkuo))
-* The error handling behavior of `pkg/client/restclient.Result` has changed. Calls to `Result.Raw()` will no longer parse the body, although they will still return errors that react to `pkg/api/errors.Is*()` as in previous releases. Callers of `Get()` and `Into()` will continue to receive errors that are parsed from the body if the kind and apiVersion of the body match the `Status` object. ([#36001](https://github.com/kubernetes/kubernetes/pull/36001), [@smarterclayton](https://github.com/smarterclayton))
- * This more closely aligns rest client as a generic RESTful client, while preserving the special Kube API extended error handling for the `Get` and `Into` methods (which most Kube clients use).
-* Making the pod.alpha.kubernetes.io/initialized annotation optional in PetSet pods ([#35739](https://github.com/kubernetes/kubernetes/pull/35739), [@foxish](https://github.com/foxish))
-* AWS: recognize us-east-2 region ([#35013](https://github.com/kubernetes/kubernetes/pull/35013), [@justinsb](https://github.com/justinsb))
-* Eviction manager evicts based on inode consumption ([#35137](https://github.com/kubernetes/kubernetes/pull/35137), [@dashpole](https://github.com/dashpole))
-* SELinux Overhaul ([#33663](https://github.com/kubernetes/kubernetes/pull/33663), [@pmorie](https://github.com/pmorie))
-* Add SNI support to the apiserver ([#35109](https://github.com/kubernetes/kubernetes/pull/35109), [@sttts](https://github.com/sttts))
-* The main kubernetes repository stops hosting archived version of released clients. Please use [client-go](https://github.com/kubernetes/client-go). ([#35928](https://github.com/kubernetes/kubernetes/pull/35928), [@caesarxuchao](https://github.com/caesarxuchao))
-* Correct the article in generated documents ([#32557](https://github.com/kubernetes/kubernetes/pull/32557), [@asalkeld](https://github.com/asalkeld))
-* Update PodAntiAffinity to ignore calls to subresources ([#35608](https://github.com/kubernetes/kubernetes/pull/35608), [@soltysh](https://github.com/soltysh))
-* The apiserver can now select which type of kubelet-reported address to use for apiserver->node communications, using the --kubelet-preferred-address-types flag. ([#35497](https://github.com/kubernetes/kubernetes/pull/35497), [@liggitt](https://github.com/liggitt))
-* update list of vailable resources ([#32687](https://github.com/kubernetes/kubernetes/pull/32687), [@jouve](https://github.com/jouve))
-* Remove stale volumes if endpoint/svc creation fails. ([#35285](https://github.com/kubernetes/kubernetes/pull/35285), [@humblec](https://github.com/humblec))
-* add kubectl cp ([#34914](https://github.com/kubernetes/kubernetes/pull/34914), [@brendandburns](https://github.com/brendandburns))
-* Remove Job also from .status.active for Replace strategy ([#35420](https://github.com/kubernetes/kubernetes/pull/35420), [@soltysh](https://github.com/soltysh))
-* Let release_1_5 clientset include multiple versions of a group ([#35471](https://github.com/kubernetes/kubernetes/pull/35471), [@caesarxuchao](https://github.com/caesarxuchao))
-* support editing before creating resource ([#33250](https://github.com/kubernetes/kubernetes/pull/33250), [@ymqytw](https://github.com/ymqytw))
-* allow authentication through a front-proxy ([#35452](https://github.com/kubernetes/kubernetes/pull/35452), [@deads2k](https://github.com/deads2k))
-* On GCI, cleanup kubelet startup ([#35319](https://github.com/kubernetes/kubernetes/pull/35319), [@vishh](https://github.com/vishh))
-* Add a retry when reading a file content from a container ([#35560](https://github.com/kubernetes/kubernetes/pull/35560), [@jingxu97](https://github.com/jingxu97))
-* Fix cadvisor_unsupported and the crossbuild ([#35817](https://github.com/kubernetes/kubernetes/pull/35817), [@luxas](https://github.com/luxas))
-* [PHASE 1] Opaque integer resource accounting. ([#31652](https://github.com/kubernetes/kubernetes/pull/31652), [@ConnorDoyle](https://github.com/ConnorDoyle))
-* Add sync state loop in master's volume reconciler ([#34859](https://github.com/kubernetes/kubernetes/pull/34859), [@jingxu97](https://github.com/jingxu97))
-* Bump GCE debian image to container-vm-v20161025 (CVE-2016-5195 Dirty… ([#35825](https://github.com/kubernetes/kubernetes/pull/35825), [@dchen1107](https://github.com/dchen1107))
-* GC pod ips ([#35572](https://github.com/kubernetes/kubernetes/pull/35572), [@bprashanth](https://github.com/bprashanth))
-* Stop including arch-specific binaries in kubernetes.tar.gz ([#35737](https://github.com/kubernetes/kubernetes/pull/35737), [@ixdy](https://github.com/ixdy))
-* Rename PetSet to StatefulSet ([#35663](https://github.com/kubernetes/kubernetes/pull/35663), [@janetkuo](https://github.com/janetkuo))
-* Enable containerized storage plugins mounter on GCI ([#35350](https://github.com/kubernetes/kubernetes/pull/35350), [@vishh](https://github.com/vishh))
-* Bump container-vm version in config-test.sh ([#35705](https://github.com/kubernetes/kubernetes/pull/35705), [@mtaufen](https://github.com/mtaufen))
-* Cadvisor root path configuration ([#35136](https://github.com/kubernetes/kubernetes/pull/35136), [@dashpole](https://github.com/dashpole))
-* ssh pubkey parsing: prevent segfault ([#35323](https://github.com/kubernetes/kubernetes/pull/35323), [@mikkeloscar](https://github.com/mikkeloscar))
-
-
-
-# v1.5.0-alpha.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads for v1.5.0-alpha.2
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes.tar.gz) | `77f04c646657b683210a17aeca62e56bf985702b267942b41729406970c40cee`
-[kubernetes-src.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-src.tar.gz) | `f6090cc853e56159099bf12169f0d84e29fd2c055b0c7dbdac755ee94439a6a6`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-client-darwin-386.tar.gz) | `917adbc70156d55371c1aea62279a521e930e7ff130728aa176505f0268182e3`
-[kubernetes-client-darwin-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | `9c8084eeab05b6db0508f789cb8a05b4f864ee23ea37b43e17af0026fb67defa`
-[kubernetes-client-linux-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-client-linux-386.tar.gz) | `3498f9cd73bb947b7cd8c4e5fb3ebe0676fbc98cf346a807f1b7c252aa068d68`
-[kubernetes-client-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | `e9bf2e48212bb275b113d0a1f6091c4692126c8af3c4e0a986e483ec27190e82`
-[kubernetes-client-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | `9c514a482d4dd44d64f3d47eb3d64b434343f10abdecf1b5176ff0078d3b7008`
-[kubernetes-client-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | `c51a8ebc2c3ca2f914042a6017852feb315fd3ceba8b0d5186349b553da11fdb`
-[kubernetes-client-windows-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-client-windows-386.tar.gz) | `32b006e1f9e6c14fe399806bb82ec4bf8658ab9828753d1b14732bb8dbb72062`
-[kubernetes-client-windows-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | `1e142f1fe76bdd660b4f1be51eef4e51705585fccb94e674a7d891ffe8c3b4e3`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | `4a3b550a1ede8bebd14413a37e3fc10c8403a3e3fbbce096de443351d076817a`
-[kubernetes-server-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | `00e58bb04bf150c554f28d8fd2f72fbdd1e7918999aaea9c88c91c8f71946ffe`
-[kubernetes-server-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | `6837ff73249c0f3e7ba2d7c00321274db0f97b5cd0b4dc58d5cc3a2119e1c820`
-
-## Changelog since v1.5.0-alpha.1
-
-### Action Required
-
-* Deprecate the --reconcile-cidr kubelet flag because it has no function anymore ([#35523](https://github.com/kubernetes/kubernetes/pull/35523), [@luxas](https://github.com/luxas))
-* Removed the deprecated kubelet --configure-cbr0 flag, and with that the "classic" networking mode as well ([#34906](https://github.com/kubernetes/kubernetes/pull/34906), [@luxas](https://github.com/luxas))
-* New client-go structure ([#34989](https://github.com/kubernetes/kubernetes/pull/34989), [@caesarxuchao](https://github.com/caesarxuchao))
-* Remove scheduler flags that were marked as deprecated 2+ releases ago. ([#34471](https://github.com/kubernetes/kubernetes/pull/34471), [@timothysc](https://github.com/timothysc))
-
-### Other notable changes
-
-* Make the fake RESTClient usable by all the API groups, not just core. ([#35492](https://github.com/kubernetes/kubernetes/pull/35492), [@madhusudancs](https://github.com/madhusudancs))
-* Adding support for DeleteOptions.OrphanDependents for federated namespaces. Setting it to false while deleting a federated namespace also deletes the corresponding namespace from all registered clusters. ([#34648](https://github.com/kubernetes/kubernetes/pull/34648), [@nikhiljindal](https://github.com/nikhiljindal))
-* Kubelet flag '--mounter-path' renamed to '--experimental-mounter-path' ([#35646](https://github.com/kubernetes/kubernetes/pull/35646), [@vishh](https://github.com/vishh))
-* Node status updater should SetNodeStatusUpdateNeeded if it fails to update status ([#34368](https://github.com/kubernetes/kubernetes/pull/34368), [@jingxu97](https://github.com/jingxu97))
-* Deprecate OpenAPI spec for GroupVersion endpoints in favor of single spec /swagger.json ([#35388](https://github.com/kubernetes/kubernetes/pull/35388), [@mbohlool](https://github.com/mbohlool))
-* kubelet authn/authz ([#34381](https://github.com/kubernetes/kubernetes/pull/34381), [@liggitt](https://github.com/liggitt))
-* Fix volume states out of sync problem after kubelet restarts ([#33616](https://github.com/kubernetes/kubernetes/pull/33616), [@jingxu97](https://github.com/jingxu97))
-* Added rkt binary to GCI ([#35321](https://github.com/kubernetes/kubernetes/pull/35321), [@vishh](https://github.com/vishh))
-* Fixed mutation warning in Attach/Detach controller ([#35273](https://github.com/kubernetes/kubernetes/pull/35273), [@jsafrane](https://github.com/jsafrane))
-* Don't count failed pods as "not-ready" ([#35404](https://github.com/kubernetes/kubernetes/pull/35404), [@brendandburns](https://github.com/brendandburns))
-* fixed typo in script which made setting custom cidr in gce using kube-up impossible ([#35267](https://github.com/kubernetes/kubernetes/pull/35267), [@tommywo](https://github.com/tommywo))
-* The podGC controller will now always run, irrespective of the value supplied to the "terminated-pod-gc-threshold" flag supplied to the controller manager. ([#35476](https://github.com/kubernetes/kubernetes/pull/35476), [@foxish](https://github.com/foxish))
- * The specific behavior of the podGC controller to clean up terminated pods is still governed by the flag, but the podGC's responsibilities have evolved beyond just cleaning up terminated pods.
-* Update grafana version used by default in kubernetes to 3.1.1 ([#35435](https://github.com/kubernetes/kubernetes/pull/35435), [@Crassirostris](https://github.com/Crassirostris))
-* vSphere Kube-up: resolve vm-names on all nodes ([#35365](https://github.com/kubernetes/kubernetes/pull/35365), [@kerneltime](https://github.com/kerneltime))
-* bootstrap: Start hostNetwork pods even if network plugin not ready ([#33347](https://github.com/kubernetes/kubernetes/pull/33347), [@justinsb](https://github.com/justinsb))
-* Factor out post-init swagger and OpenAPI routes ([#32590](https://github.com/kubernetes/kubernetes/pull/32590), [@sttts](https://github.com/sttts))
-* Substitute gcloud regex with regexp ([#35346](https://github.com/kubernetes/kubernetes/pull/35346), [@bprashanth](https://github.com/bprashanth))
-* Remove support for multi-architecture code in `kubeadm`, which was released untested. ([#35124](https://github.com/kubernetes/kubernetes/pull/35124), [@errordeveloper](https://github.com/errordeveloper))
-* vSphere kube-up: Wait for cbr0 configuration to complete before setting up routes. ([#35232](https://github.com/kubernetes/kubernetes/pull/35232), [@kerneltime](https://github.com/kerneltime))
-* Remove last probe time from replica sets ([#35199](https://github.com/kubernetes/kubernetes/pull/35199), [@kargakis](https://github.com/kargakis))
-* Update the GCI image to gci-dev-55-8872-18-0 ([#35243](https://github.com/kubernetes/kubernetes/pull/35243), [@maisem](https://github.com/maisem))
-* Add `--mounter-path` flag to kubelet that will allow overriding the `mount` command used by kubelet ([#34994](https://github.com/kubernetes/kubernetes/pull/34994), [@jingxu97](https://github.com/jingxu97))
-* Fix a bug under the rkt runtime whereby image-registries with ports would not be fetched from ([#34375](https://github.com/kubernetes/kubernetes/pull/34375), [@euank](https://github.com/euank))
-* Updated default Elasticsearch and Kibana used for elasticsearch logging destination to versions 2.4.1 and 4.6.1 respectively. ([#34969](https://github.com/kubernetes/kubernetes/pull/34969), [@Crassirostris](https://github.com/Crassirostris))
-* Loadbalanced client src ip preservation enters beta ([#33957](https://github.com/kubernetes/kubernetes/pull/33957), [@bprashanth](https://github.com/bprashanth))
-* Add NodePort value in kubectl output ([#34922](https://github.com/kubernetes/kubernetes/pull/34922), [@zreigz](https://github.com/zreigz))
-* kubectl drain now waits until pods have been delete from the Node before exiting ([#34778](https://github.com/kubernetes/kubernetes/pull/34778), [@ymqytw](https://github.com/ymqytw))
-* Don't report FS stats for system containers in the Kubelet Summary API ([#34998](https://github.com/kubernetes/kubernetes/pull/34998), [@timstclair](https://github.com/timstclair))
-* Fixed flakes caused by petset tests. ([#35158](https://github.com/kubernetes/kubernetes/pull/35158), [@foxish](https://github.com/foxish))
-* Add validation that detects repeated keys in the labels and annotations maps ([#34407](https://github.com/kubernetes/kubernetes/pull/34407), [@brendandburns](https://github.com/brendandburns))
-* Change merge key for VolumeMount to mountPath ([#35071](https://github.com/kubernetes/kubernetes/pull/35071), [@thockin](https://github.com/thockin))
-* kubelet: storage: don't hang kubelet on unresponsive nfs ([#35038](https://github.com/kubernetes/kubernetes/pull/35038), [@sjenning](https://github.com/sjenning))
-* Fix kube vsphere.kerneltime ([#34997](https://github.com/kubernetes/kubernetes/pull/34997), [@kerneltime](https://github.com/kerneltime))
-* Add PSP support for seccomp profiles ([#28300](https://github.com/kubernetes/kubernetes/pull/28300), [@pweil-](https://github.com/pweil-))
-* Updated Go to 1.7 ([#28742](https://github.com/kubernetes/kubernetes/pull/28742), [@jessfraz](https://github.com/jessfraz))
-* HPA: fixed wrong count for target replicas calculations ([#34821](https://github.com/kubernetes/kubernetes/pull/34821)). ([#34955](https://github.com/kubernetes/kubernetes/pull/34955), [@jszczepkowski](https://github.com/jszczepkowski))
-* Improves how 'kubectl' uses the terminal size when printing help and usage. ([#34502](https://github.com/kubernetes/kubernetes/pull/34502), [@fabianofranz](https://github.com/fabianofranz))
-* Updated Elasticsearch image from version 1.5.1 to version 2.4.1. Updated Kibana image from version 4.0.2 to version 4.6.1. ([#34562](https://github.com/kubernetes/kubernetes/pull/34562), [@Crassirostris](https://github.com/Crassirostris))
-* libvirt-coreos: Download the coreos_production_qemu_image over SSL. ([#34646](https://github.com/kubernetes/kubernetes/pull/34646), [@roberthbailey](https://github.com/roberthbailey))
-* Add a new global option "--request-timeout" to the `kubectl` client ([#33958](https://github.com/kubernetes/kubernetes/pull/33958), [@juanvallejo](https://github.com/juanvallejo))
-* Add support for admission controller based on namespace node selectors. ([#24980](https://github.com/kubernetes/kubernetes/pull/24980), [@aveshagarwal](https://github.com/aveshagarwal))
-* Add 'kubectl set resources' ([#27206](https://github.com/kubernetes/kubernetes/pull/27206), [@JacobTanenbaum](https://github.com/JacobTanenbaum))
-* Support trust id as a scope in the OpenStack authentication logic ([#32111](https://github.com/kubernetes/kubernetes/pull/32111), [@MatMaul](https://github.com/MatMaul))
-* Only wait for cache syncs once in NodeController ([#34851](https://github.com/kubernetes/kubernetes/pull/34851), [@ncdc](https://github.com/ncdc))
-* NodeController waits for informer sync before doing anything ([#34809](https://github.com/kubernetes/kubernetes/pull/34809), [@gmarek](https://github.com/gmarek))
-* azure: lower log priority for skipped nic update message ([#34730](https://github.com/kubernetes/kubernetes/pull/34730), [@colemickens](https://github.com/colemickens))
-* Security Group support for OpenStack Load Balancers ([#31921](https://github.com/kubernetes/kubernetes/pull/31921), [@grahamhayes](https://github.com/grahamhayes))
-* Make NodeController recognize deletion tombstones ([#34786](https://github.com/kubernetes/kubernetes/pull/34786), [@davidopp](https://github.com/davidopp))
-* Delete all firewall rules (and optionally network) on GCE/GKE cluster teardown ([#34577](https://github.com/kubernetes/kubernetes/pull/34577), [@ixdy](https://github.com/ixdy))
-* Fix panic in NodeController caused by receiving DeletedFinalStateUnknown object from the cache. ([#34694](https://github.com/kubernetes/kubernetes/pull/34694), [@gmarek](https://github.com/gmarek))
-* azure: add PrimaryAvailabilitySet to config, only use nodes in that set in the loadbalancer pool ([#34526](https://github.com/kubernetes/kubernetes/pull/34526), [@colemickens](https://github.com/colemickens))
-* Fix leaking ingress resources in federated ingress e2e test. ([#34652](https://github.com/kubernetes/kubernetes/pull/34652), [@quinton-hoole](https://github.com/quinton-hoole))
-* pvc.Spec.Resources.Requests min and max can be enforced with a LimitRange of type "PersistentVolumeClaim" in the namespace ([#30145](https://github.com/kubernetes/kubernetes/pull/30145), [@markturansky](https://github.com/markturansky))
-* Federated DaemonSet controller. Supports all the API that regular DaemonSet has. ([#34319](https://github.com/kubernetes/kubernetes/pull/34319), [@mwielgus](https://github.com/mwielgus))
-* New federation deployment mechanism now allows non-GCP clusters. ([#34620](https://github.com/kubernetes/kubernetes/pull/34620), [@madhusudancs](https://github.com/madhusudancs))
- * Writes the federation kubeconfig to the local kubeconfig file.
-* Update the series and the README to reflect the change. ([#30374](https://github.com/kubernetes/kubernetes/pull/30374), [@mbruzek](https://github.com/mbruzek))
-* Replica set conditions API ([#33905](https://github.com/kubernetes/kubernetes/pull/33905), [@kargakis](https://github.com/kargakis))
-* etcd3: avoid unnecessary decoding in etcd3 client ([#34435](https://github.com/kubernetes/kubernetes/pull/34435), [@wojtek-t](https://github.com/wojtek-t))
-* Test x509 intermediates correctly ([#34524](https://github.com/kubernetes/kubernetes/pull/34524), [@liggitt](https://github.com/liggitt))
-* Add `cifs-utils` to the hyperkube image. ([#34416](https://github.com/kubernetes/kubernetes/pull/34416), [@colemickens](https://github.com/colemickens))
-* etcd3: use PrevKV to remove additional get ([#34246](https://github.com/kubernetes/kubernetes/pull/34246), [@hongchaodeng](https://github.com/hongchaodeng))
-* Fix upgrade.sh image setup ([#34468](https://github.com/kubernetes/kubernetes/pull/34468), [@mtaufen](https://github.com/mtaufen))
-
-
-
-# v1.5.0-alpha.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.1/kubernetes.tar.gz) | `86bfcfffaa210ddf18983ff066470ef9c06ee00449b2238043e2777aac2c906d`
-
-## Changelog since v1.4.0-alpha.3
-
-### Experimental Features
-
-* `kubeadm` (alpha) provides an easy way to securely bootstrap Kubernetes on Linux, see http://kubernetes.io/docs/kubeadm/ ([#33262](https://github.com/kubernetes/kubernetes/pull/33262), [@errordeveloper](https://github.com/errordeveloper))
-* Alpha JWS Discovery API for locating an apiserver securely ([#32203](https://github.com/kubernetes/kubernetes/pull/32203), [@dgoodwin](https://github.com/dgoodwin))
-
-### Action Required
-
-* kube-apiserver learned the '--anonymous-auth' flag, which defaults to true. When enabled, requests to the secure port that are not rejected by other configured authentication methods are treated as anonymous requests, and given a username of 'system:anonymous' and a group of 'system:unauthenticated'. ([#32386](https://github.com/kubernetes/kubernetes/pull/32386), [@liggitt](https://github.com/liggitt))
- * Authenticated users are decorated with a 'system:authenticated' group.
- * NOTE: anonymous access is enabled by default. If you rely on authentication alone to authorize access, change to use an authorization mode other than AlwaysAllow, or or set '--anonymous-auth=false'.
-* The NamespaceExists and NamespaceAutoProvision admission controllers have been removed. ([#31250](https://github.com/kubernetes/kubernetes/pull/31250), [@derekwaynecarr](https://github.com/derekwaynecarr))
- * All cluster operators should use NamespaceLifecycle.
-* Federation binaries and their corresponding docker images - `federation-apiserver` and `federation-controller-manager` are now folded in to the `hyperkube` binary. If you were using one of these binaries or docker images, please switch to using the `hyperkube` version. Please refer to the federation manifests - `federation/manifests/federation-apiserver.yaml` and `federation/manifests/federation-controller-manager-deployment.yaml` for examples. ([#29929](https://github.com/kubernetes/kubernetes/pull/29929), [@madhusudancs](https://github.com/madhusudancs))
-
-### Other notable changes
-
-* The kube-apiserver --service-account-key-file option can be specified multiple times, or can point to a file containing multiple keys, to enable rotation of signing keys. ([#34029](https://github.com/kubernetes/kubernetes/pull/34029), [@liggitt](https://github.com/liggitt))
-* The apiserver now uses addresses reported by the kubelet in the Node object's status for apiserver->kubelet communications, rather than the name of the Node object. The address type used defaults to `InternalIP`, `ExternalIP`, and `LegacyHostIP` address types, in that order. ([#33718](https://github.com/kubernetes/kubernetes/pull/33718), [@justinsb](https://github.com/justinsb))
-* Federated deployment controller that supports the same api as the regular kubernetes deployment controller. ([#34109](https://github.com/kubernetes/kubernetes/pull/34109), [@mwielgus](https://github.com/mwielgus))
-* Match GroupVersionKind against specific version ([#34010](https://github.com/kubernetes/kubernetes/pull/34010), [@soltysh](https://github.com/soltysh))
-* fix yaml decode issue ([#34297](https://github.com/kubernetes/kubernetes/pull/34297), [@AdoHe](https://github.com/AdoHe))
-* kubectl annotate now supports --dry-run ([#34199](https://github.com/kubernetes/kubernetes/pull/34199), [@asalkeld](https://github.com/asalkeld))
-* kubectl: Add external ip information to node when '-o wide' is used ([#33552](https://github.com/kubernetes/kubernetes/pull/33552), [@floreks](https://github.com/floreks))
-* Update GCI base image: ([#34156](https://github.com/kubernetes/kubernetes/pull/34156), [@adityakali](https://github.com/adityakali))
- * Enabled VXLAN and IP_SET config options in kernel to support some networking tools (ebtools)
- * OpenSSL CVE fixes
-* ContainerVm/GCI image: try to use ifdown/ifup if available ([#33595](https://github.com/kubernetes/kubernetes/pull/33595), [@freehan](https://github.com/freehan))
-* Use manifest digest (as `docker-pullable://`) as ImageID when available (exposes a canonical, pullable image ID for containers). ([#33014](https://github.com/kubernetes/kubernetes/pull/33014), [@DirectXMan12](https://github.com/DirectXMan12))
-* Add kubelet awareness to taint tolerant match caculator. ([#26501](https://github.com/kubernetes/kubernetes/pull/26501), [@resouer](https://github.com/resouer))
-* Fix nil pointer issue when getting metrics from volume mounter ([#34251](https://github.com/kubernetes/kubernetes/pull/34251), [@jingxu97](https://github.com/jingxu97))
-* Enforce Disk based pod eviction with GCI base image in Kubelet ([#33520](https://github.com/kubernetes/kubernetes/pull/33520), [@vishh](https://github.com/vishh))
-* Remove headers that are unnecessary for proxy target ([#34076](https://github.com/kubernetes/kubernetes/pull/34076), [@mbohlool](https://github.com/mbohlool))
-* Add missing argument to log message in federated ingress controller. ([#34158](https://github.com/kubernetes/kubernetes/pull/34158), [@quinton-hoole](https://github.com/quinton-hoole))
-* The kubelet --eviction-minimum-reclaim option can now take precentages as well as absolute values for resources quantities ([#33392](https://github.com/kubernetes/kubernetes/pull/33392), [@sjenning](https://github.com/sjenning))
-* The implicit registration of Prometheus metrics for workqueue has been removed, and a plug-able interface was added. If you were using workqueue in your own binaries and want these metrics, add the following to your imports in the main package: "k8s.io/pkg/util/workqueue/prometheus". ([#33792](https://github.com/kubernetes/kubernetes/pull/33792), [@caesarxuchao](https://github.com/caesarxuchao))
-* Add kubectl --node-port option for specifying the service nodeport ([#33319](https://github.com/kubernetes/kubernetes/pull/33319), [@juanvallejo](https://github.com/juanvallejo))
-* To reduce memory usage to reasonable levels in smaller clusters, kube-apiserver now sets the deserialization cache size based on the target memory usage. ([#34000](https://github.com/kubernetes/kubernetes/pull/34000), [@wojtek-t](https://github.com/wojtek-t))
-* use service accounts as clients for controllers ([#33310](https://github.com/kubernetes/kubernetes/pull/33310), [@deads2k](https://github.com/deads2k))
-* Add a new option "--local" to the `kubectl annotate` ([#34074](https://github.com/kubernetes/kubernetes/pull/34074), [@asalkeld](https://github.com/asalkeld))
-* Add a new option "--local" to the `kubectl label` ([#33990](https://github.com/kubernetes/kubernetes/pull/33990), [@asalkeld](https://github.com/asalkeld))
-* Initialize podsWithAffinity to avoid scheduler panic ([#33967](https://github.com/kubernetes/kubernetes/pull/33967), [@xiang90](https://github.com/xiang90))
-* Fix base image pinning during upgrades via cluster/gce/upgrade.sh ([#33147](https://github.com/kubernetes/kubernetes/pull/33147), [@vishh](https://github.com/vishh))
-* Remove the flannel experimental overlay ([#33862](https://github.com/kubernetes/kubernetes/pull/33862), [@luxas](https://github.com/luxas))
-* CRI: Remove the mount name and port name. ([#33970](https://github.com/kubernetes/kubernetes/pull/33970), [@yifan-gu](https://github.com/yifan-gu))
-* Enable kubectl describe rs to work when apiserver does not support pods ([#33794](https://github.com/kubernetes/kubernetes/pull/33794), [@nikhiljindal](https://github.com/nikhiljindal))
-* Heal the namespaceless ingresses in federation e2e. ([#33977](https://github.com/kubernetes/kubernetes/pull/33977), [@quinton-hoole](https://github.com/quinton-hoole))
-* Fix issue in updating device path when volume is attached multiple times ([#33796](https://github.com/kubernetes/kubernetes/pull/33796), [@jingxu97](https://github.com/jingxu97))
-* ECDSA keys can now be used for signing and verifying service account tokens. ([#33565](https://github.com/kubernetes/kubernetes/pull/33565), [@liggitt](https://github.com/liggitt))
-* OnlyLocal nodeports ([#33587](https://github.com/kubernetes/kubernetes/pull/33587), [@bprashanth](https://github.com/bprashanth))
-* Remove flannel because now everything here is upstreamed ([#33860](https://github.com/kubernetes/kubernetes/pull/33860), [@luxas](https://github.com/luxas))
-* Use patched golang1.7.1 for cross-builds targeting darwin ([#33803](https://github.com/kubernetes/kubernetes/pull/33803), [@ixdy](https://github.com/ixdy))
-* Bump up addon kube-dns to v20 for graceful termination ([#33774](https://github.com/kubernetes/kubernetes/pull/33774), [@MrHohn](https://github.com/MrHohn))
-* Creating LoadBalancer Service with "None" ClusterIP is no longer possible ([#33274](https://github.com/kubernetes/kubernetes/pull/33274), [@nebril](https://github.com/nebril))
-* Increase timeout for federated ingress test. ([#33610](https://github.com/kubernetes/kubernetes/pull/33610), [@quinton-hoole](https://github.com/quinton-hoole))
-* Use UpdateStatus, not Update, to add LoadBalancerStatus to Federated Ingress. ([#33605](https://github.com/kubernetes/kubernetes/pull/33605), [@quinton-hoole](https://github.com/quinton-hoole))
-* add anytoken authenticator ([#33378](https://github.com/kubernetes/kubernetes/pull/33378), [@deads2k](https://github.com/deads2k))
-* Fixes in HPA: consider only running pods; proper denominator in avg request calculations. ([#33735](https://github.com/kubernetes/kubernetes/pull/33735), [@jszczepkowski](https://github.com/jszczepkowski))
-* When CORS Handler is enabled, we now add a new HTTP header named "Access-Control-Expose-Headers" with a value of "Date". This allows the "Date" HTTP header to be accessed from XHR/JavaScript. ([#33242](https://github.com/kubernetes/kubernetes/pull/33242), [@dims](https://github.com/dims))
-* promote contrib/mesos to incubator ([#33658](https://github.com/kubernetes/kubernetes/pull/33658), [@deads2k](https://github.com/deads2k))
-* MinReadySeconds / AvailableReplicas for ReplicaSets ([#32771](https://github.com/kubernetes/kubernetes/pull/32771), [@kargakis](https://github.com/kargakis))
-* Kubectl drain will now drain finished Pods ([#31763](https://github.com/kubernetes/kubernetes/pull/31763), [@fraenkel](https://github.com/fraenkel))
-* Adds the -deployment option to e2e.go, adds the ability to run e2e.go using a `kops` deployment. ([#33518](https://github.com/kubernetes/kubernetes/pull/33518), [@zmerlynn](https://github.com/zmerlynn))
-* Tune down initialDelaySeconds for readinessProbe. ([#33146](https://github.com/kubernetes/kubernetes/pull/33146), [@MrHohn](https://github.com/MrHohn))
-* kube-proxy: Add a lower-bound for conntrack (128k default) ([#33051](https://github.com/kubernetes/kubernetes/pull/33051), [@thockin](https://github.com/thockin))
-* local-up-cluster.sh: add SERVICE_CLUSTER_IP_RANGE as option ([#32921](https://github.com/kubernetes/kubernetes/pull/32921), [@aanm](https://github.com/aanm))
-* Default HTTP2 on, post fixes from [#29001](https://github.com/kubernetes/kubernetes/pull/29001) ([#32231](https://github.com/kubernetes/kubernetes/pull/32231), [@timothysc](https://github.com/timothysc))
-* Split dns healthcheck into two different urls ([#32406](https://github.com/kubernetes/kubernetes/pull/32406), [@MrHohn](https://github.com/MrHohn))
-* Remove kubectl namespace command ([#33275](https://github.com/kubernetes/kubernetes/pull/33275), [@maciaszczykm](https://github.com/maciaszczykm))
-* Automatic generation of man pages ([#33277](https://github.com/kubernetes/kubernetes/pull/33277), [@mkumatag](https://github.com/mkumatag))
-* Fixes memory/goroutine leak in Federation Service controller. ([#33359](https://github.com/kubernetes/kubernetes/pull/33359), [@shashidharatd](https://github.com/shashidharatd))
-* Switch k8s on GCE to use GCI by default ([#33353](https://github.com/kubernetes/kubernetes/pull/33353), [@vishh](https://github.com/vishh))
-* Move HighWaterMark to the top of the struct in order to fix arm, second time ([#33376](https://github.com/kubernetes/kubernetes/pull/33376), [@luxas](https://github.com/luxas))
-* Fix race condition in setting node statusUpdateNeeded flag ([#32807](https://github.com/kubernetes/kubernetes/pull/32807), [@jingxu97](https://github.com/jingxu97))
-* Fix the DOCKER_OPTS appending bug. ([#33163](https://github.com/kubernetes/kubernetes/pull/33163), [@DjangoPeng](https://github.com/DjangoPeng))
-* Send recycle events from pod to pv. ([#27714](https://github.com/kubernetes/kubernetes/pull/27714), [@jsafrane](https://github.com/jsafrane))
-* Add port forwarding for rkt with kvm stage1 ([#32126](https://github.com/kubernetes/kubernetes/pull/32126), [@jjlakis](https://github.com/jjlakis))
-* The value of the `versioned.Event` object (returned by watch APIs) in the Swagger 1.2 schemas has been updated from `*versioned.Event` which was not expected by many client tools. The new value is consistent with other structs returned by the API. ([#33007](https://github.com/kubernetes/kubernetes/pull/33007), [@smarterclayton](https://github.com/smarterclayton))
-* Remove cpu limits for dns pod to avoid CPU starvation ([#33227](https://github.com/kubernetes/kubernetes/pull/33227), [@vishh](https://github.com/vishh))
-* Allow secure access to apiserver from Admission Controllers ([#31491](https://github.com/kubernetes/kubernetes/pull/31491), [@dims](https://github.com/dims))
-* Resolves x509 verification issue with masters dialing nodes when started with --kubelet-certificate-authority ([#33141](https://github.com/kubernetes/kubernetes/pull/33141), [@liggitt](https://github.com/liggitt))
-* Fix possible panic in PodAffinityChecker ([#33086](https://github.com/kubernetes/kubernetes/pull/33086), [@ivan4th](https://github.com/ivan4th))
-* Upgrading Container-VM base image for k8s on GCE. Brief changelog as follows: ([#32738](https://github.com/kubernetes/kubernetes/pull/32738), [@Amey-D](https://github.com/Amey-D))
- * - Fixed performance regression in veth device driver
- * - Docker and related binaries are statically linked
- * - Fixed the issue of systemd being oom-killable
-* Move HighWaterMark to the top of the struct in order to fix arm ([#33117](https://github.com/kubernetes/kubernetes/pull/33117), [@luxas](https://github.com/luxas))
-* kubenet: SyncHostports for both running and ready to run pods. ([#31388](https://github.com/kubernetes/kubernetes/pull/31388), [@yifan-gu](https://github.com/yifan-gu))
-* Limit the number of names per image reported in the node status ([#32914](https://github.com/kubernetes/kubernetes/pull/32914), [@yujuhong](https://github.com/yujuhong))
-* Support Quobyte as StorageClass ([#31434](https://github.com/kubernetes/kubernetes/pull/31434), [@johscheuer](https://github.com/johscheuer))
-* Use a patched go1.7.1 for building linux/arm ([#32517](https://github.com/kubernetes/kubernetes/pull/32517), [@luxas](https://github.com/luxas))
-* Add line break after events in kubectl describe ([#31463](https://github.com/kubernetes/kubernetes/pull/31463), [@fabianofranz](https://github.com/fabianofranz))
-* Specific error message on failed rolling update issued by older kubectl against 1.4 master ([#32751](https://github.com/kubernetes/kubernetes/pull/32751), [@caesarxuchao](https://github.com/caesarxuchao))
-* Make the informer library available for the go client library. ([#32718](https://github.com/kubernetes/kubernetes/pull/32718), [@mikedanese](https://github.com/mikedanese))
-* Added --log-facility flag to enhance dnsmasq logging ([#32422](https://github.com/kubernetes/kubernetes/pull/32422), [@MrHohn](https://github.com/MrHohn))
-* Set Dashboard UI to final 1.4 version ([#32666](https://github.com/kubernetes/kubernetes/pull/32666), [@bryk](https://github.com/bryk))
-* Fix audit_test regex for iso8601 timestamps ([#32593](https://github.com/kubernetes/kubernetes/pull/32593), [@johnbieren](https://github.com/johnbieren))
-* Docker digest validation is too strict ([#32627](https://github.com/kubernetes/kubernetes/pull/32627), [@smarterclayton](https://github.com/smarterclayton))
-* Bumped Heapster to v1.2.0. ([#32649](https://github.com/kubernetes/kubernetes/pull/32649), [@piosz](https://github.com/piosz))
- * More details about the release https://github.com/kubernetes/heapster/releases/tag/v1.2.0
-* add local subject access review API ([#32407](https://github.com/kubernetes/kubernetes/pull/32407), [@deads2k](https://github.com/deads2k))
-* make --runtime-config=api/all=true|false work ([#32582](https://github.com/kubernetes/kubernetes/pull/32582), [@jlowdermilk](https://github.com/jlowdermilk))
-* Added new kubelet flags `--cni-bin-dir` and `--cni-conf-dir` to specify where CNI files are located. ([#32151](https://github.com/kubernetes/kubernetes/pull/32151), [@bboreham](https://github.com/bboreham))
- * Fixed CNI configuration on GCI platform when using CNI.
-* Move push-ci-build.sh to kubernetes/release repo ([#32444](https://github.com/kubernetes/kubernetes/pull/32444), [@david-mcmahon](https://github.com/david-mcmahon))
-* vendor: update github.com/coreos/go-oidc client package ([#31564](https://github.com/kubernetes/kubernetes/pull/31564), [@ericchiang](https://github.com/ericchiang))
-* Fixed an issue that caused a credential error when deploying federation control plane onto a GKE cluster. ([#31747](https://github.com/kubernetes/kubernetes/pull/31747), [@madhusudancs](https://github.com/madhusudancs))
-* Error if a contextName is provided but not found in the kubeconfig. ([#31767](https://github.com/kubernetes/kubernetes/pull/31767), [@asalkeld](https://github.com/asalkeld))
-* Use a Deployment for kube-dns ([#32018](https://github.com/kubernetes/kubernetes/pull/32018), [@MrHohn](https://github.com/MrHohn))
-* Support graceful termination in kube-dns ([#31894](https://github.com/kubernetes/kubernetes/pull/31894), [@MrHohn](https://github.com/MrHohn))
-* When prompting for passwords, don't echo to the terminal ([#31586](https://github.com/kubernetes/kubernetes/pull/31586), [@brendandburns](https://github.com/brendandburns))
-* add group prefix matching for kubectl usage ([#32140](https://github.com/kubernetes/kubernetes/pull/32140), [@deads2k](https://github.com/deads2k))
-* Stick to 2.2.1 etcd ([#32404](https://github.com/kubernetes/kubernetes/pull/32404), [@caesarxuchao](https://github.com/caesarxuchao))
-* Fix a bug in kubelet hostport logic which flushes KUBE-MARK-MASQ iptables chain ([#32413](https://github.com/kubernetes/kubernetes/pull/32413), [@freehan](https://github.com/freehan))
-* Make sure finalizers prevent deletion on storage that supports graceful deletion ([#32351](https://github.com/kubernetes/kubernetes/pull/32351), [@caesarxuchao](https://github.com/caesarxuchao))
-* AWS: Change default networking for kube-up to kubenet ([#32239](https://github.com/kubernetes/kubernetes/pull/32239), [@zmerlynn](https://github.com/zmerlynn))
-* Use etcd 2.3.7 ([#32359](https://github.com/kubernetes/kubernetes/pull/32359), [@wojtek-t](https://github.com/wojtek-t))
-* Allow missing keys in jsonpath ([#31714](https://github.com/kubernetes/kubernetes/pull/31714), [@smarterclayton](https://github.com/smarterclayton))
-* Changes 'kubectl rollout status' to wait until all updated replicas are available before finishing. ([#31499](https://github.com/kubernetes/kubernetes/pull/31499), [@areed](https://github.com/areed))
-* add selfsubjectaccessreview API ([#31271](https://github.com/kubernetes/kubernetes/pull/31271), [@deads2k](https://github.com/deads2k))
-* Add kubectl describe cmd support for vSphere volume ([#31045](https://github.com/kubernetes/kubernetes/pull/31045), [@abrarshivani](https://github.com/abrarshivani))
-* Enable kubelet eviction whenever inodes free is < 5% on GCE ([#31545](https://github.com/kubernetes/kubernetes/pull/31545), [@vishh](https://github.com/vishh))
-* Use federated namespace instead of the bootstrap cluster's namespace in Ingress e2e tests. ([#32105](https://github.com/kubernetes/kubernetes/pull/32105), [@madhusudancs](https://github.com/madhusudancs))
-* Move StorageClass to a storage group ([#31886](https://github.com/kubernetes/kubernetes/pull/31886), [@deads2k](https://github.com/deads2k))
-* Some components like kube-dns and kube-proxy could fail to load the service account token when started within a pod. Properly handle empty configurations to try loading the service account config. ([#31947](https://github.com/kubernetes/kubernetes/pull/31947), [@smarterclayton](https://github.com/smarterclayton))
-* Removed comments in json config when using kubectl edit with -o json ([#31685](https://github.com/kubernetes/kubernetes/pull/31685), [@jellonek](https://github.com/jellonek))
-* fixes invalid null selector issue in sysdig example yaml ([#31393](https://github.com/kubernetes/kubernetes/pull/31393), [@baldwinSPC](https://github.com/baldwinSPC))
-* Rescheduler which ensures that critical pods are always scheduled enabled by default in GCE. ([#31974](https://github.com/kubernetes/kubernetes/pull/31974), [@piosz](https://github.com/piosz))
-* retry oauth token fetch in gce cloudprovider ([#32021](https://github.com/kubernetes/kubernetes/pull/32021), [@mikedanese](https://github.com/mikedanese))
-* Deprecate the old cbr0 and flannel networking modes ([#31197](https://github.com/kubernetes/kubernetes/pull/31197), [@freehan](https://github.com/freehan))
-* AWS: fix volume device assignment race condition ([#31090](https://github.com/kubernetes/kubernetes/pull/31090), [@justinsb](https://github.com/justinsb))
-* The certificates API group has been renamed to certificates.k8s.io ([#31887](https://github.com/kubernetes/kubernetes/pull/31887), [@liggitt](https://github.com/liggitt))
-* Increase Dashboard UI version to v1.4.0-beta2 ([#31518](https://github.com/kubernetes/kubernetes/pull/31518), [@bryk](https://github.com/bryk))
-* Fixed incomplete kubectl bash completion. ([#31333](https://github.com/kubernetes/kubernetes/pull/31333), [@xingzhou](https://github.com/xingzhou))
-* Added liveness probe to Heapster service. ([#31878](https://github.com/kubernetes/kubernetes/pull/31878), [@mksalawa](https://github.com/mksalawa))
-* Adding clusters to the list of valid resources printed by kubectl help ([#31719](https://github.com/kubernetes/kubernetes/pull/31719), [@nikhiljindal](https://github.com/nikhiljindal))
-* Kubernetes server components using `kubeconfig` files no longer default to `http://localhost:8080`. Administrators must specify a server value in their kubeconfig files. ([#30808](https://github.com/kubernetes/kubernetes/pull/30808), [@smarterclayton](https://github.com/smarterclayton))
-* Update influxdb to 0.12 ([#31519](https://github.com/kubernetes/kubernetes/pull/31519), [@piosz](https://github.com/piosz))
-* Include security options in the container created event ([#31557](https://github.com/kubernetes/kubernetes/pull/31557), [@timstclair](https://github.com/timstclair))
-* Federation can now be deployed using the `federation/deploy/deploy.sh` script. This script does not depend on any of the development environment shell library/scripts. This is an alternative to the current `federation-up.sh`/`federation-down.sh` scripts. Both the scripts are going to co-exist in this release, but the `federation-up.sh`/`federation-down.sh` scripts might be removed in a future release in favor of `federation/deploy/deploy.sh` script. ([#30744](https://github.com/kubernetes/kubernetes/pull/30744), [@madhusudancs](https://github.com/madhusudancs))
-* Add get/delete cluster, delete context to kubectl config ([#29821](https://github.com/kubernetes/kubernetes/pull/29821), [@alexbrand](https://github.com/alexbrand))
-* rkt: Force `rkt fetch` to fetch from remote to conform the image pull policy. ([#31378](https://github.com/kubernetes/kubernetes/pull/31378), [@yifan-gu](https://github.com/yifan-gu))
-* Allow services which use same port, different protocol to use the same nodePort for both ([#30253](https://github.com/kubernetes/kubernetes/pull/30253), [@AdoHe](https://github.com/AdoHe))
-* Handle overlapping deployments gracefully ([#30730](https://github.com/kubernetes/kubernetes/pull/30730), [@janetkuo](https://github.com/janetkuo))
-* Remove environment variables and internal Kubernetes Docker labels from cAdvisor Prometheus metric labels. ([#31064](https://github.com/kubernetes/kubernetes/pull/31064), [@grobie](https://github.com/grobie))
- * Old behavior:
- * - environment variables explicitly whitelisted via --docker-env-metadata-whitelist were exported as `container_env_*=*`. Default is zero so by default non were exported
- * - all docker labels were exported as `container_label_*=*`
- * New behavior:
- * - Only `container_name`, `pod_name`, `namespace`, `id`, `image`, and `name` labels are exposed
- * - no environment variables will be exposed ever via /metrics, even if whitelisted
-* Filter duplicate network packets in promiscuous bridge mode (with ebtables) ([#28717](https://github.com/kubernetes/kubernetes/pull/28717), [@freehan](https://github.com/freehan))
-* Refactor to simplify the hard-traveled path of the KubeletConfiguration object ([#29216](https://github.com/kubernetes/kubernetes/pull/29216), [@mtaufen](https://github.com/mtaufen))
-* Fix overflow issue in controller-manager rate limiter ([#31396](https://github.com/kubernetes/kubernetes/pull/31396), [@foxish](https://github.com/foxish))
-
-Please see the [Releases Page](https://github.com/kubernetes/kubernetes/releases) for older releases.
-
-Release notes of older releases can be found in:
-- [CHANGELOG-1.2.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.2.md)
-- [CHANGELOG-1.3.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.3.md)
-- [CHANGELOG-1.4.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.4.md)
-
-[]()
diff --git a/vendor/k8s.io/kubernetes/CHANGELOG-1.6.md b/vendor/k8s.io/kubernetes/CHANGELOG-1.6.md
deleted file mode 100644
index ae2ce75e411b..000000000000
--- a/vendor/k8s.io/kubernetes/CHANGELOG-1.6.md
+++ /dev/null
@@ -1,2885 +0,0 @@
-
-- [v1.6.13](#v1613)
- - [Downloads for v1.6.13](#downloads-for-v1613)
- - [Client Binaries](#client-binaries)
- - [Server Binaries](#server-binaries)
- - [Node Binaries](#node-binaries)
- - [Changelog since v1.6.12](#changelog-since-v1612)
- - [Other notable changes](#other-notable-changes)
-- [v1.6.12](#v1612)
- - [Downloads for v1.6.12](#downloads-for-v1612)
- - [Client Binaries](#client-binaries-1)
- - [Server Binaries](#server-binaries-1)
- - [Node Binaries](#node-binaries-1)
- - [Changelog since v1.6.11](#changelog-since-v1611)
- - [Other notable changes](#other-notable-changes-1)
-- [v1.6.11](#v1611)
- - [Downloads for v1.6.11](#downloads-for-v1611)
- - [Client Binaries](#client-binaries-2)
- - [Server Binaries](#server-binaries-2)
- - [Node Binaries](#node-binaries-2)
- - [Changelog since v1.6.10](#changelog-since-v1610)
- - [Other notable changes](#other-notable-changes-2)
-- [v1.6.10](#v1610)
- - [Downloads for v1.6.10](#downloads-for-v1610)
- - [Client Binaries](#client-binaries-3)
- - [Server Binaries](#server-binaries-3)
- - [Node Binaries](#node-binaries-3)
- - [Changelog since v1.6.9](#changelog-since-v169)
- - [Other notable changes](#other-notable-changes-3)
-- [v1.6.9](#v169)
- - [Downloads for v1.6.9](#downloads-for-v169)
- - [Client Binaries](#client-binaries-4)
- - [Server Binaries](#server-binaries-4)
- - [Node Binaries](#node-binaries-4)
- - [Changelog since v1.6.8](#changelog-since-v168)
- - [Other notable changes](#other-notable-changes-4)
-- [v1.6.8](#v168)
- - [Downloads for v1.6.8](#downloads-for-v168)
- - [Client Binaries](#client-binaries-5)
- - [Server Binaries](#server-binaries-5)
- - [Node Binaries](#node-binaries-5)
- - [Changelog since v1.6.7](#changelog-since-v167)
- - [Other notable changes](#other-notable-changes-5)
-- [v1.6.7](#v167)
- - [Downloads for v1.6.7](#downloads-for-v167)
- - [Client Binaries](#client-binaries-6)
- - [Server Binaries](#server-binaries-6)
- - [Node Binaries](#node-binaries-6)
- - [Changelog since v1.6.6](#changelog-since-v166)
- - [Other notable changes](#other-notable-changes-6)
-- [v1.6.6](#v166)
- - [Downloads for v1.6.6](#downloads-for-v166)
- - [Client Binaries](#client-binaries-7)
- - [Server Binaries](#server-binaries-7)
- - [Node Binaries](#node-binaries-7)
- - [Changelog since v1.6.5](#changelog-since-v165)
- - [Action Required](#action-required)
- - [Other notable changes](#other-notable-changes-7)
-- [v1.6.5](#v165)
- - [Known Issues for v1.6.5](#known-issues-for-v165)
- - [Downloads for v1.6.5](#downloads-for-v165)
- - [Client Binaries](#client-binaries-8)
- - [Server Binaries](#server-binaries-8)
- - [Node Binaries](#node-binaries-8)
- - [Changelog since v1.6.4](#changelog-since-v164)
- - [Other notable changes](#other-notable-changes-8)
-- [v1.6.4](#v164)
- - [Known Issues for v1.6.4](#known-issues-for-v164)
- - [Downloads for v1.6.4](#downloads-for-v164)
- - [Client Binaries](#client-binaries-9)
- - [Server Binaries](#server-binaries-9)
- - [Node Binaries](#node-binaries-9)
- - [Changelog since v1.6.3](#changelog-since-v163)
- - [Other notable changes](#other-notable-changes-9)
-- [v1.6.3](#v163)
- - [Known Issues for v1.6.3](#known-issues-for-v163)
- - [Downloads for v1.6.3](#downloads-for-v163)
- - [Client Binaries](#client-binaries-10)
- - [Server Binaries](#server-binaries-10)
- - [Node Binaries](#node-binaries-10)
- - [Changelog since v1.6.2](#changelog-since-v162)
- - [Other notable changes](#other-notable-changes-10)
-- [v1.6.2](#v162)
- - [Downloads for v1.6.2](#downloads-for-v162)
- - [Client Binaries](#client-binaries-11)
- - [Server Binaries](#server-binaries-11)
- - [Changelog since v1.6.1](#changelog-since-v161)
- - [Other notable changes](#other-notable-changes-11)
-- [v1.6.1](#v161)
- - [Downloads for v1.6.1](#downloads-for-v161)
- - [Client Binaries](#client-binaries-12)
- - [Server Binaries](#server-binaries-12)
- - [Changelog since v1.6.0](#changelog-since-v160)
- - [Other notable changes](#other-notable-changes-12)
-- [v1.6.0](#v160)
- - [Downloads for v1.6.0](#downloads-for-v160)
- - [Client Binaries](#client-binaries-13)
- - [Server Binaries](#server-binaries-13)
- - [WARNING: etcd backup strongly recommended](#warning-etcd-backup-strongly-recommended)
- - [Major updates and release themes](#major-updates-and-release-themes)
- - [Action Required](#action-required-1)
- - [Certificates API](#certificates-api)
- - [Cluster Autoscaler](#cluster-autoscaler)
- - [Deployment](#deployment)
- - [Federation](#federation)
- - [Internal Storage Layer](#internal-storage-layer)
- - [Node Components](#node-components)
- - [kubectl](#kubectl)
- - [RBAC](#rbac)
- - [Scheduling](#scheduling)
- - [Service](#service)
- - [StatefulSet](#statefulset)
- - [Volumes](#volumes)
- - [Notable Features](#notable-features)
- - [Autoscaling](#autoscaling)
- - [DaemonSet](#daemonset)
- - [Deployment](#deployment-1)
- - [Federation](#federation-1)
- - [Internal Storage Layer](#internal-storage-layer-1)
- - [kubeadm](#kubeadm)
- - [Node Components](#node-components-1)
- - [RBAC](#rbac-1)
- - [Scheduling](#scheduling-1)
- - [Service Catalog](#service-catalog)
- - [Volumes](#volumes-1)
- - [Deprecations](#deprecations)
- - [Cluster Provisioning Scripts](#cluster-provisioning-scripts)
- - [kubeadm](#kubeadm-1)
- - [Other Deprecations](#other-deprecations)
- - [Changes to API Resources](#changes-to-api-resources)
- - [ABAC](#abac)
- - [Admission Control](#admission-control)
- - [Authentication](#authentication)
- - [Authorization](#authorization)
- - [Autoscaling](#autoscaling-1)
- - [Certificates](#certificates)
- - [ConfigMap](#configmap)
- - [CronJob](#cronjob)
- - [DaemonSet](#daemonset-1)
- - [Deployment](#deployment-2)
- - [Node](#node)
- - [Pod](#pod)
- - [Pod Security Policy](#pod-security-policy)
- - [RBAC](#rbac-2)
- - [ReplicaSet](#replicaset)
- - [Secrets](#secrets)
- - [Service](#service-1)
- - [StatefulSet](#statefulset-1)
- - [Taints and Tolerations](#taints-and-tolerations)
- - [Volumes](#volumes-2)
- - [Changes to Major Components](#changes-to-major-components)
- - [API Server](#api-server)
- - [API Server Aggregator](#api-server-aggregator)
- - [Generic API Server](#generic-api-server)
- - [Client](#client)
- - [client-go](#client-go)
- - [Cloud Provider](#cloud-provider)
- - [AWS](#aws)
- - [Azure](#azure)
- - [GCE](#gce)
- - [GKE](#gke)
- - [vSphere](#vsphere)
- - [Federation](#federation-2)
- - [kubefed](#kubefed)
- - [Other Notable Changes](#other-notable-changes-13)
- - [Garbage Collector](#garbage-collector)
- - [kubeadm](#kubeadm-2)
- - [kubectl](#kubectl-1)
- - [New Commands](#new-commands)
- - [Create subcommands](#create-subcommands)
- - [Updates to existing commands](#updates-to-existing-commands)
- - [Updates to apply](#updates-to-apply)
- - [Updates to edit](#updates-to-edit)
- - [Bug fixes](#bug-fixes)
- - [Other Notable Changes](#other-notable-changes-14)
- - [Node Components](#node-components-2)
- - [Bug fixes](#bug-fixes-1)
- - [kube-controller-manager](#kube-controller-manager)
- - [kube-dns](#kube-dns)
- - [kube-proxy](#kube-proxy)
- - [Scheduler](#scheduler)
- - [Volume Plugins](#volume-plugins)
- - [Azure Disk](#azure-disk)
- - [GlusterFS](#glusterfs)
- - [Photon](#photon)
- - [rbd](#rbd)
- - [vSphere](#vsphere-1)
- - [Other Notable Changes](#other-notable-changes-15)
- - [Changes to Cluster Provisioning Scripts](#changes-to-cluster-provisioning-scripts)
- - [AWS](#aws-1)
- - [Juju](#juju)
- - [libvirt CoreOS](#libvirt-coreos)
- - [GCE](#gce-1)
- - [OpenStack](#openstack)
- - [Container Images](#container-images)
- - [Other Notable Changes](#other-notable-changes-16)
- - [Changes to Addons](#changes-to-addons)
- - [Dashboard](#dashboard)
- - [DNS](#dns)
- - [DNS Autoscaler](#dns-autoscaler)
- - [Cluster Autoscaler](#cluster-autoscaler-1)
- - [Cluster Load Balancing](#cluster-load-balancing)
- - [etcd Empty Dir Cleanup](#etcd-empty-dir-cleanup)
- - [Fluentd](#fluentd)
- - [Heapster](#heapster)
- - [Registry](#registry)
- - [External Dependency Version Information](#external-dependency-version-information)
- - [Changelog since v1.6.0-rc.1](#changelog-since-v160-rc1)
- - [Previous Releases Included in v1.6.0](#previous-releases-included-in-v160)
-- [v1.6.0-rc.1](#v160-rc1)
- - [Downloads for v1.6.0-rc.1](#downloads-for-v160-rc1)
- - [Client Binaries](#client-binaries-14)
- - [Server Binaries](#server-binaries-14)
- - [Changelog since v1.6.0-beta.4](#changelog-since-v160-beta4)
- - [Other notable changes](#other-notable-changes-17)
-- [v1.6.0-beta.4](#v160-beta4)
- - [Downloads for v1.6.0-beta.4](#downloads-for-v160-beta4)
- - [Client Binaries](#client-binaries-15)
- - [Server Binaries](#server-binaries-15)
- - [Changelog since v1.6.0-beta.3](#changelog-since-v160-beta3)
- - [Other notable changes](#other-notable-changes-18)
-- [v1.6.0-beta.3](#v160-beta3)
- - [Downloads for v1.6.0-beta.3](#downloads-for-v160-beta3)
- - [Client Binaries](#client-binaries-16)
- - [Server Binaries](#server-binaries-16)
- - [Changelog since v1.6.0-beta.2](#changelog-since-v160-beta2)
- - [Other notable changes](#other-notable-changes-19)
-- [v1.6.0-beta.2](#v160-beta2)
- - [Downloads for v1.6.0-beta.2](#downloads-for-v160-beta2)
- - [Client Binaries](#client-binaries-17)
- - [Server Binaries](#server-binaries-17)
- - [Changelog since v1.6.0-beta.1](#changelog-since-v160-beta1)
- - [Action Required](#action-required-2)
- - [Other notable changes](#other-notable-changes-20)
-- [v1.6.0-beta.1](#v160-beta1)
- - [Downloads for v1.6.0-beta.1](#downloads-for-v160-beta1)
- - [Client Binaries](#client-binaries-18)
- - [Server Binaries](#server-binaries-18)
- - [Changelog since v1.6.0-alpha.3](#changelog-since-v160-alpha3)
- - [Action Required](#action-required-3)
- - [Other notable changes](#other-notable-changes-21)
-- [v1.6.0-alpha.3](#v160-alpha3)
- - [Downloads for v1.6.0-alpha.3](#downloads-for-v160-alpha3)
- - [Client Binaries](#client-binaries-19)
- - [Server Binaries](#server-binaries-19)
- - [Changelog since v1.6.0-alpha.2](#changelog-since-v160-alpha2)
- - [Other notable changes](#other-notable-changes-22)
-- [v1.6.0-alpha.2](#v160-alpha2)
- - [Downloads for v1.6.0-alpha.2](#downloads-for-v160-alpha2)
- - [Client Binaries](#client-binaries-20)
- - [Server Binaries](#server-binaries-20)
- - [Changelog since v1.6.0-alpha.1](#changelog-since-v160-alpha1)
- - [Other notable changes](#other-notable-changes-23)
-- [v1.6.0-alpha.1](#v160-alpha1)
- - [Downloads for v1.6.0-alpha.1](#downloads-for-v160-alpha1)
- - [Client Binaries](#client-binaries-21)
- - [Server Binaries](#server-binaries-21)
- - [Changelog since v1.5.0](#changelog-since-v150)
- - [Action Required](#action-required-4)
- - [Other notable changes](#other-notable-changes-24)
-
-
-
-
-
-# v1.6.13
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.13
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes.tar.gz) | `effda17f63d149f1082e85cf5e5bc41b1f5f9bf64e082020c4455ce2e4525e26`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-src.tar.gz) | `0552eb170d276c8dc33a66629da9641fd333813c353a2e741593c9acf81d39fd`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-client-darwin-386.tar.gz) | `91cf455f8271e781de76517d2ba31740f8d8a2c9a9f900a59bae8ff639b1f2fc`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-client-darwin-amd64.tar.gz) | `5e1aa9357eb027d4c4ab21ee1bbc54a3c9bf3a60265a168ab7a02ae32f1800c1`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-client-linux-386.tar.gz) | `a2fb4f6a68581ef5aaf4dc2e0d4bc10c432007f88c82c97e236e27b482fc77fa`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-client-linux-amd64.tar.gz) | `d94f999c6a7bcda4e0901399d7613eba237c2f0632df9317a59d87097ba59cda`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-client-linux-arm64.tar.gz) | `b80f2ecb7c6e5f3315b129a69efef7d01317fada4a739a6a890225d24c50a35d`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-client-linux-arm.tar.gz) | `270396ec50d523706387d1270c717d1d3c00112c6e92399726620086643025f5`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-client-linux-ppc64le.tar.gz) | `117d5d73529306c2b43e7db7692fa651d7a715c61ca31866af87aee8c81bd8e2`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-client-linux-s390x.tar.gz) | `48e812aa64e484f10a5083c2198b48b75d203489084271a259ba55b6138f616c`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-client-windows-386.tar.gz) | `e3425bf16e66250f6cb358efb908b4922d82258772259829ac6fb43a6e8c5f5a`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-client-windows-amd64.tar.gz) | `04514ad6957011da3e26e5bcf23ffad4078a42a0286dfd66da8a46aee3132acb`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-server-linux-amd64.tar.gz) | `08854f22684fe3dcf00c90ed841ab0c40566175a7611fc6111943da0beb8aed8`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-server-linux-arm64.tar.gz) | `01cae48b032fab674aad7c350c8e04b4f5bcc77f98601817cb9177843bb24f4b`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-server-linux-arm.tar.gz) | `e0ce0f75442e48ea495c36071818345c9302204f933acb86c8ad357da8924fa2`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-server-linux-ppc64le.tar.gz) | `5bba326c1a95030ba559627589107875932ef9d41610888a4ee89785f022f9b1`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-server-linux-s390x.tar.gz) | `8e21336a027ad71c382d2d0ecac777b32441b90dad948b67a490782886460370`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-node-linux-amd64.tar.gz) | `c2062b4d2c00db35b5d159651d50fbdc826fc4f866d4add483650da58b4cdfa1`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-node-linux-arm64.tar.gz) | `9b865d9be4ecde441ed959e240b4e7df1718e1fd38861084ae6f4b14e3b2f8df`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-node-linux-arm.tar.gz) | `9d0433621021bca490e8a04eb96e47402d3f8e3d47762590b83be6a595d29b16`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-node-linux-ppc64le.tar.gz) | `438f0e05d29e371c028e73b28c31e3b13dc1decd0780557e0231d96de871b419`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-node-linux-s390x.tar.gz) | `aabf03fd85b75d57cc27548e74585e3926383a82b3f8201800b34ca483d31bcf`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.13/kubernetes-node-windows-amd64.tar.gz) | `b02148bfdc9c0937841cced51a436afcc81a70d10be2edcf3b55f045e4ee3b2f`
-
-## Changelog since v1.6.12
-
-### Other notable changes
-
-* Bump cAdvisor to v0.25.1, which adds support for the Docker overlay2 storage driver. ([#55744](https://github.com/kubernetes/kubernetes/pull/55744), [@dashpole](https://github.com/dashpole))
-* GCE: provide an option to disable docker's live-restore on COS/ubuntu ([#55260](https://github.com/kubernetes/kubernetes/pull/55260), [@yujuhong](https://github.com/yujuhong))
-* Fix kube-proxy hang due to panic when requesting a closed healthcheck. ([#46450](https://github.com/kubernetes/kubernetes/pull/46450), [@MrHohn](https://github.com/MrHohn))
-* Fix Flexvolume/FC/ISCSI volumes not being mounted after Node reboot. ([#51985](https://github.com/kubernetes/kubernetes/pull/51985), [@chakri-nelluri](https://github.com/chakri-nelluri))
-
-
-
-# v1.6.12
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.12
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes.tar.gz) | `d57a05942f581959bc31778def4df4b526df80adaa75942214e9439fdecbe74f`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-src.tar.gz) | `c1781161d1b0fa0c8dbd3a644ee42e65968a0a4bb5bec47f2c70796edbc1d396`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-client-darwin-386.tar.gz) | `85956c72c8fc1a1c4768e95fb403ddb1740db1f2d6dec8263d74a67cfce429b9`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-client-darwin-amd64.tar.gz) | `bcea37dc2852ee83bdcac505600e724ae391e3a5879232d47ddd763cb2253c14`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-client-linux-386.tar.gz) | `8e0f3d0a6807b050070717efacd25db9f96ad3f0ef59d9095aae71ab20734212`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-client-linux-amd64.tar.gz) | `5f324e91dce59e05acdc0d6c0a8a6a56d5a5d1a3144e58b6de5c22a9b9020f8b`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-client-linux-arm64.tar.gz) | `442fadf05af70826231e03b0146c0f9283ec474d6a1ba390eac7204888db5dc7`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-client-linux-arm.tar.gz) | `2e8073e626ba6a6f6148ccca3d5bbfd20f051f9992de676446d2ae259555a75a`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-client-linux-ppc64le.tar.gz) | `f6af1ea1762e9fe889e10da670f61ce0bd2c1bc8fd5c1bd9fc3d1eacabe820a1`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-client-linux-s390x.tar.gz) | `77aee845c290b5637d2560586e9065220aa433d6e15be03c6bbb6dfc75292564`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-client-windows-386.tar.gz) | `6a47f85d4e01595bb7e58469a4cab09053e5e11819440c630ae47008aa0b000d`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-client-windows-amd64.tar.gz) | `6b4f1ae4bed0523a0c5b2b1d6dc9cb1ac54399a2a78b548acd876b8029a2dd6c`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-server-linux-amd64.tar.gz) | `0970f6da85acd1bb61e92a77c7dbfa3f059da409db68c3d940781708795a0204`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-server-linux-arm64.tar.gz) | `d598d846882744e724e65156807a3b2fa5bb92e1c389ff2e08984455346a7305`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-server-linux-arm.tar.gz) | `6c02ade45ba8495917f0a7fe0542369ba482bc98f2dc008f7f69a21fd2e653d2`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-server-linux-ppc64le.tar.gz) | `5479030e4ff21afcd638f4dd22bd0f6fb221dc3b27731954c0a5e53877ed1131`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-server-linux-s390x.tar.gz) | `6407d6c580acc2fafbe2d87b309e60c6d16624403308e41a8a973d772bf26e3b`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-node-linux-amd64.tar.gz) | `9cb5a28417cbc34165eaa2eb412488738b0e190e9128bb68b16d68d2a942b4c9`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-node-linux-arm64.tar.gz) | `e4c1d1994b7595f2ac9c7ffebaaefc0737c1fbbcc4d2a9a9097d52d060236ad8`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-node-linux-arm.tar.gz) | `77879441f3b5e753959b32103ef6a49fbc9ccea16cac1b1fb83446b5d573901d`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-node-linux-ppc64le.tar.gz) | `c6866605adf86d5bc91acb670c5d8bba00c989a8758014a17322c041289e472d`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-node-linux-s390x.tar.gz) | `8a280b31c7118728660ac4b7010ed0af9bc3b058e98964c04b47f58c5fd84671`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.12/kubernetes-node-windows-amd64.tar.gz) | `bc3d39ed8f23e59692bcffc23eaae7f575bef01e3c7c1510528662f984283a9c`
-
-## Changelog since v1.6.11
-
-### Other notable changes
-
-* Azure cloudprovider: Fix controller manager crash issue on a manually created k8s cluster. ([#53694](https://github.com/kubernetes/kubernetes/pull/53694), [@andyzhangx](https://github.com/andyzhangx))
-* Fix kubelet reset liveness probe failure count across pod restart boundaries. ([#46371](https://github.com/kubernetes/kubernetes/pull/46371), [@sjenning](https://github.com/sjenning))
-
-
-
-# v1.6.11
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.11
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes.tar.gz) | `0dacad1c3da0397b6234e474979c4095844733315a853feba5690dbdf8db15dc`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-src.tar.gz) | `818fdfc41d7b6d90b9dc37ca12c2fbe1b6fb20f998ee04fddce4a9bb8610351e`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-client-darwin-386.tar.gz) | `c9a24250d68ddde25a09955c5f944812a9aeb5e0f3fd61313dbd166348aa5954`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-client-darwin-amd64.tar.gz) | `f51e83ff2e026856cae7e365b17c20d94fe59d4a2749daa7bc4dbfb184f14a36`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-client-linux-386.tar.gz) | `16afc423b6f68cc5b24c322ee383e3f7c0fc5c3c98dd4cc90f93cfbd820964a4`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-client-linux-amd64.tar.gz) | `fca4eaae3bd6b9482ec130146b5ee24159effd66ea70d3c4ce174a45c770fcdd`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-client-linux-arm64.tar.gz) | `6d7d777357c1920b2ef4060f7f55de7c92655c99aa7caf71fbb6311ddbba4578`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-client-linux-arm.tar.gz) | `15bbfadbd4ce4b46d1473cb662396f1ac0372c9134ebd597de91565b59ddb200`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-client-linux-ppc64le.tar.gz) | `961a942875daf30aad3fdebd3796eb6311f46eb31fe8558ffde086c5424a1c2d`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-client-linux-s390x.tar.gz) | `3874548181ac06feb280f1cf6f7ae851599f68d0abc96d3af17264889ff9d992`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-client-windows-386.tar.gz) | `7c305dd4d00e877843efa187948c93907d440cf3fcccd31cc18e243c319eec7d`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-client-windows-amd64.tar.gz) | `ee27b50a82d845d4e2ddecb401f36e1e47dd0fb8f67c60465e99e8947b740149`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-server-linux-amd64.tar.gz) | `daea028d6777597aaee33ea7c9e3f1210b46ce895faac9ca85c7b1553923ce82`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-server-linux-arm64.tar.gz) | `1f098c7bc06aeb7d532d270538f3aa3a029e3f6460b26e9449b361ed7de93704`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-server-linux-arm.tar.gz) | `c5d6ae53fa95eb0e3b02e046e99144b8604dba7a16f373a2a02ae2fa88818ee2`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-server-linux-ppc64le.tar.gz) | `06bba3736754cc7650b45c6a832b14d0539e63c5cec59f8ecd763803ea4397b6`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-server-linux-s390x.tar.gz) | `632fb6bb0a1144d91b1f559967731223a2bf53423539317e015dcf73aef6cb53`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-node-linux-amd64.tar.gz) | `c8a38711db9625dd4b1e55923961c22276a0a07c976d371dd91b638b6d0a6757`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-node-linux-arm64.tar.gz) | `9bd3c3cf6e98e882b397708f3fab0fd5f4476e97bd3a897598a7ded822bd5314`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-node-linux-arm.tar.gz) | `563d22c94513d287e4f01dbc40b2f300dbdf9c9dbaf8394bf18c2604796dce5b`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-node-linux-ppc64le.tar.gz) | `4d249236a64414ad5b201c994ae867458a49a4dea53c4c7eb5ba1d0af07433c2`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-node-linux-s390x.tar.gz) | `35c2132ef07dedc4d64d72fc194aa0824d427a3780733508493d9d87538cedd1`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.11/kubernetes-node-windows-amd64.tar.gz) | `b4279e7e38d1777354b557e17419ec3ab8399addb0e535669d485fb9416fb76b`
-
-## Changelog since v1.6.10
-
-### Other notable changes
-
-* Update kube-dns to 1.14.5 ([#53112](https://github.com/kubernetes/kubernetes/pull/53112), [@bowei](https://github.com/bowei))
-* Fix panic in ControllerManager on GCE when it has a problem with creating external loadbalancer healthcheck ([#52646](https://github.com/kubernetes/kubernetes/pull/52646), [@gmarek](https://github.com/gmarek))
-* When performing a GET then PUT, the kube-apiserver must write the canonical representation of the object to etcd if the current value does not match. That allows external agents to migrate content in etcd from one API version to another, across different storage types, or across varying encryption levels. This fixes a bug introduced in 1.5 where we unintentionally stopped writing the newest data. ([#48394](https://github.com/kubernetes/kubernetes/pull/48394), [@smarterclayton](https://github.com/smarterclayton))
-* StatefulSet will now fill the `hostname` and `subdomain` fields if they're empty on existing Pods it owns. This allows it to self-correct the issue where StatefulSet Pod DNS entries disappear after upgrading to v1.7.x ([#48327](https://github.com/kubernetes/kubernetes/pull/48327)). ([#51199](https://github.com/kubernetes/kubernetes/pull/51199), [@kow3ns](https://github.com/kow3ns))
-* Make logdump support kubemark and support gke with 'use_custom_instance_list' ([#51834](https://github.com/kubernetes/kubernetes/pull/51834), [@shyamjvs](https://github.com/shyamjvs))
-* Fix credentials providers for docker sandbox image. ([#51870](https://github.com/kubernetes/kubernetes/pull/51870), [@feiskyer](https://github.com/feiskyer))
-
-
-
-# v1.6.10
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.10
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes.tar.gz) | `8877359b78950b12a48ea68483f4e4ba2d2521f7e8620efca6f84275cb023428`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-src.tar.gz) | `560d1441b72c670c3d21f838f8d0a94bc75628b1bdd322b18e91df2578a0f84b`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-client-darwin-386.tar.gz) | `087799af2856decf438dbd896260cfdec3c02c6a42e2e2f90b608f21d61a8fb6`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-client-darwin-amd64.tar.gz) | `8d9dbbee46a26fcf7f50af145b888881a428d62a3ee929b75e0a6833553de4ab`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-client-linux-386.tar.gz) | `d69bd343613bd3f57799d05de5f56ec159ddb6f38cbec1d914b5c2e7a2945f6e`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-client-linux-amd64.tar.gz) | `b0e2420e66257e67c9f53c996feebff20bebbbe5c9bc12b85b973a165ee436ec`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-client-linux-arm64.tar.gz) | `4d9b6064fd409789c7bc07b7a3746798f94a19bf811021f727fcf8afdbd432aa`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-client-linux-arm.tar.gz) | `7a02002aa3c4f6c5c2ff662fe023da3cd32a687967bb42a76e2014fe12a349f4`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-client-linux-ppc64le.tar.gz) | `f0b26ad0bdf578a8c98e870a276ad7b8d77ef13f423476b21b78f18077b83893`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-client-linux-s390x.tar.gz) | `da4125aff73b1d397b2917d4397690686d44f426471fd12eed080947c0de03e5`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-client-windows-386.tar.gz) | `0bd8aeb66a1d5235da85a71150e10838c0d8d67ecb8b368262d52ac86ff10dbd`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-client-windows-amd64.tar.gz) | `3a89271b4554e56c37038f797ad31f357107257d80fed9ab5ca80832e33cf00e`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-server-linux-amd64.tar.gz) | `ae897c9db3a0b89be6ff66ca8e35b41165be620614f60aab424d76deffa45bcc`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-server-linux-arm64.tar.gz) | `f6ce8a89f2ce9b380789828ba2723ac834d2dd40dd20403f22040ee08a390b07`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-server-linux-arm.tar.gz) | `085a3166785ab4fe17cc153fa6306df55af6fa90d5a3a4670923cf4515323f70`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-server-linux-ppc64le.tar.gz) | `c55f6741370471a2caac8b844865d908c8b327f2aea6685e193d54f4b14a5a63`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-server-linux-s390x.tar.gz) | `e36bd6f3bd7493f4ba12ceeebc9a6102778d20d203054d74cd69e929b7abcc84`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-node-linux-amd64.tar.gz) | `e083f7bc8028a2eb03bbcc6be93a95377e74906ae49970af034d36b3409f72de`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-node-linux-arm64.tar.gz) | `95895aab99979aca8cb713f53b2be0f11b16c3a76e97c206a70969a3cc3e003d`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-node-linux-arm.tar.gz) | `a1e2dee888f4ef9affd1c2b747602f4d53971911b93ea69174d7301a5f7e1ccc`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-node-linux-ppc64le.tar.gz) | `1cbaa1f6116c862acaef7a3e1ad6c27bcf5f87eb4ce01f6f9164c58caa2e0009`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-node-linux-s390x.tar.gz) | `178a53d8193464a6062b3ebdea6c8dbb3dcb9f7c0ab1f40e386e555939c0be51`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.10/kubernetes-node-windows-amd64.tar.gz) | `1c044217184bcbe7e11c9fe0c511bbc6353935fc850b2c6b0f6ca0f2cbe31a8e`
-
-## Changelog since v1.6.9
-
-### Other notable changes
-
-* Add --request-timeout to kube-apiserver to make global request timeout configurable. ([#51415](https://github.com/kubernetes/kubernetes/pull/51415), [@jpbetz](https://github.com/jpbetz))
-* Fix for Nodes in vSphere lacking an InternalIP. ([#48760](https://github.com/kubernetes/kubernetes/pull/48760)) ([#49202](https://github.com/kubernetes/kubernetes/pull/49202), [@cbonte](https://github.com/cbonte))
-* GCE: Bump GLBC version to [0.9.6](https://github.com/kubernetes/ingress/releases/tag/0.9.6). ([#50096](https://github.com/kubernetes/kubernetes/pull/50096), [@nicksardo](https://github.com/nicksardo))
-* In GCE with COS, increase TasksMax for Docker service to raise cap on number of threads/processes used by containers. ([#51986](https://github.com/kubernetes/kubernetes/pull/51986), [@yujuhong](https://github.com/yujuhong))
-* Fixed an issue ([#47800](https://github.com/kubernetes/kubernetes/pull/47800)) where `kubectl logs -f` failed with `unexpected stream type ""`. ([#51872](https://github.com/kubernetes/kubernetes/pull/51872), [@feiskyer](https://github.com/feiskyer))
-* Fix for Pod stuck in ContainerCreating with error "Volume is not yet attached according to node". ([#50806](https://github.com/kubernetes/kubernetes/pull/50806), [@verult](https://github.com/verult))
-* Fix initial exec terminal dimensions. ([#51126](https://github.com/kubernetes/kubernetes/pull/51126), [@chen-anders](https://github.com/chen-anders))
-* vSphere: Fix attach volume failing on the first try. ([#51218](https://github.com/kubernetes/kubernetes/pull/51218), [@BaluDontu](https://github.com/BaluDontu))
-
-
-
-# v1.6.9
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.9
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes.tar.gz) | `08be94c252e7fbdd7c14811ec021818e687c1259e557b70db10aac64c0e8e4b2`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-src.tar.gz) | `519501e26afc341b236c5b46602f010a33fc190e3d1bfb7802969b2e979faaeb`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-client-darwin-386.tar.gz) | `864f2307dd22c055063d1a55354596754a94d03f023e7278c24d5978bba00b3e`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-client-darwin-amd64.tar.gz) | `0a107e0a1d7e6865ddd9241f1e8357405f476889a6f1a16989ba01f6cffd3be7`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-client-linux-386.tar.gz) | `b20599e266248e7e176383e0318acd855c1aad8014396cc4018adde11a33d0c8`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-client-linux-amd64.tar.gz) | `0690a8c9858f91cc000b3acd602799bf2320756b7471e463df2e3a36fbdde886`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-client-linux-arm64.tar.gz) | `354897ffc6382b8eb27f434d8e7aa3cbfae4b819da3160a43db8ccb8cae1275b`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-client-linux-arm.tar.gz) | `6897408bf8d65d1281555c21ae978a4ccd69482a7ad2549bcec381416e312d7a`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-client-linux-ppc64le.tar.gz) | `2afae0c211eb415829446f90a0bf9d48b9f8311ac4566fa74a08415ed9a31e75`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-client-linux-s390x.tar.gz) | `abde354528cc9c8ced49bb767ffcd8bfae47a0b4b5501502f560cf663a0c4a05`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-client-windows-386.tar.gz) | `83083c0d78e9468c7be395282a4697d2c703d3310593e7b70cd09fa9e7791d80`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-client-windows-amd64.tar.gz) | `3471db3463d60d22d82edb34fbe3ca301cc583ebddffc2664569255302e7d304`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-server-linux-amd64.tar.gz) | `598e49c8a22e4e8db1e1c0ed9d8955c991425cd4e06c072ac36fd5ed693b1c61`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-server-linux-arm64.tar.gz) | `5ce75f57636d537b4bf3ca00c4a1322e9c1aaf273bd945304333b558af3c081b`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-server-linux-arm.tar.gz) | `afea9780049c5e6548f64973bd8679aae60672ab05027f8c36784ccf2a83a1b2`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-server-linux-ppc64le.tar.gz) | `cd131b3e39e4160cd9920fe2635b4f6da4679cce12cb2483cfe28197e366bceb`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-server-linux-s390x.tar.gz) | `93ee43f33cbe061ac088acf62099be1abd0d9c0b4a8a79be4069904c3780c76d`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-node-linux-amd64.tar.gz) | `f8f13233b168c4833af685817f9591c73658d1377ceb9d550cbea929c6e27c2e`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-node-linux-arm64.tar.gz) | `1ed434f9e6469c8cc7a3bb15404e918cf242ef92ef075e7cf479b7e951269b5c`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-node-linux-arm.tar.gz) | `3fd8e089184f83bd9ed2cf5f193253e1f7b9b853876a08a2babf91647d6d0ac8`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-node-linux-ppc64le.tar.gz) | `9673547a32f83498bb28f02212d419b28cc50a0a4d7b866396994b5ea9313e79`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-node-linux-s390x.tar.gz) | `80044cdeb4260e807660c166ed15bb2a9db03d59d8c186b1d4f9a53841cea327`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.9/kubernetes-node-windows-amd64.tar.gz) | `b1dd678ee2974dc83ea7cfe8516557c9360ed55e40cad1b68803b71786f8d16f`
-
-## Changelog since v1.6.8
-
-### Other notable changes
-
-* StatefulSet: Set hostname/subdomain fields on new Pods in addition to the deprecated annotations, to allow mitigation of Pod DNS issues upon upgrading to Kubernetes v1.7.x. ([#50942](https://github.com/kubernetes/kubernetes/pull/50942), [@enisoc](https://github.com/enisoc))
-* Azure: Allow VNet to be in a separate Resource Group. ([#49725](https://github.com/kubernetes/kubernetes/pull/49725), [@sylr](https://github.com/sylr))
-* In GCE, add measures to prevent corruption of known_tokens.csv. ([#49897](https://github.com/kubernetes/kubernetes/pull/49897), [@mikedanese](https://github.com/mikedanese))
-* Fixed a bug in the API server watch cache, which could cause a missing watch event immediately after cache initialization. ([#49992](https://github.com/kubernetes/kubernetes/pull/49992), [@liggitt](https://github.com/liggitt))
-
-
-
-# v1.6.8
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.8
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes.tar.gz) | `c87f7826f0b7cf91baddd97ebafb33e99d91dcf6b9019a50bee0689527541ef7`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-src.tar.gz) | `591c43f9624dac351745da35444302cd694ad4953275b8f09016b4654d37b793`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-client-darwin-386.tar.gz) | `3f6cda6ca2cf3e8f038649f1021ca23c35f4da12d66cefaa4339c9613ca9bbd6`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-client-darwin-amd64.tar.gz) | `147bf5124e44a1557b95e7daa76717992b7890e79910c446dc682103f62325eb`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-client-linux-386.tar.gz) | `cd7238c19f9d4a4ce0b14c2d954f6ead2235caa2d74b319524a0d2ffeea0ca37`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-client-linux-amd64.tar.gz) | `34042be9607ca75702384552b31514f594af22d3c1d88549b0cd4ce36ee8fd6b`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-client-linux-arm64.tar.gz) | `3a7d4be76dda07fac50a257275369b3f4c48848e2963b55b46fa9df44477bfc8`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-client-linux-arm.tar.gz) | `0a060b8745b3c0e8173827af3d91a4748eb191a9c15538625eee108f6024fcfd`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-client-linux-ppc64le.tar.gz) | `bbc7be082d20082179de5efb85c0da9d0f3811c2119d3928bf89edc8f59e8cd0`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-client-linux-s390x.tar.gz) | `5e93d7ed4797f6b8742925d13f791e862bdb410bdd2b33737882132aabcc0bfd`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-client-windows-386.tar.gz) | `22a0a80fa5ed5f0745371cc9fd68eeeb0671242cf7c476fb4e635ccd9ef8c2b1`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-client-windows-amd64.tar.gz) | `ce42d7e826aa07bd98a424332926b04e75effbe926b098565781de3c3b6d244c`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-server-linux-amd64.tar.gz) | `9bf31375917ffdf9a9437ed562e96a1e2b43e23dcb4a42204032bb289ff12b6d`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-server-linux-arm64.tar.gz) | `51d84e7b1ace983b13639f1fe4bf1b11212d178e6a75b769de9bdac97d1fa7ae`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-server-linux-arm.tar.gz) | `b704de70774c6c0feb13a7b47d8d757e9a0438406b7fd1d33d0c5cb991d179b0`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-server-linux-ppc64le.tar.gz) | `f36f086481656fcb659a456ca832d62274e40defc1a3ed1dcc1e5ea7a696729b`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-server-linux-s390x.tar.gz) | `348f8a733556fcceaaa27d316c3e2ea01039c860988a434d7c9a850bc2412546`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-node-linux-amd64.tar.gz) | `e38255961c73e021bcca08890918f23cce39831536bf74496aa369049a1eb165`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-node-linux-arm64.tar.gz) | `be06c10320f3f996a48845eef9572353f9a0bd56330338c4cad6aca1fcc4fac4`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-node-linux-arm.tar.gz) | `06c6ecd885fbb4889791e78f50cdcb9920ee8f1e866d4fa921bc2096dbfbbd4b`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-node-linux-ppc64le.tar.gz) | `74e88435549cc46f3fc082300bf373c7d824921bd01eabf789a1b09e1a17a04a`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-node-linux-s390x.tar.gz) | `7ebe22e74653650ac0cedbfc482f5ff08713c40747018dac7506b36bb78ee8fc`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.8/kubernetes-node-windows-amd64.tar.gz) | `66b66655976647f50db3eda61849cbb26bcb06ad20a866328f24aef862758bb4`
-
-## Changelog since v1.6.7
-
-### Other notable changes
-
-* Revert deprecation of vCenter port in vSphere Cloud Provider. ([#49689](https://github.com/kubernetes/kubernetes/pull/49689), [@divyenpatel](https://github.com/divyenpatel))
-* kubeadm: Add preflight check for localhost resolution. ([#48875](https://github.com/kubernetes/kubernetes/pull/48875), [@craigtracey](https://github.com/craigtracey))
-* Fix panic when using `kubeadm init` with vsphere cloud-provider. ([#44661](https://github.com/kubernetes/kubernetes/pull/44661), [@xiangpengzhao](https://github.com/xiangpengzhao))
-* kubectl: Fix bug that showed terminated/evicted pods even without `--show-all`. ([#48786](https://github.com/kubernetes/kubernetes/pull/48786), [@janetkuo](https://github.com/janetkuo))
-* Never prevent deletion of resources as part of namespace lifecycle ([#48733](https://github.com/kubernetes/kubernetes/pull/48733), [@liggitt](https://github.com/liggitt))
-* AWS cloudprovider plugin: Fix for large clusters (200+ nodes). Also fix bug with volumes not getting detached from a node after reboot. ([#48312](https://github.com/kubernetes/kubernetes/pull/48312), [@gnufied](https://github.com/gnufied))
-* Fix Pods using Portworx volumes getting stuck in ContainerCreating phase. ([#48898](https://github.com/kubernetes/kubernetes/pull/48898), [@harsh-px](https://github.com/harsh-px))
-* RBAC role and role-binding reconciliation now ensures namespaces exist when reconciling on startup. ([#48480](https://github.com/kubernetes/kubernetes/pull/48480), [@liggitt](https://github.com/liggitt))
-
-
-
-# v1.6.7
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.7
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes.tar.gz) | `6522086d9666543ed4e88a791626953acd1ea843eb024f16f4a4a2390dcbb2b2`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-src.tar.gz) | `b2a73f140966ba0080ce16e3b9a67d5fd9849b36942f3490e9f8daa0fe4511c4`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-client-darwin-386.tar.gz) | `ffa06a16a3091b2697ef14f8e28bb08000455bd9b719cf0f510f011b864cd1e0`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-client-darwin-amd64.tar.gz) | `32de3e38f7a60c9171a63f43a2c7f0b2d8f8ba55d51468d8dbf7847dbd943b45`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-client-linux-386.tar.gz) | `d9c27321007607cc5afb2ff5b3cac210471d55dd1c3a478c6703ab72d187211e`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-client-linux-amd64.tar.gz) | `54947ef84181e89f9dbacedd54717cbed5cc7f9c36cb37bc8afc9097648e2c91`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-client-linux-arm64.tar.gz) | `e96d300eb6526705b1c1bedaaf3f4746f3e5d6b49ccc7e60650eb9ee022fba0e`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-client-linux-arm.tar.gz) | `e4605dca3948264fba603dc8f95b202528eb8ad4ca99c7f3a61f77031e7ba756`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-client-linux-ppc64le.tar.gz) | `8b77793aea5abf1c17b73f7e11476b9d387f3dc89e5d8405ffadd1a395258483`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-client-linux-s390x.tar.gz) | `ff3ddec930a0ffdc83fe324d544d4657d57a64a3973fb9df4ddaa7a98228d7fb`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-client-windows-386.tar.gz) | `ce09e4b071bb06039ad9bdf6a1059d59cf129dce942600fcdc9d320ff0c07a7a`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-client-windows-amd64.tar.gz) | `e985644f582945274e82764742f02bd175f05128c1945e987d06973dd5f5a56d`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-server-linux-amd64.tar.gz) | `1287bb85f1057eae53f8bb4e4475c990783e43d2f57ea1c551fdf2da7ca5345d`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-server-linux-arm64.tar.gz) | `51623850475669be59f6428922ba316d4dd60d977f892adfaf0ca0845c38506c`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-server-linux-arm.tar.gz) | `a5331022d29f085e6b7fc4ae064af64024eba6a02ae54e78c2e84b40d0aec598`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-server-linux-ppc64le.tar.gz) | `93d52e84d0fea5bdf3ede6784b8da6c501e0430c74430da3a125bd45c557e10a`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-server-linux-s390x.tar.gz) | `baccbb6fc497f433c2bd93146c31fbca1da427e0d6ac8483df26dd42ccb79c6e`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-node-linux-amd64.tar.gz) | `0cfdd51de879869e7ef40a17dfa1a303a596833fb567c3b7e4f82ba0cf863839`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-node-linux-arm64.tar.gz) | `d07ef669d94ea20a4a9e3a38868ac389dab4d3f2bdf8b27280724fe63f4de3c3`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-node-linux-arm.tar.gz) | `1cc9b6a8aee4e59967421cbded21c0a20f02c39288781f504e55ad6ca71d1037`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-node-linux-ppc64le.tar.gz) | `3f412096d8b249d671f924c3ee4aecf3656186fde4509ce9f560f67a9a166b6d`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-node-linux-s390x.tar.gz) | `2cca7629c1236b3435e6e31498c1f8216d7cca4236d8ad0ae10c83a422519a34`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.7/kubernetes-node-windows-amd64.tar.gz) | `4f859fba52c044a9ce703528760967e1efa47a359603b5466c0dc0748eb25e36`
-
-## Changelog since v1.6.6
-
-### Other notable changes
-
-* kubeadm: Expose only the cluster-info ConfigMap in the kube-public ns ([#48050](https://github.com/kubernetes/kubernetes/pull/48050), [@luxas](https://github.com/luxas))
-* Fix kubelet request timeout when stopping a container. ([#46267](https://github.com/kubernetes/kubernetes/pull/46267), [@Random-Liu](https://github.com/Random-Liu))
-* Add generic NoSchedule toleration to fluentd in gcp config. ([#48182](https://github.com/kubernetes/kubernetes/pull/48182), [@gmarek](https://github.com/gmarek))
-* Update cluster-proportional-autoscaler, fluentd-gcp, and kube-addon-manager, and kube-dns addons with refreshed base images containing fixes for CVE-2016-9841, CVE-2016-9843, CVE-2017-2616, and CVE-2017-6512. ([#47454](https://github.com/kubernetes/kubernetes/pull/47454), [@ixdy](https://github.com/ixdy))
-* Fix fluentd-gcp configuration to facilitate JSON parsing ([#48139](https://github.com/kubernetes/kubernetes/pull/48139), [@crassirostris](https://github.com/crassirostris))
-* Bump runc to v1.0.0-rc2-49-gd223e2a - fixes `failed to initialise top level QOS containers` kubelet error. ([#48117](https://github.com/kubernetes/kubernetes/pull/48117), [@sjenning](https://github.com/sjenning))
-* `kubefed init` correctly checks for RBAC API enablement. ([#48077](https://github.com/kubernetes/kubernetes/pull/48077), [@liggitt](https://github.com/liggitt))
-* `kubectl api-versions` now always fetches information about enabled API groups and versions instead of using the local cache. ([#48016](https://github.com/kubernetes/kubernetes/pull/48016), [@liggitt](https://github.com/liggitt))
-* Fix kubelet event recording for selected events. ([#46246](https://github.com/kubernetes/kubernetes/pull/46246), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Fix `Invalid value: "foregroundDeletion"` error when attempting to delete a resource. ([#46500](https://github.com/kubernetes/kubernetes/pull/46500), [@tnozicka](https://github.com/tnozicka))
-
-
-
-# v1.6.6
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.6
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes.tar.gz) | `1574d868d43f5d88cfd1af255226e8cd6da72cd65fb9e1285557279c34f8a645`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-src.tar.gz) | `305f372320f78855e298b6caea062c8d1f7db117c7b44943ff5ddd0169424033`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-client-darwin-386.tar.gz) | `d93ca6f95cd80856b04d9c76a98ca986d6ba183d9fa100619fcda9f157bfd7f6`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-client-darwin-amd64.tar.gz) | `facda65133f2893296f64c1067807dd7b354e2a4440afdd1ee62c05c07bcb91a`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-client-linux-386.tar.gz) | `5d1bd3ecc96f9e1cb9f20cef88c5aa2ec9c09370e8892557fc8a7cfe3cba595b`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-client-linux-amd64.tar.gz) | `94b2c9cd29981a8e150c187193bab0d8c0b6e906260f837367feff99860a6376`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-client-linux-arm64.tar.gz) | `a7554e496403b50c12f5dbfaa00f2b887773905894ae5c330e2accd7b7e137c9`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-client-linux-arm.tar.gz) | `5a3414f4b47c84b173c879379d90b447af0540730bb86f10baf6d6933b09d41d`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-client-linux-ppc64le.tar.gz) | `904bab541dd8f1236d5e47f97cd2509c649f629fdc3af88a3968ca3c5575886d`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-client-linux-s390x.tar.gz) | `d4a85694f796e4e1c14e6bddc295d9f776001fd8ac92ed32565606b964a843b0`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-client-windows-386.tar.gz) | `47258f6fc7fbd17ac1ddb38387adc5a2ddc2e39c5792cf3d354f9b19d373a6b2`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-client-windows-amd64.tar.gz) | `e8c2957688acf19463e28d39cc1b4b1e9a12b3f10101dff179d1d63754b34236`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-server-linux-amd64.tar.gz) | `7bbf43f81f5dbc3729c1956705d95c218b848591d03789d48f10e58fa865a0ba`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-server-linux-arm64.tar.gz) | `f725f491a8998bdf164470029441135336ec0414360d6b57a5d8daf73d09334f`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-server-linux-arm.tar.gz) | `9026ca6fdbffef1d02409a86649e4dd0a7667ff6c27df318a3d851c271fb38d0`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-server-linux-ppc64le.tar.gz) | `cd3b1b693b4e8225f78751bff533024785b0e20c2c51228956692db2a21d9f60`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-server-linux-s390x.tar.gz) | `9cd42506f4891be4691b7f4a8be7b894109dca54d0e9130651bc869101d7ed1f`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-node-linux-amd64.tar.gz) | `962f327f9a7b038c3b125a6cd06b690012fa38c827de0dae75955bb2be717126`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-node-linux-arm64.tar.gz) | `e09af9f1130f8e1d4f6b45ec79eedb94e98354edb813b635c0dc097437834a1b`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-node-linux-arm.tar.gz) | `7647ec0a51308ca73e4c4eb4cbe09f2f9609c809e530d129a718d960a25d339d`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-node-linux-ppc64le.tar.gz) | `439b2135b179b699ca951a2d619629583d92dbdfb60b3920a1fa872b4cd65b6d`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-node-linux-s390x.tar.gz) | `eed95c80bddad4a67d81c036b0d047dfb7bef8fb13a4e1b4817c1f2a595b993e`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.6/kubernetes-node-windows-amd64.tar.gz) | `611a92f9ab4f6dd48349843eec844b6abf861d76a151cce91b216a56bb6c821f`
-
-## Changelog since v1.6.5
-
-### Action Required
-
-* Azure: Change container permissions to private for provisioned volumes. If you have existing Azure volumes that were created by Kubernetes v1.6.0-v1.6.5, you should change the permissions on them manually. ([#47605](https://github.com/kubernetes/kubernetes/pull/47605), [@brendandburns](https://github.com/brendandburns))
-
-### Other notable changes
-
-* Bump GLBC version to 0.9.5 - fixes [loss of manually modified GCLB health check settings](https://github.com/kubernetes/kubernetes/issues/47559) upon upgrade from pre-1.6.4 to either 1.6.4 or 1.6.5. ([#47567](https://github.com/kubernetes/kubernetes/pull/47567), [@nicksardo](https://github.com/nicksardo))
-
-
-
-# v1.6.5
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Known Issues for v1.6.5
-
-* If you use the [GLBC Ingress Controller](https://github.com/kubernetes/ingress/tree/master/controllers/gce),
- upgrading an existing pre-v1.6.4 cluster to Kubernetes v1.6.5 will cause an unintentional
- [overwrite of manual edits to GCP Health Checks](https://github.com/kubernetes/ingress/issues/842)
- managed by the GLBC Ingress Controller. This can cause the health checks to start failing,
- requiring you to reapply the manual edits.
- * This issue does not affect clusters that were already running Kubernetes v1.6.4 or higher.
- * This issue does not affect Health Checks that were left in the configuration
- [originally set by the GLBC Ingress Controller](https://github.com/kubernetes/ingress/tree/master/controllers/gce#health-checks).
-
-## Downloads for v1.6.5
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes.tar.gz) | `e497ddd9d0fb03a71babd6c7f879951ba8e2d791c9884613d60794f7df9a5a51`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-src.tar.gz) | `3971e41435f6e22914b603ea56bec72f78673fca9f5a5436a4beda7957dc24e1`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-client-darwin-386.tar.gz) | `af2290d1c3c923a6f873736739e0fc381328d19eb726419a17f2ae51e3ac2b45`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-client-darwin-amd64.tar.gz) | `8a138c2487871807bc8461a5bb0867d75cf9da228ecb6acdc5d22c08b2ed107d`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-client-linux-386.tar.gz) | `3f6867dd51e7838f58cf7e95174ef914d8d280ff275ac56cc8b285566ce30996`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-client-linux-amd64.tar.gz) | `8f38e71b1c68d69299af86ab4432297ae0d72cdee1d1e1c9975d77e448096c9c`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-client-linux-arm64.tar.gz) | `1d01ae4423eb9794d09202ff4f24207c9d62b32a1b8f4906801a66fcd70b8fa5`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-client-linux-arm.tar.gz) | `438a8b4388960fe48e87aa7e97954f1cf9f9cc5c957eee108c3cc8040786fdce`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-client-linux-ppc64le.tar.gz) | `3b64d6ce09ffb65d3fe8c4101309c3b39fdab3643d89f91e89445c8e3279884e`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-client-linux-s390x.tar.gz) | `f5fb3ddc6a6203ae68b0213624bbfa12b114a70a38e85151272273cbd8fd4fbd`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-client-windows-386.tar.gz) | `6ddc9b300746eefdc5d71aae193dea171115dab9db00010d416728d3f2035f19`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-client-windows-amd64.tar.gz) | `95854266bf64b84b59d1e6a3ca0501cf3c85fbd0258cb540893d5771aca74ace`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-server-linux-amd64.tar.gz) | `68809d34d3429685eaafedf398f690bba1bcc1f793cd2d8193559b90492c68b1`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-server-linux-arm64.tar.gz) | `96bf4da5cbaa8f7b0f8909276005e0766ca4fa30431396ba30b9e77be1abb7f0`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-server-linux-arm.tar.gz) | `2f9c5275a6a2b5b10416a3e76f64e996851f486eb6b2dbe0f106b81bb63e63a9`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-server-linux-ppc64le.tar.gz) | `f47bc83530dc7448879e7d11c2ba1613adc318fd6c1cbba76e5d7181d850667c`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-server-linux-s390x.tar.gz) | `ebbd82df12da7470299e9877185797def86b859a44e72486e7be995c01eae56c`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-node-linux-amd64.tar.gz) | `f842694701f8966cdfceca5f8f9d2b49bc84baf7446b67f7bf23b7581c245cc3`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-node-linux-arm64.tar.gz) | `4efc4c8d9df77ad66763ce5cc39650ea1ebd43dd4f789622c93b0aa872f7a186`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-node-linux-arm.tar.gz) | `6f4e2b764aec5c458e8bf28159190c0c725e20ab94cf9ced3279dc75caa3fe21`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-node-linux-ppc64le.tar.gz) | `ba0e8ea11050273dbdf7b6d179251a95021b85000523e539c4940312586fd716`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-node-linux-s390x.tar.gz) | `b6555e9a94a38e8bda502ec3eb951d4d854ebe8c44ba31320882a497703ab2bf`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.5/kubernetes-node-windows-amd64.tar.gz) | `0eaf3789c93996a45c74b30cc8a4d7169a639b7cf3fcf589ec387a0cfd0782d8`
-
-## Changelog since v1.6.4
-
-### Other notable changes
-
-* Fix iSCSI iSER mounting. ([#47281](https://github.com/kubernetes/kubernetes/pull/47281), [@mtanino](https://github.com/mtanino))
-* Added exponential backoff to Azure cloudprovider ([#46660](https://github.com/kubernetes/kubernetes/pull/46660), [@jackfrancis](https://github.com/jackfrancis))
-* Update kube-dns to 1.14.2. ([#45684](https://github.com/kubernetes/kubernetes/pull/45684), [@bowei](https://github.com/bowei))
-* Fix log spam due to unnecessary status update when node is deleted. ([#45923](https://github.com/kubernetes/kubernetes/pull/45923), [@verult](https://github.com/verult))
-* Poll all active pods periodically for volumes to fix out of order pod & node addition events. Fixes volumes not getting detached after controller restart. ([#42033](https://github.com/kubernetes/kubernetes/pull/42033), [@NickrenREN](https://github.com/NickrenREN))
-* iscsi storage plugin: Fix dangling session when using multiple target portal addresses. ([#46239](https://github.com/kubernetes/kubernetes/pull/46239), [@mtanino](https://github.com/mtanino))
-* The namespace API object no longer supports the deletecollection operation, which was previously allowed by mistake and did not respect expected namespace lifecycle semantics. ([#47098](https://github.com/kubernetes/kubernetes/pull/47098), [@liggitt](https://github.com/liggitt))
-* Azure: Fix support for multiple `loadBalancerSourceRanges`, and add support for UDP ports and the Service spec's `sessionAffinity`. ([#45523](https://github.com/kubernetes/kubernetes/pull/45523), [@colemickens](https://github.com/colemickens))
-* Fix the bug where container cannot run as root when SecurityContext.RunAsNonRoot is false. ([#47009](https://github.com/kubernetes/kubernetes/pull/47009), [@yujuhong](https://github.com/yujuhong))
-* Remove broken getvolumename and pass PV or volume name to attach call ([#46249](https://github.com/kubernetes/kubernetes/pull/46249), [@chakri-nelluri](https://github.com/chakri-nelluri))
-* Portworx volume driver no longer has to run on the master. ([#45518](https://github.com/kubernetes/kubernetes/pull/45518), [@harsh-px](https://github.com/harsh-px))
-* Upgrade golang version to 1.7.6 ([#46405](https://github.com/kubernetes/kubernetes/pull/46405), [@cblecker](https://github.com/cblecker))
-* kube-proxy handling of services with no endpoints now applies to both INPUT and OUTPUT chains, preventing socket leak. ([#43972](https://github.com/kubernetes/kubernetes/pull/43972), [@thockin](https://github.com/thockin))
-* Fix kube-apiserver crash when patching TPR data ([#44612](https://github.com/kubernetes/kubernetes/pull/44612), [@nikhita](https://github.com/nikhita))
-* vSphere cloud provider: Report same Node IP as both internal and external. ([#45201](https://github.com/kubernetes/kubernetes/pull/45201), [@abrarshivani](https://github.com/abrarshivani))
-* Kubelet: Fix image garbage collector attempting to remove in-use images. ([#46121](https://github.com/kubernetes/kubernetes/pull/46121), [@Random-Liu](https://github.com/Random-Liu))
-* Add metrics exporter to the fluentd-gcp deployment ([#45096](https://github.com/kubernetes/kubernetes/pull/45096), [@crassirostris](https://github.com/crassirostris))
-* Fix the bug where StartedAt time is not reported for exited containers. ([#45977](https://github.com/kubernetes/kubernetes/pull/45977), [@yujuhong](https://github.com/yujuhong))
-* Enable basic auth username rotation for GCI ([#44590](https://github.com/kubernetes/kubernetes/pull/44590), [@ihmccreery](https://github.com/ihmccreery))
-* vSphere cloud provider: Filter out IPV6 node addresses. ([#45181](https://github.com/kubernetes/kubernetes/pull/45181), [@BaluDontu](https://github.com/BaluDontu))
-* vSphere cloud provider: Fix volume detach on node failure. ([#45569](https://github.com/kubernetes/kubernetes/pull/45569), [@divyenpatel](https://github.com/divyenpatel))
-* Job controller: Retry with rate-limiting if a Pod create/delete operation fails. ([#45870](https://github.com/kubernetes/kubernetes/pull/45870), [@tacy](https://github.com/tacy))
-* Ensure that autoscaling/v1 is the preferred version for API discovery when autoscaling/v2alpha1 is enabled. ([#45741](https://github.com/kubernetes/kubernetes/pull/45741), [@DirectXMan12](https://github.com/DirectXMan12))
-* Add support for Azure internal load balancer. ([#45690](https://github.com/kubernetes/kubernetes/pull/45690), [@jdumars](https://github.com/jdumars))
-* Fix `kubectl delete --cascade=false` for resources that don't have legacy overrides to orphan by default. ([#45713](https://github.com/kubernetes/kubernetes/pull/45713), [@kargakis](https://github.com/kargakis))
-* Fix erroneous FailedSync and FailedMount events being periodically and indefinitely posted on Pods after kubelet is restarted ([#44781](https://github.com/kubernetes/kubernetes/pull/44781), [@wongma7](https://github.com/wongma7))
-* fluentd will tolerate all NoExecute Taints when run in gcp configuration. ([#45715](https://github.com/kubernetes/kubernetes/pull/45715), [@gmarek](https://github.com/gmarek))
-* Fix [Deployments with Recreate strategy not waiting for Pod termination](https://github.com/kubernetes/kubernetes/issues/27362). ([#45639](https://github.com/kubernetes/kubernetes/pull/45639), [@ChipmunkV](https://github.com/ChipmunkV))
-* vSphere cloud provider: Remove the dependency of login information on worker nodes for vsphere cloud provider. ([#43545](https://github.com/kubernetes/kubernetes/pull/43545), [@luomiao](https://github.com/luomiao))
-* vSphere cloud provider: Fix fetching of VM UUID on Ubuntu 16.04 and Fedora. ([#45311](https://github.com/kubernetes/kubernetes/pull/45311), [@divyenpatel](https://github.com/divyenpatel))
-
-
-
-# v1.6.4
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6.3/examples)
-
-## Known Issues for v1.6.4
-
-* If you use the [GLBC Ingress Controller](https://github.com/kubernetes/ingress/tree/master/controllers/gce),
- upgrading an existing cluster to Kubernetes v1.6.4 will cause an unintentional
- [overwrite of manual edits to GCP Health Checks](https://github.com/kubernetes/ingress/issues/842)
- managed by the GLBC Ingress Controller. This can cause the health checks to start failing,
- requiring you to reapply the manual edits.
- * This issue does not affect clusters that start out with Kubernetes v1.6.4 or higher.
- * This issue does not affect Health Checks that were left in the configuration
- [originally set by the GLBC Ingress Controller](https://github.com/kubernetes/ingress/tree/master/controllers/gce#health-checks).
-
-## Downloads for v1.6.4
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes.tar.gz) | `fef6a97be8195fee1108b40acbd7bea61ef5244b8be23e799d2d01ee365907dd`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-src.tar.gz) | `2915465e9b389c5af0fa660f6e7cbc36a416d1286094201e2a2da5b084a37cb3`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-client-darwin-386.tar.gz) | `e2db37a1cf3dff342e9ba25506c96edba0cbc9b65984dfe985a7ab45df64f93e`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-client-darwin-amd64.tar.gz) | `0d49df4b06f76b5a6e168f72ac0088194d4267cc888880f7d0f23e558cd0ee32`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-client-linux-386.tar.gz) | `5e218cc7f01d6fa71d0a10a30eea2724ee111db3bbae5a03f0c560cd0d24a5df`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-client-linux-amd64.tar.gz) | `4c8dbd03a66d871f03592e84ed98d205d2d0e0c0f6d48c7b60f3e9840ad04df8`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-client-linux-arm64.tar.gz) | `9bf29b0f8bdde972d62556bdd14622199f979f7dcf56d3948d429b1d73feca08`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-client-linux-arm.tar.gz) | `bbca1efe8fb95c6df7b330054776ce619652ba9d4c5428eabef9c435c61d1d9a`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-client-linux-ppc64le.tar.gz) | `7aa02e261f36a816dc1c7c898e16d732d9199d827ac4828f8e120b4a9ce5aa05`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-client-linux-s390x.tar.gz) | `531d00c43a49bb72365f2d6c1f31ad99ff09893e41f6b28d21980dbdd3ab0de4`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-client-windows-386.tar.gz) | `256fa2ffa77a1107e87a5a232bf8aa245afbcb5d383eda18f19f3fedbbad9a69`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-client-windows-amd64.tar.gz) | `c8a97087b81defdc513a9fe4aaf317d10ad6fc3368170465dd4ea64c23655939`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-server-linux-amd64.tar.gz) | `76a1d6dbce630b50fd3a5f566fcea6ef1a04996cf4f4c568338a3db0d3b6a3d5`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-server-linux-arm64.tar.gz) | `8b731307138a71ae90e025cb85ec7b4ac9179ebd8923f7abd1c839a2966ff2b0`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-server-linux-arm.tar.gz) | `0d3039f22cdc36526257f211c55099552b8d55cda25a05405f2701c869bb4be2`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-server-linux-ppc64le.tar.gz) | `6de3a85392ff65c019fd90173f1219a41f56559aebd07b18ed497e46645fcffc`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-server-linux-s390x.tar.gz) | `622a137c06a9fda23ec5941dd41607564804eeede0e6d3976cda6cc136e010c6`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-node-linux-amd64.tar.gz) | `df40c178ffbd92376e98dd258113e35c0a46a8313f188d34d391a834baeb1da8`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-node-linux-arm64.tar.gz) | `a27b15a0edcfd78470db54181ea2c2c942b5d4489b6f7a4ba78bb1fac34f8fa8`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-node-linux-arm.tar.gz) | `2b4dceee70ba7b508a0acc3cc5ce072d92f9c32c1a6961911b93a5da02ace9f7`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-node-linux-ppc64le.tar.gz) | `c5e01f9f7de6ae2d73004bbcd288f5c942414b6639099c1bf52a98e592147745`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-node-linux-s390x.tar.gz) | `eded4d2b94c9c22ae6c865e32a7965c1228d564aebf90c533607c716ed89b676`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.4/kubernetes-node-windows-amd64.tar.gz) | `da561264f5665fe1ae9a41999731403b147b91c3a5c47439eb828ed688b0738f`
-
-## Changelog since v1.6.3
-
-### Other notable changes
-
-* Fix kubelet panic during disk eviction introduced in 1.6.3. ([#46049](https://github.com/kubernetes/kubernetes/pull/46049), [@enisoc](https://github.com/enisoc))
-* Fix pods failing to start if they specify a file as a volume subPath to mount. ([#46046](https://github.com/kubernetes/kubernetes/pull/46046), [@enisoc](https://github.com/enisoc))
-
-
-
-# v1.6.3
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Known Issues for v1.6.3
-
-* This release introduced a regression when using [subPath](https://kubernetes.io/docs/concepts/storage/volumes/#using-subpath).
- If the `subPath` is a file rather than a directory, Pods may fail to start ([#45613](https://github.com/kubernetes/kubernetes/issues/45613)).
-
- **Do not upgrade to v1.6.3** if your cluster may run Pods with such subPaths.
-
-## Downloads for v1.6.3
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes.tar.gz) | `0af5914fcea36b3c65c8185f31e94b2839eaed52dfdd666d31dfa14534a7d69c`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-src.tar.gz) | `0d3cbc716b0d08bf3be779ddd096df965609b5bcb55c8b9ea084c6bb2d6ef1fd`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-client-darwin-386.tar.gz) | `2f2f58e8853eef7df293e579e8c94e1b6e75318b08bd1bf5747685ad8d16ebe2`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-client-darwin-amd64.tar.gz) | `122c20e2e92c1ed4a592c8a3851867452acff181ffe5251e8fee0ec8284704ac`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-client-linux-386.tar.gz) | `47c970bbe75a41634b9e5d0ae109a01f4823fdb83cf1c6c40a1ad4034b6d2764`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-client-linux-amd64.tar.gz) | `ae141e0cd011889c4468b5b8b841d8cd62c1802c4ccba4dfd8c42beaccaf7e75`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-client-linux-arm64.tar.gz) | `07a83a7f7df555e859f4f8e143274f9ed1f475d597f01d1c79e95cdfda289c94`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-client-linux-arm.tar.gz) | `4a0b89b4985e651a1c29590ae2ea16ea00203d7cbad7ffc8a541b8a13569e1be`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-client-linux-ppc64le.tar.gz) | `1c0116942a61580da717845c9b7fc69aa58438aaa176888cd3e57267c9c717c0`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-client-linux-s390x.tar.gz) | `94307d778e0819dc5a64e12d794e95a028207d06603204d82610f369e040ce67`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-client-windows-386.tar.gz) | `322d2db5dadd4b388c785d1caf651bcc76c566afb6d19e84bdf6abcc40fa19d4`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-client-windows-amd64.tar.gz) | `9ef35675f7cd6acb81fa69ded37174e9a55cc0f58a2f8159bfc5512230495763`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-server-linux-amd64.tar.gz) | `22eadeff9c3a45bf4d490ffca50bd257b6c282a3d16b5b8b40b8c31070a94de1`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-server-linux-arm64.tar.gz) | `2f9d976dd6d436a8258a5eb0c4a270329746f4331db607acc6b893f81f25e1c9`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-server-linux-arm.tar.gz) | `11f6a859438805250b84b415427df5f07d44a2a2ffb37591b6cdc6c8dc317382`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-server-linux-ppc64le.tar.gz) | `670fc921b50cca1c4fc20fbe58be640eeae766d38f6b2053b68c1a1293e88ba0`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-server-linux-s390x.tar.gz) | `c5f2358bf81ea34fc01dbe5b639f03a10b5799ad75f8465863bb5c2b797b4f0b`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-node-linux-amd64.tar.gz) | `428332868f42f77e02f337779a18a6332894b27f2432c5b804a8ff753895b883`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-node-linux-arm64.tar.gz) | `a8bdefd9c0ba9a247536a5a1bb7481b7a937cf39951256be774e45b8e40250cc`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-node-linux-arm.tar.gz) | `6b5aa71b27c0524b714489de80b2100e66bef99112f452aeaedcde1f890d2916`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-node-linux-ppc64le.tar.gz) | `34afa6e39ff8eb8a6f8f29874b6a3e5426fa6b64cc1b0f4466b17ae0f91f71ad`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-node-linux-s390x.tar.gz) | `170953b40e70242249c31e32456de73dacbed54e537efa4275d273441df98f7d`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.3/kubernetes-node-windows-amd64.tar.gz) | `410f175a47335b93f212cff5f3921a062ca6e945fa336d3cf0971f9bebba73e5`
-
-## Changelog since v1.6.2
-
-### Other notable changes
-
-* Bump GLBC version to 0.9.3 ([#45055](https://github.com/kubernetes/kubernetes/pull/45055), [@nicksardo](https://github.com/nicksardo))
-* kubeadm: Fix invalid assign statement so it is possible to register the master kubelet with other initial Taints ([#45376](https://github.com/kubernetes/kubernetes/pull/45376), [@luxas](https://github.com/luxas))
-* Fix a bug that caused invalid Tolerations to be applied to Pods created by DaemonSets. ([#45349](https://github.com/kubernetes/kubernetes/pull/45349), [@gmarek](https://github.com/gmarek))
-* Bump cluster autoscaler to v0.5.4, which fixes scale down issues with pods ignoring SIGTERM. ([#45483](https://github.com/kubernetes/kubernetes/pull/45483), [@mwielgus](https://github.com/mwielgus))
-* Fixes and minor cleanups to pod (anti)affinity predicate ([#45098](https://github.com/kubernetes/kubernetes/pull/45098), [@wojtek-t](https://github.com/wojtek-t))
-* StatefulSet: Fix to fully preserve restart and termination order when StatefulSet is rapidly scaled up and down. ([#45113](https://github.com/kubernetes/kubernetes/pull/45113), [@kow3ns](https://github.com/kow3ns))
-* Fix some false negatives in detection of meaningful conflicts during strategic merge patch with maps and lists. ([#43469](https://github.com/kubernetes/kubernetes/pull/43469), [@enisoc](https://github.com/enisoc))
-* cluster-autoscaler: Fix duplicate writing of logs. ([#45017](https://github.com/kubernetes/kubernetes/pull/45017), [@MaciekPytel](https://github.com/MaciekPytel))
-* Fixes a bug where pods were evicted even after images are successfully deleted. ([#44986](https://github.com/kubernetes/kubernetes/pull/44986), [@dashpole](https://github.com/dashpole))
-* CRI: respect container's stopping timeout. ([#44998](https://github.com/kubernetes/kubernetes/pull/44998), [@feiskyer](https://github.com/feiskyer))
-* Fix problems with scaling up the cluster when unschedulable pods have some persistent volume claims. ([#44860](https://github.com/kubernetes/kubernetes/pull/44860), [@mwielgus](https://github.com/mwielgus))
-* Exclude nodes labeled as master from LoadBalancer / NodePort; restores documented behaviour. ([#44745](https://github.com/kubernetes/kubernetes/pull/44745), [@justinsb](https://github.com/justinsb))
-* Fix for [scaling down remaining good replicas when a failed Deployment is paused](https://github.com/kubernetes/kubernetes/issues/44436). ([#44616](https://github.com/kubernetes/kubernetes/pull/44616), [@kargakis](https://github.com/kargakis))
-* kubectl commands run inside a pod using a kubeconfig file now use the namespace specified in the kubeconfig file, instead of using the pod namespace. If no kubeconfig file is used, or the kubeconfig does not specify a namespace, the pod namespace is still used as a fallback. ([#44570](https://github.com/kubernetes/kubernetes/pull/44570), [@liggitt](https://github.com/liggitt))
-* Restored the ability of kubectl running inside a pod to consume resource files specifying a different namespace than the one the pod is running in. ([#44862](https://github.com/kubernetes/kubernetes/pull/44862), [@liggitt](https://github.com/liggitt))
-* Fix false positive "meaningful conflict" detection for strategic merge patch with integer values. ([#44788](https://github.com/kubernetes/kubernetes/pull/44788), [@enisoc](https://github.com/enisoc))
-* Fix insufficient permissions to read/write volumes when mounting them with a subPath. ([#43775](https://github.com/kubernetes/kubernetes/pull/43775), [@wongma7](https://github.com/wongma7))
-* vSphere cloud provider: Allow specifying fstype in storage class. ([#41929](https://github.com/kubernetes/kubernetes/pull/41929), [@abrarshivani](https://github.com/abrarshivani))
-* vSphere cloud provider: Allow specifying VSAN Storage Capabilities during dynamic volume provisioning. ([#42974](https://github.com/kubernetes/kubernetes/pull/42974), [@BaluDontu](https://github.com/BaluDontu))
-
-
-
-# v1.6.2
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.2
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes.tar.gz) | `240f66a98bf75246b53ef7c1fa3a2be36a92cbc173bc8626e7bc4427bef9ce6a`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-src.tar.gz) | `dbf19a8f2e50b3e691eeba0c418fe057f1ea8527b8c0194ba9749c12c801b24b`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-client-darwin-386.tar.gz) | `3b1437cbc9d10e5466c83304c54ab06f5a880e0b047e2b0ea775530ee893b6b6`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-client-darwin-amd64.tar.gz) | `e3dad0848b3d6c1737199d0704c692e74bf979e6a81fabea79c5b2499ca3fa73`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-client-linux-386.tar.gz) | `962f576e67f13f8f8afc958f89f0371c7496b2540372ef7f8e1bd0e43a67e829`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-client-linux-amd64.tar.gz) | `f8ef17b8b4bb8f6974fa2b3faa992af3c39ad318c30bdfe1efab957361d8bdfe`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-client-linux-arm64.tar.gz) | `9582e6783e7effa10b0af2f662d1bc4471bbf8205d9df07a543edb099ba7f27c`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-client-linux-arm.tar.gz) | `165b642ba6900f7d779bc6a27f89ccdb09eefcbb310a8bc5f6d101db27e2e9cc`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-client-linux-ppc64le.tar.gz) | `514a308ccfb978111a74b5bf843cf6862464743f0f4e2aaffada33add4c2bb0f`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-client-linux-s390x.tar.gz) | `e030593109a369bc3288c9f47703843248dbe4a9ade496f936d8cc355a874ba6`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-client-windows-386.tar.gz) | `a2b0053de6b62d09123d8fcc1927a8cf9ab2a5a312794a858e7b423f4ffdbe3e`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-client-windows-amd64.tar.gz) | `eafdaa29a70d1820be0dc181074c5788127996402bbd5af53b0b765ed244e476`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-server-linux-amd64.tar.gz) | `016bc4db69a8f90495e82fbe6e5ec9a12e56ecab58a8eb2e5471bf9cab827ad2`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-server-linux-arm64.tar.gz) | `1985596d769656d68ec692030dd31bbec8081daf52ddaef6a2a7af7d6b1f7876`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-server-linux-arm.tar.gz) | `e0d4c53c55de5c100973379005aabe1441004ed4213b96a6e492c88d5a9b7f49`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-server-linux-ppc64le.tar.gz) | `652a8230c4511bc30d8f3a6ae11ebeee8c6d350648d879f8f2e1aa34777323d0`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.2/kubernetes-server-linux-s390x.tar.gz) | `1eab2d36beecf4f74e3b7b74734a75faf43ed6428d312aebe2e940df4cceb5ed`
-
-## Changelog since v1.6.1
-
-### Other notable changes
-
-* Fix for [Windows kubectl sending full path to binary in User Agent](https://github.com/kubernetes/kubernetes/issues/44419). ([#44622](https://github.com/kubernetes/kubernetes/pull/44622), [@monopole](https://github.com/monopole))
-* kube-apiserver now drops unneeded path information if an older version of Windows kubectl sends it. ([#44421](https://github.com/kubernetes/kubernetes/pull/44421), [@mml](https://github.com/mml))
-* CRI: Fix kubelet failing to start when using rkt. ([#44569](https://github.com/kubernetes/kubernetes/pull/44569), [@yujuhong](https://github.com/yujuhong))
-* CRI: `kubectl logs -f` now stops following when container stops, as it did pre-CRI. ([#44406](https://github.com/kubernetes/kubernetes/pull/44406), [@Random-Liu](https://github.com/Random-Liu))
-* Azure cloudprovider: Reduce the polling delay for all azure clients to 5 seconds. This should speed up some operations at the cost of some additional quota. ([#43699](https://github.com/kubernetes/kubernetes/pull/43699), [@colemickens](https://github.com/colemickens))
-* kubeadm: clean up exited containers and network checkpoints ([#43836](https://github.com/kubernetes/kubernetes/pull/43836), [@yujuhong](https://github.com/yujuhong))
-* Fix corner-case with OnlyLocal Service healthchecks. ([#44313](https://github.com/kubernetes/kubernetes/pull/44313), [@thockin](https://github.com/thockin))
-* Fix for [disabling federation controllers through override args](https://github.com/kubernetes/kubernetes/issues/42761). ([#44341](https://github.com/kubernetes/kubernetes/pull/44341), [@irfanurrehman](https://github.com/irfanurrehman))
-* Fix for [federation failing to propagate cascading deletion](https://github.com/kubernetes/kubernetes/issues/44304). ([#44108](https://github.com/kubernetes/kubernetes/pull/44108), [@csbell](https://github.com/csbell))
-* Fix for [failure to delete federation controllers with finalizers](https://github.com/kubernetes/kubernetes/issues/43828). ([#44084](https://github.com/kubernetes/kubernetes/pull/44084), [@nikhiljindal](https://github.com/nikhiljindal))
-* Fix [transition between NotReady and Unreachable taints](https://github.com/kubernetes/kubernetes/issues/43444). ([#44042](https://github.com/kubernetes/kubernetes/pull/44042), [@gmarek](https://github.com/gmarek))
-* AWS cloud provider: fix support running the master with a different AWS account or even on a different cloud provider than the nodes. ([#44235](https://github.com/kubernetes/kubernetes/pull/44235), [@mrIncompetent](https://github.com/mrIncompetent))
-* kubeadm: Make `kubeadm reset` tolerant of a disabled docker service. ([#43951](https://github.com/kubernetes/kubernetes/pull/43951), [@luxas](https://github.com/luxas))
-* Fix [broken service accounts when using dedicated service account key](https://github.com/kubernetes/kubernetes/issues/44285). ([#44169](https://github.com/kubernetes/kubernetes/pull/44169), [@mikedanese](https://github.com/mikedanese))
-* Fix for kube-proxy healthcheck handling an update that simultaneously removes one port and adds another. ([#44246](https://github.com/kubernetes/kubernetes/pull/44246), [@thockin](https://github.com/thockin))
-* Fix container hostPid settings when CRI is enabled. ([#44116](https://github.com/kubernetes/kubernetes/pull/44116), [@feiskyer](https://github.com/feiskyer))
-* RBAC role and rolebinding auto-reconciliation is now performed only when the RBAC authorization mode is enabled. ([#43813](https://github.com/kubernetes/kubernetes/pull/43813), [@liggitt](https://github.com/liggitt))
-* Fix incorrect conflict errors applying strategic merge patches to resources. ([#43871](https://github.com/kubernetes/kubernetes/pull/43871), [@liggitt](https://github.com/liggitt))
-* Fixed an issue mounting the wrong secret into pods as a service account token. ([#44102](https://github.com/kubernetes/kubernetes/pull/44102), [@ncdc](https://github.com/ncdc))
-* AWS cloud provider: allow to set KubernetesClusterID or KubernetesClusterTag in combination with VPC. ([#42512](https://github.com/kubernetes/kubernetes/pull/42512), [@scheeles](https://github.com/scheeles))
-* kubeadm: Remove hard-coded default version when fetching stable version from the web fails. Fixes [kubeadm 1.6.1 deploying 1.6.0 control plane](https://github.com/kubernetes/kubeadm/issues/224). ([#43999](https://github.com/kubernetes/kubernetes/pull/43999), [@mikedanese](https://github.com/mikedanese))
-* Fixed recognition of default storage class in DefaultStorageClass admission plugin. ([#43945](https://github.com/kubernetes/kubernetes/pull/43945), [@mikkeloscar](https://github.com/mikkeloscar))
-* Fix [Kubelet panic when Docker is not running](https://github.com/kubernetes/kubernetes/issues/44027). ([#44047](https://github.com/kubernetes/kubernetes/pull/44047), [@yujuhong](https://github.com/yujuhong))
-* Fix [vSphere volumes in SELinux environment](https://github.com/kubernetes/kubernetes/issues/42972). ([#42973](https://github.com/kubernetes/kubernetes/pull/42973), [@gnufied](https://github.com/gnufied))
-* Fix bug with error "Volume has no class annotation" when deleting a PersistentVolume. ([#43982](https://github.com/kubernetes/kubernetes/pull/43982), [@jsafrane](https://github.com/jsafrane))
-
-
-
-# v1.6.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes.tar.gz) | `f1634e22ee3fe8af5c355c3f53d1b93f946490addfab029e19acf5317c51cd38`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-src.tar.gz) | `b818f29661dd34db77d1e46c6ba98df6d35906dbc36ac1fdfe45f770b0f695c1`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-client-darwin-386.tar.gz) | `6eb7a0749de4c66d66630ac831f9a0aa73af9be856776c428d6adb3e07479d4a`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-client-darwin-amd64.tar.gz) | `05715224efdda0da3241960ec6cc71c2b008d3a53d217e5f90b159b5274db240`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-client-linux-386.tar.gz) | `7608a4754e48297dac8be9e863c429676f35afb97a9a10897e15038df6499a2e`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-client-linux-amd64.tar.gz) | `21e85cd3388b131fd1b63b06ea7ace8eef9555b7c558900b0cf1f9a3f2733e9a`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-client-linux-arm64.tar.gz) | `b798e4b440df52e35809310147f8678a1d9b822dce85212fcf382d19ec2bd8c3`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-client-linux-arm.tar.gz) | `3227e745db3986a6be9c16c8ffb4f40ce604a400c680e2e6ff92368e72a597c3`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-client-linux-ppc64le.tar.gz) | `ab7c9b2516d3cda8b4c236e00a179448e0787670cfd20c66dfb1b0c6c73ef0db`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-client-linux-s390x.tar.gz) | `9fbcb5f1b092573e5db5188689d7709a03b2bfdae635f61b5dbf72ae9dde2aaf`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-client-windows-386.tar.gz) | `306566c6903111769f01b0d05ba66aed63c133501adf49ef8daa38cc6a78097d`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-client-windows-amd64.tar.gz) | `5ca89e1672fd29a13a7cb997480216643e98afeba4d19ab081877281d0db8060`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-server-linux-amd64.tar.gz) | `3e5c7103f44f20a95db29243a43f04aca731c8a4d411c80592ea49f7550d875c`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-server-linux-arm64.tar.gz) | `3fad77963f993396786e1777aecb770572b8b06cc3fe985c688916a70ffee2fd`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-server-linux-arm.tar.gz) | `4b981751da6a0bf471e52e55b548d62c038f7e6d8ed628b8177389f24cfd0434`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-server-linux-ppc64le.tar.gz) | `7b4bdf49cc2510af81205f2a65653a577fc79623c76c7ed3c29c2fbe1d835773`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.1/kubernetes-server-linux-s390x.tar.gz) | `3c55f1322ca39b7acb4914dd174978b015c1124e1ddd5431ec14c97b1b45f69f`
-
-## Changelog since v1.6.0
-
-### Other notable changes
-
-* Fix a deadlock in kubeadm master initialization. ([#43835](https://github.com/kubernetes/kubernetes/pull/43835), [@mikedanese](https://github.com/mikedanese))
-* Use Cluster Autoscaler 0.5.1, which fixes an issue in Cluster Autoscaler 0.5 where the cluster may be scaled up unnecessarily. Also the status of Cluster Autoscaler is now exposed in kube-system/cluster-autoscaler-status config map. ([#43745](https://github.com/kubernetes/kubernetes/pull/43745), [@mwielgus](https://github.com/mwielgus))
-
-
-
-# v1.6.0
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.0
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes.tar.gz) | `e89318b88ea340e68c427d0aad701e544ce2291195dc1d5901222e7bae48f03b`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-src.tar.gz) | `0b03d27e1c7af3be5d94ecd5f679e5f55588d801376cf1ae170d9ec0a229b1e2`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-client-darwin-386.tar.gz) | `274277a67a85e9081d9fee5e763ed7c3dd096acf641c31a9ccc916a3981fead2`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-client-darwin-amd64.tar.gz) | `af8d1aa034721b31fd14f7b93f5ef16f8dbac4fdcd9e312c3c61e6cf03295057`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-client-linux-386.tar.gz) | `4c6a3c12f131c3c88612f888257d00a3cc7fef67947757b897b0d8be9fab547c`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-client-linux-amd64.tar.gz) | `4a5daf0459dffc24bf0ccbb2fc881f688008e91ae41fde961b81d09b0801004c`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-client-linux-arm64.tar.gz) | `91d5e31407140a55cf00c0dc6e20aa8433cc918615dedd842637585e81694ebd`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-client-linux-arm.tar.gz) | `985fecd7fb94b42c25b8a56efde1831b2616a6792d3d5a02549248e01ce524ed`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-client-linux-ppc64le.tar.gz) | `303279f935289cadfb97a6a5d3f58b0da67d1b88b5ed049e6a98fc203b7b9d52`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-client-linux-s390x.tar.gz) | `2bd216c6b7d4f09de02c3b5d20021124f7d04f483ab600b291c515386003ca74`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-client-windows-386.tar.gz) | `11d5459b0d413a25045c55ce3548d30616ddc2d62451280d3299baa9f3e3e014`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-client-windows-amd64.tar.gz) | `84eba6f2b2b82a95397688b1e2ca4deb8d7daf1f8a40919fa0312741ca253799`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-server-linux-amd64.tar.gz) | `3625b63d573aa4d28eaa30b291017f775f2ddc0523f40d25023ad1da9c30390e`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-server-linux-arm64.tar.gz) | `906496c985d4d836466b73e1c9e618ea8ce07f396aba3a96edcdc6045e0ab4e3`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-server-linux-arm.tar.gz) | `3b63f481156f57729bc8100566d8b3d7856791e5b36bb70042e17d21f11f8d5d`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-server-linux-ppc64le.tar.gz) | `382666b3892fd4d89be5e4bb052dd0ef0d1c1d213c1ae7a92435083a105064fd`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0/kubernetes-server-linux-s390x.tar.gz) | `e15de8896bd84a9b74756adc1a2e20c6912a65f6ff0a3f3dfabc8b463e31d19b`
-
-## WARNING: etcd backup strongly recommended
-
-Before updating to 1.6, you are strongly recommended to back up your etcd data.
-Please consult the installation procedure you are using (kargo, kops, kube-up,
-kube-aws, kubeadm etc) for specific advice.
-
-1.6 encourages etcd3, and switching from etcd2 to etcd3 involves a full
-migration of data between different storage engines. You must stop the API
-from writing to etcd during an etcd2 -> etcd3 migration. HA installations cannot
-be migrated at the current time using the official Kubernetes procedure.
-
-1.6 will also default to protobuf encoding if using etcd3. **This change is
-irreversible.** To rollback, you must restore from a backup made before the
-protobuf/etcd3 switch, and any changes since the backup will be lost. As 1.5
-does not support protobuf encoding, if you roll back to 1.5 after upgrading to
-protobuf you will be forced to restore from backup, and you will lose any changes
-since you converted to protobuf. After conversion to protobuf, you should
-validate the correct operation of your cluster thoroughly before returning it
-to normal operation.
-
-Backups are always a good precaution, particularly around upgrades, but this
-upgrade has multiple known issues where the only remedy is to restore from
-backup.
-
-Also, please note:
-- using `application/vnd.kubernetes.protobuf` as the media storage type for 1.6 is default but not required
-- the ability to rollback to etcd2 can be preserved by setting the storage media type flag on `kube-apiserver`
-
- ```
- --storage-media-type application/json
- ```
-
- to continue to use `application/json` as the storage media type which can be changed to
- `application/vnd.kubernetes.protobuf` at a later time.
-
-## Major updates and release themes
-
-* Kubernetes now supports up to 5,000 nodes via etcd v3, which is enabled by default.
-* [Role-based access control (RBAC)](https://kubernetes.io//docs/admin/authorization/rbac) has graduated to beta, and defines secure default roles for control plane, node, and controller components.
-* The [`kubeadm` cluster bootstrap tool](https://kubernetes.io/docs/getting-started-guides/kubeadm/) has graduated to beta. Some highlights:
- * **WARNING:** A [known issue](https://github.com/kubernetes/kubernetes/issues/43815)
- in v1.6.0 causes `kubeadm init` to hang. Please use v1.6.1, which fixes the issue.
- * All communication is now over TLS
- * Authorization plugins can be installed by kubeadm, including the new default of RBAC
- * The bootstrap token system now allows token management and expiration
-* The [`kubefed` federation bootstrap tool](https://kubernetes.io/docs/tutorials/federation/set-up-cluster-federation-kubefed/) has also graduated to beta.
-* Interaction with container runtimes is now through the CRI interface, enabling easier integration of runtimes with the kubelet. Docker remains the default runtime via Docker-CRI (which moves to beta).
- * **WARNING:** A [known issue](https://github.com/kubernetes/kubernetes/issues/44041)
- in v1.6.0 causes `Pod.Spec.HostPid` (using the host PID namespace for the pod) to always
- be false. Please wait for v1.6.2, which will include a fix for this issue.
-* Various scheduling features have graduated to beta:
- * You can now use [multiple schedulers](https://kubernetes.io/docs/tutorials/clusters/multiple-schedulers/)
- * [Nodes](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#node-affinity-beta-feature) and [pods](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#inter-pod-affinity-and-anti-affinity-beta-feature) now support affinity and anti-affinity
- * Advanced scheduling can be performed with [taints and tolerations](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#taints-and-tolerations-beta-feature)
-* You can now specify (per pod) how long a pod should stay bound to a node, when there is a node problem.
-* Various storage features have graduated to GA:
- * StorageClass pre-installed and set as default on Azure, AWS, GCE, OpenStack, and vSphere
- * Configurable [Dynamic Provisioning](https://kubernetes.io/docs/concepts/storage/persistent-volumes/#dynamic) and [StorageClass](https://kubernetes.io/docs/concepts/storage/persistent-volumes/#storageclasses)
-* DaemonSets [can now be updated by a rolling update](https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set).
-
-## Action Required
-
-### Certificates API
-* Users of the alpha certificates API should delete v1alpha1 CSRs from the API before upgrading and recreate them as v1beta1 CSR after upgrading. ([#39772](https://github.com/kubernetes/kubernetes/pull/39772), [@mikedanese](https://github.com/mikedanese))
-
-### Cluster Autoscaler
-* If you are using (or planning to use) Cluster Autoscaler please wait for Kubernetes 1.6.1. In 1.6.0 Cluster Autoscaler
-may occasionally increase the size of the cluster a bit more than it is actually needed, when there are
-unschedulable pods, scale up is required and cloud provider is slow to set up networking for new nodes.
-Anyway, the cluster should get back to the proper size after 10 min.
-
-### Deployment
-* Deployment now fully respects ControllerRef to avoid fighting over Pods and ReplicaSets. At the time of upgrade, **you must not have Deployments with selectors that overlap**, or else [ownership of ReplicaSets may change](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/controller-ref.md#upgrading). ([#42175](https://github.com/kubernetes/kubernetes/pull/42175), [@enisoc](https://github.com/enisoc))
-
-### Federation
-* The --dns-provider argument of 'kubefed init' is now mandatory and does not default to `google-clouddns`. To initialize a Federation control plane with Google Cloud DNS, use the following invocation: 'kubefed init --dns-provider=google-clouddns' ([#42092](https://github.com/kubernetes/kubernetes/pull/42092), [@marun](https://github.com/marun))
-* Cluster federation servers have changed the location in etcd where federated services are stored, so existing federated services must be deleted and recreated. Before upgrading, export all federated services from the federation server and delete the services. After upgrading the cluster, recreate the federated services from the exported data. ([#37770](https://github.com/kubernetes/kubernetes/pull/37770), [@enj](https://github.com/enj))
-
-### Internal Storage Layer
-* upgrade to etcd3 prior to upgrading to 1.6 **OR** explicitly specify `--storage-backend=etcd2 --storage-media-type=application/json` when starting the apiserver
-
-### Node Components
-* **Kubelet with the Docker-CRI implementation**
- * The Docker-CRI implementation is enabled by default.
- * It is not compatible with containers created by older Kubelets. It is
- recommended to drain your node before upgrade. If you choose to perform
- an in-place upgrade, the Kubelet will automatically restart all
- Kubernetes-managed containers on the node.
- * It is not compatible with CNI plugins that do not conform to the
- [error handling behavior in the spec](https://github.com/containernetworking/cni/blob/master/SPEC.md#network-configuration-list-error-handling).
- The plugins are being updated to resolve this issue ([#43488](https://github.com/kubernetes/kubernetes/issues/43488)).
- You can disable CRI explicitly (`--enable-cri=false`) as a
- temporary workaround.
- * The standard `bridge` plugin have been validated to interoperate with
- the new CRI + CNI code path.
- * If you are using plugins other than `bridge`, make sure you have
- updated custom plugins to the latest version that is compatible.
-* **CNI plugins now affect node readiness**
- * Kubelet will now block node readiness until a CNI configuration file is
- present in `/etc/cni/net.d` or a given custom CNI configuration path.
- [This change](https://github.com/kubernetes/kubernetes/pull/43474) ensures
- kubelet does not start pods that require networking before
- [networking is ready](https://github.com/kubernetes/kubernetes/issues/43014).
- This change may require changes to clients that gate pod creation and/or
- scheduling on the node condition `type` `Ready` `status` being `True` for pods
- that need to run prior to the network being ready.
-* **Enhance Kubelet QoS**:
- * Pods are placed under a new cgroup hierarchy by default. This feature requires
- draining and restarting the node as part of upgrades. To opt-out set
- `--cgroups-per-qos=false`.
- * If `kube-reserved` and/or `system-reserved` are specified, node allocatable
- will be enforced on all pods by default. To opt-out set
- `--enforce-node-allocatable=””`
- * Hard Eviction Thresholds will be subtracted from Capacity while calculating
- Node Allocatable. This will result in a reduction of schedulable capacity in
- clusters post upgrade where kubelet hard eviction has been turned on for
- memory. To opt-out set `--experimental-allocatable-ignore-eviction=true`.
- * More details on these feature here:
- https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/
-* Drop the support for docker 1.9.x. Docker versions 1.10.3, 1.11.2, 1.12.6
- have been validated.
-* The following deprecated kubelet flags are removed: `--config`, `--auth-path`,
- `--resource-container`, `--system-container`, `--reconcile-cidr`
-* Remove the temporary fix for pre-1.0 mirror pods. Upgrade directly from
- pre-1.0 to 1.6 kubelet is not supported.
-* Fluentd was migrated to Daemon Set, which targets nodes with
- beta.kubernetes.io/fluentd-ds-ready=true label. If you use fluentd in your
- cluster please make sure that the nodes with version 1.6+ contains this
- label.
-
-### kubectl
-* Running `kubectl taint` (alpha in 1.5) against a 1.6 server requires upgrading kubectl to version 1.6
-* Running `kubectl taint` (alpha in 1.5) against a 1.5 server requires a kubectl version of 1.5
-* Running `kubectl create secret` no longer accepts passing multiple values to a single --from-literal flag using comma separation
- * Update command invocations to pass separate --from-literal flags for each value
-
-### RBAC
-* Default ClusterRole and ClusterRoleBinding objects are automatically updated at server start to add missing permissions and subjects (extra permissions and subjects are left in place). To prevent autoupdating a particular role or rolebinding, annotate it with `rbac.authorization.kubernetes.io/autoupdate=false`. ([#41155](https://github.com/kubernetes/kubernetes/pull/41155), [@liggitt](https://github.com/liggitt))
-* `v1beta1` RoleBinding/ClusterRoleBinding subjects changed `apiVersion` to `apiGroup` to fully-qualify a subject. ServiceAccount subjects default to an apiGroup of `""`, User and Group subjects default to an apiGroup of `"rbac.authorization.k8s.io"`. ([#41184](https://github.com/kubernetes/kubernetes/pull/41184), [@liggitt](https://github.com/liggitt))
-* To create or update an RBAC RoleBinding or ClusterRoleBinding object, a user must: ([#39383](https://github.com/kubernetes/kubernetes/pull/39383), [@liggitt](https://github.com/liggitt))
- * 1. Be authorized to make the create or update API request
- * 2. Be allowed to bind the referenced role, either by already having all of the permissions contained in the referenced role, or by having the "bind" permission on the referenced role.
-* The `--authorization-rbac-super-user` flag (alpha in 1.5) is deprecated; the `system:masters` group has privileged access ([#38121](https://github.com/kubernetes/kubernetes/pull/38121), [@deads2k](https://github.com/deads2k))
-* special handling of the user `*` in RoleBinding and ClusterRoleBinding objects is removed in v1beta1. To match all users, explicitly bind to the group `system:authenticated` and/or `system:unauthenticated`. Existing v1alpha1 bindings to the user `*` are automatically converted to the group `system:authenticated`. ([#38981](https://github.com/kubernetes/kubernetes/pull/38981), [@liggitt](https://github.com/liggitt))
-
-### Scheduling
-* **Multiple schedulers**
- * Modify your PodSpecs that currently use the `scheduler.alpha.kubernetes.io/name` annotation on Pod, to instead use the `schedulerName` field in the PodSpec.
- * Modify any custom scheduler(s) you have written so that they read the `schedulerName` field on Pod instead of the `scheduler.alpha.kubernetes.io/name` annotation.
- * Note that you can only start using the `schedulerName` field **after** you upgrade to 1.6; it is not recognized in 1.5.
-
-* **Node affinity/anti-affinity and pod affinity/anti-affinity**
- * You can continue to use the alpha version of this feature (with one caveat -- see below), in which you specify affinity requests using Pod annotations, in 1.6 by including `AffinityInAnnotations=true` in `--feature-gates`, such as `--feature-gates=FooBar=true,AffinityInAnnotations=true`. Otherwise, you must modify your PodSpecs that currently use the `scheduler.alpha.kubernetes.io/affinity` annotation on Pod, to instead use the `affinity` field in the PodSpec. Support for the annotation will be removed in a future release, so we encourage you to switch to using the field as soon as possible.
- * Caveat: The alpha version no longer supports, and the beta version does not support, the "empty `podAffinityTerm.namespaces` list means all namespaces" behavior. In both alpha and beta it now means "same namespace as the pod specifying this affinity rule."
- * Note that you can only start using the `affinity` field **after** you upgrade to 1.6; it is not recognized in 1.5.
- * The `--failure-domains` scheduler command line-argument is not supported in the beta version of the feature.
-
-* **Taints**
- * You will need to use `kubectl taint` to re-create all of your taints after kubectl and the master are upgraded to 1.6. Between the time the master is upgraded to 1.6 and when you do this, your existing taints will have no effect.
- * You can find out what taints you have in place on a node while you are still running Kubernetes 1.5 by doing `kubectl describe node `; the `Taints` section will show the taints you have in place. To see the taints that were created under 1.5 when you are running 1.6, do `kubectl get node -o yaml` and look for the "Annotation" section with the annotation key `scheduler.alpha.kubernetes.io/taints`
- * You can remove the "old" taints (stored internally as annotations) at any time after the upgrade by doing `kubectl annotate nodes scheduler.alpha.kubernetes.io/taints-` (note the minus at the end, which means "delete the taint with this key")
- * Note that because any taints you might have created with Kubernetes 1.5 can only affect the scheduling of new pods (the `NoExecute` taint effect is introduced in 1.6), neither the master upgrade nor your running `kubectl taint` to re-create the taints will affect pods that are already running.
- * Rescheduler relies on taints, which were changed in a backward incompatible way. Rescheduler 0.3 shipped together with Kubernetes 1.6 understands the new taints and will clean up the old annotations, but Rescheduler 0.2 shipped together with Kubernetes 1.5 doesn't understand the new taints. In order to avoid eviction loop during 1.5->1.6 upgrade you need to either upgrade the master node atomically (for example by using `upgrade.sh` script for GCE) or ensure that the rescheduler is upgraded first, then the scheduler and then all the other master components.
-
-* **Tolerations**
- * After your master is upgraded to 1.6, you will need to update your PodSpecs to set the `tolerations` field of the PodSpec and remove the `scheduler.alpha.kubernetes.io/tolerations` annotation on the Pod. (It's not strictly necessary to remove the annotation, as it will have no effect once you upgrade to 1.6.) Between the time the master is upgraded to 1.6 and when you do this, tolerations attached to Pods that are created will have no effect. Pods that are already running will not be affected by the upgrade.
- * You can find the PodSpec tolerations that were created as annotations (if any) in a controller definition by doing `kubectl get -o yaml` and looking for the "Annotation" section with the annotation key `scheduler.alpha.kubernetes.io/tolerations` (This will work whether you are running Kubernetes 1.5 or 1.6).
- * To update a controller's PodSpec to use the field instead of the annotation, use one of the kubectl commands that do update ("kubectl replace" or "kubectl apply" or "kubectl patch") or just delete the controller entirely and re-create it with a new pod template. Note that you will be able to do these things only after the upgrade.
-
-### Service
-* The 'endpoints.beta.kubernetes.io/hostnames-map' annotation is no longer supported. Users can use the 'Endpoints.subsets[].addresses[].hostname' field instead. ([#39284](https://github.com/kubernetes/kubernetes/pull/39284), [@bowei](https://github.com/bowei))
-
-### StatefulSet
-* StatefulSet now respects ControllerRef to avoid fighting over Pods. At the time of upgrade, **you must not have StatefulSets with selectors that overlap** with any other controllers (such as ReplicaSets), or else [ownership of Pods may change](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/controller-ref.md#upgrading). ([#42080](https://github.com/kubernetes/kubernetes/pull/42080), [@enisoc](https://github.com/enisoc))
-
-### Volumes
-* StorageClass pre-installed and set as default on Azure, AWS, GCE, OpenStack, and vSphere.
- * This is something to pay close attention to if you’ve been using Kubernetes for a while, because it changes the default behavior of PersistentVolumeClaim objects on these clouds.
- * Marking a StorageClass as default makes it so that even a PersistentVolumeClaim without a StorageClass specified will trigger dynamic provisioning (instead of binding to an existing pool of PVs).
- * If you depend on the old behavior of volumes binding to existing pool of PersistentVolume objects then modify the StorageClass object and set `storageclass.beta.kubernetes.io/is-default-class` to `false`.
-* Flex volume plugin is updated to support attach/detach interfaces. It broke backward compatibility. Please update your drivers and implement the new callouts. ([#41804](https://github.com/kubernetes/kubernetes/pull/41804), [@chakri-nelluri](https://github.com/chakri-nelluri))
-
-## Notable Features
-Features for this release were tracked via the use of the [kubernetes/features](https://github.com/kubernetes/features) issues repo. Each Feature issue is owned by a Special Interest Group from the [kubernetes/community](https://github.com/kubernetes/community/blob/master/sig-list.md).
-
-### Autoscaling
-* **[alpha]** The Horizontal Pod Autoscaler now supports drawing metrics through the API server aggregator.
-* **[alpha]** The Horizontal Pod Autoscaler now supports scaling on multiple, custom metrics.
-* Cluster Autoscaler publishes its status to kube-system/cluster-autoscaler-status ConfigMap.
-* Cluster Autoscaler can continue operations while some nodes are broken or unready.
-* Cluster Autoscaler respects Pod Disruption Budgets when removing a node.
-
-### DaemonSet
-* **[beta]** Introduce the rolling update feature for DaemonSet. See [Performing a Rolling Update on a DaemonSet](https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set/).
-
-### Deployment
-* **[beta]** Deployments that cannot make progress in rolling out the newest version will now indicate via the API they are blocked ([docs](https://kubernetes.io/docs/user-guide/deployments/#deployment-status))
-
-### Federation
-* **[beta]** `kubefed` has graduated to beta: supports hosting federation on on-prem clusters, automatically configures `kube-dns` in joining clusters and allows passing arguments to federation components.
-
-### Internal Storage Layer
-* **[stable]** The internal storage layer for kubernetes cluster state has been updated to use etcd v3 by default. Existing clusters will have to plan for a data migration window. ([docs](https://kubernetes.io/docs/tasks/administer-cluster/upgrade-1-6/))([kubernetes/features#44](https://github.com/kubernetes/features/issues/44))
-
-### kubeadm
-* **[beta]** Introduces an API for clients to request TLS certificates from the API server. See the [tutorial](https://kubernetes.io/docs/tasks/tls/managing-tls-in-a-cluster).
-* **[beta]** kubeadm is enhanced and improved with a baseline feature set and command line flags that are now marked as beta. Other parts of kubeadm, including subcommands under `kubeadm alpha`, are [still in alpha](https://kubernetes.io/docs/admin/kubeadm/). Using it is considered safe, although note that upgrades and HA are not yet supported. Please [try it out](https://kubernetes.io/docs/getting-started-guides/kubeadm/) and [give us feedback](https://kubernetes.io/docs/getting-started-guides/kubeadm/#feedback)!
-* **[alpha]** New Bootstrap Token authentication and management method. Works well with kubeadm. kubeadm now supports managing tokens, including time based expiration, after the cluster is launched. See [kubeadm reference docs](https://kubernetes.io/docs/admin/kubeadm/#manage-tokens) for details.
-* **[alpha]** Adds a new cloud-controller-manager binary that may be used for testing the new out-of-core cloudprovider flow.
-
-### Node Components
-* **[stable]** Init containers have graduated to GA and now appear as a field.
- The beta annotation value will still be respected and overrides the field
- value.
-* Kubelet Container Runtime Interface (CRI) support
- - **[beta]** The Docker-CRI implementation is enabled by default in kubelet.
- You can disable it by --enable-cri=false. See
- [notes on the new implementation](https://github.com/kubernetes/community/blob/master/contributors/devel/container-runtime-interface.md#kubernetes-v16-release-docker-cri-integration-beta)
- for more details.
- - **[alpha]** Alpha support for other runtimes:
- [cri-o](https://github.com/kubernetes-incubator/cri-o/releases/tag/v0.1), [frakti](https://github.com/kubernetes/frakti/releases/tag/v0.1), [rkt](https://github.com/coreos/rkt/issues?q=is%3Aopen+is%3Aissue+label%3Aarea%2Fcri).
-* **[beta]** Node Problem Detector is beta (v0.3.0) now. New
- features added into node-problem-detector:v0.3.0:
- - Add support for journald.
- - The ability to monitor any system daemon logs. Previously only kernel
- logs were supported.
- - The ability to be deployed and run as a native daemon.
-* **[alpha]** Critical Pods: When feature gate "ExperimentalCriticalPodAnnotation" is
- set to true, the system will guarantee scheduling and admission of pods with
- the following annotation - `scheduler.alpha.kubernetes.io/critical-pod`
- - This feature should be used in conjunction with the
- [rescheduler](https://kubernetes.io/docs/admin/rescheduler/) to guarantee
- resource availability for critical system pods.
-* **[alpha]** `--experimental-nvidia-gpus` flag is replaced by `Accelerators` alpha
- feature gate along with addition of support for multiple Nvidia GPUs.
- - To use GPUs, pass `Accelerators=true` as part of `--feature-gates` flag.
- - More information [here](https://vishh.github.io/docs/user-guide/gpus/).
-* A pod’s Quality of Service Class is now available in its Status.
-* Upgrade cAdvisor library to v0.25.0. Notable changes include,
- - Container filesystem usage tracking disabled for device mapper due to excessive
- IOPS.
- - Ignore `.mount` cgroups, fixing disappearing stats.
-* A new field `terminationMessagePolicy` has been added to containers that allows
- a user to request FallbackToLogsOnError, which will read from the container's
- logs to populate the termination message if the user does not write to the
- termination message log file. The termination message file is now properly
- readable for end users and has a maximum size (4k bytes) to prevent abuse.
- Each pod may have up to 12k bytes of termination messages before the contents
- of each will be truncated.
-* Do not delete pod objects until all its compute resource footprint has been
- reclaimed.
- - This feature prevents the node and scheduler from oversubscribing resources
- that are still being used by a pod in the process of being cleaned up.
- - This feature can result in increase of Pod Deletion latency especially if the
- pod has a large filesystem footprint.
-
-### RBAC
-* **[beta]** RBAC API is promoted to v1beta1 (rbac.authorization.k8s.io/v1beta1), and defines default roles for control plane, node, and controller components.
-* **[beta]** The Docker-CRI implementation is Beta and is enabled by default in kubelet. You can disable it by `--enable-cri=false`. See [notes on the new implementation]( https://github.com/kubernetes/community/blob/master/contributors/devel/container-runtime-interface.md#kubernetes-v16-release-docker-cri-integration-beta) for more details.
-
-### Scheduling
-- **[beta]** The [multiple schedulers](https://kubernetes.io/docs/tutorials/clusters/multiple-schedulers/). This feature allows you to run multiple schedulers in parallel, each responsible for different sets of pods. When using multiple schedulers, the scheduler name is now specified in a new-in-1.6 `schedulerName` field of the PodSpec rather than using the `scheduler.alpha.kubernetes.io/name` annotation on the Pod. When you upgrade to 1.6, the Kubernetes default scheduler will start using the `schedulerName` field of the PodSpec and will ignore the annotation.
-- **[beta]** [Node affinity/anti-affinity](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/) and **[beta]** [pod affinity/anti-affinity](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/). Node affinity/anti-affinity allow you to specify rules for restricting which node(s) a pod can schedule onto, based on the labels on the node. Pod affinity/anti-affinity allow you to specify rules for spreading and packing pods relative to one another, across arbitrary topologies (node, zone, etc.) These affinity rules are now be specified in a new-in-1.6 `affinity` field of the PodSpec. Kubernetes 1.6 continues to support the alpha `scheduler.alpha.kubernetes.io/affinity` annotation on the Pod if you explicitly enable the alpha feature "AffinityInAnnotations", but it will be removed in a future release. When you upgrade to 1.6, if you have not enabled the alpha feature, then the scheduler will use the `affinity` field in PodSpec and will ignore the annotation. If you have enabled the alpha feature, then the scheduler will use the `affinity` field in PodSpec if it is present, and otherwise will use the annotation.
-- **[beta]** [Taints and tolerations](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/). This feature allows you to specify rules for "repelling" pods from nodes by default, which enables use cases like dedicated nodes and reserving nodes with special features for pods that need those features. We've also added a `NoExecute` taint type that evicts already-running pods, and an associated `tolerationSeconds` field to tolerations to delay the eviction for a specified amount of time. As before, taints are created using `kubectl taint` (but internally they are now represented as a field `taints` in the NodeSpec rather than using the `scheduler.alpha.kubernetes.io/taints` annotation on Node). Tolerations are now specified in a new-in-1.6 `tolerations` field of the PodSpec rather than using the `scheduler.alpha.kubernetes.io/tolerations` annotation on the Pod. When you upgrade to 1.6, the scheduler will start using the fields and will ignore the annotations.
-- **[alpha]** Represent node problems "not ready" and "unreachable" using `NoExecute` taints. In combination with `tolerationSeconds` described below, this allows per-pod specification of how long to remain bound to a node that becomes unreachable or not ready, rather than using the default of 5 minutes. You can enable this alpha feature by including `TaintBasedEvictions=true` in `--feature-gates`, such as `--feature-gates=FooBar=true,TaintBasedEvictions=true`. Documentation is [here](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/).
-
-### Service Catalog
-- **[alpha]** Adds a new API resource `PodPreset` and admission controller to enable defining cross-cutting injection of Volumes and Environment into Pods.
-
-### Volumes
-* **[stable]** StorageClass API is promoted to v1 (storage.k8s.io/v1).
-* **[stable]** Default storage classes are deployed during installation on Azure, AWS, GCE, OpenStack and vSphere.
-* **[stable]** Added ability to populate environment variables from a configmap or secret.
-* **[stable]** Support for user-written/run dynamic PV provisioners. The Kubernetes Incubator contains [a golang library and examples](https://github.com/kubernetes-incubator/external-storage).
-* **[stable]** Volume plugin for ScaleIO enabling pods to seamlessly access and use data stored on Dell EMC ScaleIO volumes.
-* **[stable]** Volume plugin for Portworx added capability to use [Portworx](http://www.portworx.com) as a storage provider for Kubernetes clusters. Portworx pools server capacity and turns servers or cloud instances into converged, highly available compute and storage nodes.
-* **[stable]** Add support to use NFSv3, NFSv4, and GlusterFS on GCE/GKE GCI image based clusters.
-* **[beta]** Added support for mount options in persistent volumes.
-* **[alpha]** All in one volume proposal - a new volume driver capable of projecting secrets, configmaps, and downward API items into the same directory.
-
-## Deprecations
-* Remove extensions/v1beta1 Jobs resource, and job/v1beta1 generator. ([#38614](https://github.com/kubernetes/kubernetes/pull/38614), [@soltysh](https://github.com/soltysh))
-* `federation/deploy/deploy.sh` was an interim solution introduced in Kubernetes v1.4 to simplify the federation control plane deployment experience. Now that we have `kubefed`, we are deprecating `deploy.sh` scripts. ([#38902](https://github.com/kubernetes/kubernetes/pull/38902), [@madhusudancs](https://github.com/madhusudancs))
-
-
-### Cluster Provisioning Scripts
-* The bash AWS deployment via kube-up.sh has been deprecated. See http://kubernetes.io/docs/getting-started-guides/aws/ for alternatives. ([#38772](https://github.com/kubernetes/kubernetes/pull/38772), [@zmerlynn](https://github.com/zmerlynn))
-* Remove Azure kube-up as the Azure community has focused efforts elsewhere. ([#41672](https://github.com/kubernetes/kubernetes/pull/41672), [@mikedanese](https://github.com/mikedanese))
-* Remove the deprecated vsphere kube-up. ([#39140](https://github.com/kubernetes/kubernetes/pull/39140), [@kerneltime](https://github.com/kerneltime))
-
-### kubeadm
-* Quite a few flags been renamed or removed. Those options that are removed as flags can still be accessed via the config file. Most notably this includes external etcd settings and the option for setting the cloud provider on the API server. The [kubeadm reference documentation](https://kubernetes.io/docs/admin/kubeadm/) is up to date with the new flags.
-
-### Other Deprecations
-* Remove cmd/kube-discovery from the tree since it's not necessary anymore ([#42070](https://github.com/kubernetes/kubernetes/pull/42070), [@luxas](https://github.com/luxas))
-
-## Changes to API Resources
-### ABAC
-* ABAC policies using `"user":"*"` or `"group":"*"` to match all users or groups will only match authenticated requests. To match unauthenticated requests, ABAC policies must explicitly specify `"group":"system:unauthenticated"` ([#38968](https://github.com/kubernetes/kubernetes/pull/38968), [@liggitt](https://github.com/liggitt))
-
-### Admission Control
-* Adds a new API resource `PodPreset` and admission controller to enable defining cross-cutting injection of Volumes and Environment into Pods. ([#41931](https://github.com/kubernetes/kubernetes/pull/41931), [@jessfraz](https://github.com/jessfraz))
-* Enable DefaultTolerationSeconds admission controller by default ([#41815](https://github.com/kubernetes/kubernetes/pull/41815), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* ResourceQuota ability to support default limited resources ([#36765](https://github.com/kubernetes/kubernetes/pull/36765), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Add defaultTolerationSeconds admission controller ([#41414](https://github.com/kubernetes/kubernetes/pull/41414), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* An `automountServiceAccountToken` field was added to ServiceAccount and PodSpec objects. If set to `false` on a pod spec, no service account token is automounted in the pod. If set to `false` on a service account, no service account token is automounted for that service account unless explicitly overridden in the pod spec. ([#37953](https://github.com/kubernetes/kubernetes/pull/37953), [@liggitt](https://github.com/liggitt))
-* Admission control support for versioned configuration files ([#39109](https://github.com/kubernetes/kubernetes/pull/39109), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Ability to quota storage by storage class ([#34554](https://github.com/kubernetes/kubernetes/pull/34554), [@derekwaynecarr](https://github.com/derekwaynecarr))
-
-### Authentication
-* The authentication.k8s.io API group was promoted to v1([#41058](https://github.com/kubernetes/kubernetes/pull/41058), [@liggitt](https://github.com/liggitt))
-
-### Authorization
-* The authorization.k8s.io API group was promoted to v1 ([#40709](https://github.com/kubernetes/kubernetes/pull/40709), [@liggitt](https://github.com/liggitt))
-* The SubjectAccessReview API now passes subresource and resource name information to the authorizer to answer authorization queries. ([#40935](https://github.com/kubernetes/kubernetes/pull/40935), [@liggitt](https://github.com/liggitt))
-
-### Autoscaling
-* Introduces an new alpha version of the Horizontal Pod Autoscaler including expanded support for specifying metrics. ([#36033](https://github.com/kubernetes/kubernetes/pull/36033), [@DirectXMan12](https://github.com/DirectXMan12)
-* HorizontalPodAutoscaler is no longer supported in extensions/v1beta1 version. Use autoscaling/v1 instead. ([#35782](https://github.com/kubernetes/kubernetes/pull/35782), [@piosz](https://github.com/piosz))
-* Fixes an HPA-related panic due to division-by-zero. ([#39694](https://github.com/kubernetes/kubernetes/pull/39694), [@DirectXMan12](https://github.com/DirectXMan12))
-
-### Certificates
-* The CertificateSigningRequest API added the `extra` field to persist all information about the requesting user. This mirrors the fields in the SubjectAccessReview API used to check authorization. ([#41755](https://github.com/kubernetes/kubernetes/pull/41755), [@liggitt](https://github.com/liggitt))
-* Native support for token based bootstrap flow. This includes signing a well known ConfigMap in the `kube-public` namespace and cleaning out expired tokens. ([#36101](https://github.com/kubernetes/kubernetes/pull/36101), [@jbeda](https://github.com/jbeda))
-
-### ConfigMap
-* Volumes and environment variables populated from ConfigMap and Secret objects can now tolerate the named source object or specific keys being missing, by adding `optional: true` to the volume or environment variable source specifications. ([#39981](https://github.com/kubernetes/kubernetes/pull/39981), [@fraenkel](https://github.com/fraenkel))
-* Allow pods to define multiple environment variables from a whole ConfigMap ([#36245](https://github.com/kubernetes/kubernetes/pull/36245), [@fraenkel](https://github.com/fraenkel))
-
-### CronJob
-* Add configurable limits to CronJob resource to specify how many successful and failed jobs are preserved. ([#40932](https://github.com/kubernetes/kubernetes/pull/40932), [@peay](https://github.com/peay))
-
-### DaemonSet
-* DaemonSet now respects ControllerRef to avoid fighting over Pods. ([#42173](https://github.com/kubernetes/kubernetes/pull/42173), [@enisoc](https://github.com/enisoc))
-* Make DaemonSet respect critical pods annotation when scheduling. ([#42028](https://github.com/kubernetes/kubernetes/pull/42028), [@janetkuo](https://github.com/janetkuo))
-* Implement the update feature for DaemonSet. ([#41116](https://github.com/kubernetes/kubernetes/pull/41116), [@lukaszo](https://github.com/lukaszo))
-* Make DaemonSets survive taint-based evictions when nodes turn unreachable/notReady. ([#41896](https://github.com/kubernetes/kubernetes/pull/41896), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Make DaemonSet controller respect node taints and pod tolerations. ([#41172](https://github.com/kubernetes/kubernetes/pull/41172), [@janetkuo](https://github.com/janetkuo))
-* DaemonSet controller actively kills failed pods (to recreate them) ([#40330](https://github.com/kubernetes/kubernetes/pull/40330), [@janetkuo](https://github.com/janetkuo))
-* DaemonSet ObservedGeneration ([#39157](https://github.com/kubernetes/kubernetes/pull/39157), [@lukaszo](https://github.com/lukaszo))
-
-### Deployment
-* Add ready replicas in Deployments ([#37959](https://github.com/kubernetes/kubernetes/pull/37959), [@kargakis](https://github.com/kargakis))
-* Deployments that cannot make progress in rolling out the newest version will now indicate via the API they are blocked
-* Introduce apps/v1beta1.Deployments resource with modified defaults compared to extensions/v1beta1.Deployments. ([#39683](https://github.com/kubernetes/kubernetes/pull/39683), [@soltysh](https://github.com/soltysh))
-* Introduce new generator for apps/v1beta1 deployments ([#42362](https://github.com/kubernetes/kubernetes/pull/42362), [@soltysh](https://github.com/soltysh))
-
-### Node
-* Set all node conditions to Unknown when node is unreachable ([#36592](https://github.com/kubernetes/kubernetes/pull/36592), [@andrewsykim](https://github.com/andrewsykim))
-
-### Pod
-* Init containers have graduated to GA and now appear as a field. The beta annotation value will still be respected and overrides the field value. ([#38382](https://github.com/kubernetes/kubernetes/pull/38382), [@hodovska](https://github.com/hodovska))
-* A new field `terminationMessagePolicy` has been added to containers that allows a user to request `FallbackToLogsOnError`, which will read from the container's logs to populate the termination message if the user does not write to the termination message log file. The termination message file is now properly readable for end users and has a maximum size (4k bytes) to prevent abuse. Each pod may have up to 12k bytes of termination messages before the contents of each will be truncated. ([#39341](https://github.com/kubernetes/kubernetes/pull/39341), [@smarterclayton](https://github.com/smarterclayton))
-* Fix issue with PodDisruptionBudgets in which `minAvailable` specified as a percentage did not work with StatefulSet Pods. ([#39454](https://github.com/kubernetes/kubernetes/pull/39454), [@foxish](https://github.com/foxish))
-* Node affinity has moved from annotations to api fields in the pod spec. Node affinity that is defined in the annotations will be ignored. ([#37299](https://github.com/kubernetes/kubernetes/pull/37299), [@rrati](https://github.com/rrati))
-* Moved pod affinity and anti-affinity from annotations to api fields [#25319](https://github.com/kubernetes/kubernetes/pull/25319) ([#39478](https://github.com/kubernetes/kubernetes/pull/39478), [@rrati](https://github.com/rrati))
-* Add QoS pod status field ([#37968](https://github.com/kubernetes/kubernetes/pull/37968), [@sjenning](https://github.com/sjenning))
-### Pod Security Policy
-* PodSecurityPolicy resource is now enabled by default in the extensions API group. ([#39743](https://github.com/kubernetes/kubernetes/pull/39743), [@pweil-](https://github.com/pweil-))
-
-### RBAC
-* The `attributeRestrictions` field has been removed from the PolicyRule type in the rbac.authorization.k8s.io/v1alpha1 API. The field was not used by the RBAC authorizer. ([#39625](https://github.com/kubernetes/kubernetes/pull/39625), [@deads2k](https://github.com/deads2k))
-* A user can now be authorized to bind a particular role by having permission to perform the `bind` verb on the referenced role ([#39383](https://github.com/kubernetes/kubernetes/pull/39383), [@liggitt](https://github.com/liggitt))
-
-### ReplicaSet
-* ReplicaSet has onwer ref of the Deployment that created it ([#35676](https://github.com/kubernetes/kubernetes/pull/35676), [@krmayankk](https://github.com/krmayankk))
-
-### Secrets
-* Populate environment variables from a secrets. ([#39446](https://github.com/kubernetes/kubernetes/pull/39446), [@fraenkel](https://github.com/fraenkel))
-* Added a new secret type "bootstrap.kubernetes.io/token" for dynamically creating TLS bootstrapping bearer tokens. ([#41281](https://github.com/kubernetes/kubernetes/pull/41281), [@ericchiang](https://github.com/ericchiang))
-
-### Service
-* Endpoints, that tolerate unready Pods, are now listing Pods in state Terminating as well ([#37093](https://github.com/kubernetes/kubernetes/pull/37093), [@simonswine](https://github.com/simonswine))
-* Fix Service Update on LoadBalancerSourceRanges Field ([#37720](https://github.com/kubernetes/kubernetes/pull/37720), [@freehan](https://github.com/freehan))
-* Bug fix. Incoming UDP packets not reach newly deployed services ([#32561](https://github.com/kubernetes/kubernetes/pull/32561), [@zreigz](https://github.com/zreigz))
-* Services of type loadbalancer consume both loadbalancer and nodeport quota. ([#39364](https://github.com/kubernetes/kubernetes/pull/39364), [@zhouhaibing089](https://github.com/zhouhaibing089))
-
-### StatefulSet
-
-* Fix zone placement heuristics so that multiple mounts in a StatefulSet pod are created in the same zone ([#40910](https://github.com/kubernetes/kubernetes/pull/40910), [@justinsb](https://github.com/justinsb))
-* Fixes issue [#38418](https://github.com/kubernetes/kubernetes/pull/38418) which, under circumstance, could cause StatefulSet to deadlock. ([#40838](https://github.com/kubernetes/kubernetes/pull/40838), [@kow3ns](https://github.com/kow3ns))
- * Mediates issue [#36859](https://github.com/kubernetes/kubernetes/pull/36859). StatefulSet only acts on Pods whose identity matches the StatefulSet, providing a partial mediation for overlapping controllers.
-
-### Taints and Tolerations
-* Add a manager to NodeController that is responsible for removing Pods from Nodes tainted with NoExecute Taints. This feature is beta (as the rest of taints) and enabled by default. It's gated by controller-manager enable-taint-manager flag. ([#40355](https://github.com/kubernetes/kubernetes/pull/40355), [@gmarek](https://github.com/gmarek))
-* Add an alpha feature that makes NodeController set Taints instead of deleting Pods from not Ready Nodes. ([#41133](https://github.com/kubernetes/kubernetes/pull/41133), [@gmarek](https://github.com/gmarek))
-* Make tolerations respect wildcard key ([#39914](https://github.com/kubernetes/kubernetes/pull/39914), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Forgiveness alpha version api definition ([#39469](https://github.com/kubernetes/kubernetes/pull/39469), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Rescheduler uses taints in v1beta1 and will remove old ones (in version v1alpha1) right after its start. ([#43106](https://github.com/kubernetes/kubernetes/pull/43106), [@piosz](https://github.com/piosz))
-
-### Volumes
-* StorageClassName attribute has been added to PersistentVolume and PersistentVolumeClaim objects and should be used instead of annotation `volume.beta.kubernetes.io/storage-class`. The beta annotation is still working in this release, however it will be removed in a future release. ([#42128](https://github.com/kubernetes/kubernetes/pull/42128), [@jsafrane](https://github.com/jsafrane))
-* Parameter keys in a StorageClass `parameters` map may not use the `kubernetes.io` or `k8s.io` namespaces. ([#41837](https://github.com/kubernetes/kubernetes/pull/41837), [@liggitt](https://github.com/liggitt))
-* Add storage.k8s.io/v1 API ([#40088](https://github.com/kubernetes/kubernetes/pull/40088), [@jsafrane](https://github.com/jsafrane))
-* Alpha version of dynamic volume provisioning is removed in this release. Annotation ([#40000](https://github.com/kubernetes/kubernetes/pull/40000), [@jsafrane](https://github.com/jsafrane))
- * "volume.alpha.kubernetes.io/storage-class" does not have any special meaning. A default storage class
- * and DefaultStorageClass admission plugin can be used to preserve similar behavior of Kubernetes cluster,
- * see https://kubernetes.io/docs/user-guide/persistent-volumes/#class-1 for details.
-* Reduce verbosity of volume reconciler when attaching volumes ([#36900](https://github.com/kubernetes/kubernetes/pull/36900), [@codablock](https://github.com/codablock))
-* We change the default attach_detach_controller sync period to 1 minute to reduce the query frequency through cloud provider to check whether volumes are attached or not. ([#41363](https://github.com/kubernetes/kubernetes/pull/41363), [@jingxu97](https://github.com/jingxu97))
-
-## Changes to Major Components
-### API Server
-* **`--anonymous-auth` is enabled by default, unless the API server is started with the `AlwaysAllow` authorizer. ([#38706](https://github.com/kubernetes/kubernetes/pull/38706), [@deads2k](https://github.com/deads2k))**
-* **When using OIDC authentication and specifying --oidc-username-claim=email, an `"email_verified":true` claim must be returned from the identity provider. ([#36087](https://github.com/kubernetes/kubernetes/pull/36087), [@ericchiang](https://github.com/ericchiang))**
- * `--basic-auth-file` supports optionally specifying groups in the fourth column of the file ([#39651](https://github.com/kubernetes/kubernetes/pull/39651), [@liggitt](https://github.com/liggitt))
-* API server now has two separate limits for read-only and mutating inflight requests. ([#36064](https://github.com/kubernetes/kubernetes/pull/36064), [@gmarek](https://github.com/gmarek))
-* Restored normalization of custom `--etcd-prefix` when `--storage-backend` is set to etcd3 ([#42506](https://github.com/kubernetes/kubernetes/pull/42506), [@liggitt](https://github.com/liggitt))
-* Updating apiserver to return http status code 202 for a delete request when the resource is not immediately deleted because of user requesting cascading deletion using DeleteOptions.OrphanDependents=false. ([#41165](https://github.com/kubernetes/kubernetes/pull/41165), [@nikhiljindal](https://github.com/nikhiljindal))
-* Use full package path for definition name in OpenAPI spec ([#40124](https://github.com/kubernetes/kubernetes/pull/40124), [@mbohlool](https://github.com/mbohlool))
-* Follow redirects for streaming requests (exec/attach/port-forward) in the apiserver by default (alpha -> beta). ([#40039](https://github.com/kubernetes/kubernetes/pull/40039), [@timstclair](https://github.com/timstclair))
-* Add 'X-Content-Type-Options: nosniff" to some error messages ([#37190](https://github.com/kubernetes/kubernetes/pull/37190), [@brendandburns](https://github.com/brendandburns))
-* Fixes bug in resolving client-requested API versions ([#38533](https://github.com/kubernetes/kubernetes/pull/38533), [@DirectXMan12](https://github.com/DirectXMan12))
-* Replace glog.Fatals with fmt.Errorfs ([#38175](https://github.com/kubernetes/kubernetes/pull/38175), [@sttts](https://github.com/sttts))
-* Pipe get options to storage ([#37693](https://github.com/kubernetes/kubernetes/pull/37693), [@wojtek-t](https://github.com/wojtek-t))
-* The --long-running-request-regexp flag to kube-apiserver is deprecated and will be removed in a future release. Long-running requests are now detected based on specific verbs (watch, proxy) or subresources (proxy, portforward, log, exec, attach). ([#38119](https://github.com/kubernetes/kubernetes/pull/38119), [@liggitt](https://github.com/liggitt))
-* if kube-apiserver is started with `--storage-backend=etcd2`, the media type `application/json` is used. ([#43122](https://github.com/kubernetes/kubernetes/pull/43122), [@liggitt](https://github.com/liggitt))
-* API fields that previously serialized null arrays as `null` and empty arrays as `[]` no longer distinguish between those values and always output `[]` when serializing to JSON. ([#43422](https://github.com/kubernetes/kubernetes/pull/43422), [@liggitt](https://github.com/liggitt))
-* Generate OpenAPI definition for inlined types ([#39466](https://github.com/kubernetes/kubernetes/pull/39466), [@mbohlool](https://github.com/mbohlool))
-
-### API Server Aggregator
-* Rename kubernetes-discovery to kube-aggregator ([#39619](https://github.com/kubernetes/kubernetes/pull/39619), [@deads2k](https://github.com/deads2k))
-* Fix connection upgrades through kuberentes-discovery ([#38724](https://github.com/kubernetes/kubernetes/pull/38724), [@deads2k](https://github.com/deads2k))
-
-#### Generic API Server
-* Move pkg/api/rest into genericapiserver ([#39948](https://github.com/kubernetes/kubernetes/pull/39948), [@sttts](https://github.com/sttts))
-* Move non-generic apiserver code out of the generic packages ([#38191](https://github.com/kubernetes/kubernetes/pull/38191), [@sttts](https://github.com/sttts))
-* Fixes API compatibility issue with empty lists incorrectly returning a null `items` field instead of an empty array. ([#39834](https://github.com/kubernetes/kubernetes/pull/39834), [@liggitt](https://github.com/liggitt))
-* Re-add /healthz/ping handler in genericapiserver ([#38603](https://github.com/kubernetes/kubernetes/pull/38603), [@sttts](https://github.com/sttts))
-* Remove genericapiserver.Options.MasterServiceNamespace ([#38186](https://github.com/kubernetes/kubernetes/pull/38186), [@sttts](https://github.com/sttts))
-* genericapiserver: cut off more dependencies – episode 3 ([#40426](https://github.com/kubernetes/kubernetes/pull/40426), [@sttts](https://github.com/sttts))
-* genericapiserver: more dependency cutoffs ([#40216](https://github.com/kubernetes/kubernetes/pull/40216), [@sttts](https://github.com/sttts))
-* genericapiserver: cut off kube pkg/version dependency ([#39943](https://github.com/kubernetes/kubernetes/pull/39943), [@sttts](https://github.com/sttts))
-* genericapiserver: cut off pkg/serviceaccount dependency ([#39945](https://github.com/kubernetes/kubernetes/pull/39945), [@sttts](https://github.com/sttts))
-* genericapiserver: cut off pkg/apis/extensions and pkg/storage dependencies ([#39946](https://github.com/kubernetes/kubernetes/pull/39946), [@sttts](https://github.com/sttts))
-* genericapiserver: cut off certificates api dependency ([#39947](https://github.com/kubernetes/kubernetes/pull/39947), [@sttts](https://github.com/sttts))
-* genericapiserver: extract CA cert from server cert and SNI cert chains ([#39022](https://github.com/kubernetes/kubernetes/pull/39022), [@sttts](https://github.com/sttts))
-* genericapiserver: turn APIContainer.SecretRoutes into a real ServeMux ([#38826](https://github.com/kubernetes/kubernetes/pull/38826), [@sttts](https://github.com/sttts))
-* genericapiserver: unify swagger and openapi in config ([#38690](https://github.com/kubernetes/kubernetes/pull/38690), [@sttts](https://github.com/sttts))
-
-### Client
-* Use Prometheus instrumentation conventions ([#36704](https://github.com/kubernetes/kubernetes/pull/36704), [@fabxc](https://github.com/fabxc))
-* Clients now use the `?watch=true` parameter to make watch API calls, instead of the `/watch/` path prefix ([#41722](https://github.com/kubernetes/kubernetes/pull/41722), [@liggitt](https://github.com/liggitt))
-* Move private key parsing from serviceaccount/jwt.go to client-go/util/cert ([#40907](https://github.com/kubernetes/kubernetes/pull/40907), [@cblecker](https://github.com/cblecker))
-* Caching added to the OIDC client auth plugin to fix races and reduce the time kubectl commands using this plugin take by several seconds. ([#38167](https://github.com/kubernetes/kubernetes/pull/38167), [@ericchiang](https://github.com/ericchiang))
-* Fix resync goroutine leak in ListAndWatch ([#35672](https://github.com/kubernetes/kubernetes/pull/35672), [@tatsuhiro-t](https://github.com/tatsuhiro-t))
-
-#### client-go
-* The main repository does not keep multiple releases of clientsets anymore. Please find previous releases at https://github.com/kubernetes/client-go ([#38154](https://github.com/kubernetes/kubernetes/pull/38154), [@caesarxuchao](https://github.com/caesarxuchao))
-* Support whitespace in command path for gcp auth plugin ([#41653](https://github.com/kubernetes/kubernetes/pull/41653), [@jlowdermilk](https://github.com/jlowdermilk))
-* client-go no longer imports GCP OAuth2 and OpenID Connect packages by default. ([#41532](https://github.com/kubernetes/kubernetes/pull/41532), [@ericchiang](https://github.com/ericchiang))
-* Added bool type support for jsonpath. ([#39063](https://github.com/kubernetes/kubernetes/pull/39063), [@xingzhou](https://github.com/xingzhou))
-* Preventing nil pointer reference in client_config ([#40508](https://github.com/kubernetes/kubernetes/pull/40508), [@vjsamuel](https://github.com/vjsamuel))
-* Prevent hotloops on error conditions, which could fill up the disk faster than log rotation can free space. ([#40497](https://github.com/kubernetes/kubernetes/pull/40497), [@lavalamp](https://github.com/lavalamp))
-
-### Cloud Provider
-
-#### AWS
-* Allow to running the master with a different AWS account or even on a different cloud provider than the nodes. ([#39996](https://github.com/kubernetes/kubernetes/pull/39996), [@scheeles](https://github.com/scheeles))
-* Support shared tag `kubernetes.io/cluster/` ([#41695](https://github.com/kubernetes/kubernetes/pull/41695), [@justinsb](https://github.com/justinsb))
-* Do not consider master instance zones for dynamic volume creation ([#41702](https://github.com/kubernetes/kubernetes/pull/41702), [@justinsb](https://github.com/justinsb))
-* Fix AWS device allocator to only use valid device names ([#41455](https://github.com/kubernetes/kubernetes/pull/41455), [@gnufied](https://github.com/gnufied))
-* Trust region if found from AWS metadata ([#38880](https://github.com/kubernetes/kubernetes/pull/38880), [@justinsb](https://github.com/justinsb))
-* Remove duplicate calls to DescribeInstance during volume operations ([#39842](https://github.com/kubernetes/kubernetes/pull/39842), [@gnufied](https://github.com/gnufied))
-* Recognize eu-west-2 region ([#38746](https://github.com/kubernetes/kubernetes/pull/38746), [@justinsb](https://github.com/justinsb))
-* Recognize ca-central-1 region ([#38410](https://github.com/kubernetes/kubernetes/pull/38410), [@justinsb](https://github.com/justinsb))
-* Add sequential allocator for device names. ([#38818](https://github.com/kubernetes/kubernetes/pull/38818), [@jsafrane](https://github.com/jsafrane))
-
-#### Azure
-* Fix failing load balancers in Azure ([#40405](https://github.com/kubernetes/kubernetes/pull/40405), [@codablock](https://github.com/codablock))
-* Reduce time needed to attach Azure disks ([#40066](https://github.com/kubernetes/kubernetes/pull/40066), [@codablock](https://github.com/codablock))
-* Remove Azure Subnet RouteTable check ([#38334](https://github.com/kubernetes/kubernetes/pull/38334), [@mogthesprog](https://github.com/mogthesprog))
-* Add support for Azure Container Registry, update Azure dependencies ([#37783](https://github.com/kubernetes/kubernetes/pull/37783), [@brendandburns](https://github.com/brendandburns))
-* Allow backendpools in Azure Load Balancers which are not owned by cloud provider ([#36882](https://github.com/kubernetes/kubernetes/pull/36882), [@codablock](https://github.com/codablock))
-
-#### GCE
-* On GCI by default logrotate is disabled for application containers in favor of rotation mechanism provided by docker logging driver. ([#40634](https://github.com/kubernetes/kubernetes/pull/40634), [@crassirostris](https://github.com/crassirostris))
-
-#### GKE
-* New GKE certificates controller. ([#41160](https://github.com/kubernetes/kubernetes/pull/41160), [@pipejakob](https://github.com/pipejakob))
-
-#### vSphere
-* Reverts to looking up the current VM in vSphere using the machine's UUID, either obtained via sysfs or via the `vm-uuid` parameter in the cloud configuration file. ([#40892](https://github.com/kubernetes/kubernetes/pull/40892), [@robdaemon](https://github.com/robdaemon))
-* Fix for detach volume when node is not present/ powered off ([#40118](https://github.com/kubernetes/kubernetes/pull/40118), [@BaluDontu](https://github.com/BaluDontu))
-* Adding vmdk file extension for vmDiskPath in vsphere DeleteVolume ([#40538](https://github.com/kubernetes/kubernetes/pull/40538), [@divyenpatel](https://github.com/divyenpatel))
-* Changed default scsi controller type in vSphere Cloud Provider ([#38426](https://github.com/kubernetes/kubernetes/pull/38426), [@abrarshivani](https://github.com/abrarshivani))
-* Fixes NotAuthenticated errors that appear in the kubelet and kube-controller-manager due to never logging in to vSphere ([#36169](https://github.com/kubernetes/kubernetes/pull/36169), [@robdaemon](https://github.com/robdaemon))
-* Fix panic in vSphere cloud provider ([#38423](https://github.com/kubernetes/kubernetes/pull/38423), [@BaluDontu](https://github.com/BaluDontu))
-* Fix space issue in volumePath with vSphere Cloud Provider ([#38338](https://github.com/kubernetes/kubernetes/pull/38338), [@BaluDontu](https://github.com/BaluDontu))
-
-### Federation
-
-#### kubefed
-* Flag cleanup ([#41335](https://github.com/kubernetes/kubernetes/pull/41335), [@irfanurrehman](https://github.com/irfanurrehman))
-* Create configmap for the cluster kube-dns when cluster joins and remove when it unjoins ([#39338](https://github.com/kubernetes/kubernetes/pull/39338), [@irfanurrehman](https://github.com/irfanurrehman))
-* Support configuring dns-provider ([#40528](https://github.com/kubernetes/kubernetes/pull/40528), [@shashidharatd](https://github.com/shashidharatd))
-* Bug fix relating kubeconfig path in kubefed init ([#41410](https://github.com/kubernetes/kubernetes/pull/41410), [@irfanurrehman](https://github.com/irfanurrehman))
-* Add override flags options to kubefed init ([#40917](https://github.com/kubernetes/kubernetes/pull/40917), [@irfanurrehman](https://github.com/irfanurrehman))
-* Add option to expose federation apiserver on nodeport service ([#40516](https://github.com/kubernetes/kubernetes/pull/40516), [@shashidharatd](https://github.com/shashidharatd))
-* Add option to disable persistence storage for etcd ([#40862](https://github.com/kubernetes/kubernetes/pull/40862), [@shashidharatd](https://github.com/shashidharatd))
-* kubefed init creates a service account for federation controller manager in the federation-system namespace and binds that service account to the federation-system:federation-controller-manager role that has read and list access on secrets in the federation-system namespace. ([#40392](https://github.com/kubernetes/kubernetes/pull/40392), [@madhusudancs](https://github.com/madhusudancs))
-* Implement dry run support in kubefed init ([#36447](https://github.com/kubernetes/kubernetes/pull/36447), [@irfanurrehman](https://github.com/irfanurrehman))
-* Make federation etcd PVC size configurable ([#36310](https://github.com/kubernetes/kubernetes/pull/36310), [@irfanurrehman](https://github.com/irfanurrehman))
-
-#### Other Notable Changes
-* Federated Ingress over GCE no longer requires separate firewall rules to be created for each cluster to circumvent flapping firewall health checks. ([#41942](https://github.com/kubernetes/kubernetes/pull/41942), [@csbell](https://github.com/csbell))
-* Add support for finalizers in federated configmaps (deletes configmaps from underlying clusters). ([#40464](https://github.com/kubernetes/kubernetes/pull/40464), [@csbell](https://github.com/csbell))
-* Add support for DeleteOptions.OrphanDependents for federated services. Setting it to false while deleting a federated service also deletes the corresponding services from all registered clusters. ([#36390](https://github.com/kubernetes/kubernetes/pull/36390), [@nikhiljindal](https://github.com/nikhiljindal))
-* Add `--controllers` flag to federation controller manager for enable/disable federation ingress controller ([#36643](https://github.com/kubernetes/kubernetes/pull/36643), [@kzwang](https://github.com/kzwang))
-* Stop deleting services from underlying clusters when federated service is deleted. ([#37353](https://github.com/kubernetes/kubernetes/pull/37353), [@nikhiljindal](https://github.com/nikhiljindal))
-* Expose autoscaling apis through federation api server ([#38976](https://github.com/kubernetes/kubernetes/pull/38976), [@irfanurrehman](https://github.com/irfanurrehman))
-* Federation: Add `batch/jobs` API objects to federation-apiserver ([#35943](https://github.com/kubernetes/kubernetes/pull/35943), [@jianhuiz](https://github.com/jianhuiz))
-* Add logging of route53 calls ([#39964](https://github.com/kubernetes/kubernetes/pull/39964), [@justinsb](https://github.com/justinsb))
-
-### Garbage Collector
-* Added foreground garbage collection: the owner object will not be deleted until all its dependents are deleted by the garbage collector. Please checkout the [user doc](https://kubernetes.io/docs/concepts/abstractions/controllers/garbage-collection/) for details. ([#38676](https://github.com/kubernetes/kubernetes/pull/38676), [@caesarxuchao](https://github.com/caesarxuchao))
- * deleteOptions.orphanDependents is going to be deprecated in 1.7. Please use deleteOptions.propagationPolicy instead.
-
-### kubeadm
-* A new label and taint is used for marking the master. The label is `node-role.kubernetes.io/master=""` and the taint has the effect `NoSchedule`. Tolerate the `node-role.kubernetes.io/master="":NoSchedule` taint to schedule a workload on the master (a networking DaemonSet for example).
-* The kubelet API is now secured, only cluster admins are allowed to access it.
-* Insecure access to the API Server over `localhost:8080` is now disabled.
-* The control plane components now talk securely to each other. The API Server talks securely to the kubelets in the cluster.
-* kubeadm creates RBAC-enabled clusters. This means that some add-ons which worked previously won't work without having their YAML configuration updated. Please see each vendor's own documentation to check that the add-ons you are using will work with Kubernetes 1.6.
-* The kube-discovery Deployment isn't used anymore when creating a kubeadm cluster and shouldn't be used anywhere else either due to its insecure nature.
-* The Certificates API has graduated from alpha to beta. This is a backwards-incompatible change since the alpha support is dropped, and therefore kubeadm v1.5 and v1.6 don't work together (for example kubeadm v1.5 can't join a kubeadm v1.6 cluster).
-* Supporting only etcd3, with 3.0.14 as the minimum version.
-* `kubeadm reset` will no longer drain nodes automatically. This is because the credentials on nodes do not have permission to perform this operation. We have documented an [alternate procedure](https://kubernetes.io/docs/getting-started-guides/kubeadm/#tear-down), driven from the API server/master.
-* Hook up kubeadm against the BootstrapSigner ([#41417](https://github.com/kubernetes/kubernetes/pull/41417), [@luxas](https://github.com/luxas))
-* Rename some flags for beta UI and fixup some logic ([#42064](https://github.com/kubernetes/kubernetes/pull/42064), [@luxas](https://github.com/luxas))
-* Insecure access to the API Server at localhost:8080 will be turned off in v1.6 when using kubeadm ([#42066](https://github.com/kubernetes/kubernetes/pull/42066), [@luxas](https://github.com/luxas))
-* Flag --use-kubernetes-version for kubeadm init renamed to --kubernetes-version ([#41820](https://github.com/kubernetes/kubernetes/pull/41820), [@kad](https://github.com/kad))
-* Remove the --cloud-provider flag for beta init UX ([#41710](https://github.com/kubernetes/kubernetes/pull/41710), [@luxas](https://github.com/luxas))
-* Fixed an SELinux issue in kubeadm on Docker 1.12+ by moving etcd SELinux options from container to pod. ([#40682](https://github.com/kubernetes/kubernetes/pull/40682), [@dgoodwin](https://github.com/dgoodwin))
-* Add authorization mode to kubeadm ([#39846](https://github.com/kubernetes/kubernetes/pull/39846), [@andrewrynhard](https://github.com/andrewrynhard))
-* Refactor the certificate and kubeconfig code in the kubeadm binary into two phases ([#39280](https://github.com/kubernetes/kubernetes/pull/39280), [@luxas](https://github.com/luxas))
-* Added kubeadm commands to manage bootstrap tokens and the duration they are valid for. ([#35805](https://github.com/kubernetes/kubernetes/pull/35805), [@dgoodwin](https://github.com/dgoodwin))
-
-### kubectl
-
-#### New Commands
-- `apply set-last-applied` *updates the applied-applied-configuration annotation* ([#41694](https://github.com/kubernetes/kubernetes/pull/41694), [@shiywang](https://github.com/shiywang))
-- `kubectl apply view-last-applied` *viewing the last configuration file applied* ([#41146](https://github.com/kubernetes/kubernetes/pull/41146), [@shiywang](https://github.com/shiywang))
-
-#### Create subcommands
- - `create poddisruptionbudget` ([#36646](https://github.com/kubernetes/kubernetes/pull/36646), [@kargakis](https://github.com/kargakis))
- - `create clusterrole` ([#41538](https://github.com/kubernetes/kubernetes/pull/41538), [@xingzhou](https://github.com/xingzhou))
- - `create role` ([#39852](https://github.com/kubernetes/kubernetes/pull/39852), [@xingzhou](https://github.com/xingzhou))
- - `create clusterrolebinding` ([#37098](https://github.com/kubernetes/kubernetes/pull/37098), [@deads2k](https://github.com/deads2k))
- - `create service externalname` ([#34789](https://github.com/kubernetes/kubernetes/pull/34789), [@adohe](https://github.com/adohe))
-- `set selector` - update selector labels ([#38966](https://github.com/kubernetes/kubernetes/pull/38966), [@kargakis](https://github.com/kargakis))
-- `can-i` to see if you can perform an action ([#41077](https://github.com/kubernetes/kubernetes/pull/41077), [@deads2k](https://github.com/deads2k))
-
-#### Updates to existing commands
-* Printing and output
- * Import a numeric ordering sorting library and use it in the sorting printer. ([#40746](https://github.com/kubernetes/kubernetes/pull/40746), [@matthyx](https://github.com/matthyx))
- * DaemonSet get and describe show status fields. ([#42843](https://github.com/kubernetes/kubernetes/pull/42843), [@janetkuo](https://github.com/janetkuo))
- * Pods describe shows tolerationSeconds ([#42162](https://github.com/kubernetes/kubernetes/pull/42162), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
- * Node describe contains closing paren ([#39217](https://github.com/kubernetes/kubernetes/pull/39217), [@luksa](https://github.com/luksa))
- * Display pod node selectors with kubectl describe. ([#36396](https://github.com/kubernetes/kubernetes/pull/36396), [@aveshagarwal](https://github.com/aveshagarwal))
- * Add Version to the resource printer for 'get nodes' ([#37943](https://github.com/kubernetes/kubernetes/pull/37943), [@ailusazh](https://github.com/ailusazh))
- * Added support for printing in all supported `--output` formats to `kubectl create ...` and `kubectl apply ...` ([#38112](https://github.com/kubernetes/kubernetes/pull/38112), [@juanvallejo](https://github.com/juanvallejo))
- * Add three more columns to `kubectl get deploy -o wide` output. ([#39240](https://github.com/kubernetes/kubernetes/pull/39240), [@xingzhou](https://github.com/xingzhou))
- * Fix kubectl get -f -o so it prints all items in the file ([#39038](https://github.com/kubernetes/kubernetes/pull/39038), [@ncdc](https://github.com/ncdc))
- * kubectl describe no longer prints the last-applied-configuration annotation for secrets. ([#34664](https://github.com/kubernetes/kubernetes/pull/34664), [@ymqytw](https://github.com/ymqytw))
- * Completed pods should not be hidden when requested by name via `kubectl get`. ([#42216](https://github.com/kubernetes/kubernetes/pull/42216), [@smarterclayton](https://github.com/smarterclayton))
- * Improve formatting of EventSource in kubectl get and kubectl describe ([#40073](https://github.com/kubernetes/kubernetes/pull/40073), [@matthyx](https://github.com/matthyx))
-* Attach now supports multiple types ([#40365](https://github.com/kubernetes/kubernetes/pull/40365), [@shiywang](https://github.com/shiywang))
-* Create now accepts the label selector flag for filtering objects to create ([#40057](https://github.com/kubernetes/kubernetes/pull/40057), [@MrHohn](https://github.com/MrHohn))
-* Top now accepts short forms for "node" and "pod" ("no", "po") ([#39218](https://github.com/kubernetes/kubernetes/pull/39218), [@luksa](https://github.com/luksa))
-* Begin paths for internationalization in kubectl ([#36802](https://github.com/kubernetes/kubernetes/pull/36802), [@brendandburns](https://github.com/brendandburns))
- * Add initial french translations for kubectl ([#40645](https://github.com/kubernetes/kubernetes/pull/40645), [@brendandburns](https://github.com/brendandburns))
-
-#### Updates to apply
-* New command `apply set-last-applied` *updates the applied-applied-configuration annotation* ([#41694](https://github.com/kubernetes/kubernetes/pull/41694), [@shiywang](https://github.com/shiywang))
-* New command `apply view-last-applied` *command for viewing the last configuration file applied* ([#41146](https://github.com/kubernetes/kubernetes/pull/41146), [@shiywang](https://github.com/shiywang))
-* `apply` now supports explicitly clearing values by setting them to null ([#40630](https://github.com/kubernetes/kubernetes/pull/40630), [@liggitt](https://github.com/liggitt))
-* Warn user when using `apply` on a resource lacking the `LastAppliedConfig` annotation ([#36672](https://github.com/kubernetes/kubernetes/pull/36672), [@ymqytw](https://github.com/ymqytw))
-* PATCH (i.e. apply and edit) now supports merging lists of primitives ([#38665](https://github.com/kubernetes/kubernetes/pull/38665), [@ymqytw](https://github.com/ymqytw))
-* `apply` falls back to generic 3-way JSON merge patch for Third Party Resource or unregistered types ([#40666](https://github.com/kubernetes/kubernetes/pull/40666), [@ymqytw](https://github.com/ymqytw))
-
-#### Updates to edit
-* `edit` now supports Third party resources and extension API servers. ([#41304](https://github.com/kubernetes/kubernetes/pull/41304), [@liggitt](https://github.com/liggitt))
- * Now to edit a particular API version, provide the fully-qualify the resource, version, and group used to fetch the object (for example, `job.v1.batch/myjob`)
- * Client-side conversion is no longer done, and the `--output-version` option is deprecated for `kubectl edit`.
-* `edit` works as intended with apply and will not change the annotation
- * No longer updates the last-applied-configuration annotation when --save-config is unspecified or false. ([#41924](https://github.com/kubernetes/kubernetes/pull/41924), [@ymqytw](https://github.com/ymqytw))
- * Fixes issue that caused apply to revert changes made by edit
-
-#### Bug fixes
-* Fixed --save-config in create subcommand to save the annotation ([#40289](https://github.com/kubernetes/kubernetes/pull/40289), [@xilabao](https://github.com/xilabao))
-* Fixed an issue where 'kubectl get --sort-by=' would return an error if the specified fields in sort were not specified in one or more of the returned objects. ([#40541](https://github.com/kubernetes/kubernetes/pull/40541), [@fabianofranz](https://github.com/fabianofranz))
- * Previously this would cause the command to fail regardless of whether or not the field was present in the object model
- * Now the command will succeed even if the sort-by field is missing from one or more of the objects
-* Fixed issue with kubectl proxy so it will now proxy an empty path - e.g. http://localhost:8001 ([#39226](https://github.com/kubernetes/kubernetes/pull/39226), [@luksa](https://github.com/luksa))
-* Fixed an issue where commas were not accepted in --from-literal flags for the creation of secrets. ([#35191](https://github.com/kubernetes/kubernetes/pull/35191), [@SamiHiltunen](https://github.com/SamiHiltunen))
- * Passing multiple values separated by a comma in a single --from-literal flag is no longer supported. Please use multiple --from-literal flags to provide multiple values.
-* Fixed a bug where the --server, --token, and --certificate-authority flags were not overriding the related in-cluster configs when provided in a `kubectl` call inside a cluster. ([#39006](https://github.com/kubernetes/kubernetes/pull/39006), [@fabianofranz](https://github.com/fabianofranz))
-
-#### Other Notable Changes
-* The api server will publish the extensions/Deployments API as preferred over the apps/Deployment (introduced in 1.6). ([#43553](https://github.com/kubernetes/kubernetes/pull/43553), [@liggitt](https://github.com/liggitt))
- * This will ensure certain commands in 1.5 versions of kubectl continue function when run against a 1.6 server. (e.g. `kubectl edit deployment`)
-* Taint
- * The `taint` command will not function in a skewed 1.5 / 1.6 environment - client and server versions must match (See Action required section above)
- * Change taints/tolerations to api fields ([#38957](https://github.com/kubernetes/kubernetes/pull/38957), [@aveshagarwal](https://github.com/aveshagarwal))
- * Make kubectl taint command respect effect NoExecute ([#42120](https://github.com/kubernetes/kubernetes/pull/42120), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Allow drain --force to remove pods whose managing resource is deleted. ([#41864](https://github.com/kubernetes/kubernetes/pull/41864), [@marun](https://github.com/marun))
-* `--output-version` is ignored for all commands except `kubectl convert`. This is consistent with the generic nature of `kubectl` CRUD commands and the previous removal of `--api-version`. Specific versions can be specified in the resource field: `resource.version.group`, `jobs.v1.batch`. ([#41576](https://github.com/kubernetes/kubernetes/pull/41576), [@deads2k](https://github.com/deads2k))
-* Allow missing keys in templates by default ([#39486](https://github.com/kubernetes/kubernetes/pull/39486), [@ncdc](https://github.com/ncdc))
-* Add error message when trying to use clusterrole with namespace in kubectl ([#36424](https://github.com/kubernetes/kubernetes/pull/36424), [@xilabao](https://github.com/xilabao))
-* When deleting an object with `--grace-period=0`, the client will begin a graceful deletion and wait until the resource is fully deleted. To force deletion, use the `--force` flag. ([#37263](https://github.com/kubernetes/kubernetes/pull/37263), [@smarterclayton](https://github.com/smarterclayton))
-
-### Node Components
-* Kubelet config should ignore file start with dots.
- ([#39196](https://github.com/kubernetes/kubernetes/pull/39196), [@resouer](https://github.com/resouer))
-* Bump GCI to gci-stable-56-9000-84-2.
- ([#41819](https://github.com/kubernetes/kubernetes/pull/41819),
- [@dchen1107](https://github.com/dchen1107))
-* Bump GCE ContainerVM to container-vm-v20170214 to address CVE-2016-9962.
- ([#41449](https://github.com/kubernetes/kubernetes/pull/41449),
- [@zmerlynn](https://github.com/zmerlynn))
-* Kubelet: Remove the PLEG health check from /healthz, Kubelet will now report
-* NodeNotReady on failed PLEG health check.
- ([#41569](https://github.com/kubernetes/kubernetes/pull/41569),
- [@yujuhong](https://github.com/yujuhong))
-* CRI: upgrade protobuf to v3. Protobuf v2 and v3 are not compatible.
- ([#39158](https://github.com/kubernetes/kubernetes/pull/39158), [@feiskyer](https://github.com/feiskyer))
-* kubelet exports metrics for cgroup management ([#41988](https://github.com/kubernetes/kubernetes/pull/41988), [@sjenning](https://github.com/sjenning))
-* Experimental support to reserve a pod's memory request from being utilized by
- pods in lower QoS tiers.
- ([#41149](https://github.com/kubernetes/kubernetes/pull/41149),
- [@sjenning](https://github.com/sjenning))
-* Port forwarding can forward over websockets or SPDY.
- ([#33684](https://github.com/kubernetes/kubernetes/pull/33684),
- [@fraenkel](https://github.com/fraenkel))
-* Flag gate faster evictions based on node memory pressure using kernel memcg
- notifications - `--experimental-kernel-memcg-notification`.
- ([#38258](https://github.com/kubernetes/kubernetes/pull/38258),
- [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Nodes can now report two additional address types in their status: InternalDNS
- and ExternalDNS. The apiserver can use --kubelet-preferred-address-types to
- give priority to the type of address it uses to reach nodes.
- ([#34259](https://github.com/kubernetes/kubernetes/pull/34259), [@liggitt](https://github.com/liggitt))
-
-#### Bug fixes
-* Add image cache to fix the issue where kubelet hands when reporting the node
- status. ([#38375](https://github.com/kubernetes/kubernetes/pull/38375),
- [@Random-Liu](https://github.com/Random-Liu))
-* Fix logic error in graceful deletion that caused pods not being able to
- be deleted. ([#37721](https://github.com/kubernetes/kubernetes/pull/37721),
- [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Fix ConfigMap for Windows Containers.
- ([#39373](https://github.com/kubernetes/kubernetes/pull/39373),
- [@jbhurat](https://github.com/jbhurat))
-* Fix the “pod rejected by kubelet may stay at pending forever” bug.
- (https://github.com/kubernetes/kubernetes/pull/37661),
- [@yujuhong](https://github.com/yujuhong))
-
-### kube-controller-manager
-* add --controllers to controller manager ([#39740](https://github.com/kubernetes/kubernetes/pull/39740), [@deads2k](https://github.com/deads2k))
-
-### kube-dns
-* Adds support for configurable DNS stub domains and upstream nameservers.
- The following configuration options have been added to the `kube-system:kube-dns` ConfigMap:
- ```
- "stubDomains": {
- "acme.local": ["1.2.3.4"]
- },
- ```
- is a map of domain to list of nameservers for the domain. This is used
- to inject private DNS domains into the kube-dns namespace. In the above
- example, any DNS requests for *.acme.local will be served by the
- nameserver 1.2.3.4.
- ```
- "upstreamNameservers": ["8.8.8.8", "8.8.4.4"]
- ```
- is a list of upstreamNameservers to use, overriding the configuration
- specified in /etc/resolv.conf.
-
-* An empty `kube-system:kube-dns` ConfigMap will be created for the cluster if one did not already exist.
-
-### kube-proxy
-* **- Add tcp/udp userspace proxy support for Windows. ([#41487](https://github.com/kubernetes/kubernetes/pull/41487), [@anhowe](https://github.com/anhowe))**
-* Add DNS suffix search list support in Windows kube-proxy. ([#41618](https://github.com/kubernetes/kubernetes/pull/41618), [@JiangtianLi](https://github.com/JiangtianLi))
-* Add a KUBERNETES_NODE_* section to build kubelet/kube-proxy for windows ([#38919](https://github.com/kubernetes/kubernetes/pull/38919), [@brendandburns](https://github.com/brendandburns))
-* Remove outdated net.experimental.kubernetes.io/proxy-mode and net.beta.kubernetes.io/proxy-mode annotations from kube-proxy. ([#40585](https://github.com/kubernetes/kubernetes/pull/40585), [@cblecker](https://github.com/cblecker))
-* proxy/iptables: don't sync proxy rules if services map didn't change ([#38996](https://github.com/kubernetes/kubernetes/pull/38996), [@dcbw](https://github.com/dcbw))
-* Update kube-proxy image to be based off of Debian 8.6 base image. ([#39695](https://github.com/kubernetes/kubernetes/pull/39695), [@ixdy](https://github.com/ixdy))
-* Update amd64 kube-proxy base image to debian-iptables-amd64:v5 ([#39725](https://github.com/kubernetes/kubernetes/pull/39725), [@ixdy](https://github.com/ixdy))
-* Clean up the kube-proxy container image by removing unnecessary packages and files. ([#42090](https://github.com/kubernetes/kubernetes/pull/42090), [@timstclair](https://github.com/timstclair))
-* Better compat with very old iptables (e.g. CentOS 6) ([#37594](https://github.com/kubernetes/kubernetes/pull/37594), [@thockin](https://github.com/thockin))
-
-### Scheduler
-* Add the support to the scheduler for spreading pods of StatefulSets. ([#41708](https://github.com/kubernetes/kubernetes/pull/41708), [@bsalamat](https://github.com/bsalamat))
-* Added support to minimize sending verbose node information to scheduler extender by sending only node names and expecting extenders to cache the rest of the node information ([#41119](https://github.com/kubernetes/kubernetes/pull/41119), [@sarat-k](https://github.com/sarat-k))
-* Support KUBE_MAX_PD_VOLS on Azure ([#41398](https://github.com/kubernetes/kubernetes/pull/41398), [@codablock](https://github.com/codablock))
-* Mark multi-scheduler graduation to beta and then v1. ([#38871](https://github.com/kubernetes/kubernetes/pull/38871), [@k82cn](https://github.com/k82cn))
-* Scheduler treats StatefulSet pods as belonging to a single equivalence class. ([#39718](https://github.com/kubernetes/kubernetes/pull/39718), [@foxish](https://github.com/foxish))
-* Update FitError as a message component into the PodConditionUpdater. ([#39491](https://github.com/kubernetes/kubernetes/pull/39491), [@jayunit100](https://github.com/jayunit100))
-* Fix comment and optimize code ([#38084](https://github.com/kubernetes/kubernetes/pull/38084), [@tanshanshan](https://github.com/tanshanshan))
-* Add flag to enable contention profiling in scheduler. ([#37357](https://github.com/kubernetes/kubernetes/pull/37357), [@gmarek](https://github.com/gmarek))
-* Try self-repair scheduler cache or panic ([#37379](https://github.com/kubernetes/kubernetes/pull/37379), [@wojtek-t](https://github.com/wojtek-t))
-
-### Volume Plugins
-
-#### Azure Disk
-* restrict name length for Azure specifications ([#40030](https://github.com/kubernetes/kubernetes/pull/40030), [@colemickens](https://github.com/colemickens))
-
-#### GlusterFS
-* The glusterfs dynamic volume provisioner will now choose a unique GID for new persistent volumes from a range that can be configured in the storage class with the "gidMin" and "gidMax" parameters. The default range is 2000 - 2147483647 (max int32). ([#37886](https://github.com/kubernetes/kubernetes/pull/37886), [@obnoxxx](https://github.com/obnoxxx))
-
-#### Photon
-* Fix photon controller plugin to construct with correct PdID ([#37167](https://github.com/kubernetes/kubernetes/pull/37167), [@luomiao](https://github.com/luomiao))
-
-#### rbd
-* force unlock rbd image if the image is not used ([#41597](https://github.com/kubernetes/kubernetes/pull/41597), [@rootfs](https://github.com/rootfs))
-
-#### vSphere
-* Fix fsGroup to vSphere ([#38655](https://github.com/kubernetes/kubernetes/pull/38655), [@abrarshivani](https://github.com/abrarshivani))
-* Fix issue when attempting to unmount a wrong vSphere volume ([#37413](https://github.com/kubernetes/kubernetes/pull/37413), [@BaluDontu](https://github.com/BaluDontu))
-
-#### Other Notable Changes
-* Implement bulk polling of volumes ([#41306](https://github.com/kubernetes/kubernetes/pull/41306), [@gnufied](https://github.com/gnufied))
-* Check if pathExists before performing Unmount ([#39311](https://github.com/kubernetes/kubernetes/pull/39311), [@rkouj](https://github.com/rkouj))
-* Unmount operation should not fail if volume is already unmounted ([#38547](https://github.com/kubernetes/kubernetes/pull/38547), [@rkouj](https://github.com/rkouj))
-* Provide kubernetes-controller-manager flags to control volume attach/detach reconciler sync. The duration of the syncs can be controlled, and the syncs can be shut off as well. ([#39551](https://github.com/kubernetes/kubernetes/pull/39551), [@chrislovecnm](https://github.com/chrislovecnm))
-* Fix unmountDevice issue caused by shared mount in GCI ([#38411](https://github.com/kubernetes/kubernetes/pull/38411), [@jingxu97](https://github.com/jingxu97))
-* Fix permissions when using fsGroup ([#37009](https://github.com/kubernetes/kubernetes/pull/37009), [@sjenning](https://github.com/sjenning))
-* Fixed issues ([#39202](https://github.com/kubernetes/kubernetes/pull/39202)), ([#41041](https://github.com/kubernetes/kubernetes/pull/41041)) and ([#40941](https://github.com/kubernetes/kubernetes/pull/40941)) that caused the iSCSI connections to
- be prematurely closed when deleting a pod with an iSCSI persistent volume attached and that prevented the use of newly created LUNs on targets with preestablished connections. ([#41196](https://github.com/kubernetes/kubernetes/pull/41196)), [@CristianPop](https://github.com/CristianPop))
-
-## Changes to Cluster Provisioning Scripts
-
-### AWS
-* Deployment of AWS Kubernetes clusters using the in-tree bash deployment (i.e. cluster/kube-up.sh or get-kube.sh) is obsolete. v1.5.x will be the last release to support cluster/kube-up.sh with AWS. For a list of viable alternatives, see: http://kubernetes.io/docs/getting-started-guides/aws/ ([#42196](https://github.com/kubernetes/kubernetes/pull/42196), [@zmerlynn](https://github.com/zmerlynn))
-* Fix an issue where AWS tear-down leaks an DHCP Option Set. ([#38645](https://github.com/kubernetes/kubernetes/pull/38645), [@zmerlynn](https://github.com/zmerlynn))
-
-### Juju
-* The kubernetes-master, kubernetes-worker and kubeapi-load-balancer charms have gained an nrpe-external-master relation, allowing the integration of their monitoring in an external Nagios server. ([#41923](https://github.com/kubernetes/kubernetes/pull/41923), [@Cynerva](https://github.com/Cynerva))
-* Disable anonymous auth on kubelet ([#41919](https://github.com/kubernetes/kubernetes/pull/41919), [@Cynerva](https://github.com/Cynerva))
-* Fix shebangs in charm actions to use python3 ([#42058](https://github.com/kubernetes/kubernetes/pull/42058), [@Cynerva](https://github.com/Cynerva))
-* K8s master charm now properly keeps distributed master files in sync for an HA control plane. ([#41351](https://github.com/kubernetes/kubernetes/pull/41351), [@chuckbutler](https://github.com/chuckbutler))
-* Improve status messages ([#40691](https://github.com/kubernetes/kubernetes/pull/40691), [@Cynerva](https://github.com/Cynerva))
-* Splits Juju Charm layers into master/worker roles ([#40324](https://github.com/kubernetes/kubernetes/pull/40324), [@chuckbutler](https://github.com/chuckbutler))
- * Adds support for 1.5.x series of Kubernetes
- * Introduces a tactic for keeping templates in sync with upstream eliminating template drift
- * Adds CNI support to the Juju Charms
- * Adds durable storage support to the Juju Charms
- * Introduces an e2e Charm layer for repeatable testing efforts and validation of clusters
-
-### libvirt CoreOS
-* To add local registry to libvirt_coreos ([#36751](https://github.com/kubernetes/kubernetes/pull/36751), [@sdminonne](https://github.com/sdminonne))
-
-### GCE
-* **the `gce` provider enables both RBAC authorization and the permissive legacy ABAC policy that makes all service accounts superusers. To opt out of the permissive ABAC policy, export the environment variable `ENABLE_LEGACY_ABAC=false` before running `cluster/kube-up.sh`. ([#43544](https://github.com/kubernetes/kubernetes/pull/43544), [@liggitt](https://github.com/liggitt))**
-* **the `gce` provider ensures the bootstrap admin token user is included in the super-user group ([#39537](https://github.com/kubernetes/kubernetes/pull/39537), [@liggitt](https://github.com/liggitt))**
-* Remove support for debian masters in GCE kube-up. ([#41666](https://github.com/kubernetes/kubernetes/pull/41666), [@mikedanese](https://github.com/mikedanese))
-* Remove support for trusty in GCE kube-up. ([#41670](https://github.com/kubernetes/kubernetes/pull/41670), [@mikedanese](https://github.com/mikedanese))
-* Don't fail if the grep fails to match any resources ([#41933](https://github.com/kubernetes/kubernetes/pull/41933), [@ixdy](https://github.com/ixdy))
-* Fix the output of health-mointor.sh ([#41525](https://github.com/kubernetes/kubernetes/pull/41525), [@yujuhong](https://github.com/yujuhong))
-* Added configurable etcd initial-cluster-state to kube-up script. ([#41332](https://github.com/kubernetes/kubernetes/pull/41332), [@jszczepkowski](https://github.com/jszczepkowski))
-* The kube-apiserver [basic audit log](https://kubernetes.io/docs/admin/audit/) can be enabled in GCE by exporting the environment variable `ENABLE_APISERVER_BASIC_AUDIT=true` before running `cluster/kube-up.sh`. This will log to `/var/log/kube-apiserver-audit.log` and use the same `logrotate` settings as `/var/log/kube-apiserver.log`. ([#41211](https://github.com/kubernetes/kubernetes/pull/41211), [@enisoc](https://github.com/enisoc))
-* On kube-up.sh clusters on GCE, kube-scheduler now contacts the API on the secured port. ([#41285](https://github.com/kubernetes/kubernetes/pull/41285), [@liggitt](https://github.com/liggitt))
-* Use existing ABAC policy file when upgrading GCE cluster ([#40172](https://github.com/kubernetes/kubernetes/pull/40172), [@liggitt](https://github.com/liggitt))
-* Ensure the GCI metadata files do not have newline at the end ([#38727](https://github.com/kubernetes/kubernetes/pull/38727), [@Amey-D](https://github.com/Amey-D))
-* Fixed detection of master during creation of multizone nodes cluster by kube-up. ([#38617](https://github.com/kubernetes/kubernetes/pull/38617), [@jszczepkowski](https://github.com/jszczepkowski))
-* Fixed validation of multizone cluster for GCE ([#38695](https://github.com/kubernetes/kubernetes/pull/38695), [@jszczepkowski](https://github.com/jszczepkowski))
-* Fix GCI mounter issue ([#38124](https://github.com/kubernetes/kubernetes/pull/38124), [@jingxu97](https://github.com/jingxu97))
-* Exit with error if is not the final parameter. ([#37723](https://github.com/kubernetes/kubernetes/pull/37723), [@mtaufen](https://github.com/mtaufen))
-* GCI: Remove /var/lib/docker/network ([#37593](https://github.com/kubernetes/kubernetes/pull/37593), [@yujuhong](https://github.com/yujuhong))
-* Fix the equality checks for numeric values in cluster/gce/util.sh. ([#37638](https://github.com/kubernetes/kubernetes/pull/37638), [@roberthbailey](https://github.com/roberthbailey))
-* Modify GCI mounter to enable NFSv3 ([#37582](https://github.com/kubernetes/kubernetes/pull/37582), [@jingxu97](https://github.com/jingxu97))
-* Use gsed on the Mac ([#37562](https://github.com/kubernetes/kubernetes/pull/37562), [@roberthbailey](https://github.com/roberthbailey))
-* Bump GCI
-* to gci-beta-56-9000-80-0 ([#41027](https://github.com/kubernetes/kubernetes/pull/41027), [@dchen1107](https://github.com/dchen1107))
-* to gci-stable-56-9000-84-2 ([#41819](https://github.com/kubernetes/kubernetes/pull/41819), [@dchen1107](https://github.com/dchen1107))
-* Bump GCE ContainerVM
- * to container-vm-v20161208 ([release notes](https://cloud.google.com/compute/docs/containers/container_vms#changelog)) ([#38432](https://github.com/kubernetes/kubernetes/pull/38432), [@timstclair](https://github.com/timstclair))
- * to container-vm-v20170201 to address CVE-2016-9962. ([#40828](https://github.com/kubernetes/kubernetes/pull/40828), [@zmerlynn](https://github.com/zmerlynn))
- * to container-vm-v20170117 to pick up CVE fixes in base image. ([#40094](https://github.com/kubernetes/kubernetes/pull/40094), [@zmerlynn](https://github.com/zmerlynn))
- * to container-vm-v20170214 to address CVE-2016-9962. ([#41449](https://github.com/kubernetes/kubernetes/pull/41449), [@zmerlynn](https://github.com/zmerlynn))
-
-### OpenStack
-* Do not daemonize `salt-minion` for the openstack-heat provider. ([#40722](https://github.com/kubernetes/kubernetes/pull/40722), [@micmro](https://github.com/micmro))
-* OpenStack-Heat will now look for an image named "CentOS-7-x86_64-GenericCloud-1604". To restore the previous behavior set OPENSTACK_IMAGE_NAME="CentOS7" ([#40368](https://github.com/kubernetes/kubernetes/pull/40368), [@sc68cal](https://github.com/sc68cal))
-* Fixes a bug in the OpenStack-Heat kubernetes provider, in the handling of differences between the Identity v2 and Identity v3 APIs ([#40105](https://github.com/kubernetes/kubernetes/pull/40105), [@sc68cal](https://github.com/sc68cal))
-
-### Container Images
-* Update gcr.io/google-containers/rescheduler to v0.2.2, which uses busybox as a base image instead of ubuntu. ([#41911](https://github.com/kubernetes/kubernetes/pull/41911), [@ixdy](https://github.com/ixdy))
-* Remove unnecessary metrics (http/process/go) from being exposed by etcd-version-monitor ([#41807](https://github.com/kubernetes/kubernetes/pull/41807), [@shyamjvs](https://github.com/shyamjvs))
-* Align the hyperkube image to support running binaries at /usr/local/bin/ like the other server images ([#41017](https://github.com/kubernetes/kubernetes/pull/41017), [@luxas](https://github.com/luxas))
-* Bump up GLBC version from 0.9.0-beta to 0.9.1 ([#41037](https://github.com/kubernetes/kubernetes/pull/41037), [@bprashanth](https://github.com/bprashanth))
-
-### Other Notable Changes
-* The default client certificate generated by kube-up now contains the superuser `system:masters` group ([#39966](https://github.com/kubernetes/kubernetes/pull/39966), [@liggitt](https://github.com/liggitt))
-* Added support for creating HA clusters for centos using kube-up.sh. ([#39462](https://github.com/kubernetes/kubernetes/pull/39462), [@Shawyeok](https://github.com/Shawyeok))
-* Enable lazy inode table and journal initialization for ext3 and ext4 ([#38865](https://github.com/kubernetes/kubernetes/pull/38865), [@codablock](https://github.com/codablock))
-* Since `kubernetes.tar.gz` no longer includes client or server binaries, `cluster/kube-{up,down,push}.sh` now automatically download released binaries if they are missing. ([#38730](https://github.com/kubernetes/kubernetes/pull/38730), [@ixdy](https://github.com/ixdy))
-* Fix broken cluster/centos and enhance the style ([#34002](https://github.com/kubernetes/kubernetes/pull/34002), [@xiaoping378](https://github.com/xiaoping378))
-* Set kernel.softlockup_panic =1 based on the flag. ([#38001](https://github.com/kubernetes/kubernetes/pull/38001), [@dchen1107](https://github.com/dchen1107))
-* Configure local-up-cluster.sh to handle auth proxies ([#36838](https://github.com/kubernetes/kubernetes/pull/36838), [@deads2k](https://github.com/deads2k))
-* `kube-up.sh`/`kube-down.sh` no longer force update gcloud for provider=gce|gke. ([#36292](https://github.com/kubernetes/kubernetes/pull/36292), [@jlowdermilk](https://github.com/jlowdermilk))
-* Collect logs for dead kubelets too ([#37671](https://github.com/kubernetes/kubernetes/pull/37671), [@mtaufen](https://github.com/mtaufen))
-
-## Changes to Addons
-
-### Dashboard
-* Update dashboard version to v1.6.0 ([#43210](https://github.com/kubernetes/kubernetes/pull/43210), [@floreks](https://github.com/floreks))
-
-### DNS
-* Updates the dnsmasq cache/mux layer to be managed by dnsmasq-nanny. ([#41826](https://github.com/kubernetes/kubernetes/pull/41826), [@bowei](https://github.com/bowei))
- dnsmasq-nanny manages dnsmasq based on values from the
- kube-system:kube-dns configmap:
- ```
- "stubDomains": {
- "acme.local": ["1.2.3.4"]
- },
- ```
-
- is a map of domain to list of nameservers for the domain. This is used
- to inject private DNS domains into the kube-dns namespace. In the above
- example, any DNS requests for `*.acme.local` will be served by the
- ```
- nameserver 1.2.3.4.
- ```
-
- ```
- upstreamNameservers": ["8.8.8.8", "8.8.4.4"]
- ```
- is a list of upstreamNameservers to use, overriding the configuration
- specified in `/etc/resolv.conf`.
-* `kube-dns` now runs using a separate `system:serviceaccount:kube-system:kube-dns` service account which is automatically bound to the correct RBAC permissions. ([#38816](https://github.com/kubernetes/kubernetes/pull/38816), [@deads2k](https://github.com/deads2k))
-* Use kube-dns:1.11.0 ([#39925](https://github.com/kubernetes/kubernetes/pull/39925), [@sadlil](https://github.com/sadlil))
-
-### DNS Autoscaler
-* Patch CVE-2016-8859 in gcr.io/google-containers/cluster-proportional-autoscaler-amd64 ([#42933](https://github.com/kubernetes/kubernetes/pull/42933), [@timstclair](https://github.com/timstclair))
-
-### Cluster Autoscaler
-* Allow the Horizontal Pod Autoscaler controller to talk to the metrics API and custom metrics API as standard APIs. ([#41824](https://github.com/kubernetes/kubernetes/pull/41824), [@DirectXMan12](https://github.com/DirectXMan12))
-
-### Cluster Load Balancing
-* Update defaultbackend image to 1.3 ([#42212](https://github.com/kubernetes/kubernetes/pull/42212), [@timstclair](https://github.com/timstclair))
-
-### etcd Empty Dir Cleanup
-* Base etcd-empty-dir-cleanup on busybox, run as nobody, and update to etcdctl 3.0.14 ([#41674](https://github.com/kubernetes/kubernetes/pull/41674), [@ixdy](https://github.com/ixdy))
-
-### Fluentd
-* Migrated fluentd addon to daemon set ([#32088](https://github.com/kubernetes/kubernetes/pull/32088), [@piosz](https://github.com/piosz))
-* Fluentd was migrated to Daemon Set, which targets nodes with beta.kubernetes.io/fluentd-ds-ready=true label. If you use fluentd in your cluster please make sure that the nodes with version 1.6+ contains this label. ([#42931](https://github.com/kubernetes/kubernetes/pull/42931), [@piosz](https://github.com/piosz))
-* Fluentd-gcp containers spawned by DaemonSet are now configured using ConfigMap ([#42126](https://github.com/kubernetes/kubernetes/pull/42126), [@crassirostris](https://github.com/crassirostris))
-* Cleanup fluentd-gcp image: rebase on debian-base, switch to upstream packages, remove fluent-ui & rails ([#41998](https://github.com/kubernetes/kubernetes/pull/41998), [@timstclair](https://github.com/timstclair))
-* On GCE, the apiserver audit log (`/var/log/kube-apiserver-audit.log`) will be sent through fluentd if enabled. It will go to the same place as `kube-apiserver.log`, but tagged as its own stream. ([#41360](https://github.com/kubernetes/kubernetes/pull/41360), [@enisoc](https://github.com/enisoc))
-* If `experimentalCriticalPodAnnotation` feature gate is set to true, fluentd pods will not be evicted by the kubelet. ([#41035](https://github.com/kubernetes/kubernetes/pull/41035), [@vishh](https://github.com/vishh))
-* fluentd config for GKE clusters updated: detect exceptions in container log streams and forward them as one log entry. ([#39656](https://github.com/kubernetes/kubernetes/pull/39656), [@thomasschickinger](https://github.com/thomasschickinger))
-* Make fluentd pods critical ([#39146](https://github.com/kubernetes/kubernetes/pull/39146), [@crassirostris](https://github.com/crassirostris))
-* Fluentd/Elastisearch add-on: correctly parse and index kubernetes labels ([#36857](https://github.com/kubernetes/kubernetes/pull/36857), [@Shrugs](https://github.com/Shrugs))
-
-### Heapster
-* Bumped Heapster to v1.3.0. ([#43298](https://github.com/kubernetes/kubernetes/pull/43298), [@piosz](https://github.com/piosz))
- * More details about the release https://github.com/kubernetes/heapster/releases/tag/v1.3.0
-
-### Registry
-* Use daemonset in docker registry add on ([#35582](https://github.com/kubernetes/kubernetes/pull/35582), [@surajssd](https://github.com/surajssd))
-* contribute deis/registry-proxy as a replacement for kube-registry-proxy ([#35797](https://github.com/kubernetes/kubernetes/pull/35797), [@bacongobbler](https://github.com/bacongobbler))
-
-## External Dependency Version Information
-
-Continuous integration builds have used the following versions of external dependencies, however, this is not a strong recommendation and users should consult an appropriate installation or upgrade guide before deciding what versions of etcd, docker or rkt to use.
-
-* Docker versions 1.10.3, 1.11.2, 1.12.6 have been validated
- * Docker version 1.12.6 known issues
- * overlay2 driver not fully supported
- * live-restore not fully supported
- * no shared pid namespace support
- * Docker version 1.11.2 known issues
- * Kernel crash with Aufs storage driver on Debian Jessie ([#27885](https://github.com/kubernetes/kubernetes/issues/27885))
- which can be identified by the [node problem detector](http://kubernetes.io/docs/admin/node-problem/)
- * Leaked File descriptors ([#275](https://github.com/docker/containerd/issues/275))
- * Additional memory overhead per container ([#21737](https://github.com/docker/docker/issues/21737))
- * Docker 1.10.3 contains [backports provided by RedHat](https://github.com/docker/docker/compare/v1.10.3...runcom:docker-1.10.3-stable) for known issues
- * Support for Docker version 1.9.x has been removed
-* rkt version 1.23.0+
- * known issues with the rkt runtime are [listed in the Getting Started Guide](http://kubernetes.io/docs/getting-started-guides/rkt/notes/)
-* etcd version 3.0.17
-## Changelog since v1.6.0-rc.1
-
-
-### Previous Releases Included in v1.6.0
-- [v1.6.0-rc.1](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v160-rc1)
-- [v1.6.0-beta.4](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v160-beta4)
-- [v1.6.0-beta.3](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v160-beta3)
-- [v1.6.0-beta.2](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v160-beta2)
-- [v1.6.0-beta.1](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v160-beta1)
-- [v1.6.0-alpha.3](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v160-alpha3)
-- [v1.6.0-alpha.2](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v160-alpha2)
-- [v1.6.0-alpha.1](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v160-alpha1)
-**No notable changes for this release**
-
-
-
-# v1.6.0-rc.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.0-rc.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes.tar.gz) | `b92be4b71184888ba4a2781d4068ea369442b6030dfb38e23029192a554651e5`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-src.tar.gz) | `e45e993edfdba176a6750c6d3c2207d54d60b5b1fc80a0fe47274d4d9b233d66`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-client-darwin-386.tar.gz) | `1d56088fb85fba02362f7f87a5d5f899c05caa605f4d11b8616749cb0d970384`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-client-darwin-amd64.tar.gz) | `f3df7b558c2ecf6ed8344668515f436b7211a2f840d982f81c55586e1ec84a7b`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-client-linux-386.tar.gz) | `c5ee1787d69d508d8448675428936d70e21f17b21ff44e22db4462483adcebe2`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-client-linux-amd64.tar.gz) | `0960505da11330c8cc66b7df4e4413680afd2a62afc2341bad6bbd88c73e3a56`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-client-linux-arm64.tar.gz) | `dc113881b9cd09ef8cecbdf8f4ff41eddeba7df3ad7af70461e513eb79757e54`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-client-linux-arm.tar.gz) | `5f6bd182852ffe3776b520fbf2db3546c8246133df166dcf6c81ece4b0974227`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-client-linux-ppc64le.tar.gz) | `ea91e79a779eac8c00a5eb80be1fd5b227b9f5ae767e30a12354bfa691f198d5`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-client-linux-s390x.tar.gz) | `874d7410078d39b80fe07a44018f6e95655cb9e05c99ec66dea012d06633fbbb`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-client-windows-386.tar.gz) | `b02d6d8e436322294a65def8c9c576f232df9387093c4ca61e57dd3bdf184b87`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-client-windows-amd64.tar.gz) | `68dbf06824b3785027a85d448f9f2b9928a4092912b382e67c1579e30bb58bbd`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-server-linux-amd64.tar.gz) | `aa9e5d1cb60c1d33d048a75003fdce9ffa0985ede3748b38b4357d961943d603`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-server-linux-arm64.tar.gz) | `0343a1dead1efb8b829ab485028d2ec58ffc4aa7845b3415da5a5bb6fd8bcbfd`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-server-linux-arm.tar.gz) | `77a724b28e071e92113759440fdca7e12ea00c5b41a5334ce7581a0139d8f264`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-server-linux-ppc64le.tar.gz) | `ae21bc7cced29a3c20c76dbf57262a8ea276fe120e411d950ff5267fe4b6cd50`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-rc.1/kubernetes-server-linux-s390x.tar.gz) | `424f5cd9f4aee3e53a8a760ccdc16bd7e2683913e57d56519b536bf4a98f56e5`
-
-## Changelog since v1.6.0-beta.4
-
-### Other notable changes
-
-* `kube-up.sh` using the `gce` provider enables both RBAC authorization and the permissive legacy ABAC policy that makes all service accounts superusers. To opt out of the permissive ABAC policy, export the environment variable `ENABLE_LEGACY_ABAC=false` before running `cluster/kube-up.sh`. ([#43544](https://github.com/kubernetes/kubernetes/pull/43544), [@liggitt](https://github.com/liggitt))
-* Bump CNI consumers to v0.5.1 ([#43546](https://github.com/kubernetes/kubernetes/pull/43546), [@calebamiles](https://github.com/calebamiles))
-* The API server discovery document now prioritizes the `extensions` API group over the `apps` API group. This ensures certain commands in 1.5 versions of kubectl (such as `kubectl edit deployment`) continue to function against a 1.6 API. ([#43553](https://github.com/kubernetes/kubernetes/pull/43553), [@liggitt](https://github.com/liggitt))
-* Fix adding disks to more than one scsi adapter. ([#42422](https://github.com/kubernetes/kubernetes/pull/42422), [@kerneltime](https://github.com/kerneltime))
-* PodSecurityPolicy authorization is correctly enforced by the PodSecurityPolicy admission plugin. ([#43489](https://github.com/kubernetes/kubernetes/pull/43489), [@liggitt](https://github.com/liggitt))
-* API fields that previously serialized null arrays as `null` and empty arrays as `[]` no longer distinguish between those values and always output `[]` when serializing to JSON. ([#43422](https://github.com/kubernetes/kubernetes/pull/43422), [@liggitt](https://github.com/liggitt))
-* Apply taint tolerations for NoExecute for all static pods. ([#43116](https://github.com/kubernetes/kubernetes/pull/43116), [@dchen1107](https://github.com/dchen1107))
-* Bumped Heapster to v1.3.0. ([#43298](https://github.com/kubernetes/kubernetes/pull/43298), [@piosz](https://github.com/piosz))
- * More details about the release https://github.com/kubernetes/heapster/releases/tag/v1.3.0
-
-
-
-# v1.6.0-beta.4
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.0-beta.4
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes.tar.gz) | `8f308a87bcc367656c777f74270a82ad6986517c28a08c7158c77b1d7954e243`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-src.tar.gz) | `3ba73cf27a05f78026d1cfb3a0e47c6e5e33932aefc630a0a5aa3619561bc4dc`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-client-darwin-386.tar.gz) | `7007e8024257fd2436c9f68ddb25383e889d58379e30a60c9bb6bffb1a6809df`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-client-darwin-amd64.tar.gz) | `f1bc3f0c8e4c8c9e0aa2f66fffea163a5bf139d528160eb4266cd5322cf112e1`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-client-linux-386.tar.gz) | `7ceb47d4b282b31d300aa7a81bf00eef744fb58df58d613e1ea01930287c85d9`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-client-linux-amd64.tar.gz) | `d25c73f0ebb3338fc3e674d4a667d3023d073b8bc4942eb98f1a3fc9001675ef`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-client-linux-arm64.tar.gz) | `3d5a1188f638cddad7cd5eca0668d25f46a6a6f80641a8e9e6f3777a23af0f7c`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-client-linux-arm.tar.gz) | `e9d40ad06385266cd993adf436270972412dd5407d436e682bddf30706fddbda`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-client-linux-ppc64le.tar.gz) | `17f9a60eb6175e28aa0a9ba534cc0ceda24ff8ab81eaf06d04c362146f707e81`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-client-linux-s390x.tar.gz) | `30017ac4603bda496a125162cd956e9e874a4d04eff170972c72c8095a9f9121`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-client-windows-386.tar.gz) | `6165b8d0781894b36b2f2cd72d79063ce95621012cd1ca38bd7d936feeea8416`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-client-windows-amd64.tar.gz) | `ac45e5ddf44dd0a680abc5641ae1cb59ad9c7ab8d4132e3b110ebca7ed2119ac`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-server-linux-amd64.tar.gz) | `a37f0b431aea2cc7e259ddf118fd42315589236106b279de5803e2d50af08531`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-server-linux-arm64.tar.gz) | `e6a5c8a9e59a12df5294766a4e31e08603a041dd75bcc23f19fb7d20d8a30b9a`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-server-linux-arm.tar.gz) | `ebe1ccf95a80a829c294fe8bb216a10a096bc7f311fb0f74b7a121772c4d238b`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-server-linux-ppc64le.tar.gz) | `8a09baa5c2ddfbc579a1601f76b7079dab695c1423d22a04acd039256e26355c`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-beta.4/kubernetes-server-linux-s390x.tar.gz) | `621feb08ac3bee0b9f5b31c648b3011f91883c44954db04268c0da4ef59f16f1`
-
-## Changelog since v1.6.0-beta.3
-
-### Other notable changes
-
-* Update dashboard version to v1.6.0 ([#43210](https://github.com/kubernetes/kubernetes/pull/43210), [@floreks](https://github.com/floreks))
-* Update photon controller go SDK in vendor code. ([#43108](https://github.com/kubernetes/kubernetes/pull/43108), [@luomiao](https://github.com/luomiao))
-* Fluentd was migrated to Daemon Set, which targets nodes with beta.kubernetes.io/fluentd-ds-ready=true label. If you use fluentd in your cluster please make sure that the nodes with version 1.6+ contains this label. ([#42931](https://github.com/kubernetes/kubernetes/pull/42931), [@piosz](https://github.com/piosz))
-* if kube-apiserver is started with `--storage-backend=etcd2`, the media type `application/json` is used. ([#43122](https://github.com/kubernetes/kubernetes/pull/43122), [@liggitt](https://github.com/liggitt))
-* Add -p to mkdirs in gci-mounter function of gce configure.sh script ([#43134](https://github.com/kubernetes/kubernetes/pull/43134), [@shyamjvs](https://github.com/shyamjvs))
-* Rescheduler uses taints in v1beta1 and will remove old ones (in version v1alpha1) right after its start. ([#43106](https://github.com/kubernetes/kubernetes/pull/43106), [@piosz](https://github.com/piosz))
-* kubeadm: `kubeadm reset` won't drain and remove the current node anymore ([#42713](https://github.com/kubernetes/kubernetes/pull/42713), [@luxas](https://github.com/luxas))
-* hack/godep-restore.sh: use godep v79 which works ([#42965](https://github.com/kubernetes/kubernetes/pull/42965), [@sttts](https://github.com/sttts))
-* Patch CVE-2016-8859 in gcr.io/google-containers/cluster-proportional-autoscaler-amd64 ([#42933](https://github.com/kubernetes/kubernetes/pull/42933), [@timstclair](https://github.com/timstclair))
-* Disable devicemapper thin_ls due to excessive iops ([#42899](https://github.com/kubernetes/kubernetes/pull/42899), [@dashpole](https://github.com/dashpole))
-
-
-
-# v1.6.0-beta.3
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.0-beta.3
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes.tar.gz) | `3903f0a49945abe26f5775c20deb25ba65a8607a2944da8802255bd50d20aca7`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-src.tar.gz) | `62f5f9459c14163e319f878494d10296052d75345da7906e8b38a2d6d0d2a25c`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-client-darwin-386.tar.gz) | `1294256f09d3a78a05cf2c85466495b08f87830911e68fd0206964f0466682e3`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-client-darwin-amd64.tar.gz) | `ff6d8561163d9039c807f4cf05144dd3837104b111fac1ae4b667e2b8548d135`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-client-linux-386.tar.gz) | `d32a07b4a24a88cfee589cff91336e411a89ed470557b8f74f34bb6636adc800`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-client-linux-amd64.tar.gz) | `e3663e134cd42bbf71f4f6f0395e6c3ea2080d8621bdab9cc668c77f5478196a`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-client-linux-arm64.tar.gz) | `39465c409396a4cc0ae672f0f0c0db971e482de52e9dff835eb43a8f7e3412e9`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-client-linux-arm.tar.gz) | `8897b38e59cee396213f50453bdcb88808cd56d63be762362d79454ce526b1ea`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-client-linux-ppc64le.tar.gz) | `a32b85c5e495dd3645845f2e8ff0eb366fb4ae4795e2bdafceae97cfe71e34b5`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-client-linux-s390x.tar.gz) | `0af4f0d7778cb67c1acc3b2f3870283e3008c6e1ea8d532c6b90b5a7f1475db8`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-client-windows-386.tar.gz) | `b298561b924c8c88b062759cc69b733187310a7e1af74b1b3987ed256f422b05`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-client-windows-amd64.tar.gz) | `42ec39178885bb06cba4002844e80948e0c9c3618bfb0a009618a3fab1797a69`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-server-linux-amd64.tar.gz) | `333ea0cf5c25f65dbb5d353cac002af3fa5e6f8431e81eaba2534005164c9ce9`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-server-linux-arm64.tar.gz) | `2979a04409863f6e4dbc745eebfd57ee90e0b38ed4449dcb15cfd87d8f80dadc`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-server-linux-arm.tar.gz) | `2ed1e98b2566b4f552951d9496537b18b28ae53eb9e36c6fd17202e9e498eae5`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-server-linux-ppc64le.tar.gz) | `f4989351a6a98746c1d269d72d2fa87dba8ce782bdfc088d9f7f8d10029aa3fe`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-beta.3/kubernetes-server-linux-s390x.tar.gz) | `31fb764136e97e851d1640464154f3ce4fc696e3286314f538da7b19eed3e2fe`
-
-## Changelog since v1.6.0-beta.2
-
-### Other notable changes
-
-* Introduce new generator for apps/v1beta1 deployments ([#42362](https://github.com/kubernetes/kubernetes/pull/42362), [@soltysh](https://github.com/soltysh))
-* Use Prometheus instrumentation conventions ([#36704](https://github.com/kubernetes/kubernetes/pull/36704), [@fabxc](https://github.com/fabxc))
-* Add new DaemonSet status fields to kubectl printer and describer. ([#42843](https://github.com/kubernetes/kubernetes/pull/42843), [@janetkuo](https://github.com/janetkuo))
-* Dropped the support for docker 1.9.x and the belows. ([#42694](https://github.com/kubernetes/kubernetes/pull/42694), [@dchen1107](https://github.com/dchen1107))
-
-
-
-# v1.6.0-beta.2
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.0-beta.2
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes.tar.gz) | `8199c781f8c98ed7048e939a590ea10a6c39f6a74bd35ed526b459fa18e20f50`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-src.tar.gz) | `f8de26ab6493d4547f9068f5ef396650c169702863535ba63feaf815464a6702`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-client-darwin-386.tar.gz) | `0b2350c5ffec582f86d2bd95fa9ecd1b4213fbcd3af79f2a7f67d071c3a0373f`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-client-darwin-amd64.tar.gz) | `a1c81457a34258f2622f841b9971ba490c66f6a0f5725c089430d0f0fb09dc8c`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-client-linux-386.tar.gz) | `40d45492f6741980afde0c83bb752382b699b3d62ac36203faca16fcd9fadd21`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-client-linux-amd64.tar.gz) | `a06baf31249b06375fde1f608ffea041bdbad0f4814ba8ea69839a7778fa4646`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-client-linux-arm64.tar.gz) | `d9e18ceb7efacee5cc2a579e204919bb4c272c586bc15750963946e7fe5dc741`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-client-linux-arm.tar.gz) | `7abc1a2e5c0e40b46b9839b9c9ca065fceec486413ee3c0687e832dc668560ca`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-client-linux-ppc64le.tar.gz) | `84d82f1c2a2b07bea7c827c20cc208f0741b72cf732319673edbf73b42f1b687`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-client-linux-s390x.tar.gz) | `605852ee99117abb5bf62f4239c7e2c7e3976f1f497e24ffed50ba4817c301dc`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-client-windows-386.tar.gz) | `2c442dbfaa393f67f2fe2a1fd2c10267092e99385ca40f7bed732d48bb36ae62`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-client-windows-amd64.tar.gz) | `6b64521cde0b239d9e23e0896919653dfe30ad064d363a9931305feefe04b359`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-server-linux-amd64.tar.gz) | `0a49f719cd295be9a4947b7b8b0fe68c29d8168d7e03a9e37173de340490b578`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-server-linux-arm64.tar.gz) | `fb1464794b9e6375cc7f5b8b72125d81921416b6825fe2c37073aef006e846d1`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-server-linux-arm.tar.gz) | `27acc02302c6d45ef6314a2bceca6012e35c88d0678b219528d21d8ee4c6b424`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-server-linux-ppc64le.tar.gz) | `8eef21ab0700ba2802ef70d2c0b84ee0b27ae0833d2259d425429984f972690e`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-beta.2/kubernetes-server-linux-s390x.tar.gz) | `c6e383f897ceb8143a7b1f023e155c9c39e9e7c220e989cc6c1bfcffdb886dd5`
-
-## Changelog since v1.6.0-beta.1
-
-### Action Required
-
-* Deployment now fully respects ControllerRef to avoid fighting over Pods and ReplicaSets. At the time of upgrade, **you must not have Deployments with selectors that overlap**, or else [ownership of ReplicaSets may change](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/controller-ref.md#upgrading). ([#42175](https://github.com/kubernetes/kubernetes/pull/42175), [@enisoc](https://github.com/enisoc))
-* StatefulSet now respects ControllerRef to avoid fighting over Pods. At the time of upgrade, **you must not have StatefulSets with selectors that overlap** with any other controllers (such as ReplicaSets), or else [ownership of Pods may change](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/controller-ref.md#upgrading). ([#42080](https://github.com/kubernetes/kubernetes/pull/42080), [@enisoc](https://github.com/enisoc))
-
-### Other notable changes
-
-* DaemonSet now respects ControllerRef to avoid fighting over Pods. ([#42173](https://github.com/kubernetes/kubernetes/pull/42173), [@enisoc](https://github.com/enisoc))
-* restored normalization of custom `--etcd-prefix` when `--storage-backend` is set to etcd3 ([#42506](https://github.com/kubernetes/kubernetes/pull/42506), [@liggitt](https://github.com/liggitt))
-* kubelet created cgroups follow lowercase naming conventions ([#42497](https://github.com/kubernetes/kubernetes/pull/42497), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Support whitespace in command path for gcp auth plugin ([#41653](https://github.com/kubernetes/kubernetes/pull/41653), [@jlowdermilk](https://github.com/jlowdermilk))
-* Updates the dnsmasq cache/mux layer to be managed by dnsmasq-nanny. ([#41826](https://github.com/kubernetes/kubernetes/pull/41826), [@bowei](https://github.com/bowei))
- * dnsmasq-nanny manages dnsmasq based on values from the
- * kube-system:kube-dns configmap:
- * "stubDomains": {
- * "acme.local": ["1.2.3.4"]
- * },
- * is a map of domain to list of nameservers for the domain. This is used
- * to inject private DNS domains into the kube-dns namespace. In the above
- * example, any DNS requests for *.acme.local will be served by the
- * nameserver 1.2.3.4.
- * "upstreamNameservers": ["8.8.8.8", "8.8.4.4"]
- * is a list of upstreamNameservers to use, overriding the configuration
- * specified in /etc/resolv.conf.
-* kubelet exports metrics for cgroup management ([#41988](https://github.com/kubernetes/kubernetes/pull/41988), [@sjenning](https://github.com/sjenning))
-* kubectl: respect deployment strategy parameters for rollout status ([#41809](https://github.com/kubernetes/kubernetes/pull/41809), [@kargakis](https://github.com/kargakis))
-* Remove cmd/kube-discovery from the tree since it's not necessary anymore ([#42070](https://github.com/kubernetes/kubernetes/pull/42070), [@luxas](https://github.com/luxas))
-* kubeadm: Hook up kubeadm against the BootstrapSigner ([#41417](https://github.com/kubernetes/kubernetes/pull/41417), [@luxas](https://github.com/luxas))
-* Federated Ingress over GCE no longer requires separate firewall rules to be created for each cluster to circumvent flapping firewall health checks. ([#41942](https://github.com/kubernetes/kubernetes/pull/41942), [@csbell](https://github.com/csbell))
-* ScaleIO Kubernetes Volume Plugin added enabling pods to seamlessly access and use data stored on ScaleIO volumes. ([#38924](https://github.com/kubernetes/kubernetes/pull/38924), [@vladimirvivien](https://github.com/vladimirvivien))
-* Pods are launched in a separate cgroup hierarchy than system services. ([#42350](https://github.com/kubernetes/kubernetes/pull/42350), [@vishh](https://github.com/vishh))
-* Experimental support to reserve a pod's memory request from being utilized by pods in lower QoS tiers. ([#41149](https://github.com/kubernetes/kubernetes/pull/41149), [@sjenning](https://github.com/sjenning))
-* Juju: Disable anonymous auth on kubelet ([#41919](https://github.com/kubernetes/kubernetes/pull/41919), [@Cynerva](https://github.com/Cynerva))
-* Remove support for debian masters in GCE kube-up. ([#41666](https://github.com/kubernetes/kubernetes/pull/41666), [@mikedanese](https://github.com/mikedanese))
-* Implement bulk polling of volumes ([#41306](https://github.com/kubernetes/kubernetes/pull/41306), [@gnufied](https://github.com/gnufied))
-* stop kubectl edit from updating the last-applied-configuration annotation when --save-config is unspecified or false. ([#41924](https://github.com/kubernetes/kubernetes/pull/41924), [@ymqytw](https://github.com/ymqytw))
-
-
-
-# v1.6.0-beta.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.6/examples)
-
-## Downloads for v1.6.0-beta.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes.tar.gz) | `ca17c4f1ebdd4bbbd0e570bf3a29d52be1e962742155bc5e20765434f3141f2d`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-src.tar.gz) | `4aefc25b42594f0aab48e43608c8ef6eca8c115022fcc76a9a0d34430e33be0f`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-client-darwin-386.tar.gz) | `7629da89467e758e6e70c513d5332e6231941de60e99b6621376bc72f9ede314`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | `3a6d6f78ca307486189c7a92e874508233d6b9b5697a0c42cb2803f4b17ccfb2`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-client-linux-386.tar.gz) | `544b944fdcbebb0dbf0e1acedf7e1deb40fd795c46b8f5afe5d622d2091f0ac9`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | `d13f3bede2beb1d7fbca7f01a2c0775938d9127073b0fa1cecba4fd152947eae`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | `8820b18ae1c3bdcb8c93b5641e9322aa8dba25ec42362aa86ecbe6ae690a9809`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-client-linux-arm.tar.gz) | `d928f7e772a74cf715cf382d66ba757394afcf02a03727edfe43305f279fdb87`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | `56ccc3a9def527278cd41ba1ce5b0528238ef7b7b5886d6ebc944b11e2f5228c`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | `4923b9617b5306b321e47450bbfe701242b46b2d27800d82a7289fbabe7a107d`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-client-windows-386.tar.gz) | `598703591fa2be13cc47930088117fc12731431b679f8ca2a5717430bb45fb93`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | `9e839346effcbe9c469519002967069c8d109282aaceb72e02f25cf606a691b2`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | `726b9e4ead829ebd293fe6674ab334f72aa163b1544963febb9bc35d1fb26e6f`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | `975d02629619d441f60442ca07c42721e103e9e5bbcc2eea302b7c936303d26b`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-server-linux-arm.tar.gz) | `98223dd80f34eed3cdb30fb57df1da96630db9c0f04aae6a685e22a29c16398d`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | `a73715b7db73d6d0ad0b78b01829fe9f22566b557eebe2c1a960a81693b0c8b5`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | `d3cb54e9193c773ea9998106c75bb3f0af705477fb844bcc8f82c845c44bb00d`
-
-## Changelog since v1.6.0-alpha.3
-
-### Action Required
-
-* The --dns-provider argument of 'kubefed init' is now mandatory and does not default to `google-clouddns`. To initialize a Federation control plane with Google Cloud DNS, use the following invocation: 'kubefed init --dns-provider=google-clouddns' ([#42092](https://github.com/kubernetes/kubernetes/pull/42092), [@marun](https://github.com/marun))
-* Change taints/tolerations to api fields ([#38957](https://github.com/kubernetes/kubernetes/pull/38957), [@aveshagarwal](https://github.com/aveshagarwal))
-
-### Other notable changes
-
-* kubeadm: Rename some flags for beta UI and fixup some logic ([#42064](https://github.com/kubernetes/kubernetes/pull/42064), [@luxas](https://github.com/luxas))
-* StorageClassName attribute has been added to PersistentVolume and PersistentVolumeClaim objects and should be used instead of annotation `volume.beta.kubernetes.io/storage-class`. The beta annotation is still working in this release, however it will be removed in a future release. ([#42128](https://github.com/kubernetes/kubernetes/pull/42128), [@jsafrane](https://github.com/jsafrane))
-* Remove Azure kube-up as the Azure community has focused efforts elsewhere. ([#41672](https://github.com/kubernetes/kubernetes/pull/41672), [@mikedanese](https://github.com/mikedanese))
-* Fluentd-gcp containers spawned by DaemonSet are now configured using ConfigMap ([#42126](https://github.com/kubernetes/kubernetes/pull/42126), [@Crassirostris](https://github.com/Crassirostris))
-* Modified kubemark startup scripts to restore master on reboot ([#41980](https://github.com/kubernetes/kubernetes/pull/41980), [@shyamjvs](https://github.com/shyamjvs))
-* Added new Api `PodPreset` to enable defining cross-cutting injection of Volumes and Environment into Pods. ([#41931](https://github.com/kubernetes/kubernetes/pull/41931), [@jessfraz](https://github.com/jessfraz))
-* AWS cloud provider: allow to run the master with a different AWS account or even on a different cloud provider than the nodes. ([#39996](https://github.com/kubernetes/kubernetes/pull/39996), [@scheeles](https://github.com/scheeles))
-* Update defaultbackend image to 1.3 ([#42212](https://github.com/kubernetes/kubernetes/pull/42212), [@timstclair](https://github.com/timstclair))
-* Allow the Horizontal Pod Autoscaler controller to talk to the metrics API and custom metrics API as standard APIs. ([#41824](https://github.com/kubernetes/kubernetes/pull/41824), [@DirectXMan12](https://github.com/DirectXMan12))
-* Implement support for mount options in PVs ([#41906](https://github.com/kubernetes/kubernetes/pull/41906), [@gnufied](https://github.com/gnufied))
-* Introduce apps/v1beta1.Deployments resource with modified defaults compared to extensions/v1beta1.Deployments. ([#39683](https://github.com/kubernetes/kubernetes/pull/39683), [@soltysh](https://github.com/soltysh))
-* Add DNS suffix search list support in Windows kube-proxy. ([#41618](https://github.com/kubernetes/kubernetes/pull/41618), [@JiangtianLi](https://github.com/JiangtianLi))
-* `--experimental-nvidia-gpus` flag is **replaced** by `Accelerators` alpha feature gate along with support for multiple Nvidia GPUs. ([#42116](https://github.com/kubernetes/kubernetes/pull/42116), [@vishh](https://github.com/vishh))
- * To use GPUs, pass `Accelerators=true` as part of `--feature-gates` flag.
- * Works only with Docker runtime.
-* Clean up the kube-proxy container image by removing unnecessary packages and files. ([#42090](https://github.com/kubernetes/kubernetes/pull/42090), [@timstclair](https://github.com/timstclair))
-* AWS: Support shared tag `kubernetes.io/cluster/` ([#41695](https://github.com/kubernetes/kubernetes/pull/41695), [@justinsb](https://github.com/justinsb))
-* Insecure access to the API Server at localhost:8080 will be turned off in v1.6 when using kubeadm ([#42066](https://github.com/kubernetes/kubernetes/pull/42066), [@luxas](https://github.com/luxas))
-* AWS: Do not consider master instance zones for dynamic volume creation ([#41702](https://github.com/kubernetes/kubernetes/pull/41702), [@justinsb](https://github.com/justinsb))
-* Added foreground garbage collection: the owner object will not be deleted until all its dependents are deleted by the garbage collector. Please checkout the [user doc](https://kubernetes.io/docs/concepts/abstractions/controllers/garbage-collection/) for details. ([#38676](https://github.com/kubernetes/kubernetes/pull/38676), [@caesarxuchao](https://github.com/caesarxuchao))
- * deleteOptions.orphanDependents is going to be deprecated in 1.7. Please use deleteOptions.propagationPolicy instead.
-* force unlock rbd image if the image is not used ([#41597](https://github.com/kubernetes/kubernetes/pull/41597), [@rootfs](https://github.com/rootfs))
-* The kubernetes-master, kubernetes-worker and kubeapi-load-balancer charms have gained an nrpe-external-master relation, allowing the integration of their monitoring in an external Nagios server. ([#41923](https://github.com/kubernetes/kubernetes/pull/41923), [@Cynerva](https://github.com/Cynerva))
-* make kubectl describe pod show tolerationSeconds ([#42162](https://github.com/kubernetes/kubernetes/pull/42162), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Completed pods should not be hidden when requested by name via `kubectl get`. ([#42216](https://github.com/kubernetes/kubernetes/pull/42216), [@smarterclayton](https://github.com/smarterclayton))
-* [Federation][Kubefed] Flag cleanup ([#41335](https://github.com/kubernetes/kubernetes/pull/41335), [@irfanurrehman](https://github.com/irfanurrehman))
-* Add the support to the scheduler for spreading pods of StatefulSets. ([#41708](https://github.com/kubernetes/kubernetes/pull/41708), [@bsalamat](https://github.com/bsalamat))
-* Portworx Volume Plugin added enabling [Portworx](http://www.portworx.com) to be used as a storage provider for Kubernetes clusters. Portworx pools your servers capacity and turns your servers or cloud instances into converged, highly available compute and storage nodes. ([#39535](https://github.com/kubernetes/kubernetes/pull/39535), [@adityadani](https://github.com/adityadani))
-* Remove support for trusty in GCE kube-up. ([#41670](https://github.com/kubernetes/kubernetes/pull/41670), [@mikedanese](https://github.com/mikedanese))
-* Import a natural sorting library and use it in the sorting printer. ([#40746](https://github.com/kubernetes/kubernetes/pull/40746), [@matthyx](https://github.com/matthyx))
-* Parameter keys in a StorageClass `parameters` map may not use the `kubernetes.io` or `k8s.io` namespaces. ([#41837](https://github.com/kubernetes/kubernetes/pull/41837), [@liggitt](https://github.com/liggitt))
-* Make DaemonSet respect critical pods annotation when scheduling. ([#42028](https://github.com/kubernetes/kubernetes/pull/42028), [@janetkuo](https://github.com/janetkuo))
-* New Kubelet flag `--enforce-node-allocatable` with a default value of `pods` is added which will make kubelet create a top level cgroup for all pods to enforce Node Allocatable. Optionally, `system-reserved` & `kube-reserved` values can also be specified separated by comma to enforce node allocatable on cgroups specified via `--system-reserved-cgroup` & `--kube-reserved-cgroup` respectively. Note the default value of the latter flags are "". ([#41234](https://github.com/kubernetes/kubernetes/pull/41234), [@vishh](https://github.com/vishh))
- * This feature requires a **Node Drain** prior to upgrade failing which pods will be restarted if possible or terminated if they have a `RestartNever` policy.
-* Deployment of AWS Kubernetes clusters using the in-tree bash deployment (i.e. cluster/kube-up.sh or get-kube.sh) is obsolete. v1.5.x will be the last release to support cluster/kube-up.sh with AWS. For a list of viable alternatives, see: http://kubernetes.io/docs/getting-started-guides/aws/ ([#42196](https://github.com/kubernetes/kubernetes/pull/42196), [@zmerlynn](https://github.com/zmerlynn))
-* kubectl logs allows getting logs directly from deployment, job and statefulset ([#40927](https://github.com/kubernetes/kubernetes/pull/40927), [@soltysh](https://github.com/soltysh))
-* make kubectl taint command respect effect NoExecute ([#42120](https://github.com/kubernetes/kubernetes/pull/42120), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Flex volume plugin is updated to support attach/detach interfaces. It broke backward compatibility. Please update your drivers and implement the new callouts. ([#41804](https://github.com/kubernetes/kubernetes/pull/41804), [@chakri-nelluri](https://github.com/chakri-nelluri))
-* Implement the update feature for DaemonSet. ([#41116](https://github.com/kubernetes/kubernetes/pull/41116), [@lukaszo](https://github.com/lukaszo))
-* [Federation] Create configmap for the cluster kube-dns when cluster joins and remove when it unjoins ([#39338](https://github.com/kubernetes/kubernetes/pull/39338), [@irfanurrehman](https://github.com/irfanurrehman))
-* New GKE certificates controller. ([#41160](https://github.com/kubernetes/kubernetes/pull/41160), [@pipejakob](https://github.com/pipejakob))
-* Juju: Fix shebangs in charm actions to use python3 ([#42058](https://github.com/kubernetes/kubernetes/pull/42058), [@Cynerva](https://github.com/Cynerva))
-* Support kubectl apply set-last-applied command to update the applied-applied-configuration annotation ([#41694](https://github.com/kubernetes/kubernetes/pull/41694), [@shiywang](https://github.com/shiywang))
-* On GCI by default logrotate is disabled for application containers in favor of rotation mechanism provided by docker logging driver. ([#40634](https://github.com/kubernetes/kubernetes/pull/40634), [@Crassirostris](https://github.com/Crassirostris))
-* Cleanup fluentd-gcp image: rebase on debian-base, switch to upstream packages, remove fluent-ui & rails ([#41998](https://github.com/kubernetes/kubernetes/pull/41998), [@timstclair](https://github.com/timstclair))
-* Updating apiserver to return http status code 202 for a delete request when the resource is not immediately deleted because of user requesting cascading deletion using DeleteOptions.OrphanDependents=false. ([#41165](https://github.com/kubernetes/kubernetes/pull/41165), [@nikhiljindal](https://github.com/nikhiljindal))
-* [Federation][kubefed] Support configuring dns-provider ([#40528](https://github.com/kubernetes/kubernetes/pull/40528), [@shashidharatd](https://github.com/shashidharatd))
-* Added support to minimize sending verbose node information to scheduler extender by sending only node names and expecting extenders to cache the rest of the node information ([#41119](https://github.com/kubernetes/kubernetes/pull/41119), [@sarat-k](https://github.com/sarat-k))
-* Guaranteed admission for Critical Pods ([#40952](https://github.com/kubernetes/kubernetes/pull/40952), [@dashpole](https://github.com/dashpole))
-* Switch to the `node-role.kubernetes.io/master` label for marking and tainting the master node in kubeadm ([#41835](https://github.com/kubernetes/kubernetes/pull/41835), [@luxas](https://github.com/luxas))
-* Allow drain --force to remove pods whose managing resource is deleted. ([#41864](https://github.com/kubernetes/kubernetes/pull/41864), [@marun](https://github.com/marun))
-* add kubectl can-i to see if you can perform an action ([#41077](https://github.com/kubernetes/kubernetes/pull/41077), [@deads2k](https://github.com/deads2k))
-* enable DefaultTolerationSeconds admission controller by default ([#41815](https://github.com/kubernetes/kubernetes/pull/41815), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Make DaemonSets survive taint-based evictions when nodes turn unreachable/notReady. ([#41896](https://github.com/kubernetes/kubernetes/pull/41896), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Add configurable limits to CronJob resource to specify how many successful and failed jobs are preserved. ([#40932](https://github.com/kubernetes/kubernetes/pull/40932), [@peay](https://github.com/peay))
-* Deprecate outofdisk-transition-frequency and low-diskspace-threshold-mb flags ([#41941](https://github.com/kubernetes/kubernetes/pull/41941), [@dashpole](https://github.com/dashpole))
-* Add OWNERS for sample-apiserver in staging ([#42094](https://github.com/kubernetes/kubernetes/pull/42094), [@sttts](https://github.com/sttts))
-* Update gcr.io/google-containers/rescheduler to v0.2.2, which uses busybox as a base image instead of ubuntu. ([#41911](https://github.com/kubernetes/kubernetes/pull/41911), [@ixdy](https://github.com/ixdy))
-* Add storage.k8s.io/v1 API ([#40088](https://github.com/kubernetes/kubernetes/pull/40088), [@jsafrane](https://github.com/jsafrane))
-* Juju - K8s master charm now properly keeps distributed master files in sync for an HA control plane. ([#41351](https://github.com/kubernetes/kubernetes/pull/41351), [@chuckbutler](https://github.com/chuckbutler))
-* Fix zsh completion: unknown file attribute error ([#38104](https://github.com/kubernetes/kubernetes/pull/38104), [@elipapa](https://github.com/elipapa))
-* kubelet config should ignore file start with dots ([#39196](https://github.com/kubernetes/kubernetes/pull/39196), [@resouer](https://github.com/resouer))
-* Add an alpha feature that makes NodeController set Taints instead of deleting Pods from not Ready Nodes. ([#41133](https://github.com/kubernetes/kubernetes/pull/41133), [@gmarek](https://github.com/gmarek))
-* Base etcd-empty-dir-cleanup on busybox, run as nobody, and update to etcdctl 3.0.14 ([#41674](https://github.com/kubernetes/kubernetes/pull/41674), [@ixdy](https://github.com/ixdy))
-* Fix zone placement heuristics so that multiple mounts in a StatefulSet pod are created in the same zone ([#40910](https://github.com/kubernetes/kubernetes/pull/40910), [@justinsb](https://github.com/justinsb))
-* Flag --use-kubernetes-version for kubeadm init renamed to --kubernetes-version ([#41820](https://github.com/kubernetes/kubernetes/pull/41820), [@kad](https://github.com/kad))
-* `kube-dns` now runs using a separate `system:serviceaccount:kube-system:kube-dns` service account which is automatically bound to the correct RBAC permissions. ([#38816](https://github.com/kubernetes/kubernetes/pull/38816), [@deads2k](https://github.com/deads2k))
-* [Kubemark] Fixed hollow-npd container command to log to file ([#41858](https://github.com/kubernetes/kubernetes/pull/41858), [@shyamjvs](https://github.com/shyamjvs))
-* kubeadm: Remove the --cloud-provider flag for beta init UX ([#41710](https://github.com/kubernetes/kubernetes/pull/41710), [@luxas](https://github.com/luxas))
-* The CertificateSigningRequest API added the `extra` field to persist all information about the requesting user. This mirrors the fields in the SubjectAccessReview API used to check authorization. ([#41755](https://github.com/kubernetes/kubernetes/pull/41755), [@liggitt](https://github.com/liggitt))
-* Upgrade golang versions to 1.7.5 ([#41771](https://github.com/kubernetes/kubernetes/pull/41771), [@cblecker](https://github.com/cblecker))
-* Added a new secret type "bootstrap.kubernetes.io/token" for dynamically creating TLS bootstrapping bearer tokens. ([#41281](https://github.com/kubernetes/kubernetes/pull/41281), [@ericchiang](https://github.com/ericchiang))
-* Remove unnecessary metrics (http/process/go) from being exposed by etcd-version-monitor ([#41807](https://github.com/kubernetes/kubernetes/pull/41807), [@shyamjvs](https://github.com/shyamjvs))
-* Added `kubectl create clusterrole` command. ([#41538](https://github.com/kubernetes/kubernetes/pull/41538), [@xingzhou](https://github.com/xingzhou))
-* Support new kubectl apply view-last-applied command for viewing the last configuration file applied ([#41146](https://github.com/kubernetes/kubernetes/pull/41146), [@shiywang](https://github.com/shiywang))
-* Bump GCI to gci-stable-56-9000-84-2 ([#41819](https://github.com/kubernetes/kubernetes/pull/41819), [@dchen1107](https://github.com/dchen1107))
-* list-resources: don't fail if the grep fails to match any resources ([#41933](https://github.com/kubernetes/kubernetes/pull/41933), [@ixdy](https://github.com/ixdy))
-* client-go no longer imports GCP OAuth2 and OpenID Connect packages by default. ([#41532](https://github.com/kubernetes/kubernetes/pull/41532), [@ericchiang](https://github.com/ericchiang))
-* Each pod has its own associated cgroup by default. ([#41349](https://github.com/kubernetes/kubernetes/pull/41349), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Whitelist kubemark in node_ssh_supported_providers for log dump ([#41800](https://github.com/kubernetes/kubernetes/pull/41800), [@shyamjvs](https://github.com/shyamjvs))
-* Support KUBE_MAX_PD_VOLS on Azure ([#41398](https://github.com/kubernetes/kubernetes/pull/41398), [@codablock](https://github.com/codablock))
-* Projected volume plugin ([#37237](https://github.com/kubernetes/kubernetes/pull/37237), [@jpeeler](https://github.com/jpeeler))
-* `--output-version` is ignored for all commands except `kubectl convert`. This is consistent with the generic nature of `kubectl` CRUD commands and the previous removal of `--api-version`. Specific versions can be specified in the resource field: `resource.version.group`, `jobs.v1.batch`. ([#41576](https://github.com/kubernetes/kubernetes/pull/41576), [@deads2k](https://github.com/deads2k))
-* Added bool type support for jsonpath. ([#39063](https://github.com/kubernetes/kubernetes/pull/39063), [@xingzhou](https://github.com/xingzhou))
-* Nodes can now report two additional address types in their status: InternalDNS and ExternalDNS. The apiserver can use `--kubelet-preferred-address-types` to give priority to the type of address it uses to reach nodes. ([#34259](https://github.com/kubernetes/kubernetes/pull/34259), [@liggitt](https://github.com/liggitt))
-* Clients now use the `?watch=true` parameter to make watch API calls, instead of the `/watch/` path prefix ([#41722](https://github.com/kubernetes/kubernetes/pull/41722), [@liggitt](https://github.com/liggitt))
-* ResourceQuota ability to support default limited resources ([#36765](https://github.com/kubernetes/kubernetes/pull/36765), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Fix kubemark default e2e test suite's name ([#41751](https://github.com/kubernetes/kubernetes/pull/41751), [@shyamjvs](https://github.com/shyamjvs))
-* federation aws: add logging of route53 calls ([#39964](https://github.com/kubernetes/kubernetes/pull/39964), [@justinsb](https://github.com/justinsb))
-* Fix ConfigMap for Windows Containers. ([#39373](https://github.com/kubernetes/kubernetes/pull/39373), [@jbhurat](https://github.com/jbhurat))
-* add defaultTolerationSeconds admission controller ([#41414](https://github.com/kubernetes/kubernetes/pull/41414), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Node Problem Detector is beta now. New features added: journald support, standalone mode and arbitrary system log monitoring. ([#40206](https://github.com/kubernetes/kubernetes/pull/40206), [@Random-Liu](https://github.com/Random-Liu))
-* Fix the output of health-mointor.sh ([#41525](https://github.com/kubernetes/kubernetes/pull/41525), [@yujuhong](https://github.com/yujuhong))
-* kubectl describe no longer prints the last-applied-configuration annotation for secrets. ([#34664](https://github.com/kubernetes/kubernetes/pull/34664), [@ymqytw](https://github.com/ymqytw))
-* Report node not ready on failed PLEG health check ([#41569](https://github.com/kubernetes/kubernetes/pull/41569), [@yujuhong](https://github.com/yujuhong))
-* Delay Deletion of a Pod until volumes are cleaned up ([#41456](https://github.com/kubernetes/kubernetes/pull/41456), [@dashpole](https://github.com/dashpole))
-* Alpha version of dynamic volume provisioning is removed in this release. Annotation ([#40000](https://github.com/kubernetes/kubernetes/pull/40000), [@jsafrane](https://github.com/jsafrane))
- * "volume.alpha.kubernetes.io/storage-class" does not have any special meaning. A default storage class
- * and DefaultStorageClass admission plugin can be used to preserve similar behavior of Kubernetes cluster,
- * see https://kubernetes.io/docs/user-guide/persistent-volumes/#class-1 for details.
-* An `automountServiceAccountToken *bool` field was added to ServiceAccount and PodSpec objects. If set to `false` on a pod spec, no service account token is automounted in the pod. If set to `false` on a service account, no service account token is automounted for that service account unless explicitly overridden in the pod spec. ([#37953](https://github.com/kubernetes/kubernetes/pull/37953), [@liggitt](https://github.com/liggitt))
-* Bump addon-manager version to v6.4-alpha.1 in kubemark ([#41506](https://github.com/kubernetes/kubernetes/pull/41506), [@shyamjvs](https://github.com/shyamjvs))
-* Do not daemonize `salt-minion` for the openstack-heat provider. ([#40722](https://github.com/kubernetes/kubernetes/pull/40722), [@micmro](https://github.com/micmro))
-* Move private key parsing from serviceaccount/jwt.go to client-go/util/cert ([#40907](https://github.com/kubernetes/kubernetes/pull/40907), [@cblecker](https://github.com/cblecker))
-* Added configurable etcd initial-cluster-state to kube-up script. ([#41332](https://github.com/kubernetes/kubernetes/pull/41332), [@jszczepkowski](https://github.com/jszczepkowski))
-
-
-
-# v1.6.0-alpha.3
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/master/examples)
-
-## Downloads for v1.6.0-alpha.3
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes.tar.gz) | `41b5e9edd973cbb8e68eb5d8d758c4f0afa11dfbd65df49e1c361206706a974c`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-src.tar.gz) | `ec13e22322c85752918c23b0b498ba02087a1227b8fdc169f19acdf128f907c4`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-client-darwin-386.tar.gz) | `5a631b7604a69ef13c27b43e6df10f8bf14ff9170440fb07d0c46bc88a5a1eac`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-client-darwin-amd64.tar.gz) | `cfba71e38a924b783fcdbc0b1a342671d52af3588a8211e35048e9c071ed03b2`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-client-linux-386.tar.gz) | `ceeee264b12959cb2b314efa9df4c165ea1598b8824ec652eb3994096f4ec07f`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-client-linux-amd64.tar.gz) | `1bd3a4b64ab1535780f18b3e7a56dd1301a8ea8d66869ee704f66985c1fca9b4`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-client-linux-arm64.tar.gz) | `d1615b3223c6e83422ed8409fc8d0a7a6069982d3413a482e12966b953520fe0`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-client-linux-arm.tar.gz) | `19133867e2d104db3e01212dbc4a702a315310a10e86076b6b80a16b94cf7954`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-client-linux-ppc64le.tar.gz) | `0f89e17eb881c7db39195bc94874e3ec54866d2f57eef1540b5d843bedbe4326`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-client-linux-s390x.tar.gz) | `3ed06cb89ffec011e4248c14d9e1c88c815b7363d1fdba217ed17e900f29960b`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-client-windows-386.tar.gz) | `87927cbe26cefa296e2752075d018a58826bc7fa141c4cbe56116a254a3470cc`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-client-windows-amd64.tar.gz) | `e97e7dafbf670140d3c4879a6738b970ac77d917861df3eea0c502238dd297b0`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-server-linux-amd64.tar.gz) | `3aa82b838be450ce8dedbebfda45c453864c15aae6363ae5f1c0b0d285ffad2a`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-server-linux-arm64.tar.gz) | `0bdeac3524ab7ef366f3bb75e2fbff3db156dcba2b862e8b2de393e4ec4377c9`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-server-linux-arm.tar.gz) | `1f37886aba4027ec682afe5f02a4d66a6645af2476f2954933c1b437ec66dafa`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-server-linux-ppc64le.tar.gz) | `eb81d3cdd703790d5c96e24917183dc123aeabbe9a291c2dd86c68d21d9fd213`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-alpha.3/kubernetes-server-linux-s390x.tar.gz) | `a50a57c689583f97fd4ff7af766bf7ae79c9fd97e46720bc41f385f2c51e1f99`
-
-## Changelog since v1.6.0-alpha.2
-
-### Other notable changes
-
-* Fix AWS device allocator to only use valid device names ([#41455](https://github.com/kubernetes/kubernetes/pull/41455), [@gnufied](https://github.com/gnufied))
-* [Federation][Kubefed] Bug fix relating kubeconfig path in kubefed init ([#41410](https://github.com/kubernetes/kubernetes/pull/41410), [@irfanurrehman](https://github.com/irfanurrehman))
-* The apiserver audit log (`/var/log/kube-apiserver-audit.log`) will be sent through fluentd if enabled. ([#41360](https://github.com/kubernetes/kubernetes/pull/41360), [@enisoc](https://github.com/enisoc))
-* Bump GCE ContainerVM to container-vm-v20170214 to address CVE-2016-9962. ([#41449](https://github.com/kubernetes/kubernetes/pull/41449), [@zmerlynn](https://github.com/zmerlynn))
-* Fixed issues [#39202](https://github.com/kubernetes/kubernetes/pull/39202), [#41041](https://github.com/kubernetes/kubernetes/pull/41041) and [#40941](https://github.com/kubernetes/kubernetes/pull/40941) that caused the iSCSI connections to be prematurely closed when deleting a pod with an iSCSI persistent volume attached and that prevented the use of newly created LUNs on targets with preestablished connections. ([#41196](https://github.com/kubernetes/kubernetes/pull/41196), [@CristianPop](https://github.com/CristianPop))
-* The kube-apiserver [basic audit log](https://kubernetes.io/docs/admin/audit/) can be enabled in GCE by exporting the environment variable `ENABLE_APISERVER_BASIC_AUDIT=true` before running `cluster/kube-up.sh`. This will log to `/var/log/kube-apiserver-audit.log` and use the same `logrotate` settings as `/var/log/kube-apiserver.log`. ([#41211](https://github.com/kubernetes/kubernetes/pull/41211), [@enisoc](https://github.com/enisoc))
-* On kube-up.sh clusters on GCE, kube-scheduler now contacts the API on the secured port. ([#41285](https://github.com/kubernetes/kubernetes/pull/41285), [@liggitt](https://github.com/liggitt))
-* Default RBAC ClusterRole and ClusterRoleBinding objects are automatically updated at server start to add missing permissions and subjects (extra permissions and subjects are left in place). To prevent autoupdating a particular role or rolebinding, annotate it with `rbac.authorization.kubernetes.io/autoupdate=false`. ([#41155](https://github.com/kubernetes/kubernetes/pull/41155), [@liggitt](https://github.com/liggitt))
-* Make EnableCRI default to true ([#41378](https://github.com/kubernetes/kubernetes/pull/41378), [@yujuhong](https://github.com/yujuhong))
-* `kubectl edit` now edits objects exactly as they were retrieved from the API. This allows using `kubectl edit` with third-party resources and extension API servers. Because client-side conversion is no longer done, the `--output-version` option is deprecated for `kubectl edit`. To edit using a particular API version, fully-qualify the resource, version, and group used to fetch the object (for example, `job.v1.batch/myjob`) ([#41304](https://github.com/kubernetes/kubernetes/pull/41304), [@liggitt](https://github.com/liggitt))
-* We change the default attach_detach_controller sync period to 1 minute to reduce the query frequency through cloud provider to check whether volumes are attached or not. ([#41363](https://github.com/kubernetes/kubernetes/pull/41363), [@jingxu97](https://github.com/jingxu97))
-* RBAC `v1beta1` RoleBinding/ClusterRoleBinding subjects changed `apiVersion` to `apiGroup` to fully-qualify a subject. ServiceAccount subjects default to an apiGroup of `""`, User and Group subjects default to an apiGroup of `"rbac.authorization.k8s.io"`. ([#41184](https://github.com/kubernetes/kubernetes/pull/41184), [@liggitt](https://github.com/liggitt))
-* Add support for finalizers in federated configmaps (deletes configmaps from underlying clusters). ([#40464](https://github.com/kubernetes/kubernetes/pull/40464), [@csbell](https://github.com/csbell))
-* Make DaemonSet controller respect node taints and pod tolerations. ([#41172](https://github.com/kubernetes/kubernetes/pull/41172), [@janetkuo](https://github.com/janetkuo))
-* Added kubectl create role command ([#39852](https://github.com/kubernetes/kubernetes/pull/39852), [@xingzhou](https://github.com/xingzhou))
-* If `experimentalCriticalPodAnnotation` feature gate is set to true, fluentd pods will not be evicted by the kubelet. ([#41035](https://github.com/kubernetes/kubernetes/pull/41035), [@vishh](https://github.com/vishh))
-
-
-
-# v1.6.0-alpha.2
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/master/examples)
-
-## Downloads for v1.6.0-alpha.2
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes.tar.gz) | `d1a5c7bc435c0f58dca9eab54e8155b6e4797d4b5d6b0cb8feab968dd3132165`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-src.tar.gz) | `8d09b973f3debfe3d10b0ad392e56141446bc0d04aac60df6d761189997d97ed`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-client-darwin-386.tar.gz) | `b1a7d002768fff8282f8873fde6a0ed215d20fd72197d8e583c024b7cbbe3eb8`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | `b0f872bbefdc1ecc9585dfdeb9c7e094f7a16ebbe4db11c64c70d1ef7f93e361`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-client-linux-386.tar.gz) | `53be6adde2d13058d03d0f283ca166bb495cc49cd2e36339696dc46f85f78c8f`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | `6436463d51ed54b50023cd725b054fd2b039e391095d8a618e91979fc55d4ee0`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | `d6638c8950a9e03ed64c3f3e1ad82166642c02aeb8f7fb2079db1f137170a145`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | `05d0e466a27fc9a5b6535cbd7683e08739cd37aa2c6213c000fdaa305e4eb888`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-client-linux-ppc64le.tar.gz) | `38971be682cbf1f194eeb9ad683272a58042f4f91992db6fc34720de28d88dd6`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-client-linux-s390x.tar.gz) | `774a002482d6b62338550b20d90b914a08481965ed1b78cd348535d90f88f344`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-client-windows-386.tar.gz) | `690ab995ac27c90c811578677fb8688d43198499bfc451a2f908ad7a76474ee8`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | `757fe9e2083e2da706b52c96da34548aa72bbbbff50bb261c1198c80b36189c3`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | `5aa3161a1030ddb02985171d4343a99d14ad6e09e130549b20fc96797588ff1e`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | `babce8c402c8e88310ba82315f758e981d4cfe20dcbf3047e55b279d5d4f3a33`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | `4b1d4c4ba95d86481d32daf09e769f7f9e4e0d71e11d39a5a4e205804b023172`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-server-linux-ppc64le.tar.gz) | `070423e62a0dff7ef17e29a63ac2eda5a46b6e1badf67214c07970b83610bf6c`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-alpha.2/kubernetes-server-linux-s390x.tar.gz) | `3a826fef775819a4f03e7db91684db6edfdaaad3e3eb366c4321bdc5ec0b0f25`
-
-## Changelog since v1.6.0-alpha.1
-
-### Other notable changes
-
-* Align the hyperkube image to support running binaries at /usr/local/bin/ like the other server images ([#41017](https://github.com/kubernetes/kubernetes/pull/41017), [@luxas](https://github.com/luxas))
-* Native support for token based bootstrap flow. This includes signing a well known ConfigMap in the `kube-public` namespace and cleaning out expired tokens. ([#36101](https://github.com/kubernetes/kubernetes/pull/36101), [@jbeda](https://github.com/jbeda))
-* Reverts to looking up the current VM in vSphere using the machine's UUID, either obtained via sysfs or via the `vm-uuid` parameter in the cloud configuration file. ([#40892](https://github.com/kubernetes/kubernetes/pull/40892), [@robdaemon](https://github.com/robdaemon))
-* This PR adds a manager to NodeController that is responsible for removing Pods from Nodes tainted with NoExecute Taints. This feature is beta (as the rest of taints) and enabled by default. It's gated by controller-manager enable-taint-manager flag. ([#40355](https://github.com/kubernetes/kubernetes/pull/40355), [@gmarek](https://github.com/gmarek))
-* The authentication.k8s.io API group was promoted to v1 ([#41058](https://github.com/kubernetes/kubernetes/pull/41058), [@liggitt](https://github.com/liggitt))
-* Fixes issue [#38418](https://github.com/kubernetes/kubernetes/pull/38418) which, under circumstance, could cause StatefulSet to deadlock. ([#40838](https://github.com/kubernetes/kubernetes/pull/40838), [@kow3ns](https://github.com/kow3ns))
- * Mediates issue [#36859](https://github.com/kubernetes/kubernetes/pull/36859). StatefulSet only acts on Pods whose identity matches the StatefulSet, providing a partial mediation for overlapping controllers.
-* Introduces an new alpha version of the Horizontal Pod Autoscaler including expanded support for specifying metrics. ([#36033](https://github.com/kubernetes/kubernetes/pull/36033), [@DirectXMan12](https://github.com/DirectXMan12))
-* Set all node conditions to Unknown when node is unreachable ([#36592](https://github.com/kubernetes/kubernetes/pull/36592), [@andrewsykim](https://github.com/andrewsykim))
-* [Federation] Add override flags options to kubefed init ([#40917](https://github.com/kubernetes/kubernetes/pull/40917), [@irfanurrehman](https://github.com/irfanurrehman))
-* Fix for detach volume when node is not present/ powered off ([#40118](https://github.com/kubernetes/kubernetes/pull/40118), [@BaluDontu](https://github.com/BaluDontu))
-* Bump up GLBC version from 0.9.0-beta to 0.9.1 ([#41037](https://github.com/kubernetes/kubernetes/pull/41037), [@bprashanth](https://github.com/bprashanth))
-* The deprecated flags --config, --auth-path, --resource-container, and --system-container were removed. ([#40048](https://github.com/kubernetes/kubernetes/pull/40048), [@mtaufen](https://github.com/mtaufen))
-* Add `kubectl attach` support for multiple types ([#40365](https://github.com/kubernetes/kubernetes/pull/40365), [@shiywang](https://github.com/shiywang))
-* [Kubelet] Delay deletion of pod from the API server until volumes are deleted ([#41095](https://github.com/kubernetes/kubernetes/pull/41095), [@dashpole](https://github.com/dashpole))
-* remove the create-external-load-balancer flag in cmd/expose.go ([#38183](https://github.com/kubernetes/kubernetes/pull/38183), [@tianshapjq](https://github.com/tianshapjq))
-* The authorization.k8s.io API group was promoted to v1 ([#40709](https://github.com/kubernetes/kubernetes/pull/40709), [@liggitt](https://github.com/liggitt))
-* Bump GCI to gci-beta-56-9000-80-0 ([#41027](https://github.com/kubernetes/kubernetes/pull/41027), [@dchen1107](https://github.com/dchen1107))
-* [Federation][kubefed] Add option to expose federation apiserver on nodeport service ([#40516](https://github.com/kubernetes/kubernetes/pull/40516), [@shashidharatd](https://github.com/shashidharatd))
-* Rename --experiemental-cgroups-per-qos to --cgroups-per-qos ([#39972](https://github.com/kubernetes/kubernetes/pull/39972), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* PV E2E: provide each spec with a fresh nfs host ([#40879](https://github.com/kubernetes/kubernetes/pull/40879), [@copejon](https://github.com/copejon))
-* Remove the temporary fix for pre-1.0 mirror pods ([#40877](https://github.com/kubernetes/kubernetes/pull/40877), [@yujuhong](https://github.com/yujuhong))
-* fix --save-config in create subcommand ([#40289](https://github.com/kubernetes/kubernetes/pull/40289), [@xilabao](https://github.com/xilabao))
-* We should mention the caveats of in-place upgrade in release note. ([#40727](https://github.com/kubernetes/kubernetes/pull/40727), [@Random-Liu](https://github.com/Random-Liu))
-* The SubjectAccessReview API passes subresource and resource name information to the authorizer to answer authorization queries. ([#40935](https://github.com/kubernetes/kubernetes/pull/40935), [@liggitt](https://github.com/liggitt))
-* When feature gate "ExperimentalCriticalPodAnnotation" is set, Kubelet will avoid evicting pods in "kube-system" namespace that contains a special annotation - `scheduler.alpha.kubernetes.io/critical-pod` ([#40655](https://github.com/kubernetes/kubernetes/pull/40655), [@vishh](https://github.com/vishh))
- * This feature should be used in conjunction with the rescheduler to guarantee availability for critical system pods - https://kubernetes.io/docs/admin/rescheduler/
-* make tolerations respect wildcard key ([#39914](https://github.com/kubernetes/kubernetes/pull/39914), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* [Federation][kubefed] Add option to disable persistence storage for etcd ([#40862](https://github.com/kubernetes/kubernetes/pull/40862), [@shashidharatd](https://github.com/shashidharatd))
-* Init containers have graduated to GA and now appear as a field. The beta annotation value will still be respected and overrides the field value. ([#38382](https://github.com/kubernetes/kubernetes/pull/38382), [@hodovska](https://github.com/hodovska))
-* apply falls back to generic 3-way JSON merge patch if no go struct is registered for the target GVK ([#40666](https://github.com/kubernetes/kubernetes/pull/40666), [@ymqytw](https://github.com/ymqytw))
-* HorizontalPodAutoscaler is no longer supported in extensions/v1beta1 version. Use autoscaling/v1 instead. ([#35782](https://github.com/kubernetes/kubernetes/pull/35782), [@piosz](https://github.com/piosz))
-* Port forwarding can forward over websockets or SPDY. ([#33684](https://github.com/kubernetes/kubernetes/pull/33684), [@fraenkel](https://github.com/fraenkel))
-* Improve kubectl describe node output by adding closing paren ([#39217](https://github.com/kubernetes/kubernetes/pull/39217), [@luksa](https://github.com/luksa))
-* Bump GCE ContainerVM to container-vm-v20170201 to address CVE-2016-9962. ([#40828](https://github.com/kubernetes/kubernetes/pull/40828), [@zmerlynn](https://github.com/zmerlynn))
-* Use full package path for definition name in OpenAPI spec ([#40124](https://github.com/kubernetes/kubernetes/pull/40124), [@mbohlool](https://github.com/mbohlool))
-* kubectl apply now supports explicitly clearing values not present in the config by setting them to null ([#40630](https://github.com/kubernetes/kubernetes/pull/40630), [@liggitt](https://github.com/liggitt))
-* Fixed an issue where 'kubectl get --sort-by=' would return an error when the specified field were not present in at least one of the returned objects, even that being a valid field in the object model. ([#40541](https://github.com/kubernetes/kubernetes/pull/40541), [@fabianofranz](https://github.com/fabianofranz))
-* Add initial french translations for kubectl ([#40645](https://github.com/kubernetes/kubernetes/pull/40645), [@brendandburns](https://github.com/brendandburns))
-* OpenStack-Heat will now look for an image named "CentOS-7-x86_64-GenericCloud-1604". To restore the previous behavior set OPENSTACK_IMAGE_NAME="CentOS7" ([#40368](https://github.com/kubernetes/kubernetes/pull/40368), [@sc68cal](https://github.com/sc68cal))
-* Preventing nil pointer reference in client_config ([#40508](https://github.com/kubernetes/kubernetes/pull/40508), [@vjsamuel](https://github.com/vjsamuel))
-* The bash AWS deployment via kube-up.sh has been deprecated. See http://kubernetes.io/docs/getting-started-guides/aws/ for alternatives. ([#38772](https://github.com/kubernetes/kubernetes/pull/38772), [@zmerlynn](https://github.com/zmerlynn))
-* Fix failing load balancers in Azure ([#40405](https://github.com/kubernetes/kubernetes/pull/40405), [@codablock](https://github.com/codablock))
-* kubefed init creates a service account for federation controller manager in the federation-system namespace and binds that service account to the federation-system:federation-controller-manager role that has read and list access on secrets in the federation-system namespace. ([#40392](https://github.com/kubernetes/kubernetes/pull/40392), [@madhusudancs](https://github.com/madhusudancs))
-* Fixed an SELinux issue in kubeadm on Docker 1.12+ by moving etcd SELinux options from container to pod. ([#40682](https://github.com/kubernetes/kubernetes/pull/40682), [@dgoodwin](https://github.com/dgoodwin))
-* Juju kubernetes-master charm: improve status messages ([#40691](https://github.com/kubernetes/kubernetes/pull/40691), [@Cynerva](https://github.com/Cynerva))
-
-
-
-# v1.6.0-alpha.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/master/examples)
-
-## Downloads for v1.6.0-alpha.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes.tar.gz) | `abda73bc2a27ae16c66a5aea9e96cd59486ed8cf994afc55da35a3cea2edc1db`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-src.tar.gz) | `b429579ba83f9a3fa80e72ceb65b046659b17f16a0b7f70105e7096a441f32b9`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-client-darwin-386.tar.gz) | `d5b8adee6169515324f4f420e65e9d4e14cca3402f58ec99660a1947fd79d3ea`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-client-darwin-amd64.tar.gz) | `6232a7e46b2cbd1e30a1f44c9b424448c5def11f5132c742bf62bac8a4f26fa2`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-client-linux-386.tar.gz) | `2974ed14b76885947c95b3c86fb8585aa08ccefe8cc11cd202dcc3cb8fcc0d1a`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-client-linux-amd64.tar.gz) | `3bcb40f4aa3a295ec23fe42a5e17b081ef8de174b7dfa03cb89c27a00ac16f5a`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-client-linux-arm64.tar.gz) | `f9a55bcb6af2a415d24d69ae919c56968f6b02369675fd7def63acbde6534430`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-client-linux-arm.tar.gz) | `b0bd7070eab2f19b9bc1840fb4da5307c7ce274f2e28f76f94c714aa08f087bf`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-client-linux-ppc64le.tar.gz) | `39f38972f93f64542ae325d9c937c9d527968bc0830fdd38dd38dc246b6f0c56`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-client-linux-s390x.tar.gz) | `032e21fe0000333f36e29ddf24e207cfd6c92cb9a6d69cc0123c31aacd12338c`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-client-windows-386.tar.gz) | `84b7d58012760111067ec0907070cc2f6d4c95893e771533a9b335cc8d8c72b7`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-client-windows-amd64.tar.gz) | `e9ce76f48a4cf58b261aec38f076ed3b61c444c55c123f30099c1d1763d6191f`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-server-linux-amd64.tar.gz) | `fafa4b93a522b9e73b6c31e42d32dc5eb3fccb5ca1548425da03726b48a19175`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-server-linux-arm64.tar.gz) | `f00f4874785d1c9cba4fd262e8086aa693027649da44b0eec69e96951e013913`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-server-linux-arm.tar.gz) | `e843a6357e0a2e441277e6b32d8d64a6b6fe367c3d223edec781c21d8b379ac6`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-server-linux-ppc64le.tar.gz) | `12b73f7cc4928543eee09af91d632bcf5c4ed56c44d48d62d0087c7fcbaa3e02`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.6.0-alpha.1/kubernetes-server-linux-s390x.tar.gz) | `aad15f260d166c2b295921468837efe4a51cb7a04bcaccb3faecc9b5979861e5`
-
-## Changelog since v1.5.0
-
-### Action Required
-
-* Promote certificates.k8s.io to beta and enable it by default. Users using the alpha certificates API should delete v1alpha1 CSRs from the API before upgrading and recreate them as v1beta1 CSR after upgrading. ([#39772](https://github.com/kubernetes/kubernetes/pull/39772), [@mikedanese](https://github.com/mikedanese))
-* Switch default etcd version to 3.0.14. ([#36229](https://github.com/kubernetes/kubernetes/pull/36229), [@wojtek-t](https://github.com/wojtek-t))
- * Switch default storage backend flag in apiserver to `etcd3` mode.
-* RBAC's special handling of the user `*` in RoleBinding and ClusterRoleBinding objects is deprecated and will be removed in v1beta1. To match all users, explicitly bind to the group `system:authenticated` and/or `system:unauthenticated`. Existing v1alpha1 bindings to the user `*` will be automatically converted to the group `system:authenticated`. ([#38981](https://github.com/kubernetes/kubernetes/pull/38981), [@liggitt](https://github.com/liggitt))
-* The 'endpoints.beta.kubernetes.io/hostnames-map' annotation is no longer supported. Users can use the 'Endpoints.subsets[].addresses[].hostname' field instead. ([#39284](https://github.com/kubernetes/kubernetes/pull/39284), [@bowei](https://github.com/bowei))
-* `federation/deploy/deploy.sh` was an interim solution introduced in Kubernetes v1.4 to simplify the federation control plane deployment experience. Now that we have `kubefed`, we are deprecating `deploy.sh` scripts. ([#38902](https://github.com/kubernetes/kubernetes/pull/38902), [@madhusudancs](https://github.com/madhusudancs))
-* Cluster federation servers have changed the location in etcd where federated services are stored, so existing federated services must be deleted and recreated. Before upgrading, export all federated services from the federation server and delete the services. After upgrading the cluster, recreate the federated services from the exported data. ([#37770](https://github.com/kubernetes/kubernetes/pull/37770), [@enj](https://github.com/enj))
-* etcd2: watching from 0 returns all initial states as ADDED events ([#38079](https://github.com/kubernetes/kubernetes/pull/38079), [@hongchaodeng](https://github.com/hongchaodeng))
-
-### Other notable changes
-
-* kube-up.sh on GCE now includes the bootstrap admin in the super-user group, and ensures the auth token file is correct on upgrades ([#39537](https://github.com/kubernetes/kubernetes/pull/39537), [@liggitt](https://github.com/liggitt))
-* genericapiserver: cut off more dependencies – episode 3 ([#40426](https://github.com/kubernetes/kubernetes/pull/40426), [@sttts](https://github.com/sttts))
-* Adding vmdk file extension for vmDiskPath in vsphere DeleteVolume ([#40538](https://github.com/kubernetes/kubernetes/pull/40538), [@divyenpatel](https://github.com/divyenpatel))
-* Remove outdated net.experimental.kubernetes.io/proxy-mode and net.beta.kubernetes.io/proxy-mode annotations from kube-proxy. ([#40585](https://github.com/kubernetes/kubernetes/pull/40585), [@cblecker](https://github.com/cblecker))
-* Improve the ARM builds and make hyperkube on ARM working again by upgrading the Go version for ARM to go1.8beta2 ([#38926](https://github.com/kubernetes/kubernetes/pull/38926), [@luxas](https://github.com/luxas))
-* Prevent hotloops on error conditions, which could fill up the disk faster than log rotation can free space. ([#40497](https://github.com/kubernetes/kubernetes/pull/40497), [@lavalamp](https://github.com/lavalamp))
-* DaemonSet controller actively kills failed pods (to recreate them) ([#40330](https://github.com/kubernetes/kubernetes/pull/40330), [@janetkuo](https://github.com/janetkuo))
-* forgiveness alpha version api definition ([#39469](https://github.com/kubernetes/kubernetes/pull/39469), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Bump up glbc version to 0.9.0-beta.1 ([#40565](https://github.com/kubernetes/kubernetes/pull/40565), [@bprashanth](https://github.com/bprashanth))
-* Improve formatting of EventSource in kubectl get and kubectl describe ([#40073](https://github.com/kubernetes/kubernetes/pull/40073), [@matthyx](https://github.com/matthyx))
-* CRI: use more gogoprotobuf plugins ([#40397](https://github.com/kubernetes/kubernetes/pull/40397), [@yujuhong](https://github.com/yujuhong))
-* Adds `shortNames` to the `APIResource` from discovery which is a list of recommended shortNames for clients like `kubectl`. ([#40312](https://github.com/kubernetes/kubernetes/pull/40312), [@p0lyn0mial](https://github.com/p0lyn0mial))
-* Use existing ABAC policy file when upgrading GCE cluster ([#40172](https://github.com/kubernetes/kubernetes/pull/40172), [@liggitt](https://github.com/liggitt))
-* Added support for creating HA clusters for centos using kube-up.sh. ([#39462](https://github.com/kubernetes/kubernetes/pull/39462), [@Shawyeok](https://github.com/Shawyeok))
-* azure: fix Azure Container Registry integration ([#40142](https://github.com/kubernetes/kubernetes/pull/40142), [@colemickens](https://github.com/colemickens))
-* - Splits Juju Charm layers into master/worker roles ([#40324](https://github.com/kubernetes/kubernetes/pull/40324), [@chuckbutler](https://github.com/chuckbutler))
- * - Adds support for 1.5.x series of Kubernetes
- * - Introduces a tactic for keeping templates in sync with upstream eliminating template drift
- * - Adds CNI support to the Juju Charms
- * - Adds durable storage support to the Juju Charms
- * - Introduces an e2e Charm layer for repeatable testing efforts and validation of clusters
-* genericapiserver: more dependency cutoffs ([#40216](https://github.com/kubernetes/kubernetes/pull/40216), [@sttts](https://github.com/sttts))
-* AWS: trust region if found from AWS metadata ([#38880](https://github.com/kubernetes/kubernetes/pull/38880), [@justinsb](https://github.com/justinsb))
-* Volumes and environment variables populated from ConfigMap and Secret objects can now tolerate the named source object or specific keys being missing, by adding `optional: true` to the volume or environment variable source specifications. ([#39981](https://github.com/kubernetes/kubernetes/pull/39981), [@fraenkel](https://github.com/fraenkel))
-* kubectl create now accepts the label selector flag for filtering objects to create ([#40057](https://github.com/kubernetes/kubernetes/pull/40057), [@MrHohn](https://github.com/MrHohn))
-* A new field `terminationMessagePolicy` has been added to containers that allows a user to request `FallbackToLogsOnError`, which will read from the container's logs to populate the termination message if the user does not write to the termination message log file. The termination message file is now properly readable for end users and has a maximum size (4k bytes) to prevent abuse. Each pod may have up to 12k bytes of termination messages before the contents of each will be truncated. ([#39341](https://github.com/kubernetes/kubernetes/pull/39341), [@smarterclayton](https://github.com/smarterclayton))
-* Add a special purpose tool for editing individual fields in a ConfigMap with kubectl ([#38445](https://github.com/kubernetes/kubernetes/pull/38445), [@brendandburns](https://github.com/brendandburns))
-* [Federation] Expose autoscaling apis through federation api server ([#38976](https://github.com/kubernetes/kubernetes/pull/38976), [@irfanurrehman](https://github.com/irfanurrehman))
-* Powershell script to start kubelet and kube-proxy ([#36250](https://github.com/kubernetes/kubernetes/pull/36250), [@jbhurat](https://github.com/jbhurat))
-* Reduce time needed to attach Azure disks ([#40066](https://github.com/kubernetes/kubernetes/pull/40066), [@codablock](https://github.com/codablock))
-* fixing Cassandra shutdown example to avoid data corruption ([#39199](https://github.com/kubernetes/kubernetes/pull/39199), [@deimosfr](https://github.com/deimosfr))
-* kubeadm: add optional self-hosted deployment for apiserver, controller-manager and scheduler. ([#40075](https://github.com/kubernetes/kubernetes/pull/40075), [@pires](https://github.com/pires))
-* kubelet tears down pod volumes on pod termination rather than pod deletion ([#37228](https://github.com/kubernetes/kubernetes/pull/37228), [@sjenning](https://github.com/sjenning))
-* The default client certificate generated by kube-up now contains the superuser `system:masters` group ([#39966](https://github.com/kubernetes/kubernetes/pull/39966), [@liggitt](https://github.com/liggitt))
-* CRI: upgrade protobuf to v3 ([#39158](https://github.com/kubernetes/kubernetes/pull/39158), [@feiskyer](https://github.com/feiskyer))
-* Add SIGCHLD handler to pause container ([#36853](https://github.com/kubernetes/kubernetes/pull/36853), [@verb](https://github.com/verb))
-* Populate environment variables from a secrets. ([#39446](https://github.com/kubernetes/kubernetes/pull/39446), [@fraenkel](https://github.com/fraenkel))
-* fluentd config for GKE clusters updated: detect exceptions in container log streams and forward them as one log entry. ([#39656](https://github.com/kubernetes/kubernetes/pull/39656), [@thomasschickinger](https://github.com/thomasschickinger))
-* Made multi-scheduler graduated to Beta and then v1. ([#38871](https://github.com/kubernetes/kubernetes/pull/38871), [@k82cn](https://github.com/k82cn))
-* Fixed forming resolver search line for pods: exclude duplicates, obey libc limitations, logging and eventing appropriately. ([#29666](https://github.com/kubernetes/kubernetes/pull/29666), [@vefimova](https://github.com/vefimova))
-* Add authorization mode to kubeadm ([#39846](https://github.com/kubernetes/kubernetes/pull/39846), [@andrewrynhard](https://github.com/andrewrynhard))
-* Update dependencies: aws-sdk-go to 1.6.10; also cadvisor ([#40095](https://github.com/kubernetes/kubernetes/pull/40095), [@dashpole](https://github.com/dashpole))
-* Fixes a bug in the OpenStack-Heat kubernetes provider, in the handling of differences between the Identity v2 and Identity v3 APIs ([#40105](https://github.com/kubernetes/kubernetes/pull/40105), [@sc68cal](https://github.com/sc68cal))
-* Update GCE ContainerVM deployment to container-vm-v20170117 to pick up CVE fixes in base image. ([#40094](https://github.com/kubernetes/kubernetes/pull/40094), [@zmerlynn](https://github.com/zmerlynn))
-* AWS: Remove duplicate calls to DescribeInstance during volume operations ([#39842](https://github.com/kubernetes/kubernetes/pull/39842), [@gnufied](https://github.com/gnufied))
-* The `attributeRestrictions` field has been removed from the PolicyRule type in the rbac.authorization.k8s.io/v1alpha1 API. The field was not used by the RBAC authorizer. ([#39625](https://github.com/kubernetes/kubernetes/pull/39625), [@deads2k](https://github.com/deads2k))
-* Enable lazy inode table and journal initialization for ext3 and ext4 ([#38865](https://github.com/kubernetes/kubernetes/pull/38865), [@codablock](https://github.com/codablock))
-* azure disk: restrict name length for Azure specifications ([#40030](https://github.com/kubernetes/kubernetes/pull/40030), [@colemickens](https://github.com/colemickens))
-* Follow redirects for streaming requests (exec/attach/port-forward) in the apiserver by default (alpha -> beta). ([#40039](https://github.com/kubernetes/kubernetes/pull/40039), [@timstclair](https://github.com/timstclair))
-* Use kube-dns:1.11.0 ([#39925](https://github.com/kubernetes/kubernetes/pull/39925), [@sadlil](https://github.com/sadlil))
-* Anonymous authentication is now automatically disabled if the API server is started with the AlwaysAllow authorizer. ([#38706](https://github.com/kubernetes/kubernetes/pull/38706), [@deads2k](https://github.com/deads2k))
-* genericapiserver: cut off kube pkg/version dependency ([#39943](https://github.com/kubernetes/kubernetes/pull/39943), [@sttts](https://github.com/sttts))
-* genericapiserver: cut off pkg/serviceaccount dependency ([#39945](https://github.com/kubernetes/kubernetes/pull/39945), [@sttts](https://github.com/sttts))
-* Move pkg/api/rest into genericapiserver ([#39948](https://github.com/kubernetes/kubernetes/pull/39948), [@sttts](https://github.com/sttts))
-* genericapiserver: cut off pkg/apis/extensions and pkg/storage dependencies ([#39946](https://github.com/kubernetes/kubernetes/pull/39946), [@sttts](https://github.com/sttts))
-* genericapiserver: cut off certificates api dependency ([#39947](https://github.com/kubernetes/kubernetes/pull/39947), [@sttts](https://github.com/sttts))
-* Admission control support for versioned configuration files ([#39109](https://github.com/kubernetes/kubernetes/pull/39109), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Fix issue around merging lists of primitives when using PATCH or kubectl apply. ([#38665](https://github.com/kubernetes/kubernetes/pull/38665), [@ymqytw](https://github.com/ymqytw))
-* Fixes API compatibility issue with empty lists incorrectly returning a null `items` field instead of an empty array. ([#39834](https://github.com/kubernetes/kubernetes/pull/39834), [@liggitt](https://github.com/liggitt))
-* [scheduling] Moved pod affinity and anti-affinity from annotations to api fields [#25319](https://github.com/kubernetes/kubernetes/pull/25319) ([#39478](https://github.com/kubernetes/kubernetes/pull/39478), [@rrati](https://github.com/rrati))
-* PodSecurityPolicy resource is now enabled by default in the extensions API group. ([#39743](https://github.com/kubernetes/kubernetes/pull/39743), [@pweil-](https://github.com/pweil-))
-* add --controllers to controller manager ([#39740](https://github.com/kubernetes/kubernetes/pull/39740), [@deads2k](https://github.com/deads2k))
-* proxy/iptables: don't sync proxy rules if services map didn't change ([#38996](https://github.com/kubernetes/kubernetes/pull/38996), [@dcbw](https://github.com/dcbw))
-* Update amd64 kube-proxy base image to debian-iptables-amd64:v5 ([#39725](https://github.com/kubernetes/kubernetes/pull/39725), [@ixdy](https://github.com/ixdy))
-* Update dashboard version to v1.5.1 ([#39662](https://github.com/kubernetes/kubernetes/pull/39662), [@rf232](https://github.com/rf232))
-* Fix kubectl get -f -o so it prints all items in the file ([#39038](https://github.com/kubernetes/kubernetes/pull/39038), [@ncdc](https://github.com/ncdc))
-* Scheduler treats StatefulSet pods as belonging to a single equivalence class. ([#39718](https://github.com/kubernetes/kubernetes/pull/39718), [@foxish](https://github.com/foxish))
-* --basic-auth-file supports optionally specifying groups in the fourth column of the file ([#39651](https://github.com/kubernetes/kubernetes/pull/39651), [@liggitt](https://github.com/liggitt))
-* To create or update an RBAC RoleBinding or ClusterRoleBinding object, a user must: ([#39383](https://github.com/kubernetes/kubernetes/pull/39383), [@liggitt](https://github.com/liggitt))
- * Be authorized to make the create or update API request
- * Be allowed to bind the referenced role, either by already having all of the permissions contained in the referenced role, or by having the `bind` permission on the referenced role.
-* Fixes an HPA-related panic due to division-by-zero. ([#39694](https://github.com/kubernetes/kubernetes/pull/39694), [@DirectXMan12](https://github.com/DirectXMan12))
-* federation: Adding support for DeleteOptions.OrphanDependents for federated services. Setting it to false while deleting a federated service also deletes the corresponding services from all registered clusters. ([#36390](https://github.com/kubernetes/kubernetes/pull/36390), [@nikhiljindal](https://github.com/nikhiljindal))
-* Update kube-proxy image to be based off of Debian 8.6 base image. ([#39695](https://github.com/kubernetes/kubernetes/pull/39695), [@ixdy](https://github.com/ixdy))
-* Update FitError as a message component into the PodConditionUpdater. ([#39491](https://github.com/kubernetes/kubernetes/pull/39491), [@jayunit100](https://github.com/jayunit100))
-* rename kubernetes-discovery to kube-aggregator ([#39619](https://github.com/kubernetes/kubernetes/pull/39619), [@deads2k](https://github.com/deads2k))
-* Allow missing keys in templates by default ([#39486](https://github.com/kubernetes/kubernetes/pull/39486), [@ncdc](https://github.com/ncdc))
-* Caching added to the OIDC client auth plugin to fix races and reduce the time kubectl commands using this plugin take by several seconds. ([#38167](https://github.com/kubernetes/kubernetes/pull/38167), [@ericchiang](https://github.com/ericchiang))
-* AWS: recognize eu-west-2 region ([#38746](https://github.com/kubernetes/kubernetes/pull/38746), [@justinsb](https://github.com/justinsb))
-* Provide kubernetes-controller-manager flags to control volume attach/detach reconciler sync. The duration of the syncs can be controlled, and the syncs can be shut off as well. ([#39551](https://github.com/kubernetes/kubernetes/pull/39551), [@chrislovecnm](https://github.com/chrislovecnm))
-* Generate OpenAPI definition for inlined types ([#39466](https://github.com/kubernetes/kubernetes/pull/39466), [@mbohlool](https://github.com/mbohlool))
-* ShortcutExpander has been extended in a way that it will examine a ha… ([#38835](https://github.com/kubernetes/kubernetes/pull/38835), [@p0lyn0mial](https://github.com/p0lyn0mial))
-* fixes nil dereference when doing a volume type check on persistent volumes ([#39493](https://github.com/kubernetes/kubernetes/pull/39493), [@sjenning](https://github.com/sjenning))
-* Fix issue with PodDisruptionBudgets in which `minAvailable` specified as a percentage did not work with StatefulSet Pods. ([#39454](https://github.com/kubernetes/kubernetes/pull/39454), [@foxish](https://github.com/foxish))
-* fix issue with kubectl proxy so that it will proxy an empty path - e.g. http://localhost:8001 ([#39226](https://github.com/kubernetes/kubernetes/pull/39226), [@luksa](https://github.com/luksa))
-* Check if pathExists before performing Unmount ([#39311](https://github.com/kubernetes/kubernetes/pull/39311), [@rkouj](https://github.com/rkouj))
-* Adding kubectl tests for federation ([#38844](https://github.com/kubernetes/kubernetes/pull/38844), [@nikhiljindal](https://github.com/nikhiljindal))
-* Fix comment and optimize code ([#38084](https://github.com/kubernetes/kubernetes/pull/38084), [@tanshanshan](https://github.com/tanshanshan))
-* When using OIDC authentication and specifying --oidc-username-claim=email, an `"email_verified":true` claim must be returned from the identity provider. ([#36087](https://github.com/kubernetes/kubernetes/pull/36087), [@ericchiang](https://github.com/ericchiang))
-* Allow pods to define multiple environment variables from a whole ConfigMap ([#36245](https://github.com/kubernetes/kubernetes/pull/36245), [@fraenkel](https://github.com/fraenkel))
-* Refactor the certificate and kubeconfig code in the kubeadm binary into two phases ([#39280](https://github.com/kubernetes/kubernetes/pull/39280), [@luxas](https://github.com/luxas))
-* Added support for printing in all supported `--output` formats to `kubectl create ...` and `kubectl apply ...` ([#38112](https://github.com/kubernetes/kubernetes/pull/38112), [@juanvallejo](https://github.com/juanvallejo))
-* genericapiserver: extract CA cert from server cert and SNI cert chains ([#39022](https://github.com/kubernetes/kubernetes/pull/39022), [@sttts](https://github.com/sttts))
-* Endpoints, that tolerate unready Pods, are now listing Pods in state Terminating as well ([#37093](https://github.com/kubernetes/kubernetes/pull/37093), [@simonswine](https://github.com/simonswine))
-* DaemonSet ObservedGeneration ([#39157](https://github.com/kubernetes/kubernetes/pull/39157), [@lukaszo](https://github.com/lukaszo))
-* The `--reconcile-cidr` kubelet flag was removed since it had been deprecated since v1.5 ([#39322](https://github.com/kubernetes/kubernetes/pull/39322), [@luxas](https://github.com/luxas))
-* Add ready replicas in Deployments ([#37959](https://github.com/kubernetes/kubernetes/pull/37959), [@kargakis](https://github.com/kargakis))
-* Remove all MAINTAINER statements in Dockerfiles in the codebase as they are deprecated by docker ([#38927](https://github.com/kubernetes/kubernetes/pull/38927), [@luxas](https://github.com/luxas))
-* Remove the deprecated vsphere kube-up. ([#39140](https://github.com/kubernetes/kubernetes/pull/39140), [@kerneltime](https://github.com/kerneltime))
-* Kubectl top now also accepts short forms for "node" and "pod" ("no", "po") ([#39218](https://github.com/kubernetes/kubernetes/pull/39218), [@luksa](https://github.com/luksa))
-* Remove 'exec' network plugin - use CNI instead ([#39254](https://github.com/kubernetes/kubernetes/pull/39254), [@freehan](https://github.com/freehan))
-* Add three more columns to `kubectl get deploy -o wide` output. ([#39240](https://github.com/kubernetes/kubernetes/pull/39240), [@xingzhou](https://github.com/xingzhou))
-* Add path exist check in getPodVolumePathListFromDisk ([#38909](https://github.com/kubernetes/kubernetes/pull/38909), [@jingxu97](https://github.com/jingxu97))
-* Begin paths for internationalization in kubectl ([#36802](https://github.com/kubernetes/kubernetes/pull/36802), [@brendandburns](https://github.com/brendandburns))
-* Fixes an issue where commas were not accepted in --from-literal flags when creating secrets. Passing multiple values separated by a comma in a single --from-literal flag is no longer supported. Please use multiple --from-literal flags to provide multiple values. ([#35191](https://github.com/kubernetes/kubernetes/pull/35191), [@SamiHiltunen](https://github.com/SamiHiltunen))
-* Support loading UTF16 files if a byte-order-mark is present ([#39008](https://github.com/kubernetes/kubernetes/pull/39008), [@brendandburns](https://github.com/brendandburns))
-* Fix fsGroup to vSphere ([#38655](https://github.com/kubernetes/kubernetes/pull/38655), [@abrarshivani](https://github.com/abrarshivani))
-* ReplicaSet has onwer ref of the Deployment that created it ([#35676](https://github.com/kubernetes/kubernetes/pull/35676), [@krmayankk](https://github.com/krmayankk))
-* Don't evict static pods ([#39059](https://github.com/kubernetes/kubernetes/pull/39059), [@bprashanth](https://github.com/bprashanth))
-* Fixed a bug where the --server, --token, and --certificate-authority flags were not overriding the related in-cluster configs when provided in a `kubectl` call inside a cluster. ([#39006](https://github.com/kubernetes/kubernetes/pull/39006), [@fabianofranz](https://github.com/fabianofranz))
-* Make fluentd pods critical ([#39146](https://github.com/kubernetes/kubernetes/pull/39146), [@Crassirostris](https://github.com/Crassirostris))
-* assign -998 as the oom_score_adj for critical pods (e.g. kube-proxy) ([#39114](https://github.com/kubernetes/kubernetes/pull/39114), [@dchen1107](https://github.com/dchen1107))
-* delete continue in monitorNodeStatus ([#38798](https://github.com/kubernetes/kubernetes/pull/38798), [@NickrenREN](https://github.com/NickrenREN))
-* add create rolebinding ([#38991](https://github.com/kubernetes/kubernetes/pull/38991), [@deads2k](https://github.com/deads2k))
-* Add new command "kubectl set selector" ([#38966](https://github.com/kubernetes/kubernetes/pull/38966), [@kargakis](https://github.com/kargakis))
-* Federation: Add `batch/jobs` API objects to federation-apiserver ([#35943](https://github.com/kubernetes/kubernetes/pull/35943), [@jianhuiz](https://github.com/jianhuiz))
-* ABAC policies using `"user":"*"` or `"group":"*"` to match all users or groups will only match authenticated requests. To match unauthenticated requests, ABAC policies must explicitly specify `"group":"system:unauthenticated"` ([#38968](https://github.com/kubernetes/kubernetes/pull/38968), [@liggitt](https://github.com/liggitt))
-* To add local registry to libvirt_coreos ([#36751](https://github.com/kubernetes/kubernetes/pull/36751), [@sdminonne](https://github.com/sdminonne))
-* Add a KUBERNETES_NODE_* section to build kubelet/kube-proxy for windows ([#38919](https://github.com/kubernetes/kubernetes/pull/38919), [@brendandburns](https://github.com/brendandburns))
-* Added kubeadm commands to manage bootstrap tokens and the duration they are valid for. ([#35805](https://github.com/kubernetes/kubernetes/pull/35805), [@dgoodwin](https://github.com/dgoodwin))
-* AWS: Recognize ca-central-1 region ([#38410](https://github.com/kubernetes/kubernetes/pull/38410), [@justinsb](https://github.com/justinsb))
-* Unmount operation should not fail if volume is already unmounted ([#38547](https://github.com/kubernetes/kubernetes/pull/38547), [@rkouj](https://github.com/rkouj))
-* Changed default scsi controller type in vSphere Cloud Provider ([#38426](https://github.com/kubernetes/kubernetes/pull/38426), [@abrarshivani](https://github.com/abrarshivani))
-* Move non-generic apiserver code out of the generic packages ([#38191](https://github.com/kubernetes/kubernetes/pull/38191), [@sttts](https://github.com/sttts))
-* Remove extensions/v1beta1 Jobs resource, and job/v1beta1 generator. ([#38614](https://github.com/kubernetes/kubernetes/pull/38614), [@soltysh](https://github.com/soltysh))
-* Admit critical pods in the kubelet ([#38836](https://github.com/kubernetes/kubernetes/pull/38836), [@bprashanth](https://github.com/bprashanth))
-* Use daemonset in docker registry add on ([#35582](https://github.com/kubernetes/kubernetes/pull/35582), [@surajssd](https://github.com/surajssd))
-* Node affinity has moved from annotations to api fields in the pod spec. Node affinity that is defined in the annotations will be ignored. ([#37299](https://github.com/kubernetes/kubernetes/pull/37299), [@rrati](https://github.com/rrati))
-* Since `kubernetes.tar.gz` no longer includes client or server binaries, `cluster/kube-{up,down,push}.sh` now automatically download released binaries if they are missing. ([#38730](https://github.com/kubernetes/kubernetes/pull/38730), [@ixdy](https://github.com/ixdy))
-* genericapiserver: turn APIContainer.SecretRoutes into a real ServeMux ([#38826](https://github.com/kubernetes/kubernetes/pull/38826), [@sttts](https://github.com/sttts))
-* Migrated fluentd addon to daemon set ([#32088](https://github.com/kubernetes/kubernetes/pull/32088), [@piosz](https://github.com/piosz))
-* AWS: Add sequential allocator for device names. ([#38818](https://github.com/kubernetes/kubernetes/pull/38818), [@jsafrane](https://github.com/jsafrane))
-* Add 'X-Content-Type-Options: nosniff" to some error messages ([#37190](https://github.com/kubernetes/kubernetes/pull/37190), [@brendandburns](https://github.com/brendandburns))
-* Display pod node selectors with kubectl describe. ([#36396](https://github.com/kubernetes/kubernetes/pull/36396), [@aveshagarwal](https://github.com/aveshagarwal))
-* The main repository does not keep multiple releases of clientsets anymore. Please find previous releases at https://github.com/kubernetes/client-go ([#38154](https://github.com/kubernetes/kubernetes/pull/38154), [@caesarxuchao](https://github.com/caesarxuchao))
-* Remove a release-note on multiple OpenAPI specs ([#38732](https://github.com/kubernetes/kubernetes/pull/38732), [@mbohlool](https://github.com/mbohlool))
-* genericapiserver: unify swagger and openapi in config ([#38690](https://github.com/kubernetes/kubernetes/pull/38690), [@sttts](https://github.com/sttts))
-* fix connection upgrades through kuberentes-discovery ([#38724](https://github.com/kubernetes/kubernetes/pull/38724), [@deads2k](https://github.com/deads2k))
-* Fixes bug in resolving client-requested API versions ([#38533](https://github.com/kubernetes/kubernetes/pull/38533), [@DirectXMan12](https://github.com/DirectXMan12))
-* apiserver(s): Replace glog.Fatals with fmt.Errorfs ([#38175](https://github.com/kubernetes/kubernetes/pull/38175), [@sttts](https://github.com/sttts))
-* Remove Azure Subnet RouteTable check ([#38334](https://github.com/kubernetes/kubernetes/pull/38334), [@mogthesprog](https://github.com/mogthesprog))
-* Ensure the GCI metadata files do not have newline at the end ([#38727](https://github.com/kubernetes/kubernetes/pull/38727), [@Amey-D](https://github.com/Amey-D))
-* Significantly speed-up make ([#38700](https://github.com/kubernetes/kubernetes/pull/38700), [@sttts](https://github.com/sttts))
-* add QoS pod status field ([#37968](https://github.com/kubernetes/kubernetes/pull/37968), [@sjenning](https://github.com/sjenning))
-* Fixed validation of multizone cluster for GCE ([#38695](https://github.com/kubernetes/kubernetes/pull/38695), [@jszczepkowski](https://github.com/jszczepkowski))
-* Fixed detection of master during creation of multizone nodes cluster by kube-up. ([#38617](https://github.com/kubernetes/kubernetes/pull/38617), [@jszczepkowski](https://github.com/jszczepkowski))
-* Update CHANGELOG.md to warn about anon auth flag ([#38675](https://github.com/kubernetes/kubernetes/pull/38675), [@erictune](https://github.com/erictune))
-* Fixes NotAuthenticated errors that appear in the kubelet and kube-controller-manager due to never logging in to vSphere ([#36169](https://github.com/kubernetes/kubernetes/pull/36169), [@robdaemon](https://github.com/robdaemon))
-* Fix an issue where AWS tear-down leaks an DHCP Option Set. ([#38645](https://github.com/kubernetes/kubernetes/pull/38645), [@zmerlynn](https://github.com/zmerlynn))
-* Issue a warning when using `kubectl apply` on a resource lacking the `LastAppliedConfig` annotation ([#36672](https://github.com/kubernetes/kubernetes/pull/36672), [@ymqytw](https://github.com/ymqytw))
-* Re-add /healthz/ping handler in genericapiserver ([#38603](https://github.com/kubernetes/kubernetes/pull/38603), [@sttts](https://github.com/sttts))
-* Fail kubelet if runtime is unresponsive for 30 seconds ([#38527](https://github.com/kubernetes/kubernetes/pull/38527), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Add support for Azure Container Registry, update Azure dependencies ([#37783](https://github.com/kubernetes/kubernetes/pull/37783), [@brendandburns](https://github.com/brendandburns))
-* Fix panic in vSphere cloud provider ([#38423](https://github.com/kubernetes/kubernetes/pull/38423), [@BaluDontu](https://github.com/BaluDontu))
-* fix broken cluster/centos and enhance the style ([#34002](https://github.com/kubernetes/kubernetes/pull/34002), [@xiaoping378](https://github.com/xiaoping378))
-* Ability to quota storage by storage class ([#34554](https://github.com/kubernetes/kubernetes/pull/34554), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* [Part 2] Adding s390x cross-compilation support for gcr.io images in this repo ([#36050](https://github.com/kubernetes/kubernetes/pull/36050), [@gajju26](https://github.com/gajju26))
-* kubectl run --rm no longer prints "pod xxx deleted" ([#38429](https://github.com/kubernetes/kubernetes/pull/38429), [@duglin](https://github.com/duglin))
-* Bump GCE debian image to container-vm-v20161208 ([release notes](https://cloud.google.com/compute/docs/containers/container_vms#changelog)) ([#38432](https://github.com/kubernetes/kubernetes/pull/38432), [@timstclair](https://github.com/timstclair))
-* Kubelet: Add image cache. ([#38375](https://github.com/kubernetes/kubernetes/pull/38375), [@Random-Liu](https://github.com/Random-Liu))
-* Allow a selector when retrieving logs ([#32752](https://github.com/kubernetes/kubernetes/pull/32752), [@fraenkel](https://github.com/fraenkel))
-* Fix unmountDevice issue caused by shared mount in GCI ([#38411](https://github.com/kubernetes/kubernetes/pull/38411), [@jingxu97](https://github.com/jingxu97))
-* [Federation] Implement dry run support in kubefed init ([#36447](https://github.com/kubernetes/kubernetes/pull/36447), [@irfanurrehman](https://github.com/irfanurrehman))
-* Fix space issue in volumePath with vSphere Cloud Provider ([#38338](https://github.com/kubernetes/kubernetes/pull/38338), [@BaluDontu](https://github.com/BaluDontu))
-* [Federation] Make federation etcd PVC size configurable ([#36310](https://github.com/kubernetes/kubernetes/pull/36310), [@irfanurrehman](https://github.com/irfanurrehman))
-* Allow no ports when exposing headless service ([#32811](https://github.com/kubernetes/kubernetes/pull/32811), [@fraenkel](https://github.com/fraenkel))
-* Wait for the port to be ready before starting ([#38260](https://github.com/kubernetes/kubernetes/pull/38260), [@fraenkel](https://github.com/fraenkel))
-* Add Version to the resource printer for 'get nodes' ([#37943](https://github.com/kubernetes/kubernetes/pull/37943), [@ailusazh](https://github.com/ailusazh))
-* contribute deis/registry-proxy as a replacement for kube-registry-proxy ([#35797](https://github.com/kubernetes/kubernetes/pull/35797), [@bacongobbler](https://github.com/bacongobbler))
-* [Part 1] Add support for cross-compiling s390x binaries ([#37092](https://github.com/kubernetes/kubernetes/pull/37092), [@gajju26](https://github.com/gajju26))
-* kernel memcg notification enabled via experimental flag ([#38258](https://github.com/kubernetes/kubernetes/pull/38258), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* fix permissions when using fsGroup ([#37009](https://github.com/kubernetes/kubernetes/pull/37009), [@sjenning](https://github.com/sjenning))
-* Pipe get options to storage ([#37693](https://github.com/kubernetes/kubernetes/pull/37693), [@wojtek-t](https://github.com/wojtek-t))
-* add a configuration for kubelet to register as a node with taints ([#31647](https://github.com/kubernetes/kubernetes/pull/31647), [@mikedanese](https://github.com/mikedanese))
-* Remove genericapiserver.Options.MasterServiceNamespace ([#38186](https://github.com/kubernetes/kubernetes/pull/38186), [@sttts](https://github.com/sttts))
-* The --long-running-request-regexp flag to kube-apiserver is deprecated and will be removed in a future release. Long-running requests are now detected based on specific verbs (watch, proxy) or subresources (proxy, portforward, log, exec, attach). ([#38119](https://github.com/kubernetes/kubernetes/pull/38119), [@liggitt](https://github.com/liggitt))
-* Better compat with very old iptables (e.g. CentOS 6) ([#37594](https://github.com/kubernetes/kubernetes/pull/37594), [@thockin](https://github.com/thockin))
-* Fix GCI mounter issue ([#38124](https://github.com/kubernetes/kubernetes/pull/38124), [@jingxu97](https://github.com/jingxu97))
-* Kubelet will no longer set hairpin mode on every interface on the machine when an error occurs in setting up hairpin for a specific interface. ([#36990](https://github.com/kubernetes/kubernetes/pull/36990), [@bboreham](https://github.com/bboreham))
-* fix mesos unit tests ([#38196](https://github.com/kubernetes/kubernetes/pull/38196), [@deads2k](https://github.com/deads2k))
-* Add `--controllers` flag to federation controller manager for enable/disable federation ingress controller ([#36643](https://github.com/kubernetes/kubernetes/pull/36643), [@kzwang](https://github.com/kzwang))
-* Allow backendpools in Azure Load Balancers which are not owned by cloud provider ([#36882](https://github.com/kubernetes/kubernetes/pull/36882), [@codablock](https://github.com/codablock))
-* remove rbac super user ([#38121](https://github.com/kubernetes/kubernetes/pull/38121), [@deads2k](https://github.com/deads2k))
-* API server have two separate limits for read-only and mutating inflight requests. ([#36064](https://github.com/kubernetes/kubernetes/pull/36064), [@gmarek](https://github.com/gmarek))
-* check the value of min and max in kubectl ([#37789](https://github.com/kubernetes/kubernetes/pull/37789), [@yarntime](https://github.com/yarntime))
-* The glusterfs dynamic volume provisioner will now choose a unique GID for new persistent volumes from a range that can be configured in the storage class with the "gidMin" and "gidMax" parameters. The default range is 2000 - 2147483647 (max int32). ([#37886](https://github.com/kubernetes/kubernetes/pull/37886), [@obnoxxx](https://github.com/obnoxxx))
-* Add kubectl create poddisruptionbudget command ([#36646](https://github.com/kubernetes/kubernetes/pull/36646), [@kargakis](https://github.com/kargakis))
-* Set kernel.softlockup_panic =1 based on the flag. ([#38001](https://github.com/kubernetes/kubernetes/pull/38001), [@dchen1107](https://github.com/dchen1107))
-* portfordwardtester: avoid data loss during send+close+exit ([#37103](https://github.com/kubernetes/kubernetes/pull/37103), [@sttts](https://github.com/sttts))
-* Enable containerized mounter only for nfs and glusterfs types ([#37990](https://github.com/kubernetes/kubernetes/pull/37990), [@jingxu97](https://github.com/jingxu97))
-* Add flag to enable contention profiling in scheduler. ([#37357](https://github.com/kubernetes/kubernetes/pull/37357), [@gmarek](https://github.com/gmarek))
-* Add kubernetes-anywhere as a new e2e deployment option ([#37019](https://github.com/kubernetes/kubernetes/pull/37019), [@pipejakob](https://github.com/pipejakob))
-* add create clusterrolebinding command ([#37098](https://github.com/kubernetes/kubernetes/pull/37098), [@deads2k](https://github.com/deads2k))
-* kubectl create service externalname ([#34789](https://github.com/kubernetes/kubernetes/pull/34789), [@AdoHe](https://github.com/AdoHe))
-* Fix logic error in graceful deletion ([#37721](https://github.com/kubernetes/kubernetes/pull/37721), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Exit with error if is not the final parameter. ([#37723](https://github.com/kubernetes/kubernetes/pull/37723), [@mtaufen](https://github.com/mtaufen))
-* Fix Service Update on LoadBalancerSourceRanges Field ([#37720](https://github.com/kubernetes/kubernetes/pull/37720), [@freehan](https://github.com/freehan))
-* Bug fix. Incoming UDP packets not reach newly deployed services ([#32561](https://github.com/kubernetes/kubernetes/pull/32561), [@zreigz](https://github.com/zreigz))
-* GCI: Remove /var/lib/docker/network ([#37593](https://github.com/kubernetes/kubernetes/pull/37593), [@yujuhong](https://github.com/yujuhong))
-* configure local-up-cluster.sh to handle auth proxies ([#36838](https://github.com/kubernetes/kubernetes/pull/36838), [@deads2k](https://github.com/deads2k))
-* Add `clusterid`, an optional parameter to storageclass. ([#36437](https://github.com/kubernetes/kubernetes/pull/36437), [@humblec](https://github.com/humblec))
-* local-up-cluster: avoid sudo for control plane ([#37443](https://github.com/kubernetes/kubernetes/pull/37443), [@sttts](https://github.com/sttts))
-* Add error message when trying to use clusterrole with namespace in kubectl ([#36424](https://github.com/kubernetes/kubernetes/pull/36424), [@xilabao](https://github.com/xilabao))
-* `kube-up.sh`/`kube-down.sh` no longer force update gcloud for provider=gce|gke. ([#36292](https://github.com/kubernetes/kubernetes/pull/36292), [@jlowdermilk](https://github.com/jlowdermilk))
-* Fix issue when attempting to unmount a wrong vSphere volume ([#37413](https://github.com/kubernetes/kubernetes/pull/37413), [@BaluDontu](https://github.com/BaluDontu))
-* Fix the equality checks for numeric values in cluster/gce/util.sh. ([#37638](https://github.com/kubernetes/kubernetes/pull/37638), [@roberthbailey](https://github.com/roberthbailey))
-* kubelet: don't reject pods without adding them to the pod manager ([#37661](https://github.com/kubernetes/kubernetes/pull/37661), [@yujuhong](https://github.com/yujuhong))
-* Modify GCI mounter to enable NFSv3 ([#37582](https://github.com/kubernetes/kubernetes/pull/37582), [@jingxu97](https://github.com/jingxu97))
-* Fix photon controller plugin to construct with correct PdID ([#37167](https://github.com/kubernetes/kubernetes/pull/37167), [@luomiao](https://github.com/luomiao))
-* Collect logs for dead kubelets too ([#37671](https://github.com/kubernetes/kubernetes/pull/37671), [@mtaufen](https://github.com/mtaufen))
-* Set Dashboard UI version to v1.5.0 ([#37684](https://github.com/kubernetes/kubernetes/pull/37684), [@rf232](https://github.com/rf232))
-* When deleting an object with `--grace-period=0`, the client will begin a graceful deletion and wait until the resource is fully deleted. To force deletion, use the `--force` flag. ([#37263](https://github.com/kubernetes/kubernetes/pull/37263), [@smarterclayton](https://github.com/smarterclayton))
-* federation service controller: stop deleting services from underlying clusters when federated service is deleted. ([#37353](https://github.com/kubernetes/kubernetes/pull/37353), [@nikhiljindal](https://github.com/nikhiljindal))
-* Fix nil pointer dereference in test framework ([#37583](https://github.com/kubernetes/kubernetes/pull/37583), [@mtaufen](https://github.com/mtaufen))
-* Kubernetes now automatically installs a StorageClass object when deployed on ([#31617](https://github.com/kubernetes/kubernetes/pull/31617), [@jsafrane](https://github.com/jsafrane))
- * AWS, Google Compute Engine, Google Container Engine, and OpenStack using
- * the default kube-up.sh scripts. This StorageClass is marked as default so that
- * a PersistentVolumeClaim without a StorageClass annotation now results in
- * automatic provisioning of storage (GCE PersistentDisk on Google Cloud, AWS
- * EBS on AWS, and Cinder on OpenStack). In previous versions of Kubernetes
- * a PersistentVolumeClaim without a StorageClass annotation on these cloud
- * platforms would be satisfied by manually-created PersistentVolume objects.
- * Administrators can choose to disable this behavior by deleting the automatically
- * installed StorageClass API object. Alternatively, administrators may choose to
- * keep the automatically installed StorageClass and only disable the defaulting
- * behavior by removing the "is-default-class" annotation from the StorageClass
- * API object.
-* Fix TestServiceAlloc flakes ([#37487](https://github.com/kubernetes/kubernetes/pull/37487), [@wojtek-t](https://github.com/wojtek-t))
-* Use gsed on the Mac ([#37562](https://github.com/kubernetes/kubernetes/pull/37562), [@roberthbailey](https://github.com/roberthbailey))
-* Try self-repair scheduler cache or panic ([#37379](https://github.com/kubernetes/kubernetes/pull/37379), [@wojtek-t](https://github.com/wojtek-t))
-* Fluentd/Elastisearch add-on: correctly parse and index kubernetes labels ([#36857](https://github.com/kubernetes/kubernetes/pull/36857), [@Shrugs](https://github.com/Shrugs))
-* Mention overflows when mistakenly call function FromInt ([#36487](https://github.com/kubernetes/kubernetes/pull/36487), [@xialonglee](https://github.com/xialonglee))
-* Update doc for kubectl apply ([#37397](https://github.com/kubernetes/kubernetes/pull/37397), [@ymqytw](https://github.com/ymqytw))
-* Removes shorthand flag -w from kubectl apply ([#37345](https://github.com/kubernetes/kubernetes/pull/37345), [@MrHohn](https://github.com/MrHohn))
-* Curating Owners: pkg/api ([#36525](https://github.com/kubernetes/kubernetes/pull/36525), [@apelisse](https://github.com/apelisse))
-* Reduce verbosity of volume reconciler when attaching volumes ([#36900](https://github.com/kubernetes/kubernetes/pull/36900), [@codablock](https://github.com/codablock))
-* Federated Ingress Proposal ([#29793](https://github.com/kubernetes/kubernetes/pull/29793), [@quinton-hoole](https://github.com/quinton-hoole))
-
-Please see the [Releases Page](https://github.com/kubernetes/kubernetes/releases) for older releases.
-
-Release notes of older releases can be found in:
-- [CHANGELOG-1.2.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.2.md)
-- [CHANGELOG-1.3.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.3.md)
-- [CHANGELOG-1.4.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.4.md)
-- [CHANGELOG-1.5.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.5.md)
-
-[]()
diff --git a/vendor/k8s.io/kubernetes/CHANGELOG-1.7.md b/vendor/k8s.io/kubernetes/CHANGELOG-1.7.md
deleted file mode 100644
index 68f2541844bb..000000000000
--- a/vendor/k8s.io/kubernetes/CHANGELOG-1.7.md
+++ /dev/null
@@ -1,2925 +0,0 @@
-
-- [v1.7.11](#v1711)
- - [Downloads for v1.7.11](#downloads-for-v1711)
- - [Client Binaries](#client-binaries)
- - [Server Binaries](#server-binaries)
- - [Node Binaries](#node-binaries)
- - [Changelog since v1.7.10](#changelog-since-v1710)
- - [Other notable changes](#other-notable-changes)
-- [v1.7.10](#v1710)
- - [Downloads for v1.7.10](#downloads-for-v1710)
- - [Client Binaries](#client-binaries-1)
- - [Server Binaries](#server-binaries-1)
- - [Node Binaries](#node-binaries-1)
- - [Changelog since v1.7.9](#changelog-since-v179)
- - [Other notable changes](#other-notable-changes-1)
-- [v1.7.9](#v179)
- - [Downloads for v1.7.9](#downloads-for-v179)
- - [Client Binaries](#client-binaries-2)
- - [Server Binaries](#server-binaries-2)
- - [Node Binaries](#node-binaries-2)
- - [Changelog since v1.7.8](#changelog-since-v178)
- - [Other notable changes](#other-notable-changes-2)
-- [v1.7.8](#v178)
- - [Downloads for v1.7.8](#downloads-for-v178)
- - [Client Binaries](#client-binaries-3)
- - [Server Binaries](#server-binaries-3)
- - [Node Binaries](#node-binaries-3)
- - [Changelog since v1.7.7](#changelog-since-v177)
- - [Other notable changes](#other-notable-changes-3)
-- [v1.7.7](#v177)
- - [Downloads for v1.7.7](#downloads-for-v177)
- - [Client Binaries](#client-binaries-4)
- - [Server Binaries](#server-binaries-4)
- - [Node Binaries](#node-binaries-4)
- - [Changelog since v1.7.6](#changelog-since-v176)
- - [Other notable changes](#other-notable-changes-4)
-- [v1.7.6](#v176)
- - [Downloads for v1.7.6](#downloads-for-v176)
- - [Client Binaries](#client-binaries-5)
- - [Server Binaries](#server-binaries-5)
- - [Node Binaries](#node-binaries-5)
- - [Changelog since v1.7.5](#changelog-since-v175)
- - [Other notable changes](#other-notable-changes-5)
-- [v1.7.5](#v175)
- - [Downloads for v1.7.5](#downloads-for-v175)
- - [Client Binaries](#client-binaries-6)
- - [Server Binaries](#server-binaries-6)
- - [Node Binaries](#node-binaries-6)
- - [Changelog since v1.7.4](#changelog-since-v174)
- - [Other notable changes](#other-notable-changes-6)
-- [v1.7.4](#v174)
- - [Downloads for v1.7.4](#downloads-for-v174)
- - [Client Binaries](#client-binaries-7)
- - [Server Binaries](#server-binaries-7)
- - [Node Binaries](#node-binaries-7)
- - [Changelog since v1.7.3](#changelog-since-v173)
- - [Other notable changes](#other-notable-changes-7)
-- [v1.7.3](#v173)
- - [Downloads for v1.7.3](#downloads-for-v173)
- - [Client Binaries](#client-binaries-8)
- - [Server Binaries](#server-binaries-8)
- - [Node Binaries](#node-binaries-8)
- - [Changelog since v1.7.2](#changelog-since-v172)
- - [Other notable changes](#other-notable-changes-8)
-- [v1.7.2](#v172)
- - [Downloads for v1.7.2](#downloads-for-v172)
- - [Client Binaries](#client-binaries-9)
- - [Server Binaries](#server-binaries-9)
- - [Node Binaries](#node-binaries-9)
- - [Changelog since v1.7.1](#changelog-since-v171)
- - [Other notable changes](#other-notable-changes-9)
-- [v1.7.1](#v171)
- - [Downloads for v1.7.1](#downloads-for-v171)
- - [Client Binaries](#client-binaries-10)
- - [Server Binaries](#server-binaries-10)
- - [Node Binaries](#node-binaries-10)
- - [Changelog since v1.7.0](#changelog-since-v170)
- - [Other notable changes](#other-notable-changes-10)
-- [v1.7.0](#v170)
- - [Downloads for v1.7.0](#downloads-for-v170)
- - [Client Binaries](#client-binaries-11)
- - [Server Binaries](#server-binaries-11)
- - [Node Binaries](#node-binaries-11)
- - [**Major Themes**](#major-themes)
- - [**Action Required Before Upgrading**](#action-required-before-upgrading)
- - [Network](#network)
- - [Storage](#storage)
- - [API Machinery](#api-machinery)
- - [Controller Manager](#controller-manager)
- - [kubectl (CLI)](#kubectl-cli)
- - [kubeadm](#kubeadm)
- - [Cloud Providers](#cloud-providers)
- - [**Known Issues**](#known-issues)
- - [**Deprecations**](#deprecations)
- - [Cluster provisioning scripts](#cluster-provisioning-scripts)
- - [Client libraries](#client-libraries)
- - [DaemonSet](#daemonset)
- - [kube-proxy](#kube-proxy)
- - [Namespace](#namespace)
- - [Scheduling](#scheduling)
- - [**Notable Features**](#notable-features)
- - [Kubefed](#kubefed)
- - [**Kubernetes API**](#kubernetes-api)
- - [User Provided Extensions](#user-provided-extensions)
- - [**Application Deployment**](#application-deployment)
- - [StatefulSet](#statefulset)
- - [DaemonSet](#daemonset-1)
- - [Deployments](#deployments)
- - [PodDisruptionBudget](#poddisruptionbudget)
- - [**Security**](#security)
- - [Admission Control](#admission-control)
- - [TLS Bootstrapping](#tls-bootstrapping)
- - [Audit Logging](#audit-logging)
- - [Encryption at Rest](#encryption-at-rest)
- - [Node Authorization](#node-authorization)
- - [**Application Autoscaling**](#application-autoscaling)
- - [Horizontal Pod Autoscaler](#horizontal-pod-autoscaler)
- - [**Cluster Lifecycle**](#cluster-lifecycle)
- - [kubeadm](#kubeadm-1)
- - [Cloud Provider Support](#cloud-provider-support)
- - [**Cluster Federation**](#cluster-federation)
- - [Placement Policy](#placement-policy)
- - [Cluster Selection](#cluster-selection)
- - [**Instrumentation**](#instrumentation)
- - [Core Metrics API](#core-metrics-api)
- - [**Internationalization**](#internationalization)
- - [**kubectl (CLI)**](#kubectl-cli-1)
- - [**Networking**](#networking)
- - [Network Policy](#network-policy)
- - [Load Balancing](#load-balancing)
- - [**Node Components**](#node-components)
- - [Container Runtime Interface](#container-runtime-interface)
- - [**Scheduling**](#scheduling-1)
- - [Scheduler Extender](#scheduler-extender)
- - [**Storage**](#storage-1)
- - [Local Storage](#local-storage)
- - [Volume Plugins](#volume-plugins)
- - [Metrics](#metrics)
- - [**Other notable changes**](#other-notable-changes-11)
- - [Admission plugin](#admission-plugin)
- - [API Machinery](#api-machinery-1)
- - [Application autoscaling](#application-autoscaling-1)
- - [Application Deployment](#application-deployment-1)
- - [Cluster Autoscaling](#cluster-autoscaling)
- - [Cloud Provider Enhancement](#cloud-provider-enhancement)
- - [Cluster Provisioning](#cluster-provisioning)
- - [Cluster federation](#cluster-federation-1)
- - [Credential provider](#credential-provider)
- - [Information for Kubernetes clients (openapi, swagger, client-go)](#information-for-kubernetes-clients-openapi-swagger-client-go)
- - [Instrumentation](#instrumentation-1)
- - [Internal storage layer](#internal-storage-layer)
- - [Kubernetes Dashboard](#kubernetes-dashboard)
- - [kube-dns](#kube-dns)
- - [kube-proxy](#kube-proxy-1)
- - [kube-scheduler](#kube-scheduler)
- - [Storage](#storage-2)
- - [Networking](#networking-1)
- - [Node controller](#node-controller)
- - [Node Components](#node-components-1)
- - [Scheduling](#scheduling-2)
- - [Security](#security-1)
- - [Scalability](#scalability)
- - [**External Dependency Version Information**](#external-dependency-version-information)
- - [Previous Releases Included in v1.7.0](#previous-releases-included-in-v170)
-- [v1.7.0-rc.1](#v170-rc1)
- - [Downloads for v1.7.0-rc.1](#downloads-for-v170-rc1)
- - [Client Binaries](#client-binaries-12)
- - [Server Binaries](#server-binaries-12)
- - [Node Binaries](#node-binaries-12)
- - [Changelog since v1.7.0-beta.2](#changelog-since-v170-beta2)
- - [Action Required](#action-required)
- - [Other notable changes](#other-notable-changes-12)
-- [v1.7.0-beta.2](#v170-beta2)
- - [Downloads for v1.7.0-beta.2](#downloads-for-v170-beta2)
- - [Client Binaries](#client-binaries-13)
- - [Server Binaries](#server-binaries-13)
- - [Node Binaries](#node-binaries-13)
- - [Changelog since v1.7.0-beta.1](#changelog-since-v170-beta1)
- - [Action Required](#action-required-1)
- - [Other notable changes](#other-notable-changes-13)
-- [v1.7.0-beta.1](#v170-beta1)
- - [Downloads for v1.7.0-beta.1](#downloads-for-v170-beta1)
- - [Client Binaries](#client-binaries-14)
- - [Server Binaries](#server-binaries-14)
- - [Node Binaries](#node-binaries-14)
- - [Changelog since v1.7.0-alpha.4](#changelog-since-v170-alpha4)
- - [Action Required](#action-required-2)
- - [Other notable changes](#other-notable-changes-14)
-- [v1.7.0-alpha.4](#v170-alpha4)
- - [Downloads for v1.7.0-alpha.4](#downloads-for-v170-alpha4)
- - [Client Binaries](#client-binaries-15)
- - [Server Binaries](#server-binaries-15)
- - [Node Binaries](#node-binaries-15)
- - [Changelog since v1.7.0-alpha.3](#changelog-since-v170-alpha3)
- - [Action Required](#action-required-3)
- - [Other notable changes](#other-notable-changes-15)
-- [v1.7.0-alpha.3](#v170-alpha3)
- - [Downloads for v1.7.0-alpha.3](#downloads-for-v170-alpha3)
- - [Client Binaries](#client-binaries-16)
- - [Server Binaries](#server-binaries-16)
- - [Node Binaries](#node-binaries-16)
- - [Changelog since v1.7.0-alpha.2](#changelog-since-v170-alpha2)
- - [Action Required](#action-required-4)
- - [Other notable changes](#other-notable-changes-16)
-- [v1.7.0-alpha.2](#v170-alpha2)
- - [Downloads for v1.7.0-alpha.2](#downloads-for-v170-alpha2)
- - [Client Binaries](#client-binaries-17)
- - [Server Binaries](#server-binaries-17)
- - [Changelog since v1.7.0-alpha.1](#changelog-since-v170-alpha1)
- - [Action Required](#action-required-5)
- - [Other notable changes](#other-notable-changes-17)
-- [v1.7.0-alpha.1](#v170-alpha1)
- - [Downloads for v1.7.0-alpha.1](#downloads-for-v170-alpha1)
- - [Client Binaries](#client-binaries-18)
- - [Server Binaries](#server-binaries-18)
- - [Changelog since v1.6.0](#changelog-since-v160)
- - [Other notable changes](#other-notable-changes-18)
-
-
-
-
-
-# v1.7.11
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.11
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes.tar.gz) | `0b4c9247784851a6681adf7ed068be75f346179035cdab840d11d4e6dc274aa1`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-src.tar.gz) | `380a7ca5b57dba2c45b64f48c48d1035f191b15687c724d1173a8367097c3451`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-client-darwin-386.tar.gz) | `6bd9ecc484da25e1d09b8de7fe2ec411e989e56c9456d20bb01ad10823b54dfa`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-client-darwin-amd64.tar.gz) | `bf723c41ae7599a5ba2dbf8fe62aa19dadb91d243ff248d56a41fa7de9db8699`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-client-linux-386.tar.gz) | `9ce79fe18a725e1d723c9bb4cefa95d90e8e05276bcc66fb9b809dc7767a939c`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-client-linux-amd64.tar.gz) | `c3c2af3ad16257853e8a2594779168002d20c7259b9ad6beb6f5f7a57585220e`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-client-linux-arm64.tar.gz) | `a525d204a4aa45481cd858cadee8d06bc969c81a902f51a6d31a1ab1ed8a9278`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-client-linux-arm.tar.gz) | `d910e54cdc5e9240a3f1c8f7cf32f28b442d740e8cc7db29742f40bb33e331b8`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-client-linux-ppc64le.tar.gz) | `eeeee6f6a763348226cc8ef112e83526b09834365fce02a6595b085f25289e9e`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-client-linux-s390x.tar.gz) | `a6d4581330dfd6f08603674e74016631687d86b9dcca2a8c9d4dacb668d4dc30`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-client-windows-386.tar.gz) | `6ccf7e4b0321d0dc7befd55d278966de921ea4303043cec6abf4ce13348184db`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-client-windows-amd64.tar.gz) | `233afcd0b0d4bfdc0190b00570aed7f1ed112da511c637fbd64565670f873829`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-server-linux-amd64.tar.gz) | `80a1ad525e92e5d8f9e835c88cfa3e3f5244c287de0cb4cbf98a2496e78fb83d`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-server-linux-arm64.tar.gz) | `3f884b85b60b10209b8b7a5f2f735dfdfeb0afa9380170a1de82a09f7e347603`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-server-linux-arm.tar.gz) | `3ae170d0ce2b781e7ed41941d568c457c7888b0b15a44b7853713e63f5ff9cc1`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-server-linux-ppc64le.tar.gz) | `f19ba4496dbbcb1fae00ce40164ae8de8b35aa871a4f6a7c24e20a9dd6ef7a1f`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-server-linux-s390x.tar.gz) | `3da441a0b7acd2f59fdb3232080d49df29c684aa2260b7010ec37a0730d3e82b`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-node-linux-amd64.tar.gz) | `8ab11a1b7c0ed298d89fe6f1ed9196046f8ac8d5eaecf3803890cefd92deb656`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-node-linux-arm64.tar.gz) | `435c81717e1bf4968db1ec916fe24bd5c4cfedaa339ae7890374f06ce49fa7e6`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-node-linux-arm.tar.gz) | `3a978350045c04bbeeb936cac2aabe6a92040d66ed14f0f30fd44ed03cf9fe0f`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-node-linux-ppc64le.tar.gz) | `82fc341fc4ee9213020894bcf1bd6d34c226f03554507915bdfd379fffd1b608`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-node-linux-s390x.tar.gz) | `e91e97533fab0b759ace3ad0fb7a3ff128cdc38221d55c8a9893bfe056a0ea8f`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.11/kubernetes-node-windows-amd64.tar.gz) | `0ebb1aafaa8af8581580d9425705a3535555d65f960eba2c16dfee90080d53e1`
-
-## Changelog since v1.7.10
-
-### Other notable changes
-
-* Bugfix: master startup script on GCP no longer fails randomly due to concurrent iptables invocations. ([#55945](https://github.com/kubernetes/kubernetes/pull/55945), [@x13n](https://github.com/x13n))
-* Fix bug in mounting volumes with GlusterFS plugin ([#53292](https://github.com/kubernetes/kubernetes/pull/53292), [@humblec](https://github.com/humblec))
-* Add /bin/tee symlink to bazel build for busybox, so that CI builds have /bin/tee ([#55417](https://github.com/kubernetes/kubernetes/pull/55417), [@justinsb](https://github.com/justinsb))
-* Reduce log noise produced by prometheus-to-sd, by bumping it to version 0.2.2. ([#54635](https://github.com/kubernetes/kubernetes/pull/54635), [@loburm](https://github.com/loburm))
-* Fix session affinity issue with external load balancer traffic when ExternalTrafficPolicy=Local. ([#55519](https://github.com/kubernetes/kubernetes/pull/55519), [@MrHohn](https://github.com/MrHohn))
-* Add masquerading rules by default to GCE/GKE ([#55178](https://github.com/kubernetes/kubernetes/pull/55178), [@dnardo](https://github.com/dnardo))
-* Azure cloudprovider: Fix controller manager crash issue on a manually created k8s cluster. ([#53694](https://github.com/kubernetes/kubernetes/pull/53694), [@andyzhangx](https://github.com/andyzhangx))
-* Fix a bug where soft eviction would not trigger when the threshold was crossed ([#52046](https://github.com/kubernetes/kubernetes/pull/52046), [@dashpole](https://github.com/dashpole))
-* Addon manager supports HA masters. ([#55782](https://github.com/kubernetes/kubernetes/pull/55782), [@x13n](https://github.com/x13n))
-* Fixed 'Schedulercache is corrupted' error in kube-scheduler ([#55262](https://github.com/kubernetes/kubernetes/pull/55262), [@liggitt](https://github.com/liggitt))
-* Fix hyperkube kubelet --experimental-dockershim ([#55335](https://github.com/kubernetes/kubernetes/pull/55335), [@ivan4th](https://github.com/ivan4th))
-* fix azure pv crash due to volumeSource.ReadOnly value nil ([#54607](https://github.com/kubernetes/kubernetes/pull/54607), [@andyzhangx](https://github.com/andyzhangx))
-* GCE: provide an option to disable docker's live-restore on COS/ubuntu ([#55260](https://github.com/kubernetes/kubernetes/pull/55260), [@yujuhong](https://github.com/yujuhong))
-* Fix overlay2 container disk metrics for Docker ([#54958](https://github.com/kubernetes/kubernetes/pull/54958), [@dashpole](https://github.com/dashpole))
-
-
-
-# v1.7.10
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.10
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes.tar.gz) | `a4a4e63576f25cfc3b1f5be2a74c992f42caca75adace41db1edf4d692c478c5`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-src.tar.gz) | `0592c01139e1d056fede2eaca1c957d2dfd8c907939e2e20846a819ede07c7ad`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-client-darwin-386.tar.gz) | `2b55ee1675ead0825a866653c609354eaedb3ef9254bc1625c1b9fada35070b5`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-client-darwin-amd64.tar.gz) | `b63a89d0ac4452c5f05a3836962809a80fb1a8a97a2d42d67fcbb587d608acca`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-client-linux-386.tar.gz) | `3d3d5721469adcf6eac9b581c2bed2c7d16b9994ae6f367a24f9b89380bfa864`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-client-linux-amd64.tar.gz) | `5c9bbfe045ecc4725a258d6b854ef799f841f62e02fbee5e8fdc6918c86f282e`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-client-linux-arm64.tar.gz) | `c835369962b05aa22b9304a49050986242a23a56a1b0aa5162fc77dd5202ad78`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-client-linux-arm.tar.gz) | `3c67b7088803bd2de4ecc933c70e29e1cf67aff98bc5bd6b6a8bc06df94248a1`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-client-linux-ppc64le.tar.gz) | `eecb107511eadd50f2757cac63ec09dd103ffcd5e03b6d6d9b8a91e45a8d6710`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-client-linux-s390x.tar.gz) | `711941d5eb230e483c1fba7337d4175fc9e390469f0870dc2cc9e7bafc39058e`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-client-windows-386.tar.gz) | `3ba41679dd6d7c3925e24036b583b061ae706dab65b540818aa533fc3a658aeb`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-client-windows-amd64.tar.gz) | `c1e10d051de9ad569d32f66b6df238c111fac153299a8bb3b76cf7bf6787ed68`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-server-linux-amd64.tar.gz) | `636cfbe99af340e7d3c067253698c1e531f22a37035f41c535e27f4cde9b74bf`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-server-linux-arm64.tar.gz) | `16a8a2b61b0e10da3950feb1226849f3c73990414f350121ccecccf625b943ff`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-server-linux-arm.tar.gz) | `5719656a79f1f28c9b100e2dc863144e8d1e9b8bcc11e2f42387544ca4d8c02f`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-server-linux-ppc64le.tar.gz) | `a5997050ce825e48aae5604b348f68d9ef2fec42db26ee1e8eebc48a795fcbfd`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-server-linux-s390x.tar.gz) | `6834c4a3c81484c835221bc17bb0df76c153bdabefc7b6fd6b26969df5f34d6f`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-node-linux-amd64.tar.gz) | `2946cd7f7b2f6be9bd5c416fe8048ea2371f2aad60c974d154a8a9078ccf6e2b`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-node-linux-arm64.tar.gz) | `fad120efc9474d18ea8e45addb2291c9a3a1649da05722889bc087fe1e0a8e06`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-node-linux-arm.tar.gz) | `a8c339b7308738c6b7dd021c294eeffee28c1fc7c3e4619779bc8f9f61af09ad`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-node-linux-ppc64le.tar.gz) | `360fc062e935313020b98cc8e04ce3cf26401c046ab96783d404da598e54baa8`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-node-linux-s390x.tar.gz) | `82808a27b89638ea77816b05629a2dbcb3a22da7b140f834c813980260f6cc7c`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.10/kubernetes-node-windows-amd64.tar.gz) | `420d525a25d28059aa4e938d8b8043242d7ebdf1e4ad9ae27e7260064fec4b51`
-
-## Changelog since v1.7.9
-
-### Other notable changes
-
-* Fix for service controller so that it won't retry on doNotRetry service update failure. ([#54184](https://github.com/kubernetes/kubernetes/pull/54184), [@MrHohn](https://github.com/MrHohn))
-* [fluentd-gcp addon] Fluentd now runs in its own network, not in the host one. ([#54395](https://github.com/kubernetes/kubernetes/pull/54395), [@crassirostris](https://github.com/crassirostris))
-* fix azure disk mount failure on coreos and some other distros ([#54334](https://github.com/kubernetes/kubernetes/pull/54334), [@andyzhangx](https://github.com/andyzhangx))
-* Update busybox image link to gcr.io for kube-proxy. ([#53818](https://github.com/kubernetes/kubernetes/pull/53818), [@MrHohn](https://github.com/MrHohn))
-* Restores the ability to apply network policy objects against the networking.k8s.io/v1 API ([#54106](https://github.com/kubernetes/kubernetes/pull/54106), [@liggitt](https://github.com/liggitt))
-* Allow for configuring etcd hostname in the manifest ([#54403](https://github.com/kubernetes/kubernetes/pull/54403), [@wojtek-t](https://github.com/wojtek-t))
-* fix a bug where disk pressure could trigger prematurely when using overlay2 ([#53684](https://github.com/kubernetes/kubernetes/pull/53684), [@dashpole](https://github.com/dashpole))
-
-
-
-# v1.7.9
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.9
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes.tar.gz) | `8c7c16c137c421cfe27311aba0fea49411ed725d3d41938706474c328647afcc`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-src.tar.gz) | `eb2d967731d20b2f42787400fd9114ebd40c2722f3afd7ebb232324d2e66815e`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-client-darwin-386.tar.gz) | `930e24595a8cf87f65d0cbee6f033f8c441a64da86cdc22ad9d31cd5e0496928`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-client-darwin-amd64.tar.gz) | `59c10f48351347821216d1cb9726db0b31868cd5e059814a5154dfdeb36548e1`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-client-linux-386.tar.gz) | `3a7e20a3d45eab69bd8a6c9572ecd98f50499b1880882c0e78c8cdd726046802`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-client-linux-amd64.tar.gz) | `ac530a89b701669df889c7d5e34c7c5ba0b1c231e45fd9a1ff441d807d0fba8f`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-client-linux-arm64.tar.gz) | `cdad0b14762b01aac8820e41cb89b850b1dc8d539ac892ca9f718d9e00e8505e`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-client-linux-arm.tar.gz) | `11c1bb76f2fc7fa9038d1d8687df857a231bd8a44b00d3f3bfef277b44e1c604`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-client-linux-ppc64le.tar.gz) | `e7ed462fb6d86b1205ca9c4701b521d80b9c614fb98ca3a75579d18835303f7f`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-client-linux-s390x.tar.gz) | `7aff3b2d0540c3efd53d383dc87d95b62b4203933bd154f66e167fffa5dd0d72`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-client-windows-386.tar.gz) | `45f64fae0368f80bff7f11fafcce4ccc5c79876cb496481fbcdb35fd5aa85a49`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-client-windows-amd64.tar.gz) | `f7c34d11b35424fe96e1477a9347618169b911d4ecc57f00945f63d5cef53968`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-server-linux-amd64.tar.gz) | `9b94e2b1c13dd3304aa36d0800f88a86d1c335a2b56de8a69d67f50c6f08d0ad`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-server-linux-arm64.tar.gz) | `2c5cb85515137f58ddc475963cd42cd69a881b2269724e0c5237b365644974db`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-server-linux-arm.tar.gz) | `e62d8e234bc31d8dd4c88b28261445f4bc00e9e19795c57f7e72da91c037b6cd`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-server-linux-ppc64le.tar.gz) | `b59c47ff865c4f21da816500d1013e5bab71bcb2ed214ceb022395eb6d729634`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-server-linux-s390x.tar.gz) | `2c057b4dcfd40457fb5ee7d692239b702b61c17a9cc095ecd2a65ac553e4d2d7`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-node-linux-amd64.tar.gz) | `e92e3deb34ce06b11b667027ddd9753f8c3149996320bb9dd3555d758775e60d`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-node-linux-arm64.tar.gz) | `96bf63c7ba4a322ec21b22c3fa3f37c713aa846bdde311bc7a52df8abc7ef291`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-node-linux-arm.tar.gz) | `4274d183d002c57cf6fff21ba71cdb69121f520ae77c913013adb92f7efee2a6`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-node-linux-ppc64le.tar.gz) | `8c9a7ef4141dc59be1b613b461ca8e16612c5d36ca9cd1b9fbb92f35f02e63f1`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-node-linux-s390x.tar.gz) | `14314c3c958bf4b966bc6960495271412019973834e9ca427bcedb1bd51c787f`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.9/kubernetes-node-windows-amd64.tar.gz) | `a20e882b046f95ebb6c94f87aee99b27d43422ea5e09b48fa67aa4926b2edbfe`
-
-## Changelog since v1.7.8
-
-### Other notable changes
-
-* Support German cloud for azure disk mount feature ([#50673](https://github.com/kubernetes/kubernetes/pull/50673), [@clement-buchart](https://github.com/clement-buchart))
-* BugFix: Exited containers are not Garbage Collected by the kubelet while the pod is running ([#53167](https://github.com/kubernetes/kubernetes/pull/53167), [@dashpole](https://github.com/dashpole))
-* Address a bug which allowed the horizontal pod autoscaler to allocate `desiredReplicas` > `maxReplicas` in certain instances. ([#53690](https://github.com/kubernetes/kubernetes/pull/53690), [@mattjmcnaughton](https://github.com/mattjmcnaughton))
-* Use separate client for leader election in scheduler to avoid starving leader election by regular scheduler operations. ([#53793](https://github.com/kubernetes/kubernetes/pull/53793), [@wojtek-t](https://github.com/wojtek-t))
-* fix azure disk mounter issue ([#52260](https://github.com/kubernetes/kubernetes/pull/52260), [@andyzhangx](https://github.com/andyzhangx))
-* GCE: Fix issue deleting internal load balancers when the firewall resource may not exist. ([#53450](https://github.com/kubernetes/kubernetes/pull/53450), [@nicksardo](https://github.com/nicksardo))
-* Fix compilation of k8s.io/apiextensions-apiserver ([#48036](https://github.com/kubernetes/kubernetes/pull/48036), [@hongchaodeng](https://github.com/hongchaodeng))
-
-
-# v1.7.8
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.8
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes.tar.gz) | `219bbdd3b36949004432230629f14caf6e36839537bac54d75c02ca0bc91af73`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-src.tar.gz) | `7d70756b49029921a4609db0748be279b9473cbb24319d45813f0f018248de67`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-client-darwin-386.tar.gz) | `4d3d683fd1520a2f3e229cac7f823c63a2630b831874cbd3b4c130fea6ce86cf`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-client-darwin-amd64.tar.gz) | `6c2d1d6de6d78823e4a4d66f02f780204214ed03aab89766cc4526b97eb56062`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-client-linux-386.tar.gz) | `318b0f1053d666b296be37a9ca264b31311cfd700f213bbff87a9010c786ef4b`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-client-linux-amd64.tar.gz) | `90d64d3642b1fd25d19f369803fee4b84bb53baa128f71c30ed67c9c4b9081aa`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-client-linux-arm64.tar.gz) | `b8eb3ae3598ccaf9cfd637110b8b6cb5fa324f772dc188b12bb1ca18cf3250e7`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-client-linux-arm.tar.gz) | `200cbc7076740781bb5a95ffbb2040a7b6c751d2c050f040c293adf0c41f5c4a`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-client-linux-ppc64le.tar.gz) | `e9033569028313d339cc2290447fcd96987c5ac56f8666063f1f147a71e76746`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-client-linux-s390x.tar.gz) | `5a6f597d73d43f34c40664940a79e096a2e3c645c6baf72bf0e8c60b723a6799`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-client-windows-386.tar.gz) | `306388adaf891b2636f8d74c4b473d3f67245daff480503a07ed8e92c9bf6127`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-client-windows-amd64.tar.gz) | `42e4bebbdafd6274ac816ef4d560011721b100a4c5caf54324193653779ad377`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-server-linux-amd64.tar.gz) | `80507ed2b515ab1762d3982b0a8ae18e78f1aeb7abd25e03b8777d66db1accfe`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-server-linux-arm64.tar.gz) | `e4401984dd3951985e390296bfca2383b78f7157519c9fa75ff56ee5a8654f93`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-server-linux-arm.tar.gz) | `4a515461dd9e10e3fac848bdb2e78d115ac154c10a2052a2489d34eb4a106bdb`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-server-linux-ppc64le.tar.gz) | `3c04ef5b83898aec1db99b4eea11b69763399e9787d1fc1df292e372537af480`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-server-linux-s390x.tar.gz) | `139c4292b88a076f576766d28cc2f2d1f3cc5805eedd8926e0b676f639628ffe`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-node-linux-amd64.tar.gz) | `d485ba3ef78a5450f2c1f826a811a0812244fee469e583e8c99882f1d4a6c310`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-node-linux-arm64.tar.gz) | `3914eb9963347e2800ad1f821e61dd863f83bbffaf9a76d3f873c5e48c5163c8`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-node-linux-arm.tar.gz) | `cf90a98a505908e5a92de0720341f43d5a5c938467b3b161c1e11ca76f8216fa`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-node-linux-ppc64le.tar.gz) | `1f57f27cdd9a0ba6be5298a6b28c5aea5c53197cff65fddb02ff051bda1acc6e`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-node-linux-s390x.tar.gz) | `f6ff6604e758643cc6a6710eab98d968ede12b255b0c9d66e5160c88a263ccad`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.8/kubernetes-node-windows-amd64.tar.gz) | `31babad05d172c11a08e8433fd4d19cc273ee8a18a885f74ebdcda6f02a769ad`
-
-## Changelog since v1.7.7
-
-### Other notable changes
-
-* Ignore pods marked for deletion that exceed their grace period in ResourceQuota ([#46542](https://github.com/kubernetes/kubernetes/pull/46542), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* kubelet to master communication when doing node status updates now has a timeout to prevent indefinite hangs ([#52176](https://github.com/kubernetes/kubernetes/pull/52176), [@liggitt](https://github.com/liggitt))
-* Bumped Heapster version to 1.4.3 - more details https://github.com/kubernetes/heapster/releases/tag/v1.4.3 ([#53376](https://github.com/kubernetes/kubernetes/pull/53376), [@loburm](https://github.com/loburm))
-* Delete the federation namespace from control plane instead of individual objects ([#51768](https://github.com/kubernetes/kubernetes/pull/51768), [@shashidharatd](https://github.com/shashidharatd))
-* Bugfix: OpenAPI models may not get group-version-kind extension if kubernetes is vendored in another project (e.g. minikube). Kubectl 1.8 needs this extension to work with those projects. ([#53152](https://github.com/kubernetes/kubernetes/pull/53152), [@mbohlool](https://github.com/mbohlool))
-* Fix for Nodes in vSphere lacking an InternalIP. ([#48760](https://github.com/kubernetes/kubernetes/pull/48760)) ([#49202](https://github.com/kubernetes/kubernetes/pull/49202), [@cbonte](https://github.com/cbonte))
-* [fluentd-gcp addon] Update Stackdriver plugin to version 0.6.7 ([#52565](https://github.com/kubernetes/kubernetes/pull/52565), [@crassirostris](https://github.com/crassirostris))
-* Fixes an issue with RBAC reconciliation that could cause duplicated subjects in some bootstrapped rolebindings on each restart of the API server. ([#53239](https://github.com/kubernetes/kubernetes/pull/53239), [@enj](https://github.com/enj))
-* Restores redirect behavior for proxy subresources ([#52933](https://github.com/kubernetes/kubernetes/pull/52933), [@liggitt](https://github.com/liggitt))
-* Fix panic in ControllerManager on GCE when it has a problem with creating external loadbalancer healthcheck ([#52646](https://github.com/kubernetes/kubernetes/pull/52646), [@gmarek](https://github.com/gmarek))
-* custom resources that use unconventional pluralization now work properly with kubectl and garbage collection ([#50012](https://github.com/kubernetes/kubernetes/pull/50012), [@deads2k](https://github.com/deads2k))
-* When performing a GET then PUT, the kube-apiserver must write the canonical representation of the object to etcd if the current value does not match. That allows external agents to migrate content in etcd from one API version to another, across different storage types, or across varying encryption levels. This fixes a bug introduced in 1.5 where we unintentionally stopped writing the newest data. ([#48394](https://github.com/kubernetes/kubernetes/pull/48394), [@smarterclayton](https://github.com/smarterclayton))
-
-
-
-# v1.7.7
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.7
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes.tar.gz) | `1fbf1672931464c7b66b93298a6623c97727d9359e5409e7e139a7fbec486591`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-src.tar.gz) | `572eda617bdfc4456a5d370a4616bea5684ff8e999faf4677f4665f181961d86`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-client-darwin-386.tar.gz) | `661700a452f9ca1c91530e9d0ac1ef7552ae75cfaa86eaa99021b0f30300acd5`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-client-darwin-amd64.tar.gz) | `eceadcbb092f8bde9d09a1a170aa1ae2af5c07f399995750915a53f0ebbb9f45`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-client-linux-386.tar.gz) | `2856189ab86b440439bf1a3eab984fa24a1e2280c0741422940c5f06fe66e49e`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-client-linux-amd64.tar.gz) | `c314a175fe64c7874d0381037d4ffa8bbfdb729af52f8081a9530771203b3852`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-client-linux-arm64.tar.gz) | `5ad395eff828384feec88f624624fe4da822def6e85a540136bbc1968c5f4b6c`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-client-linux-arm.tar.gz) | `4636e3f5d1084a31c5abbffe775d241f75bb62d42624b87a7bb85e01f4bdd558`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-client-linux-ppc64le.tar.gz) | `08943b8745d463c82c29edaf8adfbb22d5409a57a1d88cbe3d08f584bcd36582`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-client-linux-s390x.tar.gz) | `71efa60865c2bbc7024e60f4437404d68417e7855586896ce15856f94972d4e4`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-client-windows-386.tar.gz) | `1af19fcb54371732839cf658cb62d6092aef335b234c735a13119b88b667893d`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-client-windows-amd64.tar.gz) | `887db68565adac992e0cb2989058b958b60ce4e93704c4286a013277d5e545c5`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-server-linux-amd64.tar.gz) | `674d73c536e0fccd0c8a773d53c94c27257a63b3a91e36be7b045d6d4a43bd8a`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-server-linux-arm64.tar.gz) | `945b7e8d632e9aa5aff7f27d83049a5434472c5fc7ae60010478af42f2c7d85c`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-server-linux-arm.tar.gz) | `ae535d3875242fadac615655aa86fbefcf86ec244705a9ededbe34e46419ad22`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-server-linux-ppc64le.tar.gz) | `1bd286bc6aaea225191953a576fd3be6721624f5baa441257036a7efd382f293`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-server-linux-s390x.tar.gz) | `742e11b8eb127ed5fc1f2520f8c4428c4fdace065412f048c6fe6656d7f165be`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-node-linux-amd64.tar.gz) | `37f0e39673dcaebec761929b13d7a4951cddf9f772adf68d4e43b0783d0a0897`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-node-linux-arm64.tar.gz) | `35a1b338484aa6c031a6a3b671e626605d3c89cd9da81ab009b12e69ef9440a2`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-node-linux-arm.tar.gz) | `99bedd7379faafde9917090f7c98148b2e9a8b00705738a8ce3e6863644a030e`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-node-linux-ppc64le.tar.gz) | `5e9235f4ea823dc6c074ac2d1fcdd23786efc5c9908bf053c7d92540cbf8f4bb`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-node-linux-s390x.tar.gz) | `43ed881a44d125e0bf9b00725cfa48f77e7e61661c43e651914879fe2e3305d0`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.7/kubernetes-node-windows-amd64.tar.gz) | `938fa3b2cf0ccc6ab1deb6259e49e88e982cc46dcf801365ba48dda616841ca6`
-
-## Changelog since v1.7.6
-
-### Other notable changes
-
-* Update kube-dns to 1.14.5 ([#53114](https://github.com/kubernetes/kubernetes/pull/53114), [@bowei](https://github.com/bowei))
-* StatefulSet will now fill the `hostname` and `subdomain` fields if they're empty on existing Pods it owns. This allows it to self-correct the issue where StatefulSet Pod DNS entries disappear after upgrading to v1.7.x ([#48327](https://github.com/kubernetes/kubernetes/pull/48327)). ([#51199](https://github.com/kubernetes/kubernetes/pull/51199), [@kow3ns](https://github.com/kow3ns))
-* Third Party Resource tests in the e2e suite were incorrectly marked as part of the conformance bucket. They are alpha and are not required for conformance. ([#52823](https://github.com/kubernetes/kubernetes/pull/52823), [@smarterclayton](https://github.com/smarterclayton))
-* fixes upgrade test to work with tightened validation of initializer names in 1.8 ([#52592](https://github.com/kubernetes/kubernetes/pull/52592), [@liggitt](https://github.com/liggitt))
-* Fix inconsistent Prometheus cAdvisor metrics ([#51473](https://github.com/kubernetes/kubernetes/pull/51473), [@bboreham](https://github.com/bboreham))
-* Fixed an issue reporting lack of progress for a deployment prematurely ([#52178](https://github.com/kubernetes/kubernetes/pull/52178), [@kargakis](https://github.com/kargakis))
-* [fluentd-gcp addon] Bug with event-exporter leaking memory on metrics in clusters with CA is fixed. ([#52263](https://github.com/kubernetes/kubernetes/pull/52263), [@crassirostris](https://github.com/crassirostris))
-
-
-
-# v1.7.6
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.6
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes.tar.gz) | `6d2462aed79097845129e05375fdf16b724c32d47579d30a9b563a8d360d3ae3`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-src.tar.gz) | `ee66724a04900f4b90bc6eccbd6487095d888a90cf7cfdc0f5b5e9425ae95e47`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-client-darwin-386.tar.gz) | `fc5ee8d608cc551693839ac79c1330b7a688930a8f16b0d313128844d598e4d3`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-client-darwin-amd64.tar.gz) | `0e9dad45f6dd4ef06d9aef7151ba02612300ddebf7fb4b7e64174408590e340e`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-client-linux-386.tar.gz) | `74fc57544bd2b109fb620f0f8f1e821a66e83082700a49cfc38e5b2c1d7221a6`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-client-linux-amd64.tar.gz) | `0d46a9c297d193bc193487aa1734141be764a0078759748ec800f92bd183de5f`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-client-linux-arm64.tar.gz) | `ef9dbbd93e4ad02e02297466b631e779f5fd96f2a449a5f628b239068e615a22`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-client-linux-arm.tar.gz) | `25637797aed9d4904e8209d5085ade93df12a9fbcf6c09499e3a20cba6876122`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-client-linux-ppc64le.tar.gz) | `9a9cc9e747fd56330c87b68508c9cb6cedbe988a7682e70f6410a0d1c6bc9256`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-client-linux-s390x.tar.gz) | `8cdaaf06618b5e936ad90bdae608ea0e9f352b91197002031b3802fbdeda6aa3`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-client-windows-386.tar.gz) | `e1e74224d151d0317eba54ac02bdac21e86416af475b27a068e9f72749b10481`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-client-windows-amd64.tar.gz) | `37d9a7c0fbf3ff1e47d51a986f939c4f257bf265916c5f1b2e809b8161f48953`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-server-linux-amd64.tar.gz) | `302c3c48f9c2def14fd4503f5caf3c66e8abefd478e735ec7a270b3ba313f93c`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-server-linux-arm64.tar.gz) | `04a28285cc98e57dee3d41987adb4e08e049b9c0d493ed3ae1b7017c2d4aaa66`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-server-linux-arm.tar.gz) | `caf808442d09784dea5b18d89a39cbfe318257bd5efa03ab81b4393a5aa3e370`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-server-linux-ppc64le.tar.gz) | `b156c17df4a4c2badd1c7e580652ffe6d816c1134ebb22e1ca1fa7ef1b8326df`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-server-linux-s390x.tar.gz) | `1a4fedd1ec94429b5ea8ef894b04940e248f872fab272f28fddff5951e4ee571`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-node-linux-amd64.tar.gz) | `8d798ef84c933c9aa4ba144277ebe571879b2237239827565327be2c97726bbc`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-node-linux-arm64.tar.gz) | `ca0976faf03812a415da6a0dc244a65222a3f8d81b3da929530988a36ce0dc1a`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-node-linux-arm.tar.gz) | `92fd22d0bb51d32e24490a0ec12c48e28b5c5a19826c10f5e9061d06620ca12f`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-node-linux-ppc64le.tar.gz) | `1b39b2a89a5522a9f1d23b90a51070a13bede72a66c3b6b217289fa4fadbc0d6`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-node-linux-s390x.tar.gz) | `fda8c1ed4ebd406a6c19d0a982ba6705f0533e6c1db96e2bd121392deb4018ed`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.6/kubernetes-node-windows-amd64.tar.gz) | `325caebf0f5d9dc79259f9609014e80385753d3ad1fff7fb276b19d2f272ef3b`
-
-## Changelog since v1.7.5
-
-### Other notable changes
-
-* [fluentd-gcp addon] Fluentd will trim lines exceeding 100KB instead of dropping them. ([#52289](https://github.com/kubernetes/kubernetes/pull/52289), [@crassirostris](https://github.com/crassirostris))
-* Cluster Autoscaler 0.6.2 ([#52359](https://github.com/kubernetes/kubernetes/pull/52359), [@mwielgus](https://github.com/mwielgus))
-* Add --request-timeout to kube-apiserver to make global request timeout configurable. ([#51415](https://github.com/kubernetes/kubernetes/pull/51415), [@jpbetz](https://github.com/jpbetz))
-* Fix credentials providers for docker sandbox image. ([#51870](https://github.com/kubernetes/kubernetes/pull/51870), [@feiskyer](https://github.com/feiskyer))
-* Fix security holes in GCE metadata proxy. ([#51302](https://github.com/kubernetes/kubernetes/pull/51302), [@ihmccreery](https://github.com/ihmccreery))
-* Fixed an issue looking up cronjobs when they existed in more than one API version ([#52227](https://github.com/kubernetes/kubernetes/pull/52227), [@liggitt](https://github.com/liggitt))
-* Fixes an issue with upgrade requests made via pod/service/node proxy subresources sending a non-absolute HTTP request-uri to backends ([#52065](https://github.com/kubernetes/kubernetes/pull/52065), [@liggitt](https://github.com/liggitt))
-* Fix a kube-controller-manager crash which can result when `--concurrent-resource-quota-syncs` is >1 and pods exist in the system containing certain alpha/beta annotation keys. ([#52092](https://github.com/kubernetes/kubernetes/pull/52092), [@ironcladlou](https://github.com/ironcladlou))
-* Make logdump support kubemark and support gke with 'use_custom_instance_list' ([#51834](https://github.com/kubernetes/kubernetes/pull/51834), [@shyamjvs](https://github.com/shyamjvs))
-* Fixes an issue with APIService auto-registration affecting rolling HA apiserver restarts that add or remove API groups being served. ([#51921](https://github.com/kubernetes/kubernetes/pull/51921), [@liggitt](https://github.com/liggitt))
-* In GCE with COS, increase TasksMax for Docker service to raise cap on number of threads/processes used by containers. ([#51986](https://github.com/kubernetes/kubernetes/pull/51986), [@yujuhong](https://github.com/yujuhong))
-* Fix providerID update validation ([#51761](https://github.com/kubernetes/kubernetes/pull/51761), [@karataliu](https://github.com/karataliu))
-* Automated cherry pick of [#50381](https://github.com/kubernetes/kubernetes/pull/50381) to release-1.7 ([#51871](https://github.com/kubernetes/kubernetes/pull/51871), [@feiskyer](https://github.com/feiskyer))
-* The `emptyDir.sizeLimit` field is now correctly omitted from API requests and responses when unset. ([#50163](https://github.com/kubernetes/kubernetes/pull/50163), [@jingxu97](https://github.com/jingxu97))
-* Calico has been updated to v2.5, RBAC added, and is now automatically scaled when GCE clusters are resized. ([#51237](https://github.com/kubernetes/kubernetes/pull/51237), [@gunjan5](https://github.com/gunjan5))
-
-
-
-# v1.7.5
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.5
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes.tar.gz) | `bc96c1ec02da6a82f90bc04064d2c4d6463a4d9dd37e5882a23f8c74bdf1b20b`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-src.tar.gz) | `e06ebc6b73b6b38aeb55891b9e5c0bbd26e755e05674d70866cdc41f749f62a5`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-client-darwin-386.tar.gz) | `2c1c40c161e5ccae6df0dc5846a9a8bd55ebcd5b55012e09c01ec00bc81f4a81`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-client-darwin-amd64.tar.gz) | `6e749df53f9b4f5e2c1a94c360e06e9d4c4c0bf34c0dd2a02476d476e8da3f68`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-client-linux-386.tar.gz) | `d0edb7229ec27c4354589a1045766d8e12605be5c2ab82cef3e30d324ba66095`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-client-linux-amd64.tar.gz) | `e246dc357be1ccaad1c5f79d4696abdc31a90bd8eae642e5bacd1e7d820517ad`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-client-linux-arm64.tar.gz) | `bf94c70e00cb3c451a3b024e64fd5933098850fe3414e8b72d42244cbd478a2e`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-client-linux-arm.tar.gz) | `17d4af2b552377ee580230c0f0ea0de8469e682c01cd0ebde8f50c52cd02bed3`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-client-linux-ppc64le.tar.gz) | `bfa32c4b1d70474dd5fccd588bd4e836c6d330b1d6d04de3ceeb3acc4f65a21b`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-client-linux-s390x.tar.gz) | `c2a3822d358b24c909b8965a25ac759f510bab3f60b6117cf522dccabc724cb0`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-client-windows-386.tar.gz) | `b70b3de5a33eb7762aa371b1b7e426a0cafc1d468bb33dff2db20997d244bd37`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-client-windows-amd64.tar.gz) | `7f995b5a4f9338b9aa62508ac71ccd615f0ef577841d603f9e9ea6683be688b0`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-server-linux-amd64.tar.gz) | `7482c12dae75fb195f2f3afa92f62c354cafb97bee5703c4fdaa617d27c7cf68`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-server-linux-arm64.tar.gz) | `0be475479062f113fcc41d91215c21409c6e4c000e96ffc0246e4597b6737a29`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-server-linux-arm.tar.gz) | `07527fbe49a2f12eae25ccd49e8a95deae7f5a8c8bae2014e5dc2561e4a04fdb`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-server-linux-ppc64le.tar.gz) | `fed7ee43ba5db918d277e26da9ca556254fa365445d51cb33a3e304d1e3841e9`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-server-linux-s390x.tar.gz) | `47b548cc2c6e224c49fe286da3db61c0cf1905239df2869b88b9b8607edbbd73`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-node-linux-amd64.tar.gz) | `f5dd62f21d2cc516768b55d191bc20fc20901b9fa2e1165eef2adcca4821e23d`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-node-linux-arm64.tar.gz) | `8ee0d5f417651f2ce9ab5e504bbd47fbfe0f15d6e3923a1356b2def4f1012b66`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-node-linux-arm.tar.gz) | `40882a5c505fee370eb69e890b8974d3bb9c896307795d81bf7dff52797e4eeb`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-node-linux-ppc64le.tar.gz) | `597bd33af9f03874fabc0778de3df057f13364630d590cc4443e4c858ffbe7f3`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-node-linux-s390x.tar.gz) | `dd57a82a5d71d03a97cebf901bf9cc5273b935218f4fc1c3f1471b93842a4414`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.5/kubernetes-node-windows-amd64.tar.gz) | `d95511742d26c375b5a705b85b498b200c8e081fec365c4b60df18def49d151c`
-
-## Changelog since v1.7.4
-
-### Other notable changes
-
-* Bumped Heapster version to 1.4.2 - more details https://github.com/kubernetes/heapster/releases/tag/v1.4.2. ([#51620](https://github.com/kubernetes/kubernetes/pull/51620), [@piosz](https://github.com/piosz))
-* Fix for Pod stuck in ContainerCreating with error "Volume is not yet attached according to node". ([#50806](https://github.com/kubernetes/kubernetes/pull/50806), [@verult](https://github.com/verult))
-* Fixed controller manager crash by making it tolerant to discovery errors.([#49767](https://github.com/kubernetes/kubernetes/pull/49767), [@deads2k](https://github.com/deads2k))
-* Finalizers are now honored on custom resources, and on other resources even when garbage collection is disabled via the apiserver flag `--enable-garbage-collector=false` ([#51469](https://github.com/kubernetes/kubernetes/pull/51469), [@ironcladlou](https://github.com/ironcladlou))
-* Allow attach of volumes to multiple nodes for vSphere ([#51066](https://github.com/kubernetes/kubernetes/pull/51066), [@BaluDontu](https://github.com/BaluDontu))
-* vSphere: Fix attach volume failing on the first try. ([#51217](https://github.com/kubernetes/kubernetes/pull/51217), [@BaluDontu](https://github.com/BaluDontu))
-* azure: support retrieving access tokens via managed identity extension ([#48854](https://github.com/kubernetes/kubernetes/pull/48854), [@colemickens](https://github.com/colemickens))
-* Fixed a bug in strategic merge patch that caused kubectl apply to error out under some conditions ([#50862](https://github.com/kubernetes/kubernetes/pull/50862), [@guoshimin](https://github.com/guoshimin))
-* It is now posible to use flexVolumes to bind mount directories and files. ([#50596](https://github.com/kubernetes/kubernetes/pull/50596), [@adelton](https://github.com/adelton))
-* StatefulSet: Fix "forbidden pod updates" error on Pods created prior to upgrading to 1.7. ([#48327](https://github.com/kubernetes/kubernetes/pull/48327)) ([#51149](https://github.com/kubernetes/kubernetes/pull/51149), [@kow3ns](https://github.com/kow3ns))
-* Fixed regression in initial kubectl exec terminal dimensions ([#51127](https://github.com/kubernetes/kubernetes/pull/51127), [@chen-anders](https://github.com/chen-anders))
-* Enforcement of fsGroup; enable ScaleIO multiple-instance volume mapping; default PVC capacity; alignment of PVC, PV, and volume names for dynamic provisioning ([#48999](https://github.com/kubernetes/kubernetes/pull/48999), [@vladimirvivien](https://github.com/vladimirvivien))
-
-
-
-# v1.7.4
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.4
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes.tar.gz) | `dfc4521a81cdcb6a644757247f7b5311ed371d767053e0b28ac1c6a58a890bd2`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-src.tar.gz) | `d9e0e091b202c2ca155d31ed88b616a4cb759bc14d84b637271b55d6b0774bd1`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-client-darwin-386.tar.gz) | `e87bb880f89766c0642eadfca387d91b82845da4c26eb4b213665b82d9060641`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-client-darwin-amd64.tar.gz) | `a913d8f2578449e926c822a5e96b3c7185fd0c97589d45f4f9224940f3f2e4c9`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-client-linux-386.tar.gz) | `03ed586c6c2c1e5fbdf3e75627b2d981b5e54fe1f4090a23759e34f1cfe6e7d0`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-client-linux-amd64.tar.gz) | `19eef604019d4562e9b1107ad8d1d3886512ba240a9eb82f8d6b4332b2cd5e7d`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-client-linux-arm64.tar.gz) | `9c60f289d55674b3af26bc219b4478aa2d46f6cbf7743493c14ad49099a17794`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-client-linux-arm.tar.gz) | `6fb2260f8a5ac18b5f16cfcf34579c675ee2222b54508d0abd36624acb24f314`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-client-linux-ppc64le.tar.gz) | `e5fe4b73cbd4e5662e77b1ca72e959f692fde39459bd1e9711814d877dabf137`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-client-linux-s390x.tar.gz) | `2ed3545580731b838f732cc0b8f805e0aa03478bf2913fd3ae3230042edea2c3`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-client-windows-386.tar.gz) | `5b1c79aea5e5174e0d135a15dd3a33cdbdb2c465f08af1878c5fc38aaf28ba7b`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-client-windows-amd64.tar.gz) | `07ca92b2f7659ecc8f5c93a707767fe6de099c20d5a81451f652968a326ec063`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-server-linux-amd64.tar.gz) | `09c420fdb9b912c172b19638d67b27bc7994e2608185051f412804fa55790076`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-server-linux-arm64.tar.gz) | `49d0a383fced290223b3727011904283e16183f0356f7d952f587eef9dbef4a8`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-server-linux-arm.tar.gz) | `74442000ff61b10b12f783594cb15b6a1db3dd0d879fe8c0863e8b5ec7de7de4`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-server-linux-ppc64le.tar.gz) | `809cf588ca15ab57ca4570aa7939fb08b7dc7e038a0475098f9f4ba5ced9e4c7`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-server-linux-s390x.tar.gz) | `33961f57ece65872976065614055b41a0bb3237152bb86ae40b9fa6a0089ab2f`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-node-linux-amd64.tar.gz) | `59e0643c46f9ad5b401b9bb8aa067d1263f0b22f06f16008b5c7518ee905324e`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-node-linux-arm64.tar.gz) | `216523d47ec6b451308708eda53ef5fe05f59c3c1c912955094be798dfe8f7bb`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-node-linux-arm.tar.gz) | `13ccad18701f67930991128c39efecea3ba873e21cecc81d79a5563c11f16ad2`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-node-linux-ppc64le.tar.gz) | `a6b644f842e84b3dc6059fae19dffe4da1d3dbc8e6464f264664169634f89a02`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-node-linux-s390x.tar.gz) | `b753f1bf1b26a62bc26def4b6b49dacdd16389d2d57ca2c384f449727daacc1d`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.4/kubernetes-node-windows-amd64.tar.gz) | `1fabda88ff9cbfcae406707c8584efc75600b2484317a0f22d56a0c44ca32184`
-
-## Changelog since v1.7.3
-
-### Other notable changes
-
-* Azure: Allow VNet to be in a separate Resource Group. ([#49725](https://github.com/kubernetes/kubernetes/pull/49725), [@sylr](https://github.com/sylr))
-* Fix an issue where if a CSR is not approved initially by the SAR approver is not retried. ([#49788](https://github.com/kubernetes/kubernetes/pull/49788), [@mikedanese](https://github.com/mikedanese))
-* Cluster Autoscaler - fixes issues with taints and updates kube-proxy cpu request. ([#50514](https://github.com/kubernetes/kubernetes/pull/50514), [@mwielgus](https://github.com/mwielgus))
-* Bumped Heapster version to 1.4.1: ([#50642](https://github.com/kubernetes/kubernetes/pull/50642), [@piosz](https://github.com/piosz))
- * handle gracefully problem when kubelet reports duplicated stats for the same container (see [#47853](https://github.com/kubernetes/kubernetes/pull/47853)) on Heapster side
- * fixed bugs and improved performance in Stackdriver Sink
-* fluentd-gcp addon: Fix a bug in the event-exporter, when repeated events were not sent to Stackdriver. ([#50511](https://github.com/kubernetes/kubernetes/pull/50511), [@crassirostris](https://github.com/crassirostris))
-* Collect metrics from Heapster in Stackdriver mode. ([#50517](https://github.com/kubernetes/kubernetes/pull/50517), [@piosz](https://github.com/piosz))
-* fixes a bug around using the Global config ElbSecurityGroup where Kuberentes would modify the passed in Security Group. ([#49805](https://github.com/kubernetes/kubernetes/pull/49805), [@nbutton23](https://github.com/nbutton23))
-* Updates Cinder AttachDisk operation to be more reliable by delegating Detaches to volume manager. ([#50042](https://github.com/kubernetes/kubernetes/pull/50042), [@jingxu97](https://github.com/jingxu97))
-* fixes kubefed's ability to create RBAC roles in version-skewed clusters ([#50537](https://github.com/kubernetes/kubernetes/pull/50537), [@liggitt](https://github.com/liggitt))
-* Fix data race during addition of new CRD ([#50098](https://github.com/kubernetes/kubernetes/pull/50098), [@nikhita](https://github.com/nikhita))
-* Fix bug in scheduler that caused initially unschedulable pods to stuck in Pending state forever. ([#50028](https://github.com/kubernetes/kubernetes/pull/50028), [@julia-stripe](https://github.com/julia-stripe))
-* Fix incorrect retry logic in scheduler ([#50106](https://github.com/kubernetes/kubernetes/pull/50106), [@julia-stripe](https://github.com/julia-stripe))
-* GCE: Bump GLBC version to 0.9.6 ([#50096](https://github.com/kubernetes/kubernetes/pull/50096), [@nicksardo](https://github.com/nicksardo))
-* The NodeRestriction admission plugin now allows a node to evict pods bound to itself ([#48707](https://github.com/kubernetes/kubernetes/pull/48707), [@danielfm](https://github.com/danielfm))
-* Fixed a bug in the API server watch cache, which could cause a missing watch event immediately after cache initialization. ([#49992](https://github.com/kubernetes/kubernetes/pull/49992), [@liggitt](https://github.com/liggitt))
-
-
-
-# v1.7.3
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.3
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes.tar.gz) | `8afa3919b6bff47ada1c298837881ef7eed9516694d54517ac2a59b0bbe7308c`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-src.tar.gz) | `54f77cb2d392de742580fc5fb9ca5acf29adfb4620f4dcb09050d7dfbbd260d7`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-client-darwin-386.tar.gz) | `9a62ebc7b25847ce3201e01df6a845139e1de6ea4e9cc02ef4c713d33c5a9916`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-client-darwin-amd64.tar.gz) | `b786b39e89908ed567a17dac6e554cf5580f0ad817334ad2bd447a8f8b5bde95`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-client-linux-386.tar.gz) | `aed5d3ccaf9fafb52775234d27168674f9b536ce72cb56e51376761f2f77c653`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-client-linux-amd64.tar.gz) | `8d66c7912914ac9add514e660fdc8c963b748a7c588c43a14533157a9f0e1c92`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-client-linux-arm64.tar.gz) | `7b65dd3d72712e419679685dfe6324274b080415eb556a2dca95bcb61cbf8882`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-client-linux-arm.tar.gz) | `42843f265bcf56a801942cee378f235b94eea1b8ac431315a9db0fb7d78736ad`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-client-linux-ppc64le.tar.gz) | `c2976c26f9f4842f59cf0d5e8a79913f688b57843b825bfdd300ca4d8b4e7f1f`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-client-linux-s390x.tar.gz) | `7f019b5a32e927422136be0672e0dd97bcf496e7c25935a3e3d68474c2bd543d`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-client-windows-386.tar.gz) | `2d4d26928f31342081337bc9b8508067b3a29c9f673a6f67186e04c447d274c1`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-client-windows-amd64.tar.gz) | `90423aaa71fdd813ac58ceb25e670bd8b53a417e6ac34e67ad2cacc7f5a4c579`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-server-linux-amd64.tar.gz) | `f4ae8d6655eedc1bed14c6d7da74156cb1f43a01a554f6399a177e3acb385bf1`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-server-linux-arm64.tar.gz) | `4a2ab8183f944f7e952b929008a4f39297897b7d411b233e7f952a8a755eb65c`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-server-linux-arm.tar.gz) | `fde4d9f8a2e360d8cabfa7d56ed1b2ec25a09ce1ab8db3d2e5e673f098586488`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-server-linux-ppc64le.tar.gz) | `7d012b8393c06bd2418b1173fb306879e6fd11437f874b92bffcdba5ef4fb14a`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-server-linux-s390x.tar.gz) | `364b2c768bca178844de0752b5c0e4d3ee37cfc98ca4b8deac71e71aded84d5a`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-node-linux-amd64.tar.gz) | `29b7a0649f0fed7f4e892d4c5ecbe7dfc57d3631e29c90dfafd305b19e324e57`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-node-linux-arm64.tar.gz) | `6c8f2d8651bddd625e336a16546b923cd18a8a8f01df6d236db46b914b9edbe0`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-node-linux-arm.tar.gz) | `1ad3c378ad56f7233b4e75cdb3fb1ba52cde1f7695a536b2ccbefc614f56208f`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-node-linux-ppc64le.tar.gz) | `32860144cf02a62b29bd2a8fcaa155ccf3f004352e363d398ff1eccf90ebaae7`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-node-linux-s390x.tar.gz) | `eb34c895267d91324841abc0cc17788def37bfee297f3067cbee6f088f6c6b39`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.3/kubernetes-node-windows-amd64.tar.gz) | `de2efc1cf0979bade8db64c342bbcec021d5dd271b2e5232c9d282104afb4368`
-
-## Changelog since v1.7.2
-
-### Other notable changes
-
-* fix pdb validation bug on PodDisruptionBudgetSpec ([#48706](https://github.com/kubernetes/kubernetes/pull/48706), [@dixudx](https://github.com/dixudx))
-* kubeadm: Fix join preflight check false negative ([#49825](https://github.com/kubernetes/kubernetes/pull/49825), [@erhudy](https://github.com/erhudy))
-* Revert deprecation of vCenter port in vSphere Cloud Provider. ([#49689](https://github.com/kubernetes/kubernetes/pull/49689), [@divyenpatel](https://github.com/divyenpatel))
-* Fluentd-gcp DaemonSet exposes different set of metrics. ([#48812](https://github.com/kubernetes/kubernetes/pull/48812), [@crassirostris](https://github.com/crassirostris))
-* Fixed OpenAPI Description and Nickname of API objects with subresources ([#49357](https://github.com/kubernetes/kubernetes/pull/49357), [@mbohlool](https://github.com/mbohlool))
-* Websocket requests to aggregated APIs now perform TLS verification using the service DNS name instead of the backend server's IP address, consistent with non-websocket requests. ([#49353](https://github.com/kubernetes/kubernetes/pull/49353), [@liggitt](https://github.com/liggitt))
-* kubeadm: Fixes a small bug where `--config` and `--skip-*` flags couldn't be passed at the same time in validation. ([#49498](https://github.com/kubernetes/kubernetes/pull/49498), [@luxas](https://github.com/luxas))
-* kubeadm: Don't set a specific `spc_t` SELinux label on the etcd Static Pod as that is more privs than etcd needs and due to that `spc_t` isn't compatible with some OSes. ([#49328](https://github.com/kubernetes/kubernetes/pull/49328), [@euank](https://github.com/euank))
-* Websocket requests to aggregated APIs now perform TLS verification using the service DNS name instead of the backend server's IP address, consistent with non-websocket requests. ([#49353](https://github.com/kubernetes/kubernetes/pull/49353), [@liggitt](https://github.com/liggitt))
-* `kubectl drain` no longer spins trying to delete pods that do not exist ([#49444](https://github.com/kubernetes/kubernetes/pull/49444), [@eparis](https://github.com/eparis))
-* Fixes [#49418](https://github.com/kubernetes/kubernetes/pull/49418) where kube-controller-manager can panic on volume.CanSupport methods and enter a crash loop. ([#49420](https://github.com/kubernetes/kubernetes/pull/49420), [@gnufied](https://github.com/gnufied))
-* Fix Cinder to support http status 300 in pagination ([#47602](https://github.com/kubernetes/kubernetes/pull/47602), [@rootfs](https://github.com/rootfs))
-* Automated cherry pick of [#49079](https://github.com/kubernetes/kubernetes/pull/49079) upstream release 1.7 ([#49254](https://github.com/kubernetes/kubernetes/pull/49254), [@feiskyer](https://github.com/feiskyer))
-* Fixed GlusterFS volumes taking too long to time out ([#48709](https://github.com/kubernetes/kubernetes/pull/48709), [@jsafrane](https://github.com/jsafrane))
-* The IP address and port for kube-proxy metrics server is now configurable via flag `--metrics-bind-address` ([#48625](https://github.com/kubernetes/kubernetes/pull/48625), [@mrhohn](https://github.com/mrhohn))
- * Special notice for kube-proxy in 1.7+ (including 1.7.0):
- * Healthz server (/healthz) will be served on 0.0.0.0:10256 by default.
- * Metrics server (/metrics and /proxyMode) will be served on 127.0.0.1:10249 by default.
- * Metrics server will continue serving /healthz.
-
-
-# v1.7.2
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.2
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes.tar.gz) | `35281f3552ec4bdf0c219bb7d25b22033648a81e3726594d25500418653eb2f0`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-src.tar.gz) | `450ab45c9d69b12ca9d658247ace8fc67fa02a658fbb474f2a7deae85ebff223`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-client-darwin-386.tar.gz) | `9fc3629c9eee02008cda0a1045d8a80d6c4ede057e989bdb9c187630c8977438`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-client-darwin-amd64.tar.gz) | `c163afbf8effd3f1ae041fbcf147f49c478656665158503ddabfb8f64f764bdc`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-client-linux-386.tar.gz) | `8ec8a0f40a8c7726b2610a30dd4bfa2aef736147a9771234651c1e005e832519`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-client-linux-amd64.tar.gz) | `9c2363710d61a12a28df2d8a4688543b785156369973d33144ab1f2c1d5c7b53`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-client-linux-arm64.tar.gz) | `320e89b12fd59863ad64bb49f0a208aba98064f5ead0fe43945f7c5b3fc260e9`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-client-linux-arm.tar.gz) | `08566e8f7d200d4d23c59947a66b2737122bffd897e8079f056b76d39156167c`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-client-linux-ppc64le.tar.gz) | `681842ae5f8364be1a0dcdb0703958e450ec9c46eb7bf875a86bc3d6b21a9bb0`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-client-linux-s390x.tar.gz) | `a779720a07fa22bdaf0e28d93e6a946f479ce408ec25644a3b45aeb03cd04cc8`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-client-windows-386.tar.gz) | `3fe1e082176e09aba62b6414f5fb4ea8d43880ab04766535ae68e6500c868764`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-client-windows-amd64.tar.gz) | `1ddbdc59bd97b044b63a46da175a5e5298b8947cc49511e3b378d0298736c66d`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-server-linux-amd64.tar.gz) | `b281a1b0ff2f0f38e88642d492e184aa087a985baf54bcaae588948e675d96a3`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-server-linux-arm64.tar.gz) | `2b87266d43f7e38e8d7328b923ee75adba0fc64a2299851a8e915b9321f66e3d`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-server-linux-arm.tar.gz) | `3f00de82ba4d623fbec8f05fc9b249435671a2f6f976654ea5f1f839dca1f804`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-server-linux-ppc64le.tar.gz) | `4b70ff24a6bf9c3d9f58c51fe60a279ac3ce8d996708a4bf58295fa740168b27`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-server-linux-s390x.tar.gz) | `83da55f793bbd040f7282cb155ce219bf1039195f53762098633c44a6971b759`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-node-linux-amd64.tar.gz) | `ecee3f66f62ff87a1718ee7279b720f411fba1b4439255664364e3c5968207b5`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-node-linux-arm64.tar.gz) | `d03252370caa631afd5710e5d40ff35b1e0764bc19a911f3e3f6c9c300b2e354`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-node-linux-arm.tar.gz) | `e1885e36ca699c7ed75a2212d7e8be4482c544ea80e0a229b32703e3efd16ddc`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-node-linux-ppc64le.tar.gz) | `6a3fdc63c1fbcd66440dba4f8252a26959cb42ac92298d12c447c7f3d8d7cc29`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-node-linux-s390x.tar.gz) | `8b2eabb3cee1b990c75835a80ce3429d2a2a7bae7e90916f64efda131da70eaa`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.2/kubernetes-node-windows-amd64.tar.gz) | `8f563627db05d6f12a2034bb01961b012dcadcec17d3bc399d05b6837340d3b3`
-
-## Changelog since v1.7.1
-
-### Other notable changes
-
-* Use port 20256 for node-problem-detector in standalone mode. ([#49316](https://github.com/kubernetes/kubernetes/pull/49316), [@ajitak](https://github.com/ajitak))
-* GCE Cloud Provider: New created LoadBalancer type Service will have health checks for nodes by default if all nodes have version >= v1.7.2. ([#49330](https://github.com/kubernetes/kubernetes/pull/49330), [@MrHohn](https://github.com/MrHohn))
-* Azure PD (Managed/Blob) ([#46360](https://github.com/kubernetes/kubernetes/pull/46360), [@khenidak](https://github.com/khenidak))
-* Fix Pods using Portworx volumes getting stuck in ContainerCreating phase. ([#48898](https://github.com/kubernetes/kubernetes/pull/48898), [@harsh-px](https://github.com/harsh-px))
-* kubeadm: Make kube-proxy tolerate the external cloud provider taint so that an external cloud provider can be easily used on top of kubeadm ([#49017](https://github.com/kubernetes/kubernetes/pull/49017), [@luxas](https://github.com/luxas))
-* Fix pods failing to start when subPath is a dangling symlink from kubelet point of view, which can happen if it is running inside a container ([#48555](https://github.com/kubernetes/kubernetes/pull/48555), [@redbaron](https://github.com/redbaron))
-* Never prevent deletion of resources as part of namespace lifecycle ([#48733](https://github.com/kubernetes/kubernetes/pull/48733), [@liggitt](https://github.com/liggitt))
-* kubectl: Fix bug that showed terminated/evicted pods even without `--show-all`. ([#48786](https://github.com/kubernetes/kubernetes/pull/48786), [@janetkuo](https://github.com/janetkuo))
-* Add a runtime warning about the kubeadm default token TTL changes. ([#48838](https://github.com/kubernetes/kubernetes/pull/48838), [@mattmoyer](https://github.com/mattmoyer))
-* Local storage teardown fix ([#48402](https://github.com/kubernetes/kubernetes/pull/48402), [@ianchakeres](https://github.com/ianchakeres))
-* Fix udp service blackhole problem when number of backends changes from 0 to non-0 ([#48524](https://github.com/kubernetes/kubernetes/pull/48524), [@freehan](https://github.com/freehan))
-* hpa: Prevent scaling below MinReplicas if desiredReplicas is zero ([#48997](https://github.com/kubernetes/kubernetes/pull/48997), [@johanneswuerbach](https://github.com/johanneswuerbach))
-* kubeadm: Fix a bug where `kubeadm join` would wait 5 seconds without doing anything. Now `kubeadm join` executes the tasks immediately. ([#48737](https://github.com/kubernetes/kubernetes/pull/48737), [@mattmoyer](https://github.com/mattmoyer))
-* Fix a regression that broke the `--config` flag for `kubeadm init`. ([#48915](https://github.com/kubernetes/kubernetes/pull/48915), [@mattmoyer](https://github.com/mattmoyer))
-* Fix service controller crash loop when Service with GCP LoadBalancer uses static IP ([#48848](https://github.com/kubernetes/kubernetes/pull/48848), [@nicksardo](https://github.com/nicksardo)) ([#48849](https://github.com/kubernetes/kubernetes/pull/48849), [@nicksardo](https://github.com/nicksardo))
-
-
-
-# v1.7.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes.tar.gz) | `76bddfd19a50f92136456af5bbc3a9d4239260c0c40dccfe704156286a93127c`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-src.tar.gz) | `159100f6506c4d59d640a3b0fc7691c4a5023b346d7c3911c5cbbedce2ad8184`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-client-darwin-386.tar.gz) | `340ceb858bff489fa7ae15c6b526c4316d9c7b6ca354f68ff187c8b5eff08f45`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-client-darwin-amd64.tar.gz) | `1f1db50d57750115abd6e6e060c914292af7a6e2933a48ccf28ebbe8942c7826`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-client-linux-386.tar.gz) | `5eac1c92aee40cd2ef14248639d39d7cee910f077dd006a868c510116852fbba`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-client-linux-amd64.tar.gz) | `6b807520a69b8432baaa89304e8d1ff286d07af20e2a3712b8b2e38d61dbb445`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-client-linux-arm64.tar.gz) | `a91e0ea4381f659f60380b5b9d6f8114e13337f90a32bcb4a72b8168caef2e00`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-client-linux-arm.tar.gz) | `6e0e2e557d4e3df18e967e6025a36205aae5b8979dcbb33df6d6e44d9224809a`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-client-linux-ppc64le.tar.gz) | `22264e96ceaa2d853120be7dcbdc70a9938915cd10eaf5a2c75f4fb2dd12a2eb`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-client-linux-s390x.tar.gz) | `9b5ac9a66df99a2a8abdc908ef3cd933010facf4c08e96597e041fc359a62aa9`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-client-windows-386.tar.gz) | `bd3f99ead21f6c6c34dba7ef5c2d2308ef6770bcb255f286d9d5edbf33f5ccff`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-client-windows-amd64.tar.gz) | `e2578ca743bf03b367c473c32657cbed4cf27a12545841058f8bb873fb70e872`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-server-linux-amd64.tar.gz) | `467201c89d473bdec82a67c9b24453a2037eef1a1ed552f0dc55310355d21ea3`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-server-linux-arm64.tar.gz) | `1c1c5cad62423655b1e79bc831de5765cbe683aeef4efe9a823d2597334e19c1`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-server-linux-arm.tar.gz) | `17eee900df8ac9bbdd047b2f7d7cb2684820f71cb700dcb305e986acbddf66eb`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-server-linux-ppc64le.tar.gz) | `b1ae5f6d728cfe61b38acbc081e66ddf77ecc38ebdfdb42bfdd53e51fcd3aa2b`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-server-linux-s390x.tar.gz) | `20a273b20b10233fc2632d8a65e0b123fc87166e1f50171e7ede76c59f3118cd`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-node-linux-amd64.tar.gz) | `da0e6d5d6532ef7dba6e5db59e5bc142a52a0314bbb2c70e1fa8e73fe07d0e31`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-node-linux-arm64.tar.gz) | `939b6f779257671a141ecb243bc01e9a5dfb1cd05808820044d915049c3f591a`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-node-linux-arm.tar.gz) | `512fddbbb7353d6dd02e51e79e05101ab857c09e4a4970404258c783ab094c95`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-node-linux-ppc64le.tar.gz) | `795150d92ef93aa53be2db245b9f88cc40fe0fd27045835a23c8eee830c419ba`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-node-linux-s390x.tar.gz) | `58c9b1ef8f8b30fd7061ac87e60b7be9eb79b5bd50c2eef1564838768e7b1d02`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.1/kubernetes-node-windows-amd64.tar.gz) | `eae772609aa50d6a1f4f7cf6df5df2f56cbd438b9034f9be622bc0cfe1d13072`
-
-## Changelog since v1.7.0
-
-### Other notable changes
-
-* Added new flag to `kubeadm init`: --node-name, that lets you specify the name of the Node object that will be created ([#48594](https://github.com/kubernetes/kubernetes/pull/48594), [@GheRivero](https://github.com/GheRivero))
-* Added new flag to `kubeadm join`: --node-name, that lets you specify the name of the Node object that's gonna be created ([#48538](https://github.com/kubernetes/kubernetes/pull/48538), [@GheRivero](https://github.com/GheRivero))
-* Fixes issue where you could not mount NFS or glusterFS volumes using hostnames on GCI/GKE with COS images. ([#42376](https://github.com/kubernetes/kubernetes/pull/42376), [@jingxu97](https://github.com/jingxu97))
-* Reduce amount of noise in Stackdriver Logging, generated by the event-exporter component in the fluentd-gcp addon. ([#48712](https://github.com/kubernetes/kubernetes/pull/48712), [@crassirostris](https://github.com/crassirostris))
-* Add generic NoSchedule toleration to fluentd in gcp config. ([#48182](https://github.com/kubernetes/kubernetes/pull/48182), [@gmarek](https://github.com/gmarek))
-* RBAC role and role-binding reconciliation now ensures namespaces exist when reconciling on startup. ([#48480](https://github.com/kubernetes/kubernetes/pull/48480), [@liggitt](https://github.com/liggitt))
-* Support NoSchedule taints correctly in DaemonSet controller. ([#48189](https://github.com/kubernetes/kubernetes/pull/48189), [@mikedanese](https://github.com/mikedanese))
-* kubeadm: Expose only the cluster-info ConfigMap in the kube-public ns ([#48050](https://github.com/kubernetes/kubernetes/pull/48050), [@luxas](https://github.com/luxas))
-
-
-
-# v1.7.0
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.0
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes.tar.gz) | `947f1dd9a9b6b427faac84067a30c86e83e6391eb42f09ddcc50a8694765c31a`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-src.tar.gz) | `d3d8b0bfc31164dd703b38d8484cfed7981cacd1e496731880afa87f8bf39aac`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-client-darwin-386.tar.gz) | `da298e24318e57ac8a558c390117bd7e9e596b3bdf1c5960979898fefe6c5c88`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-client-darwin-amd64.tar.gz) | `c22f72e1592731155db5b05d0d660f1d7314288cb020f7980e2a109d9e7ba0e5`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-client-linux-386.tar.gz) | `fc8e90e96360c3a2c8ec56903ab5acde1dffa4d641e1ee27b804ee6d8e824cf6`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-client-linux-amd64.tar.gz) | `8b3ed03f8a4b3a1ec124abde01632ee6dcec9daf9376f0288fd7500b5173981c`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-client-linux-arm64.tar.gz) | `8930c74dab9ada31e6994f0dc3fb22d41a602a2880b6b17112718ce73eac0574`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-client-linux-arm.tar.gz) | `20a6f4645cab3c0aef72f849ae90b2691605fd3f670ce36cc8aa11aef31c6edb`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-client-linux-ppc64le.tar.gz) | `509e214d55e8df1906894cbdc166e791761a3b82a52bcea0de65ceca3143c8b5`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-client-linux-s390x.tar.gz) | `fd39f47b691fc608f2ea3fed35408dd4c0b1d198605ec17363b0987b123a4702`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-client-windows-386.tar.gz) | `d9b72cfeefee0cd2db5f6a388bdb9da1e33514498f4d88be1b04282db5bfbd3d`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-client-windows-amd64.tar.gz) | `c536952bd29a7ae12c8fa148d592cc3c353dea4d0079e8497edaf8a759a16006`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-server-linux-amd64.tar.gz) | `175fc9360d4f26b5f60b467798d851061f01d0ca555c254ef44a8a9822cf7560`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-server-linux-arm64.tar.gz) | `f1e039e0e2923d1ea02fd76453aa51715ca83c5c26ca1a761ace2c717b79154f`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-server-linux-arm.tar.gz) | `48dc95e5230d7a44b64b379f9cf2e1ec72b7c4c7c62f4f3e92a73076ad6376db`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-server-linux-ppc64le.tar.gz) | `dc079cd18333c201cfd0f5b0e93e602d020a9e665d8c13968170a2cd89eebeb4`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-server-linux-s390x.tar.gz) | `fe6674e7d69aeffd522e543e957897e2cb943e82d5ccd368ccb9009e1128273f`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-node-linux-amd64.tar.gz) | `6c6cece62bad5bfeaf4a4b14e93c9ba99c96dc82b7855a2214cdf37a65251de8`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-node-linux-arm64.tar.gz) | `dd75dc044fb1f337b60cb4b27c9bbdca4742d8bc0a1d03d13553a1b8fc593e98`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-node-linux-arm.tar.gz) | `c5d832c93c24d77414a880d8b7c4fac9a7443305e8e5c704f637ff023ff56f94`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-node-linux-ppc64le.tar.gz) | `649813a257353c5b85605869e33aeeb0c070e64e6fee18bc9c6e70472aa05677`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-node-linux-s390x.tar.gz) | `5ca0a7e9e90b2de7aff7bbdc84f662140ce847ea46cdb78802ce75459e0cc043`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0/kubernetes-node-windows-amd64.tar.gz) | `4b84b0025aff1d4406f3e5cd5fa86940f594e3ec6e1d12d3ce1eea5f5b3fc55d`
-
-## **Major Themes**
-
-Kubernetes 1.7 is a milestone release that adds security, stateful application, and extensibility features motivated by widespread production use of Kubernetes.
-
-Security enhancements in this release include encrypted secrets (alpha), network policy for pod-to-pod communication, the node authorizer to limit Kubelet access to API resources, and Kubelet client / server TLS certificate rotation (alpha).
-
-Major features for stateful applications include automated updates to StatefulSets, enhanced updates for DaemonSets, a burst mode for faster StatefulSets scaling, and (alpha) support for local storage.
-
-Extensibility features include API aggregation (beta), CustomResourceDefinitions (beta) in favor of ThirdPartyResources, support for extensible admission controllers (alpha), pluggable cloud providers (alpha), and container runtime interface (CRI) enhancements.
-
-## **Action Required Before Upgrading**
-
-### Network
-
-* NetworkPolicy has been promoted from extensions/v1beta1 to the new networking.k8s.io/v1 API group. The structure remains unchanged from the v1beta1 API. The net.beta.kubernetes.io/network-policy annotation on Namespaces (used to opt in to isolation) has been removed. Instead, isolation is now determined on a per-pod basis. A NetworkPolicy may target a pod for isolation by including the pod in its spec.podSelector. Targeted Pods accept the traffic specified in the respective NetworkPolicy (and nothing else). Pods not targeted by any NetworkPolicy accept all traffic by default. ([#39164](https://github.com/kubernetes/kubernetes/pull/39164), [@danwinship](https://github.com/danwinship))
-
- **Action Required:** When upgrading to Kubernetes 1.7 (and a [network plugin](https://kubernetes.io/docs/tasks/administer-cluster/declare-network-policy/) that supports the new NetworkPolicy v1 semantics), you should consider the following.
-
- The v1beta1 API used an annotation on Namespaces to activate the DefaultDeny policy for an entire Namespace. To activate default deny in the v1 API, you can create a NetworkPolicy that matches all Pods but does not allow any traffic:
-
- ```yaml
- kind: NetworkPolicy
- apiVersion: networking.k8s.io/v1
- metadata:
- name: default-deny
- spec:
- podSelector:
- ```
-
- This will ensure that Pods that aren't matched by any other NetworkPolicy will continue to be fully-isolated, as they were in v1beta1.
-
- In Namespaces that previously did not have the "DefaultDeny" annotation, you should delete any existing NetworkPolicy objects. These had no effect in the v1beta1 API, but with v1 semantics they might cause some traffic to be unintentionally blocked.
-
-
-### Storage
-
-* Alpha volume provisioning is removed and default storage class should be used instead. ([#44090](https://github.com/kubernetes/kubernetes/pull/44090), [@NickrenREN](https://github.com/NickrenREN))
-
-* Portworx volume driver no longer has to run on the master. ([#45518](https://github.com/kubernetes/kubernetes/pull/45518), [@harsh-px](https://github.com/harsh-px))
-
-* Default behavior in Cinder storageclass is changed. If availability is not specified, the zone is chosen by algorithm. It makes possible to spread stateful pods across many zones. ([#44798](https://github.com/kubernetes/kubernetes/pull/44798), [@zetaab](https://github.com/zetaab))
-
-* PodSpecs containing parent directory references such as `..` (for example, `../bar`) in hostPath volume path or in volumeMount subpaths must be changed to the simple absolute path. Backsteps `..` are no longer allowed.([#47290](https://github.com/kubernetes/kubernetes/pull/47290), [@jhorwit2](https://github.com/jhorwit2)).
-
-
-### API Machinery
-
-* The Namespace API object no longer supports the deletecollection operation. ([#46407](https://github.com/kubernetes/kubernetes/pull/46407), [@liggitt](https://github.com/liggitt))
-
-* The following alpha API groups were unintentionally enabled by default in previous releases, and will no longer be enabled by default in v1.8: ([#47690](https://github.com/kubernetes/kubernetes/pull/47690), [@caesarxuchao](https://github.com/caesarxuchao))
-
- * rbac.authorization.k8s.io/v1alpha1
-
- * settings.k8s.io/v1alpha1
-
- * If you wish to continue using them in v1.8, please enable them explicitly using the `--runtime-config` flag on the apiserver (for example, `--runtime-config="rbac.authorization.k8s.io/v1alpha1,settings.k8s.io/v1alpha1"`)
-
-* `cluster/update-storage-objects.sh` now supports updating StorageClasses in etcd to storage.k8s.io/v1. You must do this prior to upgrading to 1.8. ([#46116](https://github.com/kubernetes/kubernetes/pull/46116), [@ncdc](https://github.com/ncdc))
-
-
-### Controller Manager
-
-* kube-controller-manager has dropped support for the `--insecure-experimental-approve-all-kubelet-csrs-for-group` flag. It is accepted in 1.7, but ignored. Instead, the csrapproving controller uses authorization checks to determine whether to approve certificate signing requests: ([#45619](https://github.com/kubernetes/kubernetes/pull/45619), [@mikedanese](https://github.com/mikedanese))
-
- * Before upgrading, users must ensure their controller manager will enable the csrapproving controller, create an RBAC ClusterRole and ClusterRoleBinding to approve CSRs for the same group, then upgrade. Example roles to enable the equivalent behavior can be found in the [TLS bootstrapping](https://kubernetes.io/docs/admin/kubelet-tls-bootstrapping/) documentation.
-
-
-### kubectl (CLI)
-* `kubectl create role` and `kubectl create clusterrole` invocations must be updated to specify multiple resource names as repeated `--resource-name` arguments instead of comma-separated arguments to a single `--resource-name` argument. E.g. `--resource-name=x,y` must become `--resource-name x --resource-name y` ([#44950](https://github.com/kubernetes/kubernetes/pull/44950), [@xilabao](https://github.com/xilabao))
-
-* `kubectl create rolebinding` and `kubectl create clusterrolebinding` invocations must be updated to specify multiple subjects as repeated `--user`, `--group`, or `--serviceaccount` arguments instead of comma-separated arguments to a single `--user`, `--group`, or `--serviceaccount`. E.g. `--user=x,y` must become `--user x --user y` ([#43903](https://github.com/kubernetes/kubernetes/pull/43903), [@xilabao](https://github.com/xilabao))
-
-
-### kubeadm
-
-* kubeadm: Modifications to cluster-internal resources installed by kubeadm will be overwritten when upgrading from v1.6 to v1.7. ([#47081](https://github.com/kubernetes/kubernetes/pull/47081), [@luxas](https://github.com/luxas))
-
-* kubeadm deb/rpm packages: cAdvisor doesn't listen on `0.0.0.0:4194` without authentication/authorization because of the possible information leakage. The cAdvisor API can still be accessed via `https://{node-ip}:10250/stats/`, though. ([kubernetes/release#356](https://github.com/kubernetes/release/pull/356), [@luxas](https://github.com/luxas))
-
-
-### Cloud Providers
-
-* Azure: Container permissions for provisioned volumes have changed to private. If you have existing Azure volumes that were created by Kubernetes v1.6.0-v1.6.5, you should change the permissions on them manually. ([#47605](https://github.com/kubernetes/kubernetes/pull/47605), [@brendandburns](https://github.com/brendandburns))
-
-* GKE/GCE: New and upgraded 1.7 GCE/GKE clusters no longer have an RBAC ClusterRoleBinding that grants the cluster-admin ClusterRole to the default service account in the kube-system Namespace. ([#46750](https://github.com/kubernetes/kubernetes/pull/46750), [@cjcullen](https://github.com/cjcullen)). If this permission is still desired, run the following command to explicitly grant it, either before or after upgrading to 1.7:
- ```
- kubectl create clusterrolebinding kube-system-default --serviceaccount=kube-system:default --clusterrole=cluster-admin
- ```
-
-## **Known Issues**
-
-Populated via [v1.7.x known issues / FAQ accumulator](https://github.com/kubernetes/kubernetes/issues/46733)
-
-* The kube-apiserver discovery APIs (for example, `/apis`) return information about the API groups being served, and can change dynamically.
-During server startup, prior to the server reporting healthy (via `/healthz`), not all API groups may be reported.
-Wait for the server to report healthy (via `/healthz`) before depending on the information provided by the discovery APIs.
-Additionally, since the information returned from the discovery APIs may change dynamically, a cache of the results should not be considered authoritative.
-ETag support is planned in a future version to facilitate client caching.
-([#47977](https://github.com/kubernetes/kubernetes/pull/47977), [#44957](https://github.com/kubernetes/kubernetes/pull/44957))
-
-* The DaemonSet controller will evict running Pods that do not tolerate the NoSchedule taint if the taint is added to a Node. There is an open PR ([#48189](https://github.com/kubernetes/kubernetes/pull/48189)) to resolve this issue, but as this issue also exists in 1.6, and as we do not wish to risk release stability by merging it directly prior to a release without sufficient testing, we have decided to defer merging the PR until the next point release for each minor version ([#48190](https://github.com/kubernetes/kubernetes/pull/48190)).
-
-* Protobuf serialization does not distinguish between `[]` and `null`.
-API fields previously capable of storing and returning either `[]` and `null` via JSON API requests (for example, the Endpoints `subsets` field)
-can now store only `null` when created using the protobuf content-type or stored in etcd using protobuf serialization (the default in 1.6).
-JSON API clients should tolerate `null` values for such fields, and treat `null` and `[]` as equivalent in meaning unless specifically documented otherwise for a particular field. ([#44593](https://github.com/kubernetes/kubernetes/pull/44593))
-
-* Local volume source paths that are directories and not mount points fail to unmount. A fix is in process ([#48331](https://github.com/kubernetes/kubernetes/issues/48331)).
-
-* Services of type LoadBalancer (on GCE/GKE) that have static IP addresses will cause the Service Controller to panic and thereby causing the kube-controller-manager to crash loop.
-([#48848](https://github.com/kubernetes/kubernetes/issues/48848))
-
-## **Deprecations**
-
-### Cluster provisioning scripts
-* cluster/ubuntu: Removed due to [deprecation](https://github.com/kubernetes/kubernetes/tree/master/cluster#cluster-configuration) and lack of maintenance. ([#44344](https://github.com/kubernetes/kubernetes/pull/44344), [@mikedanese](https://github.com/mikedanese))
-
-* cluster/aws: Removed due to [deprecation](https://github.com/kubernetes/kubernetes/pull/38772) and lack of maintenance. ([#42196](https://github.com/kubernetes/kubernetes/pull/42196), [@zmerlynn](https://github.com/zmerlynn))
-
-
-### Client libraries
-* Swagger 1.2 spec (`/swaggerapi/*`) is deprecated. Please use OpenAPI instead.
-
-### DaemonSet
-* DaemonSet’s spec.templateGeneration has been deprecated. ([#45924](https://github.com/kubernetes/kubernetes/pull/45924), [@janetkuo](https://github.com/janetkuo))
-
-### kube-proxy
-* In 1.7, the kube-proxy component has been converted to use a configuration file. The old flags still work in 1.7, but they are being deprecated and will be removed in a future release. Cluster administrators are advised to switch to using the configuration file, but no action is strictly necessary in 1.7. ([#34727](https://github.com/kubernetes/kubernetes/pull/34727), [@ncdc](https://github.com/ncdc))
-
-### Namespace
-* The Namespace API object no longer supports the deletecollection operation. ([#46407](https://github.com/kubernetes/kubernetes/pull/46407), [@liggitt](https://github.com/liggitt))
-
-
-### Scheduling
-* If you are using `AffinityInAnnotations=true` in `--feature-gates`, then the 1.7 release is your last opportunity to convert from specifying affinity/anti-affinity using the scheduler.alpha.kubernetes.io/affinity annotation on Pods, to using the Affinity field of PodSpec. Support for the alpha version of node and pod affinity (which uses the scheduler.alpha.kubernetes.io/affinity annotations on Pods) is going away **in Kubernetes 1.8** (not this release, but the next release). If you have not enabled AffinityInAnnotations=true in `--feature-gates`, then this change does not affect you.
-
-## **Notable Features**
-
-Features for this release were tracked via the use of the [kubernetes/features](https://github.com/kubernetes/features) issues repo. Each Feature issue is owned by a Special Interest Group from [kubernetes/community](https://github.com/kubernetes/community)
-
-## Kubefed
-
-* Deprecate the `--secret-name` flag from `kubefed join`, instead generating the secret name arbitrarily. ([#42513](https://github.com/kubernetes/kubernetes/pull/42513), [@perotinus](https://github.com/perotinus))
-
-
-### **Kubernetes API**
-#### User Provided Extensions
-* [beta] ThirdPartyResource is deprecated. Please migrate to the successor, CustomResourceDefinition. For more information, see [Custom Resources](https://kubernetes.io/docs/concepts/api-extension/custom-resources/) and [Migrate a ThirdPartyResource to CustomResourceDefinition](https://kubernetes.io/docs/tasks/access-kubernetes-api/migrate-third-party-resource/).
-
-* [beta] User-provided apiservers can be aggregated (served along with) the rest of the Kubernetes API. See [Extending the Kubernetes API with the aggregation layer](https://kubernetes.io/docs/concepts/api-extension/apiserver-aggregation/), [Configure the aggregation layer](https://kubernetes.io/docs/tasks/access-kubernetes-api/configure-aggregation-layer/), and [Setup an extension API server](https://kubernetes.io/docs/tasks/access-kubernetes-api/setup-extension-api-server/).
-
-* [alpha] Adding admissionregistration API group which enables dynamic registration of initializers and external admission webhooks. ([#46294](https://github.com/kubernetes/kubernetes/pull/46294), [@caesarxuchao](https://github.com/caesarxuchao))
-
-
-### **Application Deployment**
-#### StatefulSet
-* [beta] StatefulSet supports [RollingUpdate](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#rolling-updates) and [OnDelete](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#on-delete) update strategies.
-
-* [alpha] StatefulSet authors should be able to relax the [ordering](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#orderedready-pod-management) and [parallelism](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#parallel-pod-management) policies for software that can safely support rapid, out-of-order changes.
-
-#### DaemonSet
-* [beta] DaemonSet supports history and rollback. See [Performing a Rollback on a DaemonSet](https://kubernetes.io/docs/tasks/manage-daemon/rollback-daemon-set/).
-
-#### Deployments
-* [beta] Deployments uses a hashing collision avoidance mechanism that ensures new rollouts will not block on hashing collisions anymore. ([kubernetes/features#287](https://github.com/kubernetes/features/issues/287))
-
-#### PodDisruptionBudget
-* [beta] PodDisruptionBudget has a new field MaxUnavailable, which allows users to specify the maximum number of disruptions that can be tolerated during eviction. For more information, see [Pod Disruptions](https://kubernetes.io/docs/concepts/workloads/pods/disruptions/) and [Specifying a Disruption Budget for your Application](https://kubernetes.io/docs/tasks/run-application/configure-pdb/).
-* PodDisruptionBudget now uses [ControllerRef](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/controller-ref.md) to make the right decisions about Pod eviction even if the built in application controllers have overlapping selectors.
-
-### **Security**
-#### Admission Control
-* [alpha] Add [extensible external admission control](https://kubernetes.io/docs/admin/extensible-admission-controllers/).
-
-#### TLS Bootstrapping
-* [alpha] Rotation of the server TLS certificate on the kubelet. See [TLS bootstrapping - approval controller](https://kubernetes.io/docs/admin/kubelet-tls-bootstrapping/#approval-controller).
-
-* [alpha] Rotation of the client TLS certificate on the kubelet. See [TLS bootstrapping - kubelet configuration](https://kubernetes.io/docs/admin/kubelet-tls-bootstrapping/#kubelet-configuration).
-
-* [beta] [Kubelet TLS Bootstrap](https://kubernetes.io/docs/admin/kubelet-tls-bootstrapping/#kubelet-configuration)
-
-#### Audit Logging
-* [alpha] Advanced Auditing enhances the Kubernetes API [audit logging](https://kubernetes.io/docs/tasks/debug-application-cluster/audit/#audit-logs) capabilities through a customizable policy, pluggable audit backends, and richer audit data.
-
-#### Encryption at Rest
-* [alpha] Encrypt secrets stored in etcd. For more information, see [Securing a Cluster](https://kubernetes.io/docs/tasks/administer-cluster/securing-a-cluster/) and [Encrypting data at rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/).
-
-#### Node Authorization
-* [beta] A new Node authorization mode and NodeRestriction admission plugin, when used in combination, limit nodes' access to specific APIs, so that they may only modify their own Node API object, only modify Pod objects bound to themselves, and only retrieve secrets and configmaps referenced by pods bound to themselves. See [Using Node Authorization](https://kubernetes.io/docs/admin/authorization/node/) for more information.
-
-
-### **Application Autoscaling**
-#### Horizontal Pod Autoscaler
-* [alpha] [HPA Status Conditions](https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough/#appendix-horizontal-pod-autoscaler-status-conditions).
-
-
-### **Cluster Lifecycle**
-#### kubeadm
-* [alpha] Manual [upgrades for kubeadm from v1.6 to v1.7](https://kubernetes.io/docs/tasks/administer-cluster/kubeadm-upgrade-1-7/). Automated upgrades ([kubernetes/features#296](https://github.com/kubernetes/features/issues/296)) are targeted for v1.8.
-
-#### Cloud Provider Support
-* [alpha] Improved support for out-of-tree and out-of-process cloud providers, a.k.a pluggable cloud providers. See [Build and Run cloud-controller-manager](https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller) documentation.
-
-
-### **Cluster Federation**
-#### Placement Policy
-* [alpha] The federation-apiserver now supports a SchedulingPolicy admission controller that enables policy-based control over placement of federated resources. For more information, see [Set up placement policies in Federation](https://kubernetes.io/docs/tasks/federation/set-up-placement-policies-federation/).
-
-#### Cluster Selection
-* [alpha] Federation [ClusterSelector annotation](https://kubernetes.io/docs/tasks/administer-federation/cluster/#clusterselector-annotation) to direct objects to federated clusters with matching labels.
-
-
-### **Instrumentation**
-#### Core Metrics API
-* [alpha] Introduces a lightweight monitoring component for serving the core resource metrics API used by the Horizontal Pod Autoscaler and other components ([kubernetes/features#271](https://github.com/kubernetes/features/issues/271))
-
-
-### **Internationalization**
-
-* Add Traditional Chinese translation for kubectl ([#46559](https://github.com/kubernetes/kubernetes/pull/46559), [@warmchang](https://github.com/warmchang))
-
-* Add Japanese translation for kubectl ([#46756](https://github.com/kubernetes/kubernetes/pull/46756), [@girikuncoro](https://github.com/girikuncoro))
-
-* Add Simplified Chinese translation for kubectl ([#45573](https://github.com/kubernetes/kubernetes/pull/45573), [@shiywang](https://github.com/shiywang))
-
-### **kubectl (CLI)**
-* Features
-
- * `kubectl logs` supports specifying a container name when using label selectors ([#44282](https://github.com/kubernetes/kubernetes/pull/44282), [@derekwaynecarr](https://github.com/derekwaynecarr))
-
- * `kubectl rollout` supports undo and history for DaemonSet ([#46144](https://github.com/kubernetes/kubernetes/pull/46144), [@janetkuo](https://github.com/janetkuo))
-
- * `kubectl rollout` supports status and history for StatefulSet ([#46669](https://github.com/kubernetes/kubernetes/pull/46669), [@kow3ns](https://github.com/kow3ns)).
-
- * Implement `kubectl get controllerrevisions` ([#46655](https://github.com/kubernetes/kubernetes/pull/46655), [@janetkuo](https://github.com/janetkuo))
-
- * `kubectl create clusterrole` supports `--non-resource-url` ([#45809](https://github.com/kubernetes/kubernetes/pull/45809), [@CaoShuFeng](https://github.com/CaoShuFeng))
-
- * `kubectl logs` and `kubectl attach` support specifying a wait timeout with `--pod-running-timeout` ([#41813](https://github.com/kubernetes/kubernetes/pull/41813), [@shiywang](https://github.com/shiywang))
-
- * New commands
-
- * Add `kubectl config rename-context` ([#46114](https://github.com/kubernetes/kubernetes/pull/46114), [@arthur0](https://github.com/arthur0))
-
- * Add `kubectl apply edit-last-applied` subcommand ([#42256](https://github.com/kubernetes/kubernetes/pull/42256), [@shiywang](https://github.com/shiywang))
-
- * Strategic Merge Patch
-
- * Reference docs now display the patch type and patch merge key used by `kubectl apply` to merge and identify unique elements in arrays.
-
- * `kubectl edit` and `kubectl apply` will keep the ordering of elements in merged lists ([#45980](https://github.com/kubernetes/kubernetes/pull/45980), [@mengqiy](https://github.com/mengqiy))
-
- * New patch directive (retainKeys) to specifying clearing fields missing from the request ([#44597](https://github.com/kubernetes/kubernetes/pull/44597), [@mengqiy](https://github.com/mengqiy))
-
- * Open API now includes strategic merge patch tags (previously only in go struct tags) ([#44121](https://github.com/kubernetes/kubernetes/pull/44121), [@mbohlool](https://github.com/mbohlool))
-
- * Plugins
-
- * Introduces the ability to extend kubectl by adding third-party plugins. Developer preview, please refer to the documentation for instructions about how to use it. ([#37499](https://github.com/kubernetes/kubernetes/pull/37499), [@fabianofranz](https://github.com/fabianofranz))
-
- * Added support for a hierarchy of kubectl plugins (a tree of plugins as children of other plugins). ([#45981](https://github.com/kubernetes/kubernetes/pull/45981), [@fabianofranz](https://github.com/fabianofranz))
-
- * Added exported env vars to kubectl plugins so that plugin developers have access to global flags, namespace, the plugin descriptor and the full path to the caller binary.
-
- * Enhancement
-
- * `kubectl auth can-i` now supports non-resource URLs ([#46432](https://github.com/kubernetes/kubernetes/pull/46432), [@CaoShuFeng](https://github.com/CaoShuFeng))
-
- * `kubectl set selector` and `kubectl set subject` no longer print "running in local/dry-run mode..." at the top. The output can now be piped and interpretted as yaml or json ([#46507](https://github.com/kubernetes/kubernetes/pull/46507), [@bboreham](https://github.com/bboreham))
-
- * When using an in-cluster client with an empty configuration, the `--namespace` flag is now honored ([#46299](https://github.com/kubernetes/kubernetes/pull/46299), [@ncdc](https://github.com/ncdc))
-
- * The help message for missingResourceError is now generic ([#45582](https://github.com/kubernetes/kubernetes/pull/45582), [@CaoShuFeng](https://github.com/CaoShuFeng))
-
- * `kubectl taint node` now supports label selectors ([#44740](https://github.com/kubernetes/kubernetes/pull/44740), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla))
-
- * `kubectl proxy --www` now logs a warning when the dir is invalid ([#44952](https://github.com/kubernetes/kubernetes/pull/44952), [@CaoShuFeng](https://github.com/CaoShuFeng))
-
- * `kubectl taint` output has been enhanced with the operation ([#43171](https://github.com/kubernetes/kubernetes/pull/43171), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla))
-
- * kubectl `--user` and `--cluster` now support completion ([#44251](https://github.com/kubernetes/kubernetes/pull/44251), [@superbrothers](https://github.com/superbrothers))
-
- * `kubectl config use-context` now supports completion ([#42336](https://github.com/kubernetes/kubernetes/pull/42336), [@superbrothers](https://github.com/superbrothers))
-
- * `kubectl version` now supports `--output` ([#39858](https://github.com/kubernetes/kubernetes/pull/39858), [@alejandroEsc](https://github.com/alejandroEsc))
-
- * `kubectl create configmap` has a new option `--from-env-file` that populates a configmap from file which follows a key=val format for each line. ([#38882](https://github.com/kubernetes/kubernetes/pull/38882), [@fraenkel](https://github.com/fraenkel))
-
- * `kubectl create secret` has a new option `--from-env-file` that populates a secret from file which follows a key=val format for each line.
-
- * Printing/describe
-
- * Print conditions of RC/RS in `kubectl describe` command. ([#44710](https://github.com/kubernetes/kubernetes/pull/44710), [@xiangpengzhao](https://github.com/xiangpengzhao))
-
- * Improved output on `kubectl get` and `kubectl describe` for generic objects. ([#44222](https://github.com/kubernetes/kubernetes/pull/44222), [@fabianofranz](https://github.com/fabianofranz))
-
- * In `kubectl describe`, find controllers with ControllerRef, instead of showing the original creator. ([#42849](https://github.com/kubernetes/kubernetes/pull/42849), [@janetkuo](https://github.com/janetkuo))
-
- * `kubectl version` has new flag --output (=json or yaml) allowing result of the command to be parsed in either json format or yaml. ([#39858](https://github.com/kubernetes/kubernetes/pull/39858), [@alejandroEsc](https://github.com/alejandroEsc))
-
-
- * Bug fixes
-
- * Fix some false negatives in detection of meaningful conflicts during strategic merge patch with maps and lists. ([#43469](https://github.com/kubernetes/kubernetes/pull/43469), [@enisoc](https://github.com/enisoc))
-
- * Fix false positive "meaningful conflict" detection for strategic merge patch with integer values. ([#44788](https://github.com/kubernetes/kubernetes/pull/44788), [@enisoc](https://github.com/enisoc))
-
- * Restored the ability of kubectl running inside a pod to consume resource files specifying a different namespace than the one the pod is running in. ([#44862](https://github.com/kubernetes/kubernetes/pull/44862), [@liggitt](https://github.com/liggitt))
-
- * Kubectl commands run inside a pod using a kubeconfig file now use the namespace specified in the kubeconfig file, instead of using the pod namespace. If no kubeconfig file is used, or the kubeconfig does not specify a namespace, the pod namespace is still used as a fallback. ([#44570](https://github.com/kubernetes/kubernetes/pull/44570), [@liggitt](https://github.com/liggitt))
-
- * Fixed `kubectl cluster-info` dump to support multi-container pod. ([#44088](https://github.com/kubernetes/kubernetes/pull/44088), [@xingzhou](https://github.com/xingzhou))
-
- * Kubectl will print a warning when deleting the current context ([#42538](https://github.com/kubernetes/kubernetes/pull/42538), [@adohe](https://github.com/adohe))
-
- * Fix VolumeClaims/capacity in `kubectl describe statefulsets` output. ([#47573](https://github.com/kubernetes/kubernetes/pull/47573), [@k82cn](https://github.com/k82cn))
-
- * Fixed the output of kubectl taint node command with minor improvements. ([#43171](https://github.com/kubernetes/kubernetes/pull/43171), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla))
-
-
-### **Networking**
-#### Network Policy
-* [stable] [NetworkPolicy](https://kubernetes.io/docs/concepts/services-networking/network-policies/) promoted to GA.
- * Additionally adds short name "netpol" for networkpolicies ([#42241](https://github.com/kubernetes/kubernetes/pull/42241), [@xiangpengzhao](https://github.com/xiangpengzhao))
-
-
-#### Load Balancing
-* [stable] Source IP Preservation - change Cloud load-balancer strategy to health-checks and respond to health check only on nodes that host pods for the service. See [Create an External Load Balancer - Preserving the client source IP](https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip).
- Two annotations have been promoted to API fields:
-
- * Service.Spec.ExternalTrafficPolicy was 'service.beta.kubernetes.io/external-traffic' annotation.
-
- * Service.Spec.HealthCheckNodePort was 'service.beta.kubernetes.io/healthcheck-nodeport' annotation.
-
-### **Node Components**
-#### Container Runtime Interface
-* [alpha] CRI validation testing, which provides a test framework and a suite of tests to validate that the CRI server implementation meets all the requirements. This allows the CRI runtime developers to verify that their runtime conforms to CRI, without needing to set up Kubernetes components or run Kubernetes end-to-end tests. ([docs](https://github.com/kubernetes/community/blob/master/contributors/devel/cri-validation.md) and [release notes](https://github.com/kubernetes-incubator/cri-tools/releases/tag/v0.1)) ([kubernetes/features#292](https://github.com/kubernetes/features/issues/292))
-
-* [alpha] Adds support of container metrics in CRI ([docs PR](https://github.com/kubernetes/community/pull/742)) ([kubernetes/features#290](https://github.com/kubernetes/features/issues/290))
-
-* [alpha] Integration with [containerd] (https://github.com/containerd/containerd) , which supports basic pod lifecycle and image management. ([docs](https://github.com/kubernetes-incubator/cri-containerd/blob/master/README.md) and [release notes](https://github.com/kubernetes-incubator/cri-containerd/releases/tag/v0.1.0)) ([kubernetes/features#286](https://github.com/kubernetes/features/issues/286))
-
-* [GA] The Docker-CRI implementation is GA. The legacy, non-CRI Docker integration has been completely removed.
-
-* [beta] [CRI-O](https://github.com/kubernetes-incubator/cri-o) v1.0.0-alpha.0. It has passed all e2e tests. ([release notes](https://github.com/kubernetes-incubator/cri-o/releases/tag/v1.0.0-alpha.0))
-
-* [beta] [Frakti](https://github.com/kubernetes/frakti) v1.0. It has passed all node conformance tests. ([release notes](https://github.com/kubernetes/frakti/releases/tag/v1.0))
-
-
-
-### **Scheduling**
-#### Scheduler Extender
-* [alpha] Support for delegating pod binding to a scheduler extender ([kubernetes/features#270](https://github.com/kubernetes/features/issues/270))
-
-### **Storage**
-#### Local Storage
-* [alpha] This feature adds capacity isolation support for local storage at node, container, and volume levels. See updated [Reserve Compute Resources for System Daemons](https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/) documentation.
-
-* [alpha] Make locally attached (non-network attached) storage available as a persistent volume source. For more information, see [Storage Volumes - local](https://kubernetes.io/docs/concepts/storage/volumes/#local).
-
-#### Volume Plugins
-* [stable] Volume plugin for StorageOS provides highly-available cluster-wide persistent volumes from local or attached node storage. See [Persistent Volumes - StorageOS](https://kubernetes.io/docs/concepts/storage/persistent-volumes/#storageos) and [Storage Volumes - StorageOS](https://kubernetes.io/docs/concepts/storage/volumes/#storageos).
-
-#### Metrics
-* [stable] Add support for cloudprovider metrics for storage API calls. See [Controller manager metrics](https://kubernetes.io/docs/concepts/cluster-administration/controller-metrics/) for more information.
-
-### **Other notable changes**
-
-#### Admission plugin
-* OwnerReferencesPermissionEnforcement admission plugin ignores pods/status. ([#45747](https://github.com/kubernetes/kubernetes/pull/45747), [@derekwaynecarr](https://github.com/derekwaynecarr))
-
-
-* Ignored mirror pods in PodPreset admission plugin. ([#45958](https://github.com/kubernetes/kubernetes/pull/45958), [@k82cn](https://github.com/k82cn))
-
-#### API Machinery
-* The protobuf serialization of API objects has been updated to store maps in a predictable order to ensure that the representation of that object does not change when saved into etcd. This prevents the same object from being seen as being modified, even when no values have changed. ([#47701](https://github.com/kubernetes/kubernetes/pull/47701), [@smarterclayton](https://github.com/smarterclayton))
-
-* API resource discovery now includes the singularName used to refer to the resource. ([#43312](https://github.com/kubernetes/kubernetes/pull/43312), [@deads2k](https://github.com/deads2k))
-
-* Enhance the garbage collection admission plugin so that a user who doesn't have delete permission of the owning object cannot modify the blockOwnerDeletion field of existing ownerReferences, or add new ownerReferences with blockOwnerDeletion=true ([#43876](https://github.com/kubernetes/kubernetes/pull/43876), [@caesarxuchao](https://github.com/caesarxuchao))
-
-* Exec and portforward actions over SPDY now properly handle redirects sent by the Kubelet ([#44451](https://github.com/kubernetes/kubernetes/pull/44451), [@ncdc](https://github.com/ncdc))
-
-* The proxy subresource APIs for nodes, services, and pods now support the HTTP PATCH method. ([#44929](https://github.com/kubernetes/kubernetes/pull/44929), [@liggitt](https://github.com/liggitt))
-
-* The Categories []string field on discovered API resources represents the list of group aliases (e.g. "all") that each resource belongs to. ([#43338](https://github.com/kubernetes/kubernetes/pull/43338), [@fabianofranz](https://github.com/fabianofranz))
-
-* [alpha] The Kubernetes API supports retrieving tabular output for API resources via a new mime-type application/json;as=Table;v=v1alpha1;g=meta.k8s.io. The returned object (if the server supports it) will be of type meta.k8s.io/v1alpha1 with Table, and contain column and row information related to the resource. Each row will contain information about the resource - by default it will be the object metadata, but callers can add the ?includeObject=Object query parameter and receive the full object. In the future kubectl will use this to retrieve the results of `kubectl get`. ([#40848](https://github.com/kubernetes/kubernetes/pull/40848), [@smarterclayton](https://github.com/smarterclayton))
-
-* The behavior of some watch calls to the server when filtering on fields was incorrect. If watching objects with a filter, when an update was made that no longer matched the filter a DELETE event was correctly sent. However, the object that was returned by that delete was not the (correct) version before the update, but instead, the newer version. That meant the new object was not matched by the filter. This was a regression from behavior between cached watches on the server side and uncached watches, and thus broke downstream API clients. ([#46223](https://github.com/kubernetes/kubernetes/pull/46223), [@smarterclayton](https://github.com/smarterclayton))
-
-* OpenAPI spec is now available in protobuf binary and gzip format (with ETag support) ([#45836](https://github.com/kubernetes/kubernetes/pull/45836), [@mbohlool](https://github.com/mbohlool))
-
-* Updating apiserver to return UID of the deleted resource. Clients can use this UID to verify that the resource was deleted or waiting for finalizers. ([#45600](https://github.com/kubernetes/kubernetes/pull/45600), [@nikhiljindal](https://github.com/nikhiljindal))
-
-* Fix incorrect conflict errors applying strategic merge patches to resources. ([#43871](https://github.com/kubernetes/kubernetes/pull/43871), [@liggitt](https://github.com/liggitt))
-
-* Fix init container status reporting when active deadline is exceeded. ([#46305](https://github.com/kubernetes/kubernetes/pull/46305), [@sjenning](https://github.com/sjenning))
-
-* Moved qos to api.helpers. ([#44906](https://github.com/kubernetes/kubernetes/pull/44906), [@k82cn](https://github.com/k82cn))
-
-* Fix issue with the resource quota controller causing add quota to be resynced at the wrong ([#45685](https://github.com/kubernetes/kubernetes/pull/45685), [@derekwaynecarr](https://github.com/derekwaynecarr))
-
-* Added Group/Version/Kind and Action extension to OpenAPI Operations ([#44787](https://github.com/kubernetes/kubernetes/pull/44787), [@mbohlool](https://github.com/mbohlool))
-
-* Make clear that meta.KindToResource is only a guess ([#45272](https://github.com/kubernetes/kubernetes/pull/45272), [@sttts](https://github.com/sttts))
-
-* Add APIService conditions ([#43301](https://github.com/kubernetes/kubernetes/pull/43301), [@deads2k](https://github.com/deads2k))
-
-* Create and push a docker image for the cloud-controller-manager ([#45154](https://github.com/kubernetes/kubernetes/pull/45154), [@luxas](https://github.com/luxas))
-
-* Deprecated Binding objects in 1.7. ([#47041](https://github.com/kubernetes/kubernetes/pull/47041), [@k82cn](https://github.com/k82cn))
-
-* Adds the Categories []string field to API resources, which represents the list of group aliases (e.g. "all") that every resource belongs to. ([#43338](https://github.com/kubernetes/kubernetes/pull/43338), [@fabianofranz](https://github.com/fabianofranz))
-
-* `--service-account-lookup` now defaults to true, requiring the Secret API object containing the token to exist in order for a service account token to be valid. This enables service account tokens to be revoked by deleting the Secret object containing the token. ([#44071](https://github.com/kubernetes/kubernetes/pull/44071), [@liggitt](https://github.com/liggitt))
-
-* API Registration is now in beta. ([#45247](https://github.com/kubernetes/kubernetes/pull/45247), [@mbohlool](https://github.com/mbohlool))
-
-* The Kubernetes API server now exits if it encounters a networking failure (e.g. the networking interface hosting its address goes away) to allow a process manager (systemd/kubelet/etc) to react to the problem. Previously the server would log the failure and try again to bind to its configured address:port. ([#42272](https://github.com/kubernetes/kubernetes/pull/42272), [@marun](https://github.com/marun))
-
-* The Prometheus metrics for the kube-apiserver for tracking incoming API requests and latencies now return the subresource label for correctly attributing the type of API call. ([#46354](https://github.com/kubernetes/kubernetes/pull/46354), [@smarterclayton](https://github.com/smarterclayton))
-
-* kube-apiserver now drops unneeded path information if an older version of Windows kubectl sends it. ([#44421](https://github.com/kubernetes/kubernetes/pull/44421), [@mml](https://github.com/mml))
-
-
-#### Application autoscaling
-* Make "upscale forbidden window" and "downscale forbidden window" duration configurable in arguments of kube-controller-manager. ([#42101](https://github.com/kubernetes/kubernetes/pull/42101), [@Dmitry1987](https://github.com/Dmitry1987))
-
-#### Application Deployment
-* StatefulSetStatus now tracks replicas, readyReplicas, currentReplicas, and updatedReplicas. The semantics of replicas is now consistent with DaemonSet and ReplicaSet, and readyReplicas has the semantics that replicas did prior to 1.7 ([#46669](https://github.com/kubernetes/kubernetes/pull/46669), [@kow3ns](https://github.com/kow3ns)).
-
-* ControllerRevision type has been added for StatefulSet and DaemonSet history. Clients should not depend on the stability of this type as it may change, as necessary, in future releases to support StatefulSet and DaemonSet update and rollback. We enable this type as we do with beta features, because StatefulSet update and DaemonSet update are enabled. ([#45867](https://github.com/kubernetes/kubernetes/pull/45867), [@kow3ns](https://github.com/kow3ns))
-
-* PodDisruptionBudget now uses ControllerRef to decide which controller owns a given Pod, so it doesn't get confused by controllers with overlapping selectors. ([#45003](https://github.com/kubernetes/kubernetes/pull/45003), [@krmayankk](https://github.com/krmayankk))
-
-* Deployments are updated to use (1) a more stable hashing algorithm (fnv) than the previous one (adler) and (2) a hashing collision avoidance mechanism that will ensure new rollouts will not block on hashing collisions anymore. ([#44774](https://github.com/kubernetes/kubernetes/pull/44774), [@kargakis](https://github.com/kargakis))([kubernetes/features#287](https://github.com/kubernetes/features/issues/287))
-
-* Deployments and DaemonSets rollouts are considered complete when all of the desired replicas are updated and available. This change affects `kubectl rollout status` and Deployment condition. ([#44672](https://github.com/kubernetes/kubernetes/pull/44672), [@kargakis](https://github.com/kargakis))
-
-* Job controller now respects ControllerRef to avoid fighting over Pods. ([#42176](https://github.com/kubernetes/kubernetes/pull/42176), [@enisoc](https://github.com/enisoc))
-
-* CronJob controller now respects ControllerRef to avoid fighting with other controllers. ([#42177](https://github.com/kubernetes/kubernetes/pull/42177), [@enisoc](https://github.com/enisoc))
-
-#### Cluster Autoscaling
-* Cluster Autoscaler 0.6. More information available [here](https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/README.md).
-
-* cluster-autoscaler: Fix duplicate writing of logs. ([#45017](https://github.com/kubernetes/kubernetes/pull/45017), [@MaciekPytel](https://github.com/MaciekPytel))
-
-
-#### Cloud Provider Enhancement
-
-* AWS:
-
- * New 'service.beta.kubernetes.io/aws-load-balancer-extra-security-groups' Service annotation to specify extra Security Groups to be added to ELB created by AWS cloudprovider ([#45268](https://github.com/kubernetes/kubernetes/pull/45268), [@redbaron](https://github.com/redbaron))
-
- * Clean up blackhole routes when using kubenet ([#47572](https://github.com/kubernetes/kubernetes/pull/47572), [@justinsb](https://github.com/justinsb))
-
- * Maintain a cache of all instances, to fix problem with > 200 nodes with ELBs ([#47410](https://github.com/kubernetes/kubernetes/pull/47410), [@justinsb](https://github.com/justinsb))
-
- * Avoid spurious ELB listener recreation - ignore case when matching protocol ([#47391](https://github.com/kubernetes/kubernetes/pull/47391), [@justinsb](https://github.com/justinsb))
-
- * Allow configuration of a single security group for ELBs ([#45500](https://github.com/kubernetes/kubernetes/pull/45500), [@nbutton23](https://github.com/nbutton23))
-
- * Remove check that forces loadBalancerSourceRanges to be 0.0.0.0/0. ([#38636](https://github.com/kubernetes/kubernetes/pull/38636), [@dhawal55](https://github.com/dhawal55))
-
- * Allow setting KubernetesClusterID or KubernetesClusterTag in combination with VPC. ([#42512](https://github.com/kubernetes/kubernetes/pull/42512), [@scheeles](https://github.com/scheeles))
-
- * Start recording cloud provider metrics for AWS ([#43477](https://github.com/kubernetes/kubernetes/pull/43477), [@gnufied](https://github.com/gnufied))
-
- * AWS: Batch DescribeInstance calls with nodeNames to 150 limit, to stay within AWS filter limits. ([#47516](https://github.com/kubernetes/kubernetes/pull/47516), [@gnufied](https://github.com/gnufied))
-
- * AWS: Process disk attachments even with duplicate NodeNames ([#47406](https://github.com/kubernetes/kubernetes/pull/47406), [@justinsb](https://github.com/justinsb))
-
- * Allow configuration of a single security group for ELBs ([#45500](https://github.com/kubernetes/kubernetes/pull/45500), [@nbutton23](https://github.com/nbutton23))
-
- * Fix support running the master with a different AWS account or even on a different cloud provider than the nodes. ([#44235](https://github.com/kubernetes/kubernetes/pull/44235), [@mrIncompetent](https://github.com/mrIncompetent))
-
- * Support node port health check ([#43585](https://github.com/kubernetes/kubernetes/pull/43585), [@foolusion](https://github.com/foolusion))
-
- * Support for ELB tagging by users ([#45932](https://github.com/kubernetes/kubernetes/pull/45932), [@lpabon](https://github.com/lpabon))
-
-* Azure:
-
- * Add support for UDP ports ([#45523](https://github.com/kubernetes/kubernetes/pull/45523), [@colemickens](https://github.com/colemickens))
-
- * Fix support for multiple loadBalancerSourceRanges ([#45523](https://github.com/kubernetes/kubernetes/pull/45523), [@colemickens](https://github.com/colemickens))
-
- * Support the Service spec's sessionAffinity ([#45523](https://github.com/kubernetes/kubernetes/pull/45523), [@colemickens](https://github.com/colemickens))
-
- * Added exponential backoff to Azure cloudprovider ([#46660](https://github.com/kubernetes/kubernetes/pull/46660), [@jackfrancis](https://github.com/jackfrancis))
-
- * Add support for bring-your-own ip address for Services on Azure ([#42034](https://github.com/kubernetes/kubernetes/pull/42034), [@brendandburns](https://github.com/brendandburns))
-
- * Add support for Azure internal load balancer ([#43510](https://github.com/kubernetes/kubernetes/pull/43510), [@karataliu](https://github.com/karataliu))
-
- * Client poll duration is now 5 seconds ([#43699](https://github.com/kubernetes/kubernetes/pull/43699), [@colemickens](https://github.com/colemickens))
-
- * Azure plugin for client auth ([#43987](https://github.com/kubernetes/kubernetes/pull/43987), [@cosmincojocar](https://github.com/cosmincojocar))
-
-
-* GCP:
-
- * Bump GLBC version to 0.9.5 - fixes [loss of manually modified GCLB health check settings](https://github.com/kubernetes/kubernetes/issues/47559) upon upgrade from pre-1.6.4 to either 1.6.4 or 1.6.5. ([#47567](https://github.com/kubernetes/kubernetes/pull/47567), [@nicksardo](https://github.com/nicksardo))
-
- * [beta] Support creation of GCP Internal Load Balancers from Service objects ([#46663](https://github.com/kubernetes/kubernetes/pull/46663), [@nicksardo](https://github.com/nicksardo))
-
- * GCE installs will now avoid IP masquerade for all RFC-1918 IP blocks, rather than just 10.0.0.0/8. This means that clusters can be created in 192.168.0.0./16 and 172.16.0.0/12 while preserving the container IPs (which would be lost before). ([#46473](https://github.com/kubernetes/kubernetes/pull/46473), [@thockin](https://github.com/thockin))
-
- * The Calico version included in kube-up for GCE has been updated to v2.2. ([#38169](https://github.com/kubernetes/kubernetes/pull/38169), [@caseydavenport](https://github.com/caseydavenport))
-
- * ip-masq-agent is now on by default for GCE ([#47794](https://github.com/kubernetes/kubernetes/pull/47794), [@dnardo](https://github.com/dnardo))
-
- * Add ip-masq-agent addon to the addons folder which is used in GCE if `--non-masquerade-cidr` is set to 0/0 ([#46038](https://github.com/kubernetes/kubernetes/pull/46038), [@dnardo](https://github.com/dnardo))
-
- * Enable kubelet csr bootstrap in GCE/GKE ([#40760](https://github.com/kubernetes/kubernetes/pull/40760), [@mikedanese](https://github.com/mikedanese))
-
- * Adds support for allocation of pod IPs via IP aliases. ([#42147](https://github.com/kubernetes/kubernetes/pull/42147), [@bowei](https://github.com/bowei))
-
- * gce kube-up: The Node authorization mode and NodeRestriction admission controller are now enabled ([#46796](https://github.com/kubernetes/kubernetes/pull/46796), [@mikedanese](https://github.com/mikedanese))
-
- * Tokens retrieved from Google Cloud with application default credentials will not be cached if the client fails authorization ([#46694](https://github.com/kubernetes/kubernetes/pull/46694), [@matt-tyler](https://github.com/matt-tyler))
-
- * Add metrics to all major gce operations {latency, errors} ([#44510](https://github.com/kubernetes/kubernetes/pull/44510), [@bowei](https://github.com/bowei))
-
- * The new metrics are:
-
- * cloudprovider_gce_api_request_duration_seconds{request, region, zone}
-
- * cloudprovider_gce_api_request_errors{request, region, zone}
-
- * request is the specific function that is used.
-
- * region is the target region (Will be "" if not applicable)
-
- * zone is the target zone (Will be "" if not applicable)
-
- * Note: this fixes some issues with the previous implementation of metrics for disks:
-
- * Time duration tracked was of the initial API call, not the entire operation.
-
- * Metrics label tuple would have resulted in many independent histograms stored, one for each disk. (Did not aggregate well).
-
- * Fluentd now tolerates all NoExecute Taints when run in gcp configuration. ([#45715](https://github.com/kubernetes/kubernetes/pull/45715), [@gmarek](https://github.com/gmarek))
-
- * Taints support in gce/salt startup scripts. ([#47632](https://github.com/kubernetes/kubernetes/pull/47632), [@mwielgus](https://github.com/mwielgus))
-
- * GCE installs will now avoid IP masquerade for all RFC-1918 IP blocks, rather than just 10.0.0.0/8. This means that clusters can ([#46473](https://github.com/kubernetes/kubernetes/pull/46473), [@thockin](https://github.com/thockin)) be created in 192.168.0.0./16 and 172.16.0.0/12 while preserving the container IPs (which would be lost before).
-
- * Support running Ubuntu image on GCE node ([#44744](https://github.com/kubernetes/kubernetes/pull/44744), [@yguo0905](https://github.com/yguo0905))
-
- * The gce metadata server can now be hidden behind a proxy, hiding the kubelet's token. ([#45565](https://github.com/kubernetes/kubernetes/pull/45565), [@Q-Lee](https://github.com/Q-Lee))
-
-* OpenStack:
-
- * Fix issue during LB creation where ports were incorrectly assigned to a floating IP ([#44387](https://github.com/kubernetes/kubernetes/pull/44387), [@jamiehannaford](https://github.com/jamiehannaford))
-
- * Openstack cinder v1/v2/auto API support ([#40423](https://github.com/kubernetes/kubernetes/pull/40423), [@mkutsevol](https://github.com/mkutsevol))
-
- * OpenStack clusters can now specify whether worker nodes are assigned a floating IP ([#42638](https://github.com/kubernetes/kubernetes/pull/42638), [@jamiehannaford](https://github.com/jamiehannaford))
-
-
-* vSphere:
-
- * Fix volume detach on node failure. ([#45569](https://github.com/kubernetes/kubernetes/pull/45569), [@divyenpatel](https://github.com/divyenpatel))
-
- * Report same Node IP as both internal and external. ([#45201](https://github.com/kubernetes/kubernetes/pull/45201), [@abrarshivani](https://github.com/abrarshivani))
-
- * Filter out IPV6 node addresses. ([#45181](https://github.com/kubernetes/kubernetes/pull/45181), [@BaluDontu](https://github.com/BaluDontu))
-
- * Fix fetching of VM UUID on Ubuntu 16.04 and Fedora. ([#45311](https://github.com/kubernetes/kubernetes/pull/45311), [@divyenpatel](https://github.com/divyenpatel))
-
-
-#### Cluster Provisioning
-* Juju:
-
- * Add Kubernetes 1.6 support to Juju charms ([#44500](https://github.com/kubernetes/kubernetes/pull/44500), [@Cynerva](https://github.com/Cynerva))
-
- * Add metric collection to charms for autoscaling
-
- * Update kubernetes-e2e charm to fail when test suite fails
-
- * Update Juju charms to use snaps
-
- * Add registry action to the kubernetes-worker charm
-
- * Add support for kube-proxy cluster-cidr option to kubernetes-worker charm
-
- * Fix kubernetes-master charm starting services before TLS certs are saved
-
- * Fix kubernetes-worker charm failures in LXD
-
- * Fix stop hook failure on kubernetes-worker charm
-
- * Fix handling of juju kubernetes-worker.restart-needed state
-
- * Fix nagios checks in charms
-
- * Enable GPU mode if GPU hardware detected ([#43467](https://github.com/kubernetes/kubernetes/pull/43467), [@tvansteenburgh](https://github.com/tvansteenburgh))
-
- * Fix ceph-secret type to kubernetes.io/rbd in kubernetes-master charm ([#44635](https://github.com/kubernetes/kubernetes/pull/44635), [@Cynerva](https://github.com/Cynerva))
-
- * Disallows installation of upstream docker from PPA in the Juju kubernetes-worker charm. ([#44681](https://github.com/kubernetes/kubernetes/pull/44681), [@wwwtyro](https://github.com/wwwtyro))
-
- * Resolves juju vsphere hostname bug showing only a single node in a scaled node-pool. ([#44780](https://github.com/kubernetes/kubernetes/pull/44780), [@chuckbutler](https://github.com/chuckbutler))
-
- * Fixes a bug in the kubernetes-worker Juju charm code that attempted to give kube-proxy more than one api endpoint. ([#44677](https://github.com/kubernetes/kubernetes/pull/44677), [@wwwtyro](https://github.com/wwwtyro))
-
- * Added CIFS PV support for Juju Charms ([#45117](https://github.com/kubernetes/kubernetes/pull/45117), [@chuckbutler](https://github.com/chuckbutler))
-
- * Fixes juju kubernetes master: 1. Get certs from a dead leader. 2. Append tokens. ([#43620](https://github.com/kubernetes/kubernetes/pull/43620), [@ktsakalozos](https://github.com/ktsakalozos))
-
- * kubernetes-master juju charm properly detects etcd-scale events and reconfigures appropriately. ([#44967](https://github.com/kubernetes/kubernetes/pull/44967), [@chuckbutler](https://github.com/chuckbutler))
-
- * Use correct option name in the kubernetes-worker layer registry action ([#44921](https://github.com/kubernetes/kubernetes/pull/44921), [@jacekn](https://github.com/jacekn))
-
- * Send dns details only after cdk-addons are configured ([#44945](https://github.com/kubernetes/kubernetes/pull/44945), [@ktsakalozos](https://github.com/ktsakalozos))
-
- * Added support to the pause action in the kubernetes-worker charm for new flag `--delete-local-data` ([#44931](https://github.com/kubernetes/kubernetes/pull/44931), [@chuckbutler](https://github.com/chuckbutler))
-
- * Add namespace-{list, create, delete} actions to the kubernetes-master layer ([#44277](https://github.com/kubernetes/kubernetes/pull/44277), [@jacekn](https://github.com/jacekn))
-
- * Using http2 in kubeapi-load-balancer to fix `kubectl exec` uses ([#43625](https://github.com/kubernetes/kubernetes/pull/43625), [@mbruzek](https://github.com/mbruzek))
-
-
- * Don't append :443 to registry domain in the kubernetes-worker layer registry action ([#45550](https://github.com/kubernetes/kubernetes/pull/45550), [@jacekn](https://github.com/jacekn))
-
-* kubeadm
-
- * Enable the Node Authorizer/Admission plugin in v1.7 ([#46879](https://github.com/kubernetes/kubernetes/pull/46879), [@luxas](https://github.com/luxas))
-
- * Users can now pass extra parameters to etcd in a kubeadm cluster ([#42246](https://github.com/kubernetes/kubernetes/pull/42246), [@jamiehannaford](https://github.com/jamiehannaford))
-
- * Make kubeadm use the new CSR approver in v1.7 ([#46864](https://github.com/kubernetes/kubernetes/pull/46864), [@luxas](https://github.com/luxas))
-
- * Allow enabling multiple authorization modes at the same time ([#42557](https://github.com/kubernetes/kubernetes/pull/42557), [@xilabao](https://github.com/xilabao))
-
- * add proxy client-certs to kube-apiserver to allow it to proxy aggregated api servers ([#43715](https://github.com/kubernetes/kubernetes/pull/43715), [@deads2k](https://github.com/deads2k))* CentOS provider
-
-* hyperkube
-
- * The hyperkube image has been slimmed down and no longer includes addon manifests and other various scripts. These were introduced for the now removed docker-multinode setup system. ([#44555](https://github.com/kubernetes/kubernetes/pull/44555), [@luxas](https://github.com/luxas))
-
-* Support secure etcd cluster for centos provider. ([#42994](https://github.com/kubernetes/kubernetes/pull/42994), [@Shawyeok](https://github.com/Shawyeok))
-
-* Update to kube-addon-manager:v6.4-beta.2: kubectl v1.6.4 and refreshed base images ([#47389](https://github.com/kubernetes/kubernetes/pull/47389), [@ixdy](https://github.com/ixdy))
-
-* Remove Initializers from admission-control in kubernetes-master charm for pre-1.7 ([#46987](https://github.com/kubernetes/kubernetes/pull/46987), [@Cynerva](https://github.com/Cynerva))
-
-* Added state guards to the idle_status messaging in the kubernetes-master charm to make deployment faster on initial deployment. ([#47183](https://github.com/kubernetes/kubernetes/pull/47183), [@chuckbutler](https://github.com/chuckbutler))
-
-#### Cluster federation
-* Features:
-
- * Adds annotations to all Federation objects created by kubefed. ([#42683](https://github.com/kubernetes/kubernetes/pull/42683), [@perotinus](https://github.com/perotinus))
-
- * Mechanism of adding `federation domain maps` to kube-dns deployment via `--federations` flag is superseded by adding/updating `federations` key in `kube-system/kube-dns` configmap. If user is using kubefed tool to join cluster federation, adding federation domain maps to kube-dns is already taken care by `kubefed join` and does not need further action.
-
- * Prints out status updates when running `kubefed init` ([#41849](https://github.com/kubernetes/kubernetes/pull/41849), [@perotinus](https://github.com/perotinus))
-
- * `kubefed init` now supports overriding the default etcd image name with the `--etcd-image` parameter. ([#46247](https://github.com/kubernetes/kubernetes/pull/46247), [@marun](https://github.com/marun))
-
- * kubefed will now configure NodeInternalIP as the federation API server endpoint when NodeExternalIP is unavailable for federation API servers exposed as NodePort services ([#46960](https://github.com/kubernetes/kubernetes/pull/46960), [@lukaszo](https://github.com/lukaszo))
-
- * Automate configuring nameserver in cluster-dns for CoreDNS provider ([#42895](https://github.com/kubernetes/kubernetes/pull/42895), [@shashidharatd](https://github.com/shashidharatd))
-
- * A new controller for managing DNS records is introduced which can be optionally disabled to enable third party components to manage DNS records for federated services. ([#45034](https://github.com/kubernetes/kubernetes/pull/45034), [@shashidharatd](https://github.com/shashidharatd))
-
- * Remove the `--secret-name` flag from `kubefed join`, instead generating the secret name arbitrarily. ([#42513](https://github.com/kubernetes/kubernetes/pull/42513), [@perotinus](https://github.com/perotinus))
-
- * Use StorageClassName for etcd pvc ([#46323](https://github.com/kubernetes/kubernetes/pull/46323), [@marun](https://github.com/marun))
-
-* Bug fixes:
-
- * Allow disabling federation controllers through override args ([#44209](https://github.com/kubernetes/kubernetes/pull/44209), [@irfanurrehman](https://github.com/irfanurrehman))
-
- * Kubefed: Use service accounts instead of the user's credentials when accessing joined clusters' API servers. ([#42042](https://github.com/kubernetes/kubernetes/pull/42042), [@perotinus](https://github.com/perotinus))
-
- * Avoid panic if route53 fields are nil ([#44380](https://github.com/kubernetes/kubernetes/pull/44380), [@justinsb](https://github.com/justinsb))
-
-
-#### Credential provider
-* add rancher credential provider ([#40160](https://github.com/kubernetes/kubernetes/pull/40160), [@wlan0](https://github.com/wlan0))
-
-#### Information for Kubernetes clients (openapi, swagger, client-go)
-* Features:
-
- * Add Host field to TCPSocketAction ([#42902](https://github.com/kubernetes/kubernetes/pull/42902), [@louyihua](https://github.com/louyihua))
-
- * Add the ability to lock on ConfigMaps to support HA for self hosted components ([#42666](https://github.com/kubernetes/kubernetes/pull/42666), [@timothysc](https://github.com/timothysc))
-
- * validateClusterInfo: use clientcmdapi.NewCluster() ([#44221](https://github.com/kubernetes/kubernetes/pull/44221), [@ncdc](https://github.com/ncdc))
-
- * OpenAPI spec is now available in protobuf binary and gzip format (with ETag support) ([#45836](https://github.com/kubernetes/kubernetes/pull/45836), [@mbohlool](https://github.com/mbohlool))
-
- * HostAliases is now parsed with hostAliases json keys to be in line with the feature's name. ([#47512](https://github.com/kubernetes/kubernetes/pull/47512), [@rickypai](https://github.com/rickypai))
-
- * Add redirect support to SpdyRoundTripper ([#44451](https://github.com/kubernetes/kubernetes/pull/44451), [@ncdc](https://github.com/ncdc))
-
- * Duplicate recurring Events now include the latest event's Message string ([#46034](https://github.com/kubernetes/kubernetes/pull/46034), [@kensimon](https://github.com/kensimon))
-
-* Bug fixes:
-
- * Fix serialization of EnforceNodeAllocatable ([#44606](https://github.com/kubernetes/kubernetes/pull/44606), [@ivan4th](https://github.com/ivan4th))
-
- * Use OS-specific libs when computing client User-Agent in kubectl, etc. ([#44423](https://github.com/kubernetes/kubernetes/pull/44423), [@monopole](https://github.com/monopole))
-
-
-#### Instrumentation
-* Bumped Heapster to v1.4.0. More details about the release https://github.com/kubernetes/heapster/releases/tag/v1.4.0
-
-* Fluentd manifest pod is no longer created on non-registered master when creating clusters using kube-up.sh. ([#44721](https://github.com/kubernetes/kubernetes/pull/44721), [@piosz](https://github.com/piosz))
-
-* Stackdriver cluster logging now deploys a new component to export Kubernetes events. ([#46700](https://github.com/kubernetes/kubernetes/pull/46700), [@crassirostris](https://github.com/crassirostris))
-
-* Stackdriver Logging deployment exposes metrics on node port 31337 when enabled. ([#47402](https://github.com/kubernetes/kubernetes/pull/47402), [@crassirostris](https://github.com/crassirostris))
-
-* Upgrade Elasticsearch Addon to v5.4.0 ([#45589](https://github.com/kubernetes/kubernetes/pull/45589), [@it-svit](https://github.com/it-svit))
-
-#### Internal storage layer
-* prevent pods/status from touching ownerreferences ([#45826](https://github.com/kubernetes/kubernetes/pull/45826), [@deads2k](https://github.com/deads2k))
-
-* Ensure that autoscaling/v1 is the preferred version for API discovery when autoscaling/v2alpha1 is enabled. ([#45741](https://github.com/kubernetes/kubernetes/pull/45741), [@DirectXMan12](https://github.com/DirectXMan12))
-
-* The proxy subresource APIs for nodes, services, and pods now support the HTTP PATCH method. ([#44929](https://github.com/kubernetes/kubernetes/pull/44929), [@liggitt](https://github.com/liggitt))
-
-* Fluentd now tolerates all NoExecute Taints when run in gcp configuration. ([#45715](https://github.com/kubernetes/kubernetes/pull/45715), [@gmarek](https://github.com/gmarek))
-
-
-#### Kubernetes Dashboard
-
-* Increase Dashboard's memory requests and limits ([#44712](https://github.com/kubernetes/kubernetes/pull/44712), [@maciaszczykm](https://github.com/maciaszczykm))
-
-* Update Dashboard version to 1.6.1 ([#45953](https://github.com/kubernetes/kubernetes/pull/45953), [@maciaszczykm](https://github.com/maciaszczykm))
-
-
-#### kube-dns
-* Updates kube-dns to 1.14.2 ([#45684](https://github.com/kubernetes/kubernetes/pull/45684), [@bowei](https://github.com/bowei))
-
- * Support kube-master-url flag without kubeconfig
-
- * Fix concurrent R/Ws in dns.go
-
- * Fix confusing logging when initialize server
-
- * Fix printf in cmd/kube-dns/app/server.go
-
- * Fix version on startup and `--version` flag
-
- * Support specifying port number for nameserver in stubDomains
-
-#### kube-proxy
-* Features:
-
- * ratelimit runs of iptables by sync-period flags ([#46266](https://github.com/kubernetes/kubernetes/pull/46266), [@thockin](https://github.com/thockin))
-
- * Log warning when invalid dir passed to `kubectl proxy --www` ([#44952](https://github.com/kubernetes/kubernetes/pull/44952), [@CaoShuFeng](https://github.com/CaoShuFeng))
-
- * Add `--write-config-to` flag to kube-proxy to allow users to write the default configuration settings to a file. ([#45908](https://github.com/kubernetes/kubernetes/pull/45908), [@ncdc](https://github.com/ncdc))
-
- * When switching from the service.beta.kubernetes.io/external-traffic annotation to the new ([#46716](https://github.com/kubernetes/kubernetes/pull/46716), [@thockin](https://github.com/thockin)) externalTrafficPolicy field, the values chnag as follows: * "OnlyLocal" becomes "Local" * "Global" becomes "Cluster".
-
-
-* Bug fixes:
-
- * Fix corner-case with OnlyLocal Service healthchecks. ([#44313](https://github.com/kubernetes/kubernetes/pull/44313), [@thockin](https://github.com/thockin))
-
- * Fix DNS suffix search list support in Windows kube-proxy. ([#45642](https://github.com/kubernetes/kubernetes/pull/45642), [@JiangtianLi](https://github.com/JiangtianLi))
-
-#### kube-scheduler
-* Scheduler can receive its policy configuration from a ConfigMap ([#43892](https://github.com/kubernetes/kubernetes/pull/43892), [@bsalamat](https://github.com/bsalamat))
-
-* Aggregated used ports at the NodeInfo level for PodFitsHostPorts predicate. ([#42524](https://github.com/kubernetes/kubernetes/pull/42524), [@k82cn](https://github.com/k82cn))
-
-* leader election lock based on scheduler name ([#42961](https://github.com/kubernetes/kubernetes/pull/42961), [@wanghaoran1988](https://github.com/wanghaoran1988))
-
-
-#### Storage
-
-* Features
-
- * The options passed to a Flexvolume plugin's mount command now contains the pod name (kubernetes.io/pod.name), namespace (kubernetes.io/pod.namespace), uid (kubernetes.io/pod.uid), and service account name (kubernetes.io/serviceAccount.name). ([#39488](https://github.com/kubernetes/kubernetes/pull/39488), [@liggitt](https://github.com/liggitt))
-
- * GCE and AWS dynamic provisioners extension: admins can configure zone(s) in which a persistent volume shall be created. ([#38505](https://github.com/kubernetes/kubernetes/pull/38505), [@pospispa](https://github.com/pospispa))
-
- * Implement API usage metrics for GCE storage. ([#40338](https://github.com/kubernetes/kubernetes/pull/40338), [@gnufied](https://github.com/gnufied))
-
- * Add support for emitting metrics from openstack cloudprovider about storage operations. ([#46008](https://github.com/kubernetes/kubernetes/pull/46008), [@NickrenREN](https://github.com/NickrenREN))
-
- * vSphere cloud provider: vSphere storage policy support for dynamic volume provisioning. ([#46176](https://github.com/kubernetes/kubernetes/pull/46176), [@BaluDontu](https://github.com/BaluDontu))
-
- * Support StorageClass in Azure file volume ([#42170](https://github.com/kubernetes/kubernetes/pull/42170), [@rootfs](https://github.com/rootfs))
-
- * Start recording cloud provider metrics for AWS ([#43477](https://github.com/kubernetes/kubernetes/pull/43477), [@gnufied](https://github.com/gnufied))
-
- * Support iSCSI CHAP authentication ([#43396](https://github.com/kubernetes/kubernetes/pull/43396), [@rootfs](https://github.com/rootfs))
-
- * Openstack cinder v1/v2/auto API support ([#40423](https://github.com/kubernetes/kubernetes/pull/40423), [@mkutsevol](https://github.com/mkutsevol))
-
- * Alpha feature: allows users to set storage limit to isolate EmptyDir volumes. It enforces the limit by evicting pods that exceed their storage limits ([#45686](https://github.com/kubernetes/kubernetes/pull/45686), [@jingxu97](https://github.com/jingxu97))
-
-* Bug fixes
-
- * Fixes issue with Flexvolume, introduced in 1.6.0, where drivers without an attacher would fail (node indefinitely waiting for attach). A driver API addition is introduced: drivers that don't implement attach should return attach: false on init. ([#47503](https://github.com/kubernetes/kubernetes/pull/47503), [@chakri-nelluri](https://github.com/chakri-nelluri))
-
- * Fix dynamic provisioning of PVs with inaccurate AccessModes by refusing to provision when PVCs ask for AccessModes that can't be satisfied by the PVs' underlying volume plugin. ([#47274](https://github.com/kubernetes/kubernetes/pull/47274), [@wongma7](https://github.com/wongma7))
-
- * Fix pods failing to start if they specify a file as a volume subPath to mount. ([#45623](https://github.com/kubernetes/kubernetes/pull/45623), [@wongma7](https://github.com/wongma7))
-
- * Fix erroneous FailedSync and FailedMount events being periodically and indefinitely posted on Pods after kubelet is restarted. ([#44781](https://github.com/kubernetes/kubernetes/pull/44781), [@wongma7](https://github.com/wongma7))
-
- * Fix AWS EBS volumes not getting detached from node if routine to verify volumes are attached runs while the node is down ([#46463](https://github.com/kubernetes/kubernetes/pull/46463), [@wongma7](https://github.com/wongma7))
-
- * Improves performance of Cinder volume attach/detach operations. ([#41785](https://github.com/kubernetes/kubernetes/pull/41785), [@jamiehannaford](https://github.com/jamiehannaford))
-
- * Fix iSCSI iSER mounting. ([#47281](https://github.com/kubernetes/kubernetes/pull/47281), [@mtanino](https://github.com/mtanino))
-
- * iscsi storage plugin: Fix dangling session when using multiple target portal addresses. ([#46239](https://github.com/kubernetes/kubernetes/pull/46239), [@mtanino](https://github.com/mtanino))
-
-
- * Fix log spam due to unnecessary status update when node is deleted. ([#45923](https://github.com/kubernetes/kubernetes/pull/45923), [@verult](https://github.com/verult))
-
- * Don't try to attach volume to new node if it is already attached to another node and the volume does not support multi-attach. ([#45346](https://github.com/kubernetes/kubernetes/pull/45346), [@codablock](https://github.com/codablock))
-
- * detach the volume when pod is terminated ([#45286](https://github.com/kubernetes/kubernetes/pull/45286), [@gnufied](https://github.com/gnufied))
-
- * Roll up volume error messages in the kubelet sync loop. ([#44938](https://github.com/kubernetes/kubernetes/pull/44938), [@jayunit100](https://github.com/jayunit100))
-
- * Catch error when failed to make directory in NFS volume plugin ([#38801](https://github.com/kubernetes/kubernetes/pull/38801), [@nak3](https://github.com/nak3))
-
-
-
-#### Networking
-
-* DNS and name resolution
-
- * Updates kube-dns to 1.14.2 ([#45684](https://github.com/kubernetes/kubernetes/pull/45684), [@bowei](https://github.com/bowei))
-
- * Support kube-master-url flag without kubeconfig
-
- * Fix concurrent R/Ws in dns.go
-
- * Fix confusing logging when initializing server
-
- * Support specifying port number for nameserver in stubDomains
-
- * A new field hostAliases has been added to pod.spec to support adding entries to a Pod's /etc/hosts file. ([#44641](https://github.com/kubernetes/kubernetes/pull/44641), [@rickypai](https://github.com/rickypai))
-
- * Fix DNS suffix search list support in Windows kube-proxy. ([#45642](https://github.com/kubernetes/kubernetes/pull/45642), [@JiangtianLi](https://github.com/JiangtianLi))
-
-* Kube-proxy
-
- * ratelimit runs of iptables by sync-period flags ([#46266](https://github.com/kubernetes/kubernetes/pull/46266), [@thockin](https://github.com/thockin))
-
- * Fix corner-case with OnlyLocal Service healthchecks. ([#44313](https://github.com/kubernetes/kubernetes/pull/44313), [@thockin](https://github.com/thockin))
-
-* Exclude nodes labeled as master from LoadBalancer / NodePort; restores documented behaviour. ([#44745](https://github.com/kubernetes/kubernetes/pull/44745), [@justinsb](https://github.com/justinsb))
-
-* Adds support for CNI ConfigLists, which permit plugin chaining. ([#42202](https://github.com/kubernetes/kubernetes/pull/42202), [@squeed](https://github.com/squeed))
-
-* Fix node selection logic on initial LB creation ([#45773](https://github.com/kubernetes/kubernetes/pull/45773), [@justinsb](https://github.com/justinsb))
-
-* When switching from the service.beta.kubernetes.io/external-traffic annotation to the new externalTrafficPolicy field, the values change as follows: * "OnlyLocal" becomes "Local" * "Global" becomes "Cluster". ([#46716](https://github.com/kubernetes/kubernetes/pull/46716), [@thockin](https://github.com/thockin))
-
-* servicecontroller: Fix node selection logic on initial LB creation ([#45773](https://github.com/kubernetes/kubernetes/pull/45773), [@justinsb](https://github.com/justinsb))
-
-* fixed HostAlias in PodSpec to allow foo.bar hostnames instead of just foo DNS labels. ([#46809](https://github.com/kubernetes/kubernetes/pull/46809), [@rickypai](https://github.com/rickypai))
-
-
-#### Node controller
-* Bug fixes:
-
- * Fix [transition between NotReady and Unreachable taints](https://github.com/kubernetes/kubernetes/issues/43444). ([#44042](https://github.com/kubernetes/kubernetes/pull/44042), [@gmarek](https://github.com/gmarek))
-
-
-#### Node Components
-
-* Features
-
- * Removes the deprecated kubelet flag `--babysit-daemons` ([#44230](https://github.com/kubernetes/kubernetes/pull/44230), [@mtaufen](https://github.com/mtaufen))
-
- * make dockershim.sock configurable ([#43914](https://github.com/kubernetes/kubernetes/pull/43914), [@ncdc](https://github.com/ncdc))
-
- * Support running Ubuntu image on GCE node ([#44744](https://github.com/kubernetes/kubernetes/pull/44744), [@yguo0905](https://github.com/yguo0905))
-
- * Kubernetes now shares a single PID namespace among all containers in a pod when running with docker >= 1.13.1. This means processes can now signal processes in other containers in a pod, but it also means that the `kubectl exec {pod} kill 1` pattern will cause the Pod to be restarted rather than a single container. ([#45236](https://github.com/kubernetes/kubernetes/pull/45236), [@verb](https://github.com/verb))
-
- * A new field hostAliases has been added to the pod spec to support [adding entries to a Pod's /etc/hosts file](https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/). ([#44641](https://github.com/kubernetes/kubernetes/pull/44641), [@rickypai](https://github.com/rickypai))
-
- * With `--feature-gates=RotateKubeletClientCertificate=true` set, the Kubelet will ([#41912](https://github.com/kubernetes/kubernetes/pull/41912), [@jcbsmpsn](https://github.com/jcbsmpsn))
-
- * request a client certificate from the API server during the boot cycle and pause
-
- * waiting for the request to be satisfied. It will continually refresh the certificate
-
- * Create clusters with GPUs in GCE by specifying `type=,count=` to NODE_ACCELERATORS environment variable. ([#45130](https://github.com/kubernetes/kubernetes/pull/45130), [@vishh](https://github.com/vishh))
-
- * List of available GPUs - [https://cloud.google.com/compute/docs/gpus/#introduction](https://cloud.google.com/compute/docs/gpus/#introduction)
-
- * Disk Pressure triggers the deletion of terminated containers on the node. ([#45896](https://github.com/kubernetes/kubernetes/pull/45896), [@dashpole](https://github.com/dashpole))
-
- * Support status.hostIP in downward API ([#42717](https://github.com/kubernetes/kubernetes/pull/42717), [@andrewsykim](https://github.com/andrewsykim))
-
- * Upgrade Node Problem Detector to v0.4.1. New features added:
-
- * Add /dev/kmsg support for kernel log parsing. ([#112](https://github.com/kubernetes/node-problem-detector/pull/112), [@euank](https://github.com/euank))
-
- * Add ABRT support. ([#105](https://github.com/kubernetes/node-problem-detector/pull/105), [@juliusmilan](https://github.com/juliusmilan))
-
- * Add a docker image corruption problem detection in the default docker monitor config. ([#117](https://github.com/kubernetes/node-problem-detector/pull/117), [@ajitak](https://github.com/ajitak))
-
- * Upgrade CAdvisor to v0.26.1. New features added:
-
- * Add Docker overlay2 storage driver support.
-
- * Add ZFS support.
-
- * Add UDP metrics (collection disabled by default).
-
- * Roll up volume error messages in the kubelet sync loop. ([#44938](https://github.com/kubernetes/kubernetes/pull/44938), [@jayunit100](https://github.com/jayunit100))
-
- * Allow pods to opt out of PodPreset mutation via an annotation on the pod. ([#44965](https://github.com/kubernetes/kubernetes/pull/44965), [@jpeeler](https://github.com/jpeeler))
-
- * Add generic Toleration for NoExecute Taints to NodeProblemDetector, so that NPD can be scheduled to nodes with NoExecute taints by default. ([#45883](https://github.com/kubernetes/kubernetes/pull/45883), [@gmarek](https://github.com/gmarek))
-
- * Prevent kubelet from setting allocatable < 0 for a resource upon initial creation. ([#46516](https://github.com/kubernetes/kubernetes/pull/46516), [@derekwaynecarr](https://github.com/derekwaynecarr))
-
-* Bug fixes
-
- * Changed Kubelet default image-gc-high-threshold to 85% to resolve a conflict with default settings in docker that prevented image garbage collection from resolving low disk space situations when using devicemapper storage. ([#40432](https://github.com/kubernetes/kubernetes/pull/40432), [@sjenning](https://github.com/sjenning))
-
- * Mark all static pods on the Master node as critical to prevent preemption ([#47356](https://github.com/kubernetes/kubernetes/pull/47356), [@dashpole](https://github.com/dashpole))
-
- * Restrict active deadline seconds max allowed value to be maximum uint32 to avoid overflow ([#46640](https://github.com/kubernetes/kubernetes/pull/46640), [@derekwaynecarr](https://github.com/derekwaynecarr))
-
- * Fix a bug with cAdvisorPort in the KubeletConfiguration that prevented setting it to 0, which is in fact a valid option, as noted in issue [#11710](https://github.com/kubernetes/kubernetes/pull/11710). ([#46876](https://github.com/kubernetes/kubernetes/pull/46876), [@mtaufen](https://github.com/mtaufen))
-
- * Fix a bug where container cannot run as root when SecurityContext.RunAsNonRoot is false. ([#47009](https://github.com/kubernetes/kubernetes/pull/47009), [@yujuhong](https://github.com/yujuhong))
-
- * Fix the Kubelet PLEG update timestamp to better reflect the health of the component when the container runtime request hangs. ([#45496](https://github.com/kubernetes/kubernetes/pull/45496), [@andyxning](https://github.com/andyxning))
-
- * Avoid failing sync loop health check on container runtime errors ([#47124](https://github.com/kubernetes/kubernetes/pull/47124), [@andyxning](https://github.com/andyxning))
-
- * Fix a bug where Kubelet does not ignore pod manifest files starting with dots ([#45111](https://github.com/kubernetes/kubernetes/pull/45111), [@dwradcliffe](https://github.com/dwradcliffe))
-
- * Fix kubelet reset liveness probe failure count across pod restart boundaries ([#46371](https://github.com/kubernetes/kubernetes/pull/46371), [@sjenning](https://github.com/sjenning))
-
- * Fix log spam due to unnecessary status update when node is deleted. ([#45923](https://github.com/kubernetes/kubernetes/pull/45923), [@verult](https://github.com/verult))
-
- * Fix kubelet event recording for selected events. ([#46246](https://github.com/kubernetes/kubernetes/pull/46246), [@derekwaynecarr](https://github.com/derekwaynecarr))
-
- * Fix image garbage collector attempting to remove in-use images. ([#46121](https://github.com/kubernetes/kubernetes/pull/46121), [@Random-Liu](https://github.com/Random-Liu))
-
- * Detach the volume when pod is terminated ([#45286](https://github.com/kubernetes/kubernetes/pull/45286), [@gnufied](https://github.com/gnufied))
-
- * CRI: Fix StopContainer timeout ([#44970](https://github.com/kubernetes/kubernetes/pull/44970), [@Random-Liu](https://github.com/Random-Liu))
-
- * CRI: Fix kubelet failing to start when using rkt. ([#44569](https://github.com/kubernetes/kubernetes/pull/44569), [@yujuhong](https://github.com/yujuhong))
-
- * CRI: `kubectl logs -f` now stops following when container stops, as it did pre-CRI. ([#44406](https://github.com/kubernetes/kubernetes/pull/44406), [@Random-Liu](https://github.com/Random-Liu))
-
- * Fixes a bug where pods were evicted even after images are successfully deleted. ([#44986](https://github.com/kubernetes/kubernetes/pull/44986), [@dashpole](https://github.com/dashpole))
-
- * When creating a container using envFrom. ([#42083](https://github.com/kubernetes/kubernetes/pull/42083), [@fraenkel](https://github.com/fraenkel))
- * validate the name of the ConfigMap in a ConfigMapRef
- * validate the name of the Secret in a SecretRef
-
- * Fix the bug where StartedAt time is not reported for exited containers. ([#45977](https://github.com/kubernetes/kubernetes/pull/45977), [@yujuhong](https://github.com/yujuhong))
-
-* Changes/deprecations
-
- * Marks the Kubelet's `--master-service-namespace` flag deprecated ([#44250](https://github.com/kubernetes/kubernetes/pull/44250), [@mtaufen](https://github.com/mtaufen))
-
- * Remove PodSandboxStatus.Linux.Namespaces.Network from CRI since it is not used/needed. ([#45166](https://github.com/kubernetes/kubernetes/pull/45166), [@feiskyer](https://github.com/feiskyer))
-
- * Remove the `--enable-cri` flag. CRI is now the default, and the only way to integrate with Kubelet for the container runtimes.([#45194](https://github.com/kubernetes/kubernetes/pull/45194), [@yujuhong](https://github.com/yujuhong))
-
- * CRI has been moved to package pkg/kubelet/apis/cri/v1alpha1/runtime as part of Kubelet API path cleanup. ([#47113](https://github.com/kubernetes/kubernetes/pull/47113), [@feiskyer](https://github.com/feiskyer))
-
-
-#### Scheduling
-
-* The fix makes scheduling go routine waiting for cache (e.g. Pod) to be synced. ([#45453](https://github.com/kubernetes/kubernetes/pull/45453), [@k82cn](https://github.com/k82cn))
-
-* Move hardPodAffinitySymmetricWeight to scheduler policy config ([#44159](https://github.com/kubernetes/kubernetes/pull/44159), [@wanghaoran1988](https://github.com/wanghaoran1988))
-
-* Align Extender's validation with prioritizers. ([#45091](https://github.com/kubernetes/kubernetes/pull/45091), [@k82cn](https://github.com/k82cn))
-
-* Removed old scheduler constructor. ([#45472](https://github.com/kubernetes/kubernetes/pull/45472), [@k82cn](https://github.com/k82cn))
-
-* Fixes the overflow for priorityconfig- valid range {1, 9223372036854775806}. ([#45122](https://github.com/kubernetes/kubernetes/pull/45122), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla))
-
-
-#### Security
-* Features:
-
- * Permission to use a PodSecurityPolicy can now be granted within a single namespace by allowing the use verb on the podsecuritypolicies resource within the namespace. ([#42360](https://github.com/kubernetes/kubernetes/pull/42360), [@liggitt](https://github.com/liggitt))
-
- * Break the 'certificatesigningrequests' controller into a 'csrapprover' controller and 'csrsigner' controller. ([#45514](https://github.com/kubernetes/kubernetes/pull/45514), [@mikedanese](https://github.com/mikedanese))
-
- * `kubectl auth can-i` now supports non-resource URLs ([#46432](https://github.com/kubernetes/kubernetes/pull/46432), [@CaoShuFeng](https://github.com/CaoShuFeng))
-
- * Promote kubelet tls bootstrap to beta. Add a non-experimental flag to use it and deprecate the old flag. ([#46799](https://github.com/kubernetes/kubernetes/pull/46799), [@mikedanese](https://github.com/mikedanese))
-
- * Add the alpha.image-policy.k8s.io/failed-open=true annotation when the image policy webhook encounters an error and fails open. ([#46264](https://github.com/kubernetes/kubernetes/pull/46264), [@Q-Lee](https://github.com/Q-Lee))
-
- * Add an AEAD encrypting transformer for storing secrets encrypted at rest ([#41939](https://github.com/kubernetes/kubernetes/pull/41939), [@smarterclayton](https://github.com/smarterclayton))
-
- * Add secretbox and AES-CBC encryption modes to at rest encryption. AES-CBC is considered superior to AES-GCM because it is resistant to nonce-reuse attacks, and secretbox uses Poly1305 and XSalsa20. ([#46916](https://github.com/kubernetes/kubernetes/pull/46916), [@smarterclayton](https://github.com/smarterclayton))
-
-* Bug fixes:
-
- * Make gcp auth provider not to override the Auth header if it's already exits ([#45575](https://github.com/kubernetes/kubernetes/pull/45575), [@wanghaoran1988](https://github.com/wanghaoran1988))
-
- * The oidc client plugin has reduce round trips and fix scopes requested ([#45317](https://github.com/kubernetes/kubernetes/pull/45317), [@ericchiang](https://github.com/ericchiang))
-
- * API requests using impersonation now include the system:authenticated group in the impersonated user automatically. ([#44076](https://github.com/kubernetes/kubernetes/pull/44076), [@liggitt](https://github.com/liggitt))
-
- * RBAC role and rolebinding auto-reconciliation is now performed only when the RBAC authorization mode is enabled. ([#43813](https://github.com/kubernetes/kubernetes/pull/43813), [@liggitt](https://github.com/liggitt))
-
- * PodSecurityPolicy now recognizes pods that specify runAsNonRoot: false in their security context and does not overwrite the specified value ([#47073](https://github.com/kubernetes/kubernetes/pull/47073), [@Q-Lee](https://github.com/Q-Lee))
-
- * Tokens retrieved from Google Cloud with application default credentials will not be cached if the client fails authorization ([#46694](https://github.com/kubernetes/kubernetes/pull/46694), [@matt-tyler](https://github.com/matt-tyler))
-
- * Update kube-dns, metadata-proxy, and fluentd-gcp, event-exporter, prometheus-to-sd, and ip-masq-agent addons with new base images containing fixes for CVE-2016-4448, CVE-2016-9841, CVE-2016-9843, CVE-2017-1000366, CVE-2017-2616, and CVE-2017-9526. ([#47877](https://github.com/kubernetes/kubernetes/pull/47877), [@ixdy](https://github.com/ixdy))
-
- * Fixed an issue mounting the wrong secret into pods as a service account token. ([#44102](https://github.com/kubernetes/kubernetes/pull/44102), [@ncdc](https://github.com/ncdc))
-
-#### Scalability
-
-* The HorizontalPodAutoscaler controller will now only send updates when it has new status information, reducing the number of writes caused by the controller. ([#47078](https://github.com/kubernetes/kubernetes/pull/47078), [@DirectXMan12](https://github.com/DirectXMan12))
-
-
-## **External Dependency Version Information**
-
-Continuous integration builds have used the following versions of external dependencies, however, this is not a strong recommendation and users should consult an appropriate installation or upgrade guide before deciding what versions of etcd, docker or rkt to use.
-
-* Docker versions 1.10.3, 1.11.2, 1.12.6 have been validated
-
- * Docker version 1.12.6 known issues
-
- * overlay2 driver not fully supported
-
- * live-restore not fully supported
-
- * no shared pid namespace support
-
- * Docker version 1.11.2 known issues
-
- * Kernel crash with Aufs storage driver on Debian Jessie ([#27885](https://github.com/kubernetes/kubernetes/pull/27885)) which can be identified by the [node problem detector](https://kubernetes.io/docs/tasks/debug-application-cluster/monitor-node-health/)
-
- * Leaked File descriptors ([#275](https://github.com/docker/containerd/issues/275))
-
- * Additional memory overhead per container ([#21737](https://github.com/kubernetes/kubernetes/pull/21737))
-
- * Docker 1.10.3 contains [backports provided by RedHat](https://github.com/docker/docker/compare/v1.10.3...runcom:docker-1.10.3-stable) for known issues
-
-* For issues with Docker 1.13.X please see the [1.13.X tracking issue](https://github.com/kubernetes/kubernetes/issues/42926)
-
-* rkt version 1.23.0+
-
- * known issues with the rkt runtime are [listed in the Getting Started Guide](https://kubernetes.io/docs/getting-started-guides/rkt/notes/)
-
-* etcd version 3.0.17
-
-* Go version: 1.8.3. [Link to announcement](https://groups.google.com/d/msg/kubernetes-dev/0XRRz6UhhTM/YODWVnuDBQAJ)
-
- * Kubernetes can only be compiled with Go 1.8. Support for all other versions is dropped.
-
-
-### Previous Releases Included in v1.7.0
-- [v1.7.0-rc.1](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v170-rc1)
-- [v1.7.0-beta.2](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v170-beta2)
-- [v1.7.0-beta.1](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v170-beta1)
-- [v1.7.0-alpha.4](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v170-alpha4)
-- [v1.7.0-alpha.3](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v170-alpha3)
-- [v1.7.0-alpha.2](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v170-alpha2)
-- [v1.7.0-alpha.1](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v170-alpha1)
-
-
-
-# v1.7.0-rc.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.0-rc.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes.tar.gz) | `9da0e04de83e14f87540b5b58f415b5cdb78e552e07dc35985ddb1b7f618a2f2`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-src.tar.gz) | `f4e6cfd0d859d7880d14d1052919a9eb79c26e1cd4105330dda8b05f073cab40`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-client-darwin-386.tar.gz) | `5f161559ce91321577c09f03edf6d3416f1964056644c8725394d9c23089b052`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-client-darwin-amd64.tar.gz) | `c54b07d2b0240e2be57ff6bf95794bf826a082a7b4e8316c9ec45e92539d6252`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-client-linux-386.tar.gz) | `d61874a51678dee6cb1e5514e703b7070c27fb728e8b18533a5233fcca2e30fd`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-client-linux-amd64.tar.gz) | `4004cec39c637fa7a2e3d309d941f3e73e0a16a3511c5e46cbb2fa6bb27d89e5`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-client-linux-arm64.tar.gz) | `88c37ea21d7a2c464be6fee29db4f295d738028871127197253923cec00cf179`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-client-linux-arm.tar.gz) | `0e5e5f52fe93a78003c6cac171a6aae8cb1f2f761e325d509558df84aba57b32`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-client-linux-ppc64le.tar.gz) | `d4586a64f239654a53faf1a6c18fc5d5c99bb95df593bf92b5e9fac0daba71e2`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-client-linux-s390x.tar.gz) | `728097218b051df26b90863779588517183fa4e1f55dee414aff188e4a50e7df`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-client-windows-386.tar.gz) | `d949bd6977a707b46609ee740f3a16592e7676a6dc81ad495d9f511cb4d2cb98`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-client-windows-amd64.tar.gz) | `b787198e3320ef4094112f44e0442f062c04ce2137c14bbec10f5df9fbb3f404`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-server-linux-amd64.tar.gz) | `e5eaa8951d021621b160d41bc1350dcf64178c46a0e6e656be78a5e5b267dc5d`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-server-linux-arm64.tar.gz) | `08b694b46bf7b5906408a331a9ccfb9143114d414d64fcca8a6daf6ec79c282b`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-server-linux-arm.tar.gz) | `ca980d1669e22cc3846fc2bdf77e6bdc1c49820327128db0d0388c4def77bc16`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-server-linux-ppc64le.tar.gz) | `c656106048696bd2c4b66a3f8e348b37634abf48a9dc1f4eb941e01da9597b26`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-server-linux-s390x.tar.gz) | `7888ed82b33b0002a488224ffa7a93e865e1d2b01e4ccc44b8d04ff4be5fef71`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-node-linux-amd64.tar.gz) | `26c74018b048e2ec0d2df61216bda77bdf29c23f34dac6d7b8a55a56f0f95927`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-node-linux-arm64.tar.gz) | `e5c6d38556f840067b0eea4ca862c5c79a89ff47063dccecf1c0fdc2c25a9a9b`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-node-linux-arm.tar.gz) | `4cf1d7843ede557bd629970d1bc21a936b76bf9138fc96224e538c5a61f6e203`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-node-linux-ppc64le.tar.gz) | `e7a870c53af210cc00f0854e2ffad8ee06b20c4028f256d60d04f31a630291d1`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-node-linux-s390x.tar.gz) | `78865fe4029a39744865e0acb4dd15f6f22de8264f7c65a65df52891c3b91967`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-rc.1/kubernetes-node-windows-amd64.tar.gz) | `8b632e7c79e750e7102d02120508f0394d3f11a2c36b42d2c5f96ec4f0f1f1ed`
-
-## Changelog since v1.7.0-beta.2
-
-### Action Required
-
-* The following alpha API groups were unintentionally enabled by default in previous releases, and will no longer be enabled by default in v1.8: ([#47690](https://github.com/kubernetes/kubernetes/pull/47690), [@caesarxuchao](https://github.com/caesarxuchao))
- * rbac.authorization.k8s.io/v1alpha1
- * settings.k8s.io/v1alpha1
- * If you wish to continue using them in v1.8, please enable them explicitly using the `--runtime-config` flag of the apiserver (for example, `--runtime-config="rbac.authorization.k8s.io/v1alpha1,settings.k8s.io/v1alpha1"`)
-* Paths containing backsteps (for example, "../bar") are no longer allowed in hostPath volume paths, or in volumeMount subpaths ([#47290](https://github.com/kubernetes/kubernetes/pull/47290), [@jhorwit2](https://github.com/jhorwit2))
-* Azure: Change container permissions to private for provisioned volumes. If you have existing Azure volumes that were created by Kubernetes v1.6.0-v1.6.5, you should change the permissions on them manually. ([#47605](https://github.com/kubernetes/kubernetes/pull/47605), [@brendandburns](https://github.com/brendandburns))
-
-### Other notable changes
-
-* Update kube-dns, metadata-proxy, and fluentd-gcp, event-exporter, prometheus-to-sd, and ip-masq-agent addons with new base images containing fixes for CVE-2016-4448, CVE-2016-9841, CVE-2016-9843, CVE-2017-1000366, CVE-2017-2616, and CVE-2017-9526. ([#47877](https://github.com/kubernetes/kubernetes/pull/47877), [@ixdy](https://github.com/ixdy))
-* Bump the memory request/limit for ip-masq-daemon. ([#47887](https://github.com/kubernetes/kubernetes/pull/47887), [@dnardo](https://github.com/dnardo))
-* HostAliases is now parsed with `hostAliases` json keys to be in line with the feature's name. ([#47512](https://github.com/kubernetes/kubernetes/pull/47512), [@rickypai](https://github.com/rickypai))
-* Fixes issue w/Flex volume, introduced in 1.6.0, where drivers without an attacher would fail (node indefinitely waiting for attach). Drivers that don't implement attach should return `attach: false` on `init`. ([#47503](https://github.com/kubernetes/kubernetes/pull/47503), [@chakri-nelluri](https://github.com/chakri-nelluri))
-* Tokens retrieved from Google Cloud with application default credentials will not be cached if the client fails authorization ([#46694](https://github.com/kubernetes/kubernetes/pull/46694), [@matt-tyler](https://github.com/matt-tyler))
-* ip-masq-agent is now the default for GCE ([#47794](https://github.com/kubernetes/kubernetes/pull/47794), [@dnardo](https://github.com/dnardo))
-* Taints support in gce/salt startup scripts. ([#47632](https://github.com/kubernetes/kubernetes/pull/47632), [@mwielgus](https://github.com/mwielgus))
-* Fix VolumeClaims/capacity in "kubectl describe statefulsets" output. ([#47573](https://github.com/kubernetes/kubernetes/pull/47573), [@k82cn](https://github.com/k82cn))
-* New 'service.beta.kubernetes.io/aws-load-balancer-extra-security-groups' Service annotation to specify extra Security Groups to be added to ELB created by AWS cloudprovider ([#45268](https://github.com/kubernetes/kubernetes/pull/45268), [@redbaron](https://github.com/redbaron))
-* AWS: clean up blackhole routes when using kubenet ([#47572](https://github.com/kubernetes/kubernetes/pull/47572), [@justinsb](https://github.com/justinsb))
-* The protobuf serialization of API objects has been updated to store maps in a predictable order to ensure that the representation of that object does not change when saved into etcd. This prevents the same object from being seen as being modified, even when no values have changed. ([#47701](https://github.com/kubernetes/kubernetes/pull/47701), [@smarterclayton](https://github.com/smarterclayton))
-* Mark Static pods on the Master as critical ([#47356](https://github.com/kubernetes/kubernetes/pull/47356), [@dashpole](https://github.com/dashpole))
-* kubectl logs with label selector supports specifying a container name ([#44282](https://github.com/kubernetes/kubernetes/pull/44282), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Adds an approval work flow to the the certificate approver that will approve certificate signing requests from kubelets that meet all the criteria of kubelet server certificates. ([#46884](https://github.com/kubernetes/kubernetes/pull/46884), [@jcbsmpsn](https://github.com/jcbsmpsn))
-* AWS: Maintain a cache of all instances, to fix problem with > 200 nodes with ELBs ([#47410](https://github.com/kubernetes/kubernetes/pull/47410), [@justinsb](https://github.com/justinsb))
-* Bump GLBC version to 0.9.5 - fixes [loss of manually modified GCLB health check settings](https://github.com/kubernetes/kubernetes/issues/47559) upon upgrade from pre-1.6.4 to either 1.6.4 or 1.6.5. ([#47567](https://github.com/kubernetes/kubernetes/pull/47567), [@nicksardo](https://github.com/nicksardo))
-* Update cluster-proportional-autoscaler, metadata-proxy, and fluentd-gcp addons with fixes for CVE-2016-4448, CVE-2016-8859, CVE-2016-9841, CVE-2016-9843, and CVE-2017-9526. ([#47545](https://github.com/kubernetes/kubernetes/pull/47545), [@ixdy](https://github.com/ixdy))
-* AWS: Batch DescribeInstance calls with nodeNames to 150 limit, to stay within AWS filter limits. ([#47516](https://github.com/kubernetes/kubernetes/pull/47516), [@gnufied](https://github.com/gnufied))
-
-
-
-# v1.7.0-beta.2
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.0-beta.2
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes.tar.gz) | `40814fcc343ee49df6a999165486714b5e970d90a368332c8e233a5741306a4c`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-src.tar.gz) | `864561a13af5869722276eb0f2d7c0c3bb8946c4ea23551b6a8a68027737cf1b`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-client-darwin-386.tar.gz) | `f4802f28767b55b0b29251485482e4db06dc15b257d9e9c8917d47a8531ebc20`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-client-darwin-amd64.tar.gz) | `0a9bb88dec66390e428f499046b35a9e3fbb253d1357006821240f3854fd391e`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-client-linux-386.tar.gz) | `fbf5c1c9b0d9bfa987936539c8635d809becf2ab447187f6e908ad3d5acebdc5`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-client-linux-amd64.tar.gz) | `6b56b70519093c87a6a86543bcd137d8bea7b8ae172fdaa2914793baf47883eb`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-client-linux-arm64.tar.gz) | `ff075b68d0dbbfd04788772d39299f16ee4c1a0f8ff175ed697afca206574707`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-client-linux-arm.tar.gz) | `81fec317664151ae318eca49436c9273e106ec869267b453c377544446d865e8`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-client-linux-ppc64le.tar.gz) | `91ee08c0209b767a576164eb6b44450f12ef29dedbca78b3daa447c6516b42fb`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-client-linux-s390x.tar.gz) | `28868e4bdd72861c87dd6bce4218fe56e578dd5998cab2da56bde0335904a26b`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-client-windows-386.tar.gz) | `779e7d864d762af4b039e511e14362426d8e60491a02f5ef571092aac9bc2b22`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-client-windows-amd64.tar.gz) | `d35a306cb041026625335a330b4edffa8babec8e0b2d90b170ab8f318af87ff6`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-server-linux-amd64.tar.gz) | `27f71259e3a7e819a6f5ffcf8ad63827f09e928173402e85690ec6943ef3a2fe`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-server-linux-arm64.tar.gz) | `c9e331c452902293ea00e89ea1944d144c9200b97f033b56f469636c8c7b718d`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-server-linux-arm.tar.gz) | `bf3e1b45982ef0a25483bd212553570fa3a1cda49f9a097a9796400fbb70e810`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-server-linux-ppc64le.tar.gz) | `90da52c556b0634241d2da84347537c49b16bfcb0d226afb4213f4ea5a9b80ec`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-server-linux-s390x.tar.gz) | `0c4243bae5310764508dba649d8440afbbd11fde2cac3ce651872a9f22694d45`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-node-linux-amd64.tar.gz) | `d6c9d9642c31150b68b8da5143384bd4eee0617e16833d9bbafff94f25a76161`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-node-linux-arm64.tar.gz) | `b91b52b5708539710817a9378295ca4c19afbb75016aa2908c00678709d641ec`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-node-linux-arm.tar.gz) | `3b3421abb90985773745a68159df338eb12c47645434a56c3806dd48e92cb023`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-node-linux-ppc64le.tar.gz) | `a6b843af1284252636cf31a9523ff825c23dee5d57da24bf970031c846242ce5`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-node-linux-s390x.tar.gz) | `43830c0509e9477534661292fc3f4a100250adbee316028c5e869644d75aa478`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.2/kubernetes-node-windows-amd64.tar.gz) | `0ea1ee0dfc483248b3d20177bf023375289214ba153a6466a68764cf02931b52`
-
-## Changelog since v1.7.0-beta.1
-
-### Action Required
-
-* New and upgraded 1.7 GCE/GKE clusters no longer have an RBAC ClusterRoleBinding that grants the `cluster-admin` ClusterRole to the `default` service account in the `kube-system` namespace. ([#46750](https://github.com/kubernetes/kubernetes/pull/46750), [@cjcullen](https://github.com/cjcullen))
- * If this permission is still desired, run the following command to explicitly grant it, either before or after upgrading to 1.7:
- * kubectl create clusterrolebinding kube-system-default --serviceaccount=kube-system:default --clusterrole=cluster-admin
-
-### Other notable changes
-
-* AWS: Process disk attachments even with duplicate NodeNames ([#47406](https://github.com/kubernetes/kubernetes/pull/47406), [@justinsb](https://github.com/justinsb))
-* kubefed will now configure NodeInternalIP as the federation API server endpoint when NodeExternalIP is unavailable for federation API servers exposed as NodePort services ([#46960](https://github.com/kubernetes/kubernetes/pull/46960), [@lukaszo](https://github.com/lukaszo))
-* PodSecurityPolicy now recognizes pods that specify `runAsNonRoot: false` in their security context and does not overwrite the specified value ([#47073](https://github.com/kubernetes/kubernetes/pull/47073), [@Q-Lee](https://github.com/Q-Lee))
-* Bump GLBC version to 0.9.4 ([#47468](https://github.com/kubernetes/kubernetes/pull/47468), [@nicksardo](https://github.com/nicksardo))
-* Stackdriver Logging deployment exposes metrics on node port 31337 when enabled. ([#47402](https://github.com/kubernetes/kubernetes/pull/47402), [@crassirostris](https://github.com/crassirostris))
-* Update to kube-addon-manager:v6.4-beta.2: kubectl v1.6.4 and refreshed base images ([#47389](https://github.com/kubernetes/kubernetes/pull/47389), [@ixdy](https://github.com/ixdy))
-* Enable iptables -w in kubeadm selfhosted ([#46372](https://github.com/kubernetes/kubernetes/pull/46372), [@cmluciano](https://github.com/cmluciano))
-* Azure plugin for client auth ([#43987](https://github.com/kubernetes/kubernetes/pull/43987), [@cosmincojocar](https://github.com/cosmincojocar))
-* Fix dynamic provisioning of PVs with inaccurate AccessModes by refusing to provision when PVCs ask for AccessModes that can't be satisfied by the PVs' underlying volume plugin ([#47274](https://github.com/kubernetes/kubernetes/pull/47274), [@wongma7](https://github.com/wongma7))
-* AWS: Avoid spurious ELB listener recreation - ignore case when matching protocol ([#47391](https://github.com/kubernetes/kubernetes/pull/47391), [@justinsb](https://github.com/justinsb))
-* gce kube-up: The `Node` authorization mode and `NodeRestriction` admission controller are now enabled ([#46796](https://github.com/kubernetes/kubernetes/pull/46796), [@mikedanese](https://github.com/mikedanese))
-* update gophercloud/gophercloud dependency for reauthentication fixes ([#45545](https://github.com/kubernetes/kubernetes/pull/45545), [@stuart-warren](https://github.com/stuart-warren))
-* fix sync loop health check with separating runtime errors ([#47124](https://github.com/kubernetes/kubernetes/pull/47124), [@andyxning](https://github.com/andyxning))
-* servicecontroller: Fix node selection logic on initial LB creation ([#45773](https://github.com/kubernetes/kubernetes/pull/45773), [@justinsb](https://github.com/justinsb))
-* Fix iSCSI iSER mounting. ([#47281](https://github.com/kubernetes/kubernetes/pull/47281), [@mtanino](https://github.com/mtanino))
-* StorageOS Volume Driver ([#42156](https://github.com/kubernetes/kubernetes/pull/42156), [@croomes](https://github.com/croomes))
- * [StorageOS](http://www.storageos.com) can be used as a storage provider for Kubernetes. With StorageOS, capacity from local or attached storage is pooled across the cluster, providing converged infrastructure for cloud-native applications.
-* CRI has been moved to package `pkg/kubelet/apis/cri/v1alpha1/runtime`. ([#47113](https://github.com/kubernetes/kubernetes/pull/47113), [@feiskyer](https://github.com/feiskyer))
-* Make gcp auth provider not to override the Auth header if it's already exits ([#45575](https://github.com/kubernetes/kubernetes/pull/45575), [@wanghaoran1988](https://github.com/wanghaoran1988))
-* Allow pods to opt out of PodPreset mutation via an annotation on the pod. ([#44965](https://github.com/kubernetes/kubernetes/pull/44965), [@jpeeler](https://github.com/jpeeler))
-* Add Traditional Chinese translation for kubectl ([#46559](https://github.com/kubernetes/kubernetes/pull/46559), [@warmchang](https://github.com/warmchang))
-* Remove Initializers from admission-control in kubernetes-master charm for pre-1.7 ([#46987](https://github.com/kubernetes/kubernetes/pull/46987), [@Cynerva](https://github.com/Cynerva))
-* Added state guards to the idle_status messaging in the kubernetes-master charm to make deployment faster on initial deployment. ([#47183](https://github.com/kubernetes/kubernetes/pull/47183), [@chuckbutler](https://github.com/chuckbutler))
-* Bump up Node Problem Detector version to v0.4.0, which added support of parsing log from /dev/kmsg and ABRT. ([#46743](https://github.com/kubernetes/kubernetes/pull/46743), [@Random-Liu](https://github.com/Random-Liu))
-* kubeadm: Enable the Node Authorizer/Admission plugin in v1.7 ([#46879](https://github.com/kubernetes/kubernetes/pull/46879), [@luxas](https://github.com/luxas))
-* Deprecated Binding objects in 1.7. ([#47041](https://github.com/kubernetes/kubernetes/pull/47041), [@k82cn](https://github.com/k82cn))
-* Add secretbox and AES-CBC encryption modes to at rest encryption. AES-CBC is considered superior to AES-GCM because it is resistant to nonce-reuse attacks, and secretbox uses Poly1305 and XSalsa20. ([#46916](https://github.com/kubernetes/kubernetes/pull/46916), [@smarterclayton](https://github.com/smarterclayton))
-* The HorizontalPodAutoscaler controller will now only send updates when it has new status information, reducing the number of writes caused by the controller. ([#47078](https://github.com/kubernetes/kubernetes/pull/47078), [@DirectXMan12](https://github.com/DirectXMan12))
-* gpusInUse info error when kubelet restarts ([#46087](https://github.com/kubernetes/kubernetes/pull/46087), [@tianshapjq](https://github.com/tianshapjq))
-* kubeadm: Modifications to cluster-internal resources installed by kubeadm will be overwritten when upgrading from v1.6 to v1.7. ([#47081](https://github.com/kubernetes/kubernetes/pull/47081), [@luxas](https://github.com/luxas))
-
-
-
-# v1.7.0-beta.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.7/examples)
-
-## Downloads for v1.7.0-beta.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes.tar.gz) | `e2fe83b443544dbb17c5ce481b6b3dcc9e62fbc573b5e270939282a31a910543`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-src.tar.gz) | `321df2749cf4687ec62549bc532eb9e17f159c26f4748732746bce1a4d41e77f`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-client-darwin-386.tar.gz) | `308cc980ee14aca49235569302e188dac08879f9236ed405884dada3b4984f44`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | `791bc498c2bfd858497d7257500954088bec19dbfeb9809e7c09983fba04f2a6`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-client-linux-386.tar.gz) | `d9ecac5521cedcc6a94d6b07a57f58f15bb25e43bd766911d2f16cf491a985ac`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | `33e800a541a1ce7a89e26dcfaa3650c06cf7239ae22272da944fb0d1288380e1`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | `8b245f239ebbede700adac1380f63a71025b8e1f7010e97665c77a0af84effaf`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-client-linux-arm.tar.gz) | `730aeeda02e500cc9300c7a555d4e0a1221b7cf182e95e6a9fbe16d90bbbc762`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | `7c97431547f40e9dece33e602993c19eab53306e64d16bf44c5e881ba52e5ab4`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | `8e95fcc59d9741d67789a8e6370a545c273206f7ff07e19154fe8f0126754571`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-client-windows-386.tar.gz) | `8bcd3ed7b6081e2a68e5a68cca71632104fef57e96ec5c16191028d113d7e54b`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | `1b32e418255f0c6b122b7aba5df9798d37c44c594ac36915ef081076d7464d52`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | `2df51991734490871a6d6933ad15e785d543ecae2b06563fc92eb97a019f7eea`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | `8c97a97249d644fffbdcd87867e516f1029a3609979379ac4c6ea077f5b5b9b7`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-server-linux-arm.tar.gz) | `8e98741d19bd4a51ad275ca6bf793e0c305b75f2ac6569fb553b6cb62daa943e`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | `71398347d2aae5345431f4e4c2bedcbdf5c3f406952ce254ef0ae9e4f55355a1`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | `1f4fcbc1a70692a57accdab420ad2411acd4672f546473e977ef1c09357418bb`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-node-linux-amd64.tar.gz) | `b84d291bc3e35912b4da067b3bf328dded87f875dc479b994408a161867c80e5`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-node-linux-arm64.tar.gz) | `2d306f1e757c49f9358791d7b0176e29f1aa32b6e6d70369b0e40c11a18b2df0`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-node-linux-arm.tar.gz) | `3957988bd800514a67ee1cf9e21f99f7e0797810ef3c22fd1604f0b6d1d6dad4`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-node-linux-ppc64le.tar.gz) | `f7b3c9c01a25e6afd31dafaeed1eb926f6aae741c0f0967cca2c12492e509fd0`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-node-linux-s390x.tar.gz) | `de7db84acd32cd7d5b3ac0957cded289335e187539e5495899e05b4043974892`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-beta.1/kubernetes-node-windows-amd64.tar.gz) | `efbafcae12ee121cf3a507bba8e36ac43d23d8262dc1a575b85e546ff81030fb`
-
-## Changelog since v1.7.0-alpha.4
-
-### Action Required
-
-* kube-apiserver: a new authorization mode (`--authorization-mode=Node`) authorizes nodes to access secrets, configmaps, persistent volume claims and persistent volumes related to their pods. ([#46076](https://github.com/kubernetes/kubernetes/pull/46076), [@liggitt](https://github.com/liggitt))
- * Nodes must use client credentials that place them in the `system:nodes` group with a username of `system:node:` in order to be authorized by the node authorizer (the credentials obtained by the kubelet via TLS bootstrapping satisfy these requirements)
- * When used in combination with the `RBAC` authorization mode (`--authorization-mode=Node,RBAC`), the `system:node` role is no longer automatically granted to the `system:nodes` group.
-* kube-controller-manager has dropped support for the `--insecure-experimental-approve-all-kubelet-csrs-for-group` flag. Instead, the `csrapproving` controller uses authorization checks to determine whether to approve certificate signing requests: ([#45619](https://github.com/kubernetes/kubernetes/pull/45619), [@mikedanese](https://github.com/mikedanese))
- * requests for a TLS client certificate for any node are approved if the CSR creator has `create` permission on the `certificatesigningrequests` resource and `nodeclient` subresource in the `certificates.k8s.io` API group
- * requests from a node for a TLS client certificate for itself are approved if the CSR creator has `create` permission on the `certificatesigningrequests` resource and the `selfnodeclient` subresource in the `certificates.k8s.io` API group
- * requests from a node for a TLS serving certificate for itself are approved if the CSR creator has `create` permission on the `certificatesigningrequests` resource and the `selfnodeserver` subresource in the `certificates.k8s.io` API group
-* Support updating storageclasses in etcd to storage.k8s.io/v1. You must do this prior to upgrading to 1.8. ([#46116](https://github.com/kubernetes/kubernetes/pull/46116), [@ncdc](https://github.com/ncdc))
-* The namespace API object no longer supports the deletecollection operation. ([#46407](https://github.com/kubernetes/kubernetes/pull/46407), [@liggitt](https://github.com/liggitt))
-* NetworkPolicy has been moved from `extensions/v1beta1` to the new ([#39164](https://github.com/kubernetes/kubernetes/pull/39164), [@danwinship](https://github.com/danwinship))
- `networking.k8s.io/v1` API group. The structure remains unchanged from
- the beta1 API.
- The `net.beta.kubernetes.io/network-policy` annotation on Namespaces
- to opt in to isolation has been removed. Instead, isolation is now
- determined at a per-pod level, with pods being isolated if there is
- any NetworkPolicy whose spec.podSelector targets them. Pods that are
- targeted by NetworkPolicies accept traffic that is accepted by any of
- the NetworkPolicies (and nothing else), and pods that are not targeted
- by any NetworkPolicy accept all traffic by default.
- Action Required:
- When upgrading to Kubernetes 1.7 (and a network plugin that supports
- the new NetworkPolicy v1 semantics), to ensure full behavioral
- compatibility with v1beta1:
- 1. In Namespaces that previously had the "DefaultDeny" annotation,
- you can create equivalent v1 semantics by creating a
- NetworkPolicy that matches all pods but does not allow any
- traffic:
-
- ```yaml
- kind: NetworkPolicy
- apiVersion: networking.k8s.io/v1
- metadata:
- name: default-deny
- spec:
- podSelector:
- ```
-
- This will ensure that pods that aren't matched by any other
- NetworkPolicy will continue to be fully-isolated, as they were
- before.
- 2. In Namespaces that previously did not have the "DefaultDeny"
- annotation, you should delete any existing NetworkPolicy
- objects. These would have had no effect before, but with v1
- semantics they might cause some traffic to be blocked that you
- didn't intend to be blocked.
-
-### Other notable changes
-
-* Added exponential backoff to Azure cloudprovider ([#46660](https://github.com/kubernetes/kubernetes/pull/46660), [@jackfrancis](https://github.com/jackfrancis))
-* fixed HostAlias in PodSpec to allow `foo.bar` hostnames instead of just `foo` DNS labels. ([#46809](https://github.com/kubernetes/kubernetes/pull/46809), [@rickypai](https://github.com/rickypai))
-* Implements rolling update for StatefulSets. Updates can be performed using the RollingUpdate, Paritioned, or OnDelete strategies. OnDelete implements the manual behavior from 1.6. status now tracks ([#46669](https://github.com/kubernetes/kubernetes/pull/46669), [@kow3ns](https://github.com/kow3ns))
- * replicas, readyReplicas, currentReplicas, and updatedReplicas. The semantics of replicas is now consistent with DaemonSet and ReplicaSet, and readyReplicas has the semantics that replicas did prior to this release.
-* Add Japanese translation for kubectl ([#46756](https://github.com/kubernetes/kubernetes/pull/46756), [@girikuncoro](https://github.com/girikuncoro))
-* federation: Add admission controller for policy-based placement ([#44786](https://github.com/kubernetes/kubernetes/pull/44786), [@tsandall](https://github.com/tsandall))
-* Get command uses OpenAPI schema to enhance display for a resource if run with flag 'use-openapi-print-columns'. ([#46235](https://github.com/kubernetes/kubernetes/pull/46235), [@droot](https://github.com/droot))
- * An example command:
- * kubectl get pods --use-openapi-print-columns
-* add gzip compression to GET and LIST requests ([#45666](https://github.com/kubernetes/kubernetes/pull/45666), [@ilackarms](https://github.com/ilackarms))
-* Fix the bug where container cannot run as root when SecurityContext.RunAsNonRoot is false. ([#47009](https://github.com/kubernetes/kubernetes/pull/47009), [@yujuhong](https://github.com/yujuhong))
-* Fixes a bug with cAdvisorPort in the KubeletConfiguration that prevented setting it to 0, which is in fact a valid option, as noted in issue [#11710](https://github.com/kubernetes/kubernetes/pull/11710). ([#46876](https://github.com/kubernetes/kubernetes/pull/46876), [@mtaufen](https://github.com/mtaufen))
-* Stackdriver cluster logging now deploys a new component to export Kubernetes events. ([#46700](https://github.com/kubernetes/kubernetes/pull/46700), [@crassirostris](https://github.com/crassirostris))
-* Alpha feature: allows users to set storage limit to isolate EmptyDir volumes. It enforces the limit by evicting pods that exceed their storage limits ([#45686](https://github.com/kubernetes/kubernetes/pull/45686), [@jingxu97](https://github.com/jingxu97))
-* Adds the `Categories []string` field to API resources, which represents the list of group aliases (e.g. "all") that every resource belongs to. ([#43338](https://github.com/kubernetes/kubernetes/pull/43338), [@fabianofranz](https://github.com/fabianofranz))
-* Promote kubelet tls bootstrap to beta. Add a non-experimental flag to use it and deprecate the old flag. ([#46799](https://github.com/kubernetes/kubernetes/pull/46799), [@mikedanese](https://github.com/mikedanese))
-* Fix disk partition discovery for brtfs ([#46816](https://github.com/kubernetes/kubernetes/pull/46816), [@dashpole](https://github.com/dashpole))
- * Add ZFS support
- * Add overlay2 storage driver support
-* Support creation of GCP Internal Load Balancers from Service objects ([#46663](https://github.com/kubernetes/kubernetes/pull/46663), [@nicksardo](https://github.com/nicksardo))
-* Introduces status conditions to the HorizontalPodAutoscaler in autoscaling/v2alpha1, indicating the current status of a given HorizontalPodAutoscaler, and why it is or is not scaling. ([#46550](https://github.com/kubernetes/kubernetes/pull/46550), [@DirectXMan12](https://github.com/DirectXMan12))
-* Support OpenAPI spec aggregation for kube-aggregator ([#46734](https://github.com/kubernetes/kubernetes/pull/46734), [@mbohlool](https://github.com/mbohlool))
-* Implement kubectl rollout undo and history for DaemonSet ([#46144](https://github.com/kubernetes/kubernetes/pull/46144), [@janetkuo](https://github.com/janetkuo))
-* Respect PDBs during node upgrades and add test coverage to the ServiceTest upgrade test. ([#45748](https://github.com/kubernetes/kubernetes/pull/45748), [@mml](https://github.com/mml))
-* Disk Pressure triggers the deletion of terminated containers on the node. ([#45896](https://github.com/kubernetes/kubernetes/pull/45896), [@dashpole](https://github.com/dashpole))
-* Add the `alpha.image-policy.k8s.io/failed-open=true` annotation when the image policy webhook encounters an error and fails open. ([#46264](https://github.com/kubernetes/kubernetes/pull/46264), [@Q-Lee](https://github.com/Q-Lee))
-* Enable kubelet csr bootstrap in GCE/GKE ([#40760](https://github.com/kubernetes/kubernetes/pull/40760), [@mikedanese](https://github.com/mikedanese))
-* Implement Daemonset history ([#45924](https://github.com/kubernetes/kubernetes/pull/45924), [@janetkuo](https://github.com/janetkuo))
-* When switching from the `service.beta.kubernetes.io/external-traffic` annotation to the new ([#46716](https://github.com/kubernetes/kubernetes/pull/46716), [@thockin](https://github.com/thockin))
- * `externalTrafficPolicy` field, the values chnag as follows:
- * "OnlyLocal" becomes "Local"
- * "Global" becomes "Cluster".
-* Fix kubelet reset liveness probe failure count across pod restart boundaries ([#46371](https://github.com/kubernetes/kubernetes/pull/46371), [@sjenning](https://github.com/sjenning))
-* The gce metadata server can be hidden behind a proxy, hiding the kubelet's token. ([#45565](https://github.com/kubernetes/kubernetes/pull/45565), [@Q-Lee](https://github.com/Q-Lee))
-* AWS: Allow configuration of a single security group for ELBs ([#45500](https://github.com/kubernetes/kubernetes/pull/45500), [@nbutton23](https://github.com/nbutton23))
-* Allow remote admission controllers to be dynamically added and removed by administrators. External admission controllers make an HTTP POST containing details of the requested action which the service can approve or reject. ([#46388](https://github.com/kubernetes/kubernetes/pull/46388), [@lavalamp](https://github.com/lavalamp))
-* iscsi storage plugin: Fix dangling session when using multiple target portal addresses. ([#46239](https://github.com/kubernetes/kubernetes/pull/46239), [@mtanino](https://github.com/mtanino))
-* Duplicate recurring Events now include the latest event's Message string ([#46034](https://github.com/kubernetes/kubernetes/pull/46034), [@kensimon](https://github.com/kensimon))
-* With --feature-gates=RotateKubeletClientCertificate=true set, the kubelet will ([#41912](https://github.com/kubernetes/kubernetes/pull/41912), [@jcbsmpsn](https://github.com/jcbsmpsn))
- * request a client certificate from the API server during the boot cycle and pause
- * waiting for the request to be satisfied. It will continually refresh the certificate
- * as the certificates expiration approaches.
-* The Kubernetes API supports retrieving tabular output for API resources via a new mime-type `application/json;as=Table;v=v1alpha1;g=meta.k8s.io`. The returned object (if the server supports it) will be of type `meta.k8s.io/v1alpha1` with `Table`, and contain column and row information related to the resource. Each row will contain information about the resource - by default it will be the object metadata, but callers can add the `?includeObject=Object` query parameter and receive the full object. In the future kubectl will use this to retrieve the results of `kubectl get`. ([#40848](https://github.com/kubernetes/kubernetes/pull/40848), [@smarterclayton](https://github.com/smarterclayton))
-* This change add nonResourceURL to kubectl auth cani ([#46432](https://github.com/kubernetes/kubernetes/pull/46432), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Webhook added to the API server which omits structured audit log events. ([#45919](https://github.com/kubernetes/kubernetes/pull/45919), [@ericchiang](https://github.com/ericchiang))
-* By default, --low-diskspace-threshold-mb is not set, and --eviction-hard includes "nodefs.available<10%,nodefs.inodesFree<5%" ([#46448](https://github.com/kubernetes/kubernetes/pull/46448), [@dashpole](https://github.com/dashpole))
-* kubectl edit and kubectl apply will keep the ordering of elements in merged lists ([#45980](https://github.com/kubernetes/kubernetes/pull/45980), [@mengqiy](https://github.com/mengqiy))
-* [Federation][kubefed]: Use StorageClassName for etcd pvc ([#46323](https://github.com/kubernetes/kubernetes/pull/46323), [@marun](https://github.com/marun))
-* Restrict active deadline seconds max allowed value to be maximum uint32 ([#46640](https://github.com/kubernetes/kubernetes/pull/46640), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Implement kubectl get controllerrevisions ([#46655](https://github.com/kubernetes/kubernetes/pull/46655), [@janetkuo](https://github.com/janetkuo))
-* Local storage plugin ([#44897](https://github.com/kubernetes/kubernetes/pull/44897), [@msau42](https://github.com/msau42))
-* With `--feature-gates=RotateKubeletServerCertificate=true` set, the kubelet will ([#45059](https://github.com/kubernetes/kubernetes/pull/45059), [@jcbsmpsn](https://github.com/jcbsmpsn))
- * request a server certificate from the API server during the boot cycle and pause
- * waiting for the request to be satisfied. It will continually refresh the certificate as
- * the certificates expiration approaches.
-* Allow PSP's to specify a whitelist of allowed paths for host volume based on path prefixes ([#43946](https://github.com/kubernetes/kubernetes/pull/43946), [@jhorwit2](https://github.com/jhorwit2))
-* Add `kubectl config rename-context` ([#46114](https://github.com/kubernetes/kubernetes/pull/46114), [@arthur0](https://github.com/arthur0))
-* Fix AWS EBS volumes not getting detached from node if routine to verify volumes are attached runs while the node is down ([#46463](https://github.com/kubernetes/kubernetes/pull/46463), [@wongma7](https://github.com/wongma7))
-* Move hardPodAffinitySymmetricWeight to scheduler policy config ([#44159](https://github.com/kubernetes/kubernetes/pull/44159), [@wanghaoran1988](https://github.com/wanghaoran1988))
-* AWS: support node port health check ([#43585](https://github.com/kubernetes/kubernetes/pull/43585), [@foolusion](https://github.com/foolusion))
-* Add generic Toleration for NoExecute Taints to NodeProblemDetector ([#45883](https://github.com/kubernetes/kubernetes/pull/45883), [@gmarek](https://github.com/gmarek))
-* support replaceKeys patch strategy and directive for strategic merge patch ([#44597](https://github.com/kubernetes/kubernetes/pull/44597), [@mengqiy](https://github.com/mengqiy))
-* Augment CRI to support retrieving container stats from the runtime. ([#45614](https://github.com/kubernetes/kubernetes/pull/45614), [@yujuhong](https://github.com/yujuhong))
-* Prevent kubelet from setting allocatable < 0 for a resource upon initial creation. ([#46516](https://github.com/kubernetes/kubernetes/pull/46516), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* add --non-resource-url to kubectl create clusterrole ([#45809](https://github.com/kubernetes/kubernetes/pull/45809), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Add `kubectl apply edit-last-applied` subcommand ([#42256](https://github.com/kubernetes/kubernetes/pull/42256), [@shiywang](https://github.com/shiywang))
-* Adding admissionregistration API group which enables dynamic registration of initializers and external admission webhooks. It is an alpha feature. ([#46294](https://github.com/kubernetes/kubernetes/pull/46294), [@caesarxuchao](https://github.com/caesarxuchao))
-* Fix log spam due to unnecessary status update when node is deleted. ([#45923](https://github.com/kubernetes/kubernetes/pull/45923), [@verult](https://github.com/verult))
-* GCE installs will now avoid IP masquerade for all RFC-1918 IP blocks, rather than just 10.0.0.0/8. This means that clusters can ([#46473](https://github.com/kubernetes/kubernetes/pull/46473), [@thockin](https://github.com/thockin))
- * be created in 192.168.0.0./16 and 172.16.0.0/12 while preserving the container IPs (which would be lost before).
-* `set selector` and `set subject` no longer print "running in local/dry-run mode..." at the top, so their output can be piped as valid yaml or json ([#46507](https://github.com/kubernetes/kubernetes/pull/46507), [@bboreham](https://github.com/bboreham))
-* ControllerRevision type added for StatefulSet and DaemonSet history. ([#45867](https://github.com/kubernetes/kubernetes/pull/45867), [@kow3ns](https://github.com/kow3ns))
-* Bump Go version to 1.8.3 ([#46429](https://github.com/kubernetes/kubernetes/pull/46429), [@wojtek-t](https://github.com/wojtek-t))
-* Upgrade Elasticsearch Addon to v5.4.0 ([#45589](https://github.com/kubernetes/kubernetes/pull/45589), [@it-svit](https://github.com/it-svit))
-* PodDisruptionBudget now uses ControllerRef to decide which controller owns a given Pod, so it doesn't get confused by controllers with overlapping selectors. ([#45003](https://github.com/kubernetes/kubernetes/pull/45003), [@krmayankk](https://github.com/krmayankk))
-* aws: Support for ELB tagging by users ([#45932](https://github.com/kubernetes/kubernetes/pull/45932), [@lpabon](https://github.com/lpabon))
-* Portworx volume driver no longer has to run on the master. ([#45518](https://github.com/kubernetes/kubernetes/pull/45518), [@harsh-px](https://github.com/harsh-px))
-* kube-proxy: ratelimit runs of iptables by sync-period flags ([#46266](https://github.com/kubernetes/kubernetes/pull/46266), [@thockin](https://github.com/thockin))
-* Deployments are updated to use (1) a more stable hashing algorithm (fnv) than the previous one (adler) and (2) a hashing collision avoidance mechanism that will ensure new rollouts will not block on hashing collisions anymore. ([#44774](https://github.com/kubernetes/kubernetes/pull/44774), [@kargakis](https://github.com/kargakis))
-* The Prometheus metrics for the kube-apiserver for tracking incoming API requests and latencies now return the `subresource` label for correctly attributing the type of API call. ([#46354](https://github.com/kubernetes/kubernetes/pull/46354), [@smarterclayton](https://github.com/smarterclayton))
-* Add Simplified Chinese translation for kubectl ([#45573](https://github.com/kubernetes/kubernetes/pull/45573), [@shiywang](https://github.com/shiywang))
-* The --namespace flag is now honored for in-cluster clients that have an empty configuration. ([#46299](https://github.com/kubernetes/kubernetes/pull/46299), [@ncdc](https://github.com/ncdc))
-* Fix init container status reporting when active deadline is exceeded. ([#46305](https://github.com/kubernetes/kubernetes/pull/46305), [@sjenning](https://github.com/sjenning))
-* Improves performance of Cinder volume attach/detach operations ([#41785](https://github.com/kubernetes/kubernetes/pull/41785), [@jamiehannaford](https://github.com/jamiehannaford))
-* GCE and AWS dynamic provisioners extension: admins can configure zone(s) in which a persistent volume shall be created. ([#38505](https://github.com/kubernetes/kubernetes/pull/38505), [@pospispa](https://github.com/pospispa))
-* Break the 'certificatesigningrequests' controller into a 'csrapprover' controller and 'csrsigner' controller. ([#45514](https://github.com/kubernetes/kubernetes/pull/45514), [@mikedanese](https://github.com/mikedanese))
-* Modifies kubefed to create and the federation controller manager to use credentials associated with a service account rather than the user's credentials. ([#42042](https://github.com/kubernetes/kubernetes/pull/42042), [@perotinus](https://github.com/perotinus))
-* Adds a MaxUnavailable field to PodDisruptionBudget ([#45587](https://github.com/kubernetes/kubernetes/pull/45587), [@foxish](https://github.com/foxish))
-* The behavior of some watch calls to the server when filtering on fields was incorrect. If watching objects with a filter, when an update was made that no longer matched the filter a DELETE event was correctly sent. However, the object that was returned by that delete was not the (correct) version before the update, but instead, the newer version. That meant the new object was not matched by the filter. This was a regression from behavior between cached watches on the server side and uncached watches, and thus broke downstream API clients. ([#46223](https://github.com/kubernetes/kubernetes/pull/46223), [@smarterclayton](https://github.com/smarterclayton))
-* vSphere cloud provider: vSphere Storage policy Support for dynamic volume provisioning ([#46176](https://github.com/kubernetes/kubernetes/pull/46176), [@BaluDontu](https://github.com/BaluDontu))
-* Add support for emitting metrics from openstack cloudprovider about storage operations. ([#46008](https://github.com/kubernetes/kubernetes/pull/46008), [@NickrenREN](https://github.com/NickrenREN))
-* 'kubefed init' now supports overriding the default etcd image name with the --etcd-image parameter. ([#46247](https://github.com/kubernetes/kubernetes/pull/46247), [@marun](https://github.com/marun))
-* remove the elasticsearch template ([#45952](https://github.com/kubernetes/kubernetes/pull/45952), [@harryge00](https://github.com/harryge00))
-* Adds the `CustomResourceDefinition` (crd) types to the `kube-apiserver`. These are the successors to `ThirdPartyResource`. See https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/thirdpartyresources.md for more details. ([#46055](https://github.com/kubernetes/kubernetes/pull/46055), [@deads2k](https://github.com/deads2k))
-* StatefulSets now include an alpha scaling feature accessible by setting the `spec.podManagementPolicy` field to `Parallel`. The controller will not wait for pods to be ready before adding the other pods, and will replace deleted pods as needed. Since parallel scaling creates pods out of order, you cannot depend on predictable membership changes within your set. ([#44899](https://github.com/kubernetes/kubernetes/pull/44899), [@smarterclayton](https://github.com/smarterclayton))
-* fix kubelet event recording for selected events. ([#46246](https://github.com/kubernetes/kubernetes/pull/46246), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Moved qos to api.helpers. ([#44906](https://github.com/kubernetes/kubernetes/pull/44906), [@k82cn](https://github.com/k82cn))
-* Kubelet PLEG updates the relist timestamp only after successfully relisting. ([#45496](https://github.com/kubernetes/kubernetes/pull/45496), [@andyxning](https://github.com/andyxning))
-* OpenAPI spec is now available in protobuf binary and gzip format (with ETag support) ([#45836](https://github.com/kubernetes/kubernetes/pull/45836), [@mbohlool](https://github.com/mbohlool))
-* Added support to a hierarchy of kubectl plugins (a tree of plugins as children of other plugins). ([#45981](https://github.com/kubernetes/kubernetes/pull/45981), [@fabianofranz](https://github.com/fabianofranz))
- * Added exported env vars to kubectl plugins so that plugin developers have access to global flags, namespace, the plugin descriptor and the full path to the caller binary.
-* Ignored mirror pods in PodPreset admission plugin. ([#45958](https://github.com/kubernetes/kubernetes/pull/45958), [@k82cn](https://github.com/k82cn))
-* Don't try to attach volume to new node if it is already attached to another node and the volume does not support multi-attach. ([#45346](https://github.com/kubernetes/kubernetes/pull/45346), [@codablock](https://github.com/codablock))
-* The Calico version included in kube-up for GCE has been updated to v2.2. ([#38169](https://github.com/kubernetes/kubernetes/pull/38169), [@caseydavenport](https://github.com/caseydavenport))
-* Kubelet: Fix image garbage collector attempting to remove in-use images. ([#46121](https://github.com/kubernetes/kubernetes/pull/46121), [@Random-Liu](https://github.com/Random-Liu))
-* Add ip-masq-agent addon to the addons folder which is used in GCE if --non-masquerade-cidr is set to 0/0 ([#46038](https://github.com/kubernetes/kubernetes/pull/46038), [@dnardo](https://github.com/dnardo))
-* Fix serialization of EnforceNodeAllocatable ([#44606](https://github.com/kubernetes/kubernetes/pull/44606), [@ivan4th](https://github.com/ivan4th))
-* Add --write-config-to flag to kube-proxy to allow users to write the default configuration settings to a file. ([#45908](https://github.com/kubernetes/kubernetes/pull/45908), [@ncdc](https://github.com/ncdc))
-* The `NodeRestriction` admission plugin limits the `Node` and `Pod` objects a kubelet can modify. In order to be limited by this admission plugin, kubelets must use credentials in the `system:nodes` group, with a username in the form `system:node:`. Such kubelets will only be allowed to modify their own `Node` API object, and only modify `Pod` API objects that are bound to their node. ([#45929](https://github.com/kubernetes/kubernetes/pull/45929), [@liggitt](https://github.com/liggitt))
-* vSphere cloud provider: Report same Node IP as both internal and external. ([#45201](https://github.com/kubernetes/kubernetes/pull/45201), [@abrarshivani](https://github.com/abrarshivani))
-* The options passed to a flexvolume plugin's mount command now contains the pod name (`kubernetes.io/pod.name`), namespace (`kubernetes.io/pod.namespace`), uid (`kubernetes.io/pod.uid`), and service account name (`kubernetes.io/serviceAccount.name`). ([#39488](https://github.com/kubernetes/kubernetes/pull/39488), [@liggitt](https://github.com/liggitt))
-
-
-
-# v1.7.0-alpha.4
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/master/examples)
-
-## Downloads for v1.7.0-alpha.4
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes.tar.gz) | `14ef2ce3c9348dce7e83aeb167be324da93b90dbb8016f2aecb097c982abf790`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-src.tar.gz) | `faef422988e805a3970985eabff03ed88cfb95ad0d2223abe03011145016e5d0`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-client-darwin-386.tar.gz) | `077dc5637f42a35c316a5e1c3a38e09625971894a186dd7b1e60408c9a0ac4b8`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-client-darwin-amd64.tar.gz) | `8e43eb7d1969e82eeb17973e4f09e9fe44ff3430cd2c35170d72a631c460deeb`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-client-linux-386.tar.gz) | `6ddfdbcb25243901c965b1e009e26a90b1fd08d6483906e1235ef380f6f93c97`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-client-linux-amd64.tar.gz) | `3e7cdd8e0e4d67ff2a0ee2548a4c48a433f84a25384ee9d22c06f4eb2e6db6d7`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-client-linux-arm64.tar.gz) | `3970c88d2c36fcb43a64d4e889a3eb2cc298e893f6084b9a3c902879d777487d`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-client-linux-arm.tar.gz) | `156909c55feb06036afff72aa180bd20c14758690cd04c7d8867f49c968e6372`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-client-linux-ppc64le.tar.gz) | `601fe881a131ce7868fdecfb1439da94ab5a1f1d3700efe4b8319617ceb23d4e`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-client-linux-s390x.tar.gz) | `2ed3e74e6a972d9ed5b2206fa5e811663497082384f488eada9901e9a99929c7`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-client-windows-386.tar.gz) | `1aba520fe0bf620f0e77f697194dfd5e336e4a97e2af01f8b94b0f03dbb6299c`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-client-windows-amd64.tar.gz) | `aaf4a42549ea1113915649e636612ea738ead383140d92944c80f3c0d5df8161`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-server-linux-amd64.tar.gz) | `1389c798e7805ec26826c0d3b17ab0d4bd51e0db21cf2f5d4bda5e2b530a6bf1`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-server-linux-arm64.tar.gz) | `ccb99da4b069e63695b3b1d8add9a173e21a0bcaf03d031014460092ec726fb4`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-server-linux-arm.tar.gz) | `6eb3fe27e5017ed834a309cba21342a8c1443486a75ec87611fa66649dd5926a`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-server-linux-ppc64le.tar.gz) | `9b5030b0205ccccfd08b832eec917853fee8bcd34b04033ba35f17698be4a32f`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-server-linux-s390x.tar.gz) | `36b692c221005b52c2a243ddfc16e41a7b157e10fee8662bcd8270280b3f0927`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-node-linux-amd64.tar.gz) | `bba76ad441716f938df0fd8c23c48588d1f80603e39dcca1a29c8b3bbe8c1658`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-node-linux-arm64.tar.gz) | `e3e729847a13fd41ee7f969aabb14d3a0f6f8523f6f079f77a618bf5d781fb9c`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-node-linux-arm.tar.gz) | `520f98f244dd35bb0d96072003548f8b3aacc1e7beb31b5bc527416f07af9d32`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-node-linux-ppc64le.tar.gz) | `686490ba55ea8c7569b3b506f898315c8b1b243de23733e0cd537e2db8e067cb`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-node-linux-s390x.tar.gz) | `a36bb76b390007b271868987739c550c8ac4e856f218f67f2fd780309a2a522e`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.4/kubernetes-node-windows-amd64.tar.gz) | `e78c5a32584d96ec177e38b445c053e40c358e0549b925981c118f4c23578261`
-
-## Changelog since v1.7.0-alpha.3
-
-### Action Required
-
-* `kubectl create role` and `kubectl create clusterrole` no longer allow specifying multiple resource names as comma-separated arguments. Use repeated `--resource-name` arguments to specify multiple resource names. ([#44950](https://github.com/kubernetes/kubernetes/pull/44950), [@xilabao](https://github.com/xilabao))
-
-### Other notable changes
-
-* avoid concrete examples for missingResourceError ([#45582](https://github.com/kubernetes/kubernetes/pull/45582), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Fix DNS suffix search list support in Windows kube-proxy. ([#45642](https://github.com/kubernetes/kubernetes/pull/45642), [@JiangtianLi](https://github.com/JiangtianLi))
-* Fix the bug where StartedAt time is not reported for exited containers. ([#45977](https://github.com/kubernetes/kubernetes/pull/45977), [@yujuhong](https://github.com/yujuhong))
-* Update Dashboard version to 1.6.1 ([#45953](https://github.com/kubernetes/kubernetes/pull/45953), [@maciaszczykm](https://github.com/maciaszczykm))
-* Examples: fixed cassandra mirror detection that assumes an FTP site will always be presented ([#45965](https://github.com/kubernetes/kubernetes/pull/45965), [@pompomJuice](https://github.com/pompomJuice))
-* Removes the deprecated kubelet flag --babysit-daemons ([#44230](https://github.com/kubernetes/kubernetes/pull/44230), [@mtaufen](https://github.com/mtaufen))
-* [Federation] Automate configuring nameserver in cluster-dns for CoreDNS provider ([#42895](https://github.com/kubernetes/kubernetes/pull/42895), [@shashidharatd](https://github.com/shashidharatd))
-* Add an AEAD encrypting transformer for storing secrets encrypted at rest ([#41939](https://github.com/kubernetes/kubernetes/pull/41939), [@smarterclayton](https://github.com/smarterclayton))
-* Update Minio example ([#45444](https://github.com/kubernetes/kubernetes/pull/45444), [@NitishT](https://github.com/NitishT))
-* [Federation] Segregate DNS related code to separate controller ([#45034](https://github.com/kubernetes/kubernetes/pull/45034), [@shashidharatd](https://github.com/shashidharatd))
-* API Registration is now in beta. ([#45247](https://github.com/kubernetes/kubernetes/pull/45247), [@mbohlool](https://github.com/mbohlool))
-* Allow kcm and scheduler to lock on ConfigMaps. ([#45739](https://github.com/kubernetes/kubernetes/pull/45739), [@timothysc](https://github.com/timothysc))
-* kubelet config should actually ignore files starting with dots ([#45111](https://github.com/kubernetes/kubernetes/pull/45111), [@dwradcliffe](https://github.com/dwradcliffe))
-* Fix lint failures on kubernetes-e2e charm ([#45832](https://github.com/kubernetes/kubernetes/pull/45832), [@Cynerva](https://github.com/Cynerva))
-* Mirror pods must now indicate the nodeName they are bound to on creation. The mirror pod annotation is now treated as immutable and cannot be added to an existing pod, removed from a pod, or modified. ([#45775](https://github.com/kubernetes/kubernetes/pull/45775), [@liggitt](https://github.com/liggitt))
-* Updating apiserver to return UID of the deleted resource. Clients can use this UID to verify that the resource was deleted or waiting for finalizers. ([#45600](https://github.com/kubernetes/kubernetes/pull/45600), [@nikhiljindal](https://github.com/nikhiljindal))
-* OwnerReferencesPermissionEnforcement admission plugin ignores pods/status. ([#45747](https://github.com/kubernetes/kubernetes/pull/45747), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* prevent pods/status from touching ownerreferences ([#45826](https://github.com/kubernetes/kubernetes/pull/45826), [@deads2k](https://github.com/deads2k))
-* Fix lint errors in juju kubernetes master and e2e charms ([#45494](https://github.com/kubernetes/kubernetes/pull/45494), [@ktsakalozos](https://github.com/ktsakalozos))
-* Ensure that autoscaling/v1 is the preferred version for API discovery when autoscaling/v2alpha1 is enabled. ([#45741](https://github.com/kubernetes/kubernetes/pull/45741), [@DirectXMan12](https://github.com/DirectXMan12))
-* Promotes Source IP preservation for Virtual IPs to GA. ([#41162](https://github.com/kubernetes/kubernetes/pull/41162), [@MrHohn](https://github.com/MrHohn))
- * Two api fields are defined correspondingly:
- * Service.Spec.ExternalTrafficPolicy <- 'service.beta.kubernetes.io/external-traffic' annotation.
- * Service.Spec.HealthCheckNodePort <- 'service.beta.kubernetes.io/healthcheck-nodeport' annotation.
-* Fix pods failing to start if they specify a file as a volume subPath to mount. ([#45623](https://github.com/kubernetes/kubernetes/pull/45623), [@wongma7](https://github.com/wongma7))
-* the resource quota controller was not adding quota to be resynced at proper interval ([#45685](https://github.com/kubernetes/kubernetes/pull/45685), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Marks the Kubelet's --master-service-namespace flag deprecated ([#44250](https://github.com/kubernetes/kubernetes/pull/44250), [@mtaufen](https://github.com/mtaufen))
-* fluentd will tolerate all NoExecute Taints when run in gcp configuration. ([#45715](https://github.com/kubernetes/kubernetes/pull/45715), [@gmarek](https://github.com/gmarek))
-* Added Group/Version/Kind and Action extension to OpenAPI Operations ([#44787](https://github.com/kubernetes/kubernetes/pull/44787), [@mbohlool](https://github.com/mbohlool))
-* Updates kube-dns to 1.14.2 ([#45684](https://github.com/kubernetes/kubernetes/pull/45684), [@bowei](https://github.com/bowei))
- * Support kube-master-url flag without kubeconfig
- * Fix concurrent R/Ws in dns.go
- * Fix confusing logging when initialize server
- * Fix printf in cmd/kube-dns/app/server.go
- * Fix version on startup and --version flag
- * Support specifying port number for nameserver in stubDomains
-* detach the volume when pod is terminated ([#45286](https://github.com/kubernetes/kubernetes/pull/45286), [@gnufied](https://github.com/gnufied))
-* Don't append :443 to registry domain in the kubernetes-worker layer registry action ([#45550](https://github.com/kubernetes/kubernetes/pull/45550), [@jacekn](https://github.com/jacekn))
-* vSphere cloud provider: Fix volume detach on node failure. ([#45569](https://github.com/kubernetes/kubernetes/pull/45569), [@divyenpatel](https://github.com/divyenpatel))
-* Remove the deprecated `--enable-cri` flag. CRI is now the default, ([#45194](https://github.com/kubernetes/kubernetes/pull/45194), [@yujuhong](https://github.com/yujuhong))
- * and the only way to integrate with kubelet for the container runtimes.
-* AWS: Remove check that forces loadBalancerSourceRanges to be 0.0.0.0/0. ([#38636](https://github.com/kubernetes/kubernetes/pull/38636), [@dhawal55](https://github.com/dhawal55))
-* Fix erroneous FailedSync and FailedMount events being periodically and indefinitely posted on Pods after kubelet is restarted ([#44781](https://github.com/kubernetes/kubernetes/pull/44781), [@wongma7](https://github.com/wongma7))
-* Kubernetes now shares a single PID namespace among all containers in a pod when running with docker >= 1.13.1. This means processes can now signal processes in other containers in a pod, but it also means that the `kubectl exec {pod} kill 1` pattern will cause the pod to be restarted rather than a single container. ([#45236](https://github.com/kubernetes/kubernetes/pull/45236), [@verb](https://github.com/verb))
-* azure: add support for UDP ports ([#45523](https://github.com/kubernetes/kubernetes/pull/45523), [@colemickens](https://github.com/colemickens))
- * azure: fix support for multiple `loadBalancerSourceRanges`
- * azure: support the Service spec's `sessionAffinity`
-* The fix makes scheduling go routine waiting for cache (e.g. Pod) to be synced. ([#45453](https://github.com/kubernetes/kubernetes/pull/45453), [@k82cn](https://github.com/k82cn))
-* vSphere cloud provider: Filter out IPV6 node addresses. ([#45181](https://github.com/kubernetes/kubernetes/pull/45181), [@BaluDontu](https://github.com/BaluDontu))
-* Default behaviour in cinder storageclass is changed. If availability is not specified, the zone is chosen by algorithm. It makes possible to spread stateful pods across many zones. ([#44798](https://github.com/kubernetes/kubernetes/pull/44798), [@zetaab](https://github.com/zetaab))
-* A small clean up to remove unnecessary functions. ([#45018](https://github.com/kubernetes/kubernetes/pull/45018), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla))
-* Removed old scheduler constructor. ([#45472](https://github.com/kubernetes/kubernetes/pull/45472), [@k82cn](https://github.com/k82cn))
-* vSphere cloud provider: Fix fetching of VM UUID on Ubuntu 16.04 and Fedora. ([#45311](https://github.com/kubernetes/kubernetes/pull/45311), [@divyenpatel](https://github.com/divyenpatel))
-* This fixes the overflow for priorityconfig- valid range {1, 9223372036854775806}. ([#45122](https://github.com/kubernetes/kubernetes/pull/45122), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla))
-* Bump cluster autoscaler to v0.5.4, which fixes scale down issues with pods ignoring SIGTERM. ([#45483](https://github.com/kubernetes/kubernetes/pull/45483), [@mwielgus](https://github.com/mwielgus))
-* Create clusters with GPUs in GKE by specifying "type=,count=" to NODE_ACCELERATORS env var. ([#45130](https://github.com/kubernetes/kubernetes/pull/45130), [@vishh](https://github.com/vishh))
- * List of available GPUs - https://cloud.google.com/compute/docs/gpus/#introduction
-* Remove deprecated node address type `NodeLegacyHostIP`. ([#44830](https://github.com/kubernetes/kubernetes/pull/44830), [@NickrenREN](https://github.com/NickrenREN))
-* UIDs and GIDs now use apimachinery types ([#44714](https://github.com/kubernetes/kubernetes/pull/44714), [@jamiehannaford](https://github.com/jamiehannaford))
-* Enable basic auth username rotation for GCI ([#44590](https://github.com/kubernetes/kubernetes/pull/44590), [@ihmccreery](https://github.com/ihmccreery))
-* Kubectl taint node based on label selector ([#44740](https://github.com/kubernetes/kubernetes/pull/44740), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla))
-* Scheduler perf modular extensions. ([#44770](https://github.com/kubernetes/kubernetes/pull/44770), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla))
-
-
-
-# v1.7.0-alpha.3
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/master/examples)
-
-## Downloads for v1.7.0-alpha.3
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes.tar.gz) | `03437cacddd91bb7dc21960c960d673ceb99b53040860638aa1d1fbde6d59fb5`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-src.tar.gz) | `190441318abddb44cfcbaec2f1b91d1a76167b91165ce5ae0d1a99c1130a2a36`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-client-darwin-386.tar.gz) | `1c3dcc57e014b15395a140eeeb285e38cf5510939b4113d053006d57d8e13087`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-client-darwin-amd64.tar.gz) | `c33d893f67d8ac90834c36284ef88c529c43662c7179e2a9e4b17671c057400b`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-client-linux-386.tar.gz) | `5f3e44b8450db4f93a7ea1f366259c6333007a4536cb242212837bb241c3bbef`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-client-linux-amd64.tar.gz) | `85ac41dd849f3f9e033d4e123f79c4bd5d7b43bdd877d57dfc8fd2cadcef94be`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-client-linux-arm64.tar.gz) | `f693032dde194de67900fe8cc5252959d70992b89a24ea43e11e9949835df5db`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-client-linux-arm.tar.gz) | `22fa2d2a77310acac1b08a7091929b03977afb2e4a246b054d38b3da15b84e33`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-client-linux-ppc64le.tar.gz) | `8717e6042a79f6a79f4527370adb1bbc903b0b9930c6aeee0174687b7443f9d4`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-client-linux-s390x.tar.gz) | `161c1da92b681decfb9800854bf3b9ff0110ba75c11008a784b891f3a57b032d`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-client-windows-386.tar.gz) | `19f5898a1fdef8c4caf27c6c2b79b0e085127b1d209f57361bce52ca8080842d`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-client-windows-amd64.tar.gz) | `ff79c61efa87af3eeb7357740a495997d223d256b2e54c139572154e113dc247`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-server-linux-amd64.tar.gz) | `13677b0400758f0d74087768be7abf3fd7bd927f0b874b8d6becc11394cdec2c`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-server-linux-arm64.tar.gz) | `0a2df3a6ebe157aa8a7e89bd8805dbad3623e122cc0f3614bfcb4ad528bd6ab1`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-server-linux-arm.tar.gz) | `76611e01de80c07ec954c91612a550063b9efc0c223e5dd638d71f4a3f3d9430`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-server-linux-ppc64le.tar.gz) | `2fe29a5871afe693f020e9642e6bc664c497e71598b70673d4f2c4523f57e28b`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-server-linux-s390x.tar.gz) | `33a1eb93a5d7004987de38ef54e888f0593e31cf9250be3e25118a1d1b474c07`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-node-linux-amd64.tar.gz) | `de369ca9e5207fb67b26788b41cee1c75935baae348fedc1adf9dbae8c066e7d`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-node-linux-arm64.tar.gz) | `21839fe6c2a3fd3c165dea6ddbacdec008cdd154c9704866d13ac4dfb14ad7ae`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-node-linux-arm.tar.gz) | `2326a074f7c9ba205d996f4f42b8f511c33d909aefd3ea329cc579c4c14b5300`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-node-linux-ppc64le.tar.gz) | `58a3aeb5d55d040fd3133dbaa26eb966057ed2b35a5e0522ce8c1ebf4e9b2364`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-node-linux-s390x.tar.gz) | `2c231a8357d891012574b522ee7fa5e25c6b62b6d888d9bbbb195950cbe18536`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.3/kubernetes-node-windows-amd64.tar.gz) | `870bb1ab53a3f2bb5a3c068b425cd6330e71c86dc2ab899c79f733b63ddb51c5`
-
-## Changelog since v1.7.0-alpha.2
-
-### Action Required
-
-* Refactor kube-proxy configuration ([#34727](https://github.com/kubernetes/kubernetes/pull/34727), [@ncdc](https://github.com/ncdc))
-
-### Other notable changes
-
-* kubeadm: Fix invalid assign statement so it is possible to register the master kubelet with other initial Taints ([#45376](https://github.com/kubernetes/kubernetes/pull/45376), [@luxas](https://github.com/luxas))
-* Use Docker API Version instead of docker version ([#44068](https://github.com/kubernetes/kubernetes/pull/44068), [@mkumatag](https://github.com/mkumatag))
-* bump(golang.org/x/oauth2): a6bd8cefa1811bd24b86f8902872e4e8225f74c4 ([#45056](https://github.com/kubernetes/kubernetes/pull/45056), [@ericchiang](https://github.com/ericchiang))
-* apimachinery: make explicit that meta.KindToResource is only a guess ([#45272](https://github.com/kubernetes/kubernetes/pull/45272), [@sttts](https://github.com/sttts))
-* Remove PodSandboxStatus.Linux.Namespaces.Network from CRI. ([#45166](https://github.com/kubernetes/kubernetes/pull/45166), [@feiskyer](https://github.com/feiskyer))
-* Fixed misspelled http URL in the cluster-dns example ([#45246](https://github.com/kubernetes/kubernetes/pull/45246), [@psiwczak](https://github.com/psiwczak))
-* separate discovery from the apiserver ([#43003](https://github.com/kubernetes/kubernetes/pull/43003), [@deads2k](https://github.com/deads2k))
-* Remove the `--secret-name` flag from `kubefed join`, instead generating the secret name arbitrarily. ([#42513](https://github.com/kubernetes/kubernetes/pull/42513), [@perotinus](https://github.com/perotinus))
-* Added InterPodAffinity unit test case with Namespace. ([#45152](https://github.com/kubernetes/kubernetes/pull/45152), [@k82cn](https://github.com/k82cn))
-* Use munged semantic version for side-loaded docker tag ([#44981](https://github.com/kubernetes/kubernetes/pull/44981), [@ixdy](https://github.com/ixdy))
-* Increase Dashboard's memory requests and limits ([#44712](https://github.com/kubernetes/kubernetes/pull/44712), [@maciaszczykm](https://github.com/maciaszczykm))
-* PodSpec's `HostAliases` now write entries into the Kubernetes-managed hosts file. ([#45148](https://github.com/kubernetes/kubernetes/pull/45148), [@rickypai](https://github.com/rickypai))
-* Create and push a docker image for the cloud-controller-manager ([#45154](https://github.com/kubernetes/kubernetes/pull/45154), [@luxas](https://github.com/luxas))
-* Align Extender's validation with prioritizers. ([#45091](https://github.com/kubernetes/kubernetes/pull/45091), [@k82cn](https://github.com/k82cn))
-* Retry calls we report config changes quickly. ([#44959](https://github.com/kubernetes/kubernetes/pull/44959), [@ktsakalozos](https://github.com/ktsakalozos))
-* A new field `hostAliases` has been added to `pod.spec` to support adding entries to a Pod's /etc/hosts file. ([#44641](https://github.com/kubernetes/kubernetes/pull/44641), [@rickypai](https://github.com/rickypai))
-* Added CIFS PV support for Juju Charms ([#45117](https://github.com/kubernetes/kubernetes/pull/45117), [@chuckbutler](https://github.com/chuckbutler))
-* Some container runtimes share a process (PID) namespace for all containers in a pod. This will become the default for Docker in a future release of Kubernetes. You can preview this functionality if running with the CRI and Docker 1.13.1 by enabling the --experimental-docker-enable-shared-pid kubelet flag. ([#41583](https://github.com/kubernetes/kubernetes/pull/41583), [@verb](https://github.com/verb))
-* add APIService conditions ([#43301](https://github.com/kubernetes/kubernetes/pull/43301), [@deads2k](https://github.com/deads2k))
-* Log warning when invalid dir passed to kubectl proxy --www ([#44952](https://github.com/kubernetes/kubernetes/pull/44952), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Roll up volume error messages in the kubelet sync loop. ([#44938](https://github.com/kubernetes/kubernetes/pull/44938), [@jayunit100](https://github.com/jayunit100))
-* Introduces the ability to extend kubectl by adding third-party plugins. Developer preview, please refer to the documentation for instructions about how to use it. ([#37499](https://github.com/kubernetes/kubernetes/pull/37499), [@fabianofranz](https://github.com/fabianofranz))
-* Fixes juju kubernetes master: 1. Get certs from a dead leader. 2. Append tokens. ([#43620](https://github.com/kubernetes/kubernetes/pull/43620), [@ktsakalozos](https://github.com/ktsakalozos))
-* Use correct option name in the kubernetes-worker layer registry action ([#44921](https://github.com/kubernetes/kubernetes/pull/44921), [@jacekn](https://github.com/jacekn))
-* Start recording cloud provider metrics for AWS ([#43477](https://github.com/kubernetes/kubernetes/pull/43477), [@gnufied](https://github.com/gnufied))
-* Bump GLBC version to 0.9.3 ([#45055](https://github.com/kubernetes/kubernetes/pull/45055), [@nicksardo](https://github.com/nicksardo))
-* Add metrics to all major gce operations {latency, errors} ([#44510](https://github.com/kubernetes/kubernetes/pull/44510), [@bowei](https://github.com/bowei))
- * The new metrics are:
- * cloudprovider_gce_api_request_duration_seconds{request, region, zone}
- * cloudprovider_gce_api_request_errors{request, region, zone}
-
- * `request` is the specific function that is used.
- * `region` is the target region (Will be "" if not applicable)
- * `zone` is the target zone (Will be "" if not applicable)
- * Note: this fixes some issues with the previous implementation of
- * metrics for disks:
- * Time duration tracked was of the initial API call, not the entire
- * operation.
- * Metrics label tuple would have resulted in many independent
- * histograms stored, one for each disk. (Did not aggregate well).
-* Update kubernetes-e2e charm to use snaps ([#45044](https://github.com/kubernetes/kubernetes/pull/45044), [@Cynerva](https://github.com/Cynerva))
-* Log the error (if any) in e2e metrics gathering step ([#45039](https://github.com/kubernetes/kubernetes/pull/45039), [@shyamjvs](https://github.com/shyamjvs))
-* The proxy subresource APIs for nodes, services, and pods now support the HTTP PATCH method. ([#44929](https://github.com/kubernetes/kubernetes/pull/44929), [@liggitt](https://github.com/liggitt))
-* cluster-autoscaler: Fix duplicate writing of logs. ([#45017](https://github.com/kubernetes/kubernetes/pull/45017), [@MaciekPytel](https://github.com/MaciekPytel))
-* CRI: Fix StopContainer timeout ([#44970](https://github.com/kubernetes/kubernetes/pull/44970), [@Random-Liu](https://github.com/Random-Liu))
-* Fixes a bug where pods were evicted even after images are successfully deleted. ([#44986](https://github.com/kubernetes/kubernetes/pull/44986), [@dashpole](https://github.com/dashpole))
-* Fix some false negatives in detection of meaningful conflicts during strategic merge patch with maps and lists. ([#43469](https://github.com/kubernetes/kubernetes/pull/43469), [@enisoc](https://github.com/enisoc))
-* kubernetes-master juju charm properly detects etcd-scale events and reconfigures appropriately. ([#44967](https://github.com/kubernetes/kubernetes/pull/44967), [@chuckbutler](https://github.com/chuckbutler))
-* Add redirect support to SpdyRoundTripper ([#44451](https://github.com/kubernetes/kubernetes/pull/44451), [@ncdc](https://github.com/ncdc))
-* Support running Ubuntu image on GCE node ([#44744](https://github.com/kubernetes/kubernetes/pull/44744), [@yguo0905](https://github.com/yguo0905))
-* Send dns details only after cdk-addons are configured ([#44945](https://github.com/kubernetes/kubernetes/pull/44945), [@ktsakalozos](https://github.com/ktsakalozos))
-* Added support to the pause action in the kubernetes-worker charm for new flag --delete-local-data ([#44931](https://github.com/kubernetes/kubernetes/pull/44931), [@chuckbutler](https://github.com/chuckbutler))
-* Upgrade go version to v1.8 ([#41636](https://github.com/kubernetes/kubernetes/pull/41636), [@luxas](https://github.com/luxas))
-* Add namespace-{list, create, delete} actions to the kubernetes-master layer ([#44277](https://github.com/kubernetes/kubernetes/pull/44277), [@jacekn](https://github.com/jacekn))
-* Fix problems with scaling up the cluster when unschedulable pods have some persistent volume claims. ([#44860](https://github.com/kubernetes/kubernetes/pull/44860), [@mwielgus](https://github.com/mwielgus))
-* Feature/hpa upscale downscale delay configurable ([#42101](https://github.com/kubernetes/kubernetes/pull/42101), [@Dmitry1987](https://github.com/Dmitry1987))
-* Add short name "netpol" for networkpolicies ([#42241](https://github.com/kubernetes/kubernetes/pull/42241), [@xiangpengzhao](https://github.com/xiangpengzhao))
-* Restored the ability of kubectl running inside a pod to consume resource files specifying a different namespace than the one the pod is running in. ([#44862](https://github.com/kubernetes/kubernetes/pull/44862), [@liggitt](https://github.com/liggitt))
-* e2e: handle nil ReplicaSet in checkDeploymentRevision ([#44859](https://github.com/kubernetes/kubernetes/pull/44859), [@sttts](https://github.com/sttts))
-* Fix false positive "meaningful conflict" detection for strategic merge patch with integer values. ([#44788](https://github.com/kubernetes/kubernetes/pull/44788), [@enisoc](https://github.com/enisoc))
-* Documented NodePort networking for CDK. ([#44863](https://github.com/kubernetes/kubernetes/pull/44863), [@chuckbutler](https://github.com/chuckbutler))
-* Deployments and DaemonSets are now considered complete once all of the new pods are up and running - affects `kubectl rollout status` (and ProgressDeadlineSeconds for Deployments) ([#44672](https://github.com/kubernetes/kubernetes/pull/44672), [@kargakis](https://github.com/kargakis))
-* Exclude nodes labeled as master from LoadBalancer / NodePort; restores documented behaviour. ([#44745](https://github.com/kubernetes/kubernetes/pull/44745), [@justinsb](https://github.com/justinsb))
-* Fixes issue during LB creation where ports where incorrectly assigned to a floating IP ([#44387](https://github.com/kubernetes/kubernetes/pull/44387), [@jamiehannaford](https://github.com/jamiehannaford))
-* Remove redis-proxy.yaml sample, as the image is nowhere to be found. ([#44801](https://github.com/kubernetes/kubernetes/pull/44801), [@klausenbusk](https://github.com/klausenbusk))
-* Resolves juju vsphere hostname bug showing only a single node in a scaled node-pool. ([#44780](https://github.com/kubernetes/kubernetes/pull/44780), [@chuckbutler](https://github.com/chuckbutler))
-* kubectl commands run inside a pod using a kubeconfig file now use the namespace specified in the kubeconfig file, instead of using the pod namespace. If no kubeconfig file is used, or the kubeconfig does not specify a namespace, the pod namespace is still used as a fallback. ([#44570](https://github.com/kubernetes/kubernetes/pull/44570), [@liggitt](https://github.com/liggitt))
-* This adds support for CNI ConfigLists, which permit plugin chaining. ([#42202](https://github.com/kubernetes/kubernetes/pull/42202), [@squeed](https://github.com/squeed))
-* API requests using impersonation now include the `system:authenticated` group in the impersonated user automatically. ([#44076](https://github.com/kubernetes/kubernetes/pull/44076), [@liggitt](https://github.com/liggitt))
-* Print conditions of RC/RS in 'kubectl describe' command. ([#44710](https://github.com/kubernetes/kubernetes/pull/44710), [@xiangpengzhao](https://github.com/xiangpengzhao))
-* cinder: Add support for the KVM virtio-scsi driver ([#41498](https://github.com/kubernetes/kubernetes/pull/41498), [@mikebryant](https://github.com/mikebryant))
-* Disallows installation of upstream docker from PPA in the Juju kubernetes-worker charm. ([#44681](https://github.com/kubernetes/kubernetes/pull/44681), [@wwwtyro](https://github.com/wwwtyro))
-* Fluentd manifest pod is no longer created on non-registered master when creating clusters using kube-up.sh. ([#44721](https://github.com/kubernetes/kubernetes/pull/44721), [@piosz](https://github.com/piosz))
-* Job controller now respects ControllerRef to avoid fighting over Pods. ([#42176](https://github.com/kubernetes/kubernetes/pull/42176), [@enisoc](https://github.com/enisoc))
-* CronJob controller now respects ControllerRef to avoid fighting with other controllers. ([#42177](https://github.com/kubernetes/kubernetes/pull/42177), [@enisoc](https://github.com/enisoc))
-* The hyperkube image has been slimmed down and no longer includes addon manifests and other various scripts. These were introduced for the now removed docker-multinode setup system. ([#44555](https://github.com/kubernetes/kubernetes/pull/44555), [@luxas](https://github.com/luxas))
-* Refactoring reorganize taints function in kubectl to expose operations ([#43171](https://github.com/kubernetes/kubernetes/pull/43171), [@ravisantoshgudimetla](https://github.com/ravisantoshgudimetla))
-* The Kubernetes API server now exits if it encounters a networking failure (e.g. the networking interface hosting its address goes away) to allow a process manager (systemd/kubelet/etc) to react to the problem. Previously the server would log the failure and try again to bind to its configured address:port. ([#42272](https://github.com/kubernetes/kubernetes/pull/42272), [@marun](https://github.com/marun))
-* Fixes a bug in the kubernetes-worker Juju charm code that attempted to give kube-proxy more than one api endpoint. ([#44677](https://github.com/kubernetes/kubernetes/pull/44677), [@wwwtyro](https://github.com/wwwtyro))
-* Fixes a missing comma in a list of strings. ([#44678](https://github.com/kubernetes/kubernetes/pull/44678), [@wwwtyro](https://github.com/wwwtyro))
-* Fix ceph-secret type to kubernetes.io/rbd in kubernetes-master charm ([#44635](https://github.com/kubernetes/kubernetes/pull/44635), [@Cynerva](https://github.com/Cynerva))
-
-
-
-# v1.7.0-alpha.2
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/master/examples)
-
-## Downloads for v1.7.0-alpha.2
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes.tar.gz) | `d60465c07b8aa4b5bc8e3de98769d72d22985489e5cdfd1a3165e36c755d6c3b`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-src.tar.gz) | `b0b388571225e37a5b9bca6624a92e69273af907cdb300a6d0ac6a0d0d364bd4`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-client-darwin-386.tar.gz) | `55b04bc43c45bd93cf30174036ad64109ca1070ab3b331882e956f483dac2b6a`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | `d61c055ca90aacb6feb10f45feaaf11f188052598cfef79f4930358bb37e09ad`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-client-linux-386.tar.gz) | `e10ce9339ee6158759675bfb002409fa7f70c701aa5a8a5ac97abc56742561b7`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | `b9cb60ba71dfa144ed1e6f2116afd078782372d427912838c56f3b77a74afda0`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | `bc0446c484dba91d8f1e32c0175b81dca5c6ff0ac9f5dd3f69cff529afb83aff`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | `f794765ca98a2c0611fda32756250eff743c25b66cd4d973fc5720a55771c1c6`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-client-linux-ppc64le.tar.gz) | `216cb6e96ba6af5ae259c069576fcd873c48a8a4e8918f5e08ac13427fbefd57`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-client-linux-s390x.tar.gz) | `fb7903d028744fdfe3119ade6b2ee71532e3d69a82bd5834206fe84e50821253`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-client-windows-386.tar.gz) | `6bdfbd12361f814c86f268dcc807314f322efe9390ca2d91087e617814e91684`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | `fd26fc5f0e967b9f6ab18bc28893f2037712891179ddb67b035434c94612f7e3`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | `e14c0748789f6a1c3840ab05d0ad5b796a0f03722ee923f8208740f702c0bc19`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | `270e0a6fcc0a2f38c8c6e8929a4a593535014bde88f69479a52c5b625bca435c`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | `0bd58c2f8d8b6e8110354ccd71eb97eb873aca7b074ce9f83dab4f62a696e964`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-server-linux-ppc64le.tar.gz) | `57a4a5dcdb573fb6dc08dbd53d0f196c66d245fa2159a92bf8da0d29128e486d`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-alpha.2/kubernetes-server-linux-s390x.tar.gz) | `404c8dcc300281f5588e6f4dd15e3c41f858c6597e37a817913112d545a7f736`
-
-## Changelog since v1.7.0-alpha.1
-
-### Action Required
-
-* `kubectl create rolebinding` and `kubectl create clusterrolebinding` no longer allow specifying multiple subjects as comma-separated arguments. Use repeated `--user`, `--group`, or `--serviceaccount` arguments to specify multiple subjects. ([#43903](https://github.com/kubernetes/kubernetes/pull/43903), [@xilabao](https://github.com/xilabao))
-
-### Other notable changes
-
-* Add support for Azure internal load balancer ([#43510](https://github.com/kubernetes/kubernetes/pull/43510), [@karataliu](https://github.com/karataliu))
-* Improved output on 'kubectl get' and 'kubectl describe' for generic objects. ([#44222](https://github.com/kubernetes/kubernetes/pull/44222), [@fabianofranz](https://github.com/fabianofranz))
-* Add Kubernetes 1.6 support to Juju charms ([#44500](https://github.com/kubernetes/kubernetes/pull/44500), [@Cynerva](https://github.com/Cynerva))
- * Add metric collection to charms for autoscaling
- * Update kubernetes-e2e charm to fail when test suite fails
- * Update Juju charms to use snaps
- * Add registry action to the kubernetes-worker charm
- * Add support for kube-proxy cluster-cidr option to kubernetes-worker charm
- * Fix kubernetes-master charm starting services before TLS certs are saved
- * Fix kubernetes-worker charm failures in LXD
- * Fix stop hook failure on kubernetes-worker charm
- * Fix handling of juju kubernetes-worker.restart-needed state
- * Fix nagios checks in charms
-* Users can now specify listen and advertise URLs for etcd in a kubeadm cluster ([#42246](https://github.com/kubernetes/kubernetes/pull/42246), [@jamiehannaford](https://github.com/jamiehannaford))
-* Fixed `kubectl cluster-info dump` to support multi-container pod. ([#44088](https://github.com/kubernetes/kubernetes/pull/44088), [@xingzhou](https://github.com/xingzhou))
-* Prints out status updates when running `kubefed init` ([#41849](https://github.com/kubernetes/kubernetes/pull/41849), [@perotinus](https://github.com/perotinus))
-* CRI: Fix kubelet failing to start when using rkt. ([#44569](https://github.com/kubernetes/kubernetes/pull/44569), [@yujuhong](https://github.com/yujuhong))
-* Remove deprecatedPublicIPs field ([#44519](https://github.com/kubernetes/kubernetes/pull/44519), [@thockin](https://github.com/thockin))
-* Remove deprecated ubuntu kube-up deployment. ([#44344](https://github.com/kubernetes/kubernetes/pull/44344), [@mikedanese](https://github.com/mikedanese))
-* Use OS-specific libs when computing client User-Agent in kubectl, etc. ([#44423](https://github.com/kubernetes/kubernetes/pull/44423), [@monopole](https://github.com/monopole))
-* kube-apiserver now drops unneeded path information if an older version of Windows kubectl sends it. ([#44421](https://github.com/kubernetes/kubernetes/pull/44421), [@mml](https://github.com/mml))
-* Extending the gc admission plugin so that a user who doesn't have delete permission of the *owner* cannot modify blockOwnerDeletion field of existing ownerReferences, or add new ownerReference with blockOwnerDeletion=true ([#43876](https://github.com/kubernetes/kubernetes/pull/43876), [@caesarxuchao](https://github.com/caesarxuchao))
-* kube-apiserver: --service-account-lookup now defaults to true, requiring the Secret API object containing the token to exist in order for a service account token to be valid. This enables service account tokens to be revoked by deleting the Secret object containing the token. ([#44071](https://github.com/kubernetes/kubernetes/pull/44071), [@liggitt](https://github.com/liggitt))
-* CRI: `kubectl logs -f` now stops following when container stops, as it did pre-CRI. ([#44406](https://github.com/kubernetes/kubernetes/pull/44406), [@Random-Liu](https://github.com/Random-Liu))
-* Add completion support for --namespace and --cluster to kubectl ([#44251](https://github.com/kubernetes/kubernetes/pull/44251), [@superbrothers](https://github.com/superbrothers))
-* dnsprovider: avoid panic if route53 fields are nil ([#44380](https://github.com/kubernetes/kubernetes/pull/44380), [@justinsb](https://github.com/justinsb))
-* In 'kubectl describe', find controllers with ControllerRef, instead of showing the original creator. ([#42849](https://github.com/kubernetes/kubernetes/pull/42849), [@janetkuo](https://github.com/janetkuo))
-* Heat cluster operations now support environments that have multiple Swift URLs ([#41561](https://github.com/kubernetes/kubernetes/pull/41561), [@jamiehannaford](https://github.com/jamiehannaford))
-* Adds support for allocation of pod IPs via IP aliases. ([#42147](https://github.com/kubernetes/kubernetes/pull/42147), [@bowei](https://github.com/bowei))
-* alpha volume provisioning is removed and default storage class should be used instead. ([#44090](https://github.com/kubernetes/kubernetes/pull/44090), [@NickrenREN](https://github.com/NickrenREN))
-* validateClusterInfo: use clientcmdapi.NewCluster() ([#44221](https://github.com/kubernetes/kubernetes/pull/44221), [@ncdc](https://github.com/ncdc))
-* Fix corner-case with OnlyLocal Service healthchecks. ([#44313](https://github.com/kubernetes/kubernetes/pull/44313), [@thockin](https://github.com/thockin))
-* Adds annotations to all Federation objects created by kubefed. ([#42683](https://github.com/kubernetes/kubernetes/pull/42683), [@perotinus](https://github.com/perotinus))
-* [Federation][Kubefed] Bug fix to enable disabling federation controllers through override args ([#44209](https://github.com/kubernetes/kubernetes/pull/44209), [@irfanurrehman](https://github.com/irfanurrehman))
-* [Federation] Remove deprecated federation-apiserver-kubeconfig secret ([#44287](https://github.com/kubernetes/kubernetes/pull/44287), [@shashidharatd](https://github.com/shashidharatd))
-* Scheduler can receive its policy configuration from a ConfigMap ([#43892](https://github.com/kubernetes/kubernetes/pull/43892), [@bsalamat](https://github.com/bsalamat))
-* AWS cloud provider: fix support running the master with a different AWS account or even on a different cloud provider than the nodes. ([#44235](https://github.com/kubernetes/kubernetes/pull/44235), [@mrIncompetent](https://github.com/mrIncompetent))
-* add rancher credential provider ([#40160](https://github.com/kubernetes/kubernetes/pull/40160), [@wlan0](https://github.com/wlan0))
-* Support generating Open API extensions for strategic merge patch tags in go struct tags ([#44121](https://github.com/kubernetes/kubernetes/pull/44121), [@mbohlool](https://github.com/mbohlool))
-* Use go1.8.1 for arm and ppc64le ([#44216](https://github.com/kubernetes/kubernetes/pull/44216), [@mkumatag](https://github.com/mkumatag))
-* Aggregated used ports at the NodeInfo level for `PodFitsHostPorts` predicate. ([#42524](https://github.com/kubernetes/kubernetes/pull/42524), [@k82cn](https://github.com/k82cn))
-* Catch error when failed to make directory in NFS volume plugin ([#38801](https://github.com/kubernetes/kubernetes/pull/38801), [@nak3](https://github.com/nak3))
-* Support iSCSI CHAP authentication ([#43396](https://github.com/kubernetes/kubernetes/pull/43396), [@rootfs](https://github.com/rootfs))
-* Support context completion for kubectl config use-context ([#42336](https://github.com/kubernetes/kubernetes/pull/42336), [@superbrothers](https://github.com/superbrothers))
-* print warning when delete current context ([#42538](https://github.com/kubernetes/kubernetes/pull/42538), [@adohe](https://github.com/adohe))
-* Add node e2e tests for hostPid ([#44119](https://github.com/kubernetes/kubernetes/pull/44119), [@feiskyer](https://github.com/feiskyer))
-* kubeadm: Make `kubeadm reset` tolerant of a disabled docker service. ([#43951](https://github.com/kubernetes/kubernetes/pull/43951), [@luxas](https://github.com/luxas))
-* kubelet: make dockershim.sock configurable ([#43914](https://github.com/kubernetes/kubernetes/pull/43914), [@ncdc](https://github.com/ncdc))
-* Fix [broken service accounts when using dedicated service account key](https://github.com/kubernetes/kubernetes/issues/44285). ([#44169](https://github.com/kubernetes/kubernetes/pull/44169), [@mikedanese](https://github.com/mikedanese))
-* Fix incorrect conflict errors applying strategic merge patches to resources. ([#43871](https://github.com/kubernetes/kubernetes/pull/43871), [@liggitt](https://github.com/liggitt))
-* Fix [transition between NotReady and Unreachable taints](https://github.com/kubernetes/kubernetes/issues/43444). ([#44042](https://github.com/kubernetes/kubernetes/pull/44042), [@gmarek](https://github.com/gmarek))
-* leader election lock based on scheduler name ([#42961](https://github.com/kubernetes/kubernetes/pull/42961), [@wanghaoran1988](https://github.com/wanghaoran1988))
-* [Federation] Remove FEDERATIONS_DOMAIN_MAP references ([#43137](https://github.com/kubernetes/kubernetes/pull/43137), [@shashidharatd](https://github.com/shashidharatd))
-* Fix for [federation failing to propagate cascading deletion](https://github.com/kubernetes/kubernetes/issues/44304). ([#44108](https://github.com/kubernetes/kubernetes/pull/44108), [@csbell](https://github.com/csbell))
-* Fix bug with service nodeports that have no backends not being rejected, when they should be. This is not a regression vs v1.5 - it's a fix that didn't quite fix hard enough. ([#43972](https://github.com/kubernetes/kubernetes/pull/43972), [@thockin](https://github.com/thockin))
-* Fix for [failure to delete federation controllers with finalizers](https://github.com/kubernetes/kubernetes/issues/43828). ([#44084](https://github.com/kubernetes/kubernetes/pull/44084), [@nikhiljindal](https://github.com/nikhiljindal))
-* Fix container hostPid settings. ([#44097](https://github.com/kubernetes/kubernetes/pull/44097), [@feiskyer](https://github.com/feiskyer))
-* Fixed an issue mounting the wrong secret into pods as a service account token. ([#44102](https://github.com/kubernetes/kubernetes/pull/44102), [@ncdc](https://github.com/ncdc))
-
-
-
-# v1.7.0-alpha.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/master/examples)
-
-## Downloads for v1.7.0-alpha.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes.tar.gz) | `a8430f678ae5abb16909183bb6472d49084b26c2990854dac73f55be69941435`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-src.tar.gz) | `09792d0b31c3c0f085f54a62c0d151029026cee3c57ac8c3456751ef2243967f`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-client-darwin-386.tar.gz) | `115543a5ec55f9039136e0ecfd90d6510b146075d13987fad9c03db3761fbac6`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-client-darwin-amd64.tar.gz) | `91b7cc89386041125af2ecafd3c6e73197f0b7af3ec817d9aed4822e1543eee9`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-client-linux-386.tar.gz) | `7a77bfec2873907ad1f955e33414a9afa029d37d90849bf652e7bab1f2c668ed`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-client-linux-amd64.tar.gz) | `674d1a839869ac308f3a273ab41be42dab8b52e96526effdbd268255ab6ad4c1`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-client-linux-arm64.tar.gz) | `4b0164b0474987df5829dcd88c0cdf2d16dbcba30a03cd0ad5ca860d6b4a2f3f`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-client-linux-arm.tar.gz) | `cb5a941c3e61465eab544c7b23acd4be6969d74ac23bd9370aa3f9dfc24f2b42`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-client-linux-ppc64le.tar.gz) | `d583aff4c86de142b5e6e23cd5c8eb9617fea6574acede9fa2420169405429c6`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-client-linux-s390x.tar.gz) | `ab14c4806b4e9c7a41993924467969886e1288216d80d2d077a2c35f26fc8cc5`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-client-windows-386.tar.gz) | `0af3f9d1193d9ea49bb4e1cb46142b846b70ceb49ab47ad6fc2497a0dc88395d`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-client-windows-amd64.tar.gz) | `12a9dffda6ba8916149b681f49af506790be97275fe6fc16552ac765aef20a99`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-server-linux-amd64.tar.gz) | `d6b4c285a89172692e4ba82b777cc9df5b2f5061caa0a9cef6add246a848eeb9`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-server-linux-arm64.tar.gz) | `e73fb04d4ff692f19de09cfc3cfa17014e23df4150b26c20c3329f688c164358`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-server-linux-arm.tar.gz) | `98763b72ba6652abfd5b671981506f8c35ab522d34af34636e5095413769eeb5`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-server-linux-ppc64le.tar.gz) | `b39dbb0dc96dcdf1ec4cbd5788e00e46c0d11efb42c6dbdec64758aa8aa9d8e5`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.7.0-alpha.1/kubernetes-server-linux-s390x.tar.gz) | `c0171e2f22c4e51f25185e71387301ad2c0ade90139fe96dec1c2f999de71716`
-
-## Changelog since v1.6.0
-
-### Other notable changes
-
-* Juju: Enable GPU mode if GPU hardware detected ([#43467](https://github.com/kubernetes/kubernetes/pull/43467), [@tvansteenburgh](https://github.com/tvansteenburgh))
-* Check the error before parsing the apiversion ([#44047](https://github.com/kubernetes/kubernetes/pull/44047), [@yujuhong](https://github.com/yujuhong))
-* get-kube-local.sh checks pods with option "--namespace=kube-system" ([#42518](https://github.com/kubernetes/kubernetes/pull/42518), [@mtanino](https://github.com/mtanino))
-* Using http2 in kubeapi-load-balancer to fix kubectl exec uses ([#43625](https://github.com/kubernetes/kubernetes/pull/43625), [@mbruzek](https://github.com/mbruzek))
-* Support status.hostIP in downward API ([#42717](https://github.com/kubernetes/kubernetes/pull/42717), [@andrewsykim](https://github.com/andrewsykim))
-* AWS cloud provider: allow to set KubernetesClusterID or KubernetesClusterTag in combination with VPC. ([#42512](https://github.com/kubernetes/kubernetes/pull/42512), [@scheeles](https://github.com/scheeles))
-* changed kubelet default image-gc-high-threshold to 85% to resolve a conflict with default settings in docker that prevented image garbage collection from resolving low disk space situations when using devicemapper storage. ([#40432](https://github.com/kubernetes/kubernetes/pull/40432), [@sjenning](https://github.com/sjenning))
-* When creating a container using envFrom, ([#42083](https://github.com/kubernetes/kubernetes/pull/42083), [@fraenkel](https://github.com/fraenkel))
- * 1. validate the name of the ConfigMap in a ConfigMapRef
- * 2. validate the name of the Secret in a SecretRef
-* RBAC role and rolebinding auto-reconciliation is now performed only when the RBAC authorization mode is enabled. ([#43813](https://github.com/kubernetes/kubernetes/pull/43813), [@liggitt](https://github.com/liggitt))
-* Permission to use a PodSecurityPolicy can now be granted within a single namespace by allowing the `use` verb on the `podsecuritypolicies` resource within the namespace. ([#42360](https://github.com/kubernetes/kubernetes/pull/42360), [@liggitt](https://github.com/liggitt))
-* Enable audit log in local cluster ([#42379](https://github.com/kubernetes/kubernetes/pull/42379), [@xilabao](https://github.com/xilabao))
-* Fix a deadlock in kubeadm master initialization. ([#43835](https://github.com/kubernetes/kubernetes/pull/43835), [@mikedanese](https://github.com/mikedanese))
-* Implement API usage metrics for gce storage ([#40338](https://github.com/kubernetes/kubernetes/pull/40338), [@gnufied](https://github.com/gnufied))
-* kubeadm: clean up exited containers and network checkpoints ([#43836](https://github.com/kubernetes/kubernetes/pull/43836), [@yujuhong](https://github.com/yujuhong))
-* ActiveDeadlineSeconds is validated in workload controllers now, make sure it's not set anywhere (it shouldn't be set by default and having it set means your controller will restart the Pods at some point) ([#38741](https://github.com/kubernetes/kubernetes/pull/38741), [@sandflee](https://github.com/sandflee))
-* azure: all clients poll duration is now 5 seconds ([#43699](https://github.com/kubernetes/kubernetes/pull/43699), [@colemickens](https://github.com/colemickens))
-* addressing issue [#39427](https://github.com/kubernetes/kubernetes/pull/39427) adding a flag --output to 'kubectl version' ([#39858](https://github.com/kubernetes/kubernetes/pull/39858), [@alejandroEsc](https://github.com/alejandroEsc))
-* Support secure etcd cluster for centos provider. ([#42994](https://github.com/kubernetes/kubernetes/pull/42994), [@Shawyeok](https://github.com/Shawyeok))
-* Use Cluster Autoscaler 0.5.1, which fixes an issue in Cluster Autoscaler 0.5 where the cluster may be scaled up unnecessarily. Also the status of Cluster Autoscaler is now exposed in kube-system/cluster-autoscaler-status config map. ([#43745](https://github.com/kubernetes/kubernetes/pull/43745), [@mwielgus](https://github.com/mwielgus))
-* Use ProviderID to address nodes in the cloudprovider ([#42604](https://github.com/kubernetes/kubernetes/pull/42604), [@wlan0](https://github.com/wlan0))
-* Openstack cinder v1/v2/auto API support ([#40423](https://github.com/kubernetes/kubernetes/pull/40423), [@mkutsevol](https://github.com/mkutsevol))
-* API resource discovery now includes the `singularName` used to refer to the resource. ([#43312](https://github.com/kubernetes/kubernetes/pull/43312), [@deads2k](https://github.com/deads2k))
-* Add the ability to lock on ConfigMaps to support HA for self hosted components ([#42666](https://github.com/kubernetes/kubernetes/pull/42666), [@timothysc](https://github.com/timothysc))
-* OpenStack clusters can now specify whether worker nodes are assigned a floating IP ([#42638](https://github.com/kubernetes/kubernetes/pull/42638), [@jamiehannaford](https://github.com/jamiehannaford))
-* Add Host field to TCPSocketAction ([#42902](https://github.com/kubernetes/kubernetes/pull/42902), [@louyihua](https://github.com/louyihua))
-* Support StorageClass in Azure file volume ([#42170](https://github.com/kubernetes/kubernetes/pull/42170), [@rootfs](https://github.com/rootfs))
-* Be able to specify the timeout to wait for pod for kubectl logs/attach ([#41813](https://github.com/kubernetes/kubernetes/pull/41813), [@shiywang](https://github.com/shiywang))
-* Add support for bring-your-own ip address for Services on Azure ([#42034](https://github.com/kubernetes/kubernetes/pull/42034), [@brendandburns](https://github.com/brendandburns))
-* kubectl create configmap has a new option --from-env-file that populates a configmap from file which follows a key=val format for each line. ([#38882](https://github.com/kubernetes/kubernetes/pull/38882), [@fraenkel](https://github.com/fraenkel))
-* kubectl create secret has a new option --from-env-file that populates a secret from file which follows a key=val format for each line.
-* update the signing key for percona debian and ubuntu packages ([#41186](https://github.com/kubernetes/kubernetes/pull/41186), [@dixudx](https://github.com/dixudx))
-* fc: Drop multipath.conf snippet ([#36698](https://github.com/kubernetes/kubernetes/pull/36698), [@fabiand](https://github.com/fabiand))
-
-Please see the [Releases Page](https://github.com/kubernetes/kubernetes/releases) for older releases.
-
-Release notes of older releases can be found in:
-- [CHANGELOG-1.2.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.2.md)
-- [CHANGELOG-1.3.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.3.md)
-- [CHANGELOG-1.4.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.4.md)
-- [CHANGELOG-1.5.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.5.md)
-- [CHANGELOG-1.6.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.6.md)
diff --git a/vendor/k8s.io/kubernetes/CHANGELOG-1.8.md b/vendor/k8s.io/kubernetes/CHANGELOG-1.8.md
deleted file mode 100644
index 2e0fcfefab51..000000000000
--- a/vendor/k8s.io/kubernetes/CHANGELOG-1.8.md
+++ /dev/null
@@ -1,2275 +0,0 @@
-
-- [v1.8.4](#v184)
- - [Downloads for v1.8.4](#downloads-for-v184)
- - [Client Binaries](#client-binaries)
- - [Server Binaries](#server-binaries)
- - [Node Binaries](#node-binaries)
- - [Changelog since v1.8.3](#changelog-since-v183)
- - [Other notable changes](#other-notable-changes)
-- [v1.8.3](#v183)
- - [Downloads for v1.8.3](#downloads-for-v183)
- - [Client Binaries](#client-binaries-1)
- - [Server Binaries](#server-binaries-1)
- - [Node Binaries](#node-binaries-1)
- - [Changelog since v1.8.2](#changelog-since-v182)
- - [Other notable changes](#other-notable-changes-1)
-- [v1.8.2](#v182)
- - [Downloads for v1.8.2](#downloads-for-v182)
- - [Client Binaries](#client-binaries-2)
- - [Server Binaries](#server-binaries-2)
- - [Node Binaries](#node-binaries-2)
- - [Changelog since v1.8.1](#changelog-since-v181)
- - [Other notable changes](#other-notable-changes-2)
-- [v1.8.1](#v181)
- - [Downloads for v1.8.1](#downloads-for-v181)
- - [Client Binaries](#client-binaries-3)
- - [Server Binaries](#server-binaries-3)
- - [Node Binaries](#node-binaries-3)
- - [Changelog since v1.8.0](#changelog-since-v180)
- - [Action Required](#action-required)
- - [Other notable changes](#other-notable-changes-3)
-- [v1.8.0](#v180)
- - [Downloads for v1.8.0](#downloads-for-v180)
- - [Client Binaries](#client-binaries-4)
- - [Server Binaries](#server-binaries-4)
- - [Node Binaries](#node-binaries-4)
- - [Introduction to v1.8.0](#introduction-to-v180)
- - [Major Themes](#major-themes)
- - [SIG API Machinery](#sig-api-machinery)
- - [SIG Apps](#sig-apps)
- - [SIG Auth](#sig-auth)
- - [SIG Autoscaling](#sig-autoscaling)
- - [SIG Cluster Lifecycle](#sig-cluster-lifecycle)
- - [SIG Instrumentation](#sig-instrumentation)
- - [SIG Multi-cluster (formerly known as SIG Federation)](#sig-multi-cluster-formerly-known-as-sig-federation)
- - [SIG Node](#sig-node)
- - [SIG Network](#sig-network)
- - [SIG Scalability](#sig-scalability)
- - [SIG Scheduling](#sig-scheduling)
- - [SIG Storage](#sig-storage)
- - [Before Upgrading](#before-upgrading)
- - [Known Issues](#known-issues)
- - [Deprecations](#deprecations)
- - [Apps](#apps)
- - [Auth](#auth)
- - [Autoscaling](#autoscaling)
- - [Cluster Lifecycle](#cluster-lifecycle)
- - [OpenStack](#openstack)
- - [Scheduling](#scheduling)
- - [Notable Features](#notable-features)
- - [Workloads API (apps/v1beta2)](#workloads-api-appsv1beta2)
- - [API Object Additions and Migrations](#api-object-additions-and-migrations)
- - [Behavioral Changes](#behavioral-changes)
- - [Defaults](#defaults)
- - [Workloads API (batch)](#workloads-api-batch)
- - [CLI Changes](#cli-changes)
- - [Scheduling](#scheduling-1)
- - [Storage](#storage)
- - [Cluster Federation](#cluster-federation)
- - [[alpha] Federated Jobs](#alpha-federated-jobs)
- - [[alpha] Federated Horizontal Pod Autoscaling (HPA)](#alpha-federated-horizontal-pod-autoscaling-hpa)
- - [Node Components](#node-components)
- - [Autoscaling and Metrics](#autoscaling-and-metrics)
- - [Cluster Autoscaler](#cluster-autoscaler)
- - [Container Runtime Interface (CRI)](#container-runtime-interface-cri)
- - [kubelet](#kubelet)
- - [Auth](#auth-1)
- - [Cluster Lifecycle](#cluster-lifecycle-1)
- - [kubeadm](#kubeadm)
- - [kops](#kops)
- - [Cluster Discovery/Bootstrap](#cluster-discoverybootstrap)
- - [Multi-platform](#multi-platform)
- - [Cloud Providers](#cloud-providers)
- - [Network](#network)
- - [network-policy](#network-policy)
- - [kube-proxy ipvs mode](#kube-proxy-ipvs-mode)
- - [API Machinery](#api-machinery)
- - [kube-apiserver](#kube-apiserver)
- - [Dynamic Admission Control](#dynamic-admission-control)
- - [Custom Resource Definitions (CRDs)](#custom-resource-definitions-crds)
- - [Garbage Collector](#garbage-collector)
- - [Monitoring/Prometheus](#monitoringprometheus)
- - [Go Client](#go-client)
- - [External Dependencies](#external-dependencies)
-- [v1.8.0-rc.1](#v180-rc1)
- - [Downloads for v1.8.0-rc.1](#downloads-for-v180-rc1)
- - [Client Binaries](#client-binaries-5)
- - [Server Binaries](#server-binaries-5)
- - [Node Binaries](#node-binaries-5)
- - [Changelog since v1.8.0-beta.1](#changelog-since-v180-beta1)
- - [Action Required](#action-required-1)
- - [Other notable changes](#other-notable-changes-4)
-- [v1.8.0-beta.1](#v180-beta1)
- - [Downloads for v1.8.0-beta.1](#downloads-for-v180-beta1)
- - [Client Binaries](#client-binaries-6)
- - [Server Binaries](#server-binaries-6)
- - [Node Binaries](#node-binaries-6)
- - [Changelog since v1.8.0-alpha.3](#changelog-since-v180-alpha3)
- - [Action Required](#action-required-2)
- - [Other notable changes](#other-notable-changes-5)
-- [v1.8.0-alpha.3](#v180-alpha3)
- - [Downloads for v1.8.0-alpha.3](#downloads-for-v180-alpha3)
- - [Client Binaries](#client-binaries-7)
- - [Server Binaries](#server-binaries-7)
- - [Node Binaries](#node-binaries-7)
- - [Changelog since v1.8.0-alpha.2](#changelog-since-v180-alpha2)
- - [Action Required](#action-required-3)
- - [Other notable changes](#other-notable-changes-6)
-- [v1.8.0-alpha.2](#v180-alpha2)
- - [Downloads for v1.8.0-alpha.2](#downloads-for-v180-alpha2)
- - [Client Binaries](#client-binaries-8)
- - [Server Binaries](#server-binaries-8)
- - [Node Binaries](#node-binaries-8)
- - [Changelog since v1.7.0](#changelog-since-v170)
- - [Action Required](#action-required-4)
- - [Other notable changes](#other-notable-changes-7)
-- [v1.8.0-alpha.1](#v180-alpha1)
- - [Downloads for v1.8.0-alpha.1](#downloads-for-v180-alpha1)
- - [Client Binaries](#client-binaries-9)
- - [Server Binaries](#server-binaries-9)
- - [Node Binaries](#node-binaries-9)
- - [Changelog since v1.7.0-alpha.4](#changelog-since-v170-alpha4)
- - [Action Required](#action-required-5)
- - [Other notable changes](#other-notable-changes-8)
-
-
-
-
-
-# v1.8.4
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.8/examples)
-
-## Downloads for v1.8.4
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes.tar.gz) | `7f87cdafaf5959dfd60e4a89203a7e85cc139262b87c491e3ef46a1313fb9379`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-src.tar.gz) | `084a6d95c17c0c06123c146f04501eb8cbf23bfcbcfa23d511a0a2d2018c4a93`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-client-darwin-386.tar.gz) | `86b1ac96cd3bbaaa25806f8de34c26a9d6c9ba1daf70baa9df9d488db0da7054`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-client-darwin-amd64.tar.gz) | `f541a9b48ef115e2e4923f906daa9bc112f0b308d8d5559135e507d04fdc0424`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-client-linux-386.tar.gz) | `9d3ea12e58e2e6eef35641856a5fa116bd7301570868252c5525ff8a0719b5bc`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-client-linux-amd64.tar.gz) | `4d3c2a9e0d837e3607580d95bbc473ffb496fc47ba0ce7721e9180a9020f1f39`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-client-linux-arm64.tar.gz) | `02c95d433cc5ce4f2d1e162b13f74f82888cd6dbd91c031198fbb7ab55131093`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-client-linux-arm.tar.gz) | `8f3d6bf3a3e05a65c93e071ce6b5653be534aa358c01cc2de704db9bc45b040e`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-client-linux-ppc64le.tar.gz) | `775bcc7d66364f43794be96ab6b36992904f7ed0d56bb8e309216be23ff22862`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-client-linux-s390x.tar.gz) | `162584246b70c2a3c40571080c1cf0c73efbe6101d7c7f27059115336b901cb8`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-client-windows-386.tar.gz) | `fd88cc783cd73972b9175bebdb719dff697b5ff200ea6ef61152f3ce38b07f6f`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-client-windows-amd64.tar.gz) | `42ec653406de971f7a7e5b16c5ef0d6ebf3d17782d40b2a88a13ef128fe57d62`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-server-linux-amd64.tar.gz) | `08d64a59a5fe620488f05214844a910144d7fe16a783d351704c71f3843124dc`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-server-linux-arm64.tar.gz) | `75ef62ecd203088a0f5bb5f48d782fd91af4a7dc3348b265ddd13c5bd15d0d01`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-server-linux-arm.tar.gz) | `276120cdc40e7925c4c09e26a546d954a43d0599b573e26b76f62f816b5b256d`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-server-linux-ppc64le.tar.gz) | `2c9a213de651be74452116778dc47800f036d03cdbdf65a424a3fd566906933d`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-server-linux-s390x.tar.gz) | `7c073fe63198b793b7a63ebd5f8adb69b780cae128df70b2c964f2493487021f`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-node-linux-amd64.tar.gz) | `108e9cb2353aa64bbf5e11b938ee65a79abd879136b1f4ab123c897463d388fb`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-node-linux-arm64.tar.gz) | `b59029a6abbfb628bb14d1d2b633307ad1f22c6b758ffd11d7ba5b1a82e63f94`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-node-linux-arm.tar.gz) | `f31b08171d6a07ae4fca6b0153ce8da68df766f2334dc75c8b3206840c22424e`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-node-linux-ppc64le.tar.gz) | `0065e1b5cf385097b8da29cc2c91c5555e5f3cd8beed1874f1753b9b5c10e363`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-node-linux-s390x.tar.gz) | `dd08355d5350ef7f881f109bbe627071b494f3d86633a29ac2e4a834cd8d70b3`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.4/kubernetes-node-windows-amd64.tar.gz) | `1b11e3fbc0af816510660a624f38a68c8c1008c1d9045a4bad373be8af022f7a`
-
-## Changelog since v1.8.3
-
-### Other notable changes
-
-* Cluster Autoscaler 1.0.3 ([#55947](https://github.com/kubernetes/kubernetes/pull/55947), [@aleksandra-malinowska](https://github.com/aleksandra-malinowska))
-* - Add PodSecurityPolicies for cluster addons ([#55509](https://github.com/kubernetes/kubernetes/pull/55509), [@tallclair](https://github.com/tallclair))
- * - Remove SSL cert HostPath volumes from heapster addons
-* Fix session affinity issue with external load balancer traffic when ExternalTrafficPolicy=Local. ([#55519](https://github.com/kubernetes/kubernetes/pull/55519), [@MrHohn](https://github.com/MrHohn))
-* Addon manager supports HA masters. ([#55782](https://github.com/kubernetes/kubernetes/pull/55782), [@x13n](https://github.com/x13n))
-* ScaleIO persistent volumes now support referencing a secret in a namespace other than the bound persistent volume claim's namespace; this is controlled during provisioning with the `secretNamespace` storage class parameter; StoragePool and ProtectionDomain attributes no longer defaults to the value `default` ([#54013](https://github.com/kubernetes/kubernetes/pull/54013), [@vladimirvivien](https://github.com/vladimirvivien))
-* Allow HPA to read custom metrics. ([#54854](https://github.com/kubernetes/kubernetes/pull/54854), [@kawych](https://github.com/kawych))
-* Add masquerading rules by default to GCE/GKE ([#55178](https://github.com/kubernetes/kubernetes/pull/55178), [@dnardo](https://github.com/dnardo))
-* kubeadm now produces error during preflight checks if swap is enabled. Users, who can setup kubelet to run in unsupported environment with enabled swap, will be able to skip that preflight check. ([#55399](https://github.com/kubernetes/kubernetes/pull/55399), [@kad](https://github.com/kad))
-* GCE: provide an option to disable docker's live-restore on COS/ubuntu ([#55260](https://github.com/kubernetes/kubernetes/pull/55260), [@yujuhong](https://github.com/yujuhong))
-* Fix hyperkube kubelet --experimental-dockershim ([#55250](https://github.com/kubernetes/kubernetes/pull/55250), [@ivan4th](https://github.com/ivan4th))
-* ScaleIO driver completely removes dependency on drv_cfg binary so a Kubernetes cluster can easily run a containerized kubelet. ([#54956](https://github.com/kubernetes/kubernetes/pull/54956), [@vladimirvivien](https://github.com/vladimirvivien))
-
-
-
-# v1.8.3
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.8/examples)
-
-## Downloads for v1.8.3
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes.tar.gz) | `86a565d47afb2b4440a3d706e24b9590225e576f1aee1d0117f6a82c13a7ca1a`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-src.tar.gz) | `3fa0d5f87f92004297f17ed9791a9c309c6ed6958bbd4df6e3de5da640d35c25`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-client-darwin-386.tar.gz) | `e85d9804e14c0acc3f9e71a03e0ea10fc4848c94bb0fed56776d8137b71f70d7`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-client-darwin-amd64.tar.gz) | `2095e610c6b838a51ef054175794a9fe2436b02c1c4f36dfe4ac7b6ea77a59e5`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-client-linux-386.tar.gz) | `970764b73734809daf11337ced1f71708a8be15573fa6c68dcf2a12b70820640`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-client-linux-amd64.tar.gz) | `8796ce36f2f59e34e9bd7e788bc23076ccc8371a79535443b6105a9aae544c2a`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-client-linux-arm64.tar.gz) | `94a5ce6fea8ce9d3e3b726f79820d3c85d87322687ff9b97f5bbc0d28f41816b`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-client-linux-arm.tar.gz) | `6ff7bdabf7a5ff01d9f0d03d991c9dcd11503cf5c7b1ead5a9103ebf6f6dc2a1`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-client-linux-ppc64le.tar.gz) | `000b8c1138e3074d6880bf3eb0b2ed5c6db8c6fba4792dba720c489cf2f82b58`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-client-linux-s390x.tar.gz) | `c77de362e41606c2fa7757cdf47c95e0dce6dc448017a8b9550f7bab9eb52cca`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-client-windows-386.tar.gz) | `3a7561fb0e90add10b286e738ec369987a1bc4750ccf05d00dc0e4fd735b86e1`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-client-windows-amd64.tar.gz) | `0e1bc781f607cf580696b929a9e40805701ebf25f8b166ec7687de46eb417011`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-server-linux-amd64.tar.gz) | `557c231a63f5975d08565dd690381bd63d9db14528da07c7e86305a82fbd9c8b`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-server-linux-arm64.tar.gz) | `b1c2cbe6a308df51815c98f93a1ec5e8e5be390ae1e4c31ab7c03c581e8442f2`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-server-linux-arm.tar.gz) | `db5cb69166b482bc705f56a4b50fbe1c553dcbcf83c569bef2828ec70c94fa36`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-server-linux-ppc64le.tar.gz) | `aca313f74aa682e9ced1b3f238fd6b03795d6a2f12a6604481fafe9756f88c82`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-server-linux-s390x.tar.gz) | `42e7cc141555ffa7a7653de5065715164817c7b096d13b58b7770a6b66283b39`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-node-linux-amd64.tar.gz) | `6035027a39fd8cac6de9f33efcb929300798a5601b0c2ca0569baaf18ce12559`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-node-linux-arm64.tar.gz) | `495ebf4885af7896cf28fbd6988bd954d576bee99ba815e6e741a0c407bae92a`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-node-linux-arm.tar.gz) | `d1c0595f086a1a2c9c73ee556750db3e7485c3e75f9496214313f935ad6d0350`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-node-linux-ppc64le.tar.gz) | `2b036ca22970d9dcb6b80da45f3ecaeb6b1e78b4474718a8581d2f987779c3fa`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-node-linux-s390x.tar.gz) | `f936cbfe0f2888a25620c8fe21b297459dd235044f1587f02456921be458d5ff`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.3/kubernetes-node-windows-amd64.tar.gz) | `b913fb8267c545db77c0c43234c773043031c7564cc745e61842f58277041c58`
-
-## Changelog since v1.8.2
-
-### Other notable changes
-
-* Fixed 'Schedulercache is corrupted' error in kube-scheduler ([#55262](https://github.com/kubernetes/kubernetes/pull/55262), [@liggitt](https://github.com/liggitt))
-* Add support for PodSecurityPolicy on GCE: `ENABLE_POD_SECURITY_POLICY=true` enables the admission controller, and installs policies for default addons. ([#52367](https://github.com/kubernetes/kubernetes/pull/52367), [@tallclair](https://github.com/tallclair))
-* Azure cloudprovider: Fix controller manager crash issue on a manually created k8s cluster. ([#53694](https://github.com/kubernetes/kubernetes/pull/53694), [@andyzhangx](https://github.com/andyzhangx))
-* Cluster Autoscaler 1.0.2 ([#55161](https://github.com/kubernetes/kubernetes/pull/55161), [@mwielgus](https://github.com/mwielgus))
-* - fluentd-gcp runs with a dedicated fluentd-gcp service account ([#54175](https://github.com/kubernetes/kubernetes/pull/54175), [@tallclair](https://github.com/tallclair))
- * - Stop mounting the host certificates into fluentd's prometheus-to-sd container
-* Fix a bug where pod address is not removed from endpoints object while pod is in graceful termination. ([#54828](https://github.com/kubernetes/kubernetes/pull/54828), [@freehan](https://github.com/freehan))
-* fix warning messages due to GetMountRefs func not implemented in windows ([#52401](https://github.com/kubernetes/kubernetes/pull/52401), [@andyzhangx](https://github.com/andyzhangx))
-* allow windows mount path ([#51240](https://github.com/kubernetes/kubernetes/pull/51240), [@andyzhangx](https://github.com/andyzhangx))
-* Reduce log noise produced by prometheus-to-sd, by bumping it to version 0.2.2. ([#54635](https://github.com/kubernetes/kubernetes/pull/54635), [@loburm](https://github.com/loburm))
-* Fix clustered datastore name to be absolute. ([#54438](https://github.com/kubernetes/kubernetes/pull/54438), [@pshahzeb](https://github.com/pshahzeb))
-* Fix `kubeadm upgrade plan` for offline operation: ignore errors when trying to fetch latest versions from dl.k8s.io ([#54016](https://github.com/kubernetes/kubernetes/pull/54016), [@praseodym](https://github.com/praseodym))
-* Add openssh-client back into the hyperkube image. This allows the gitRepo volume plugin to work properly. ([#54250](https://github.com/kubernetes/kubernetes/pull/54250), [@ixdy](https://github.com/ixdy))
-* Fix an issue where pods were briefly transitioned to a "Pending" state during the deletion process. ([#54593](https://github.com/kubernetes/kubernetes/pull/54593), [@dashpole](https://github.com/dashpole))
-* Add a label which prevents a node from being added to a cloud load balancer ([#53146](https://github.com/kubernetes/kubernetes/pull/53146), [@brendandburns](https://github.com/brendandburns))
-* Add a new feature gate for enabling an alpha annotation which, if present, excludes the annotated node from being added to a service load balancers. ([#54644](https://github.com/kubernetes/kubernetes/pull/54644), [@brendandburns](https://github.com/brendandburns))
-* Support German cloud for azure disk mount feature ([#50673](https://github.com/kubernetes/kubernetes/pull/50673), [@clement-buchart](https://github.com/clement-buchart))
-* Fix overlay2 container disk metrics for Docker and CRI-O ([#54827](https://github.com/kubernetes/kubernetes/pull/54827), [@dashpole](https://github.com/dashpole))
-* API machinery's httpstream/spdy calls now support CIDR notation for NO_PROXY ([#54413](https://github.com/kubernetes/kubernetes/pull/54413), [@kad](https://github.com/kad))
-* fix a bug where disk pressure could trigger prematurely when using overlay2 ([#53684](https://github.com/kubernetes/kubernetes/pull/53684), [@dashpole](https://github.com/dashpole))
-* PodSecurityPolicy: when multiple policies allow a submitted pod, priority is given to ones which do not require any fields in the pod spec to be defaulted. If the pod must be defaulted, the first policy (ordered by name) that allows the pod is used. ([#52849](https://github.com/kubernetes/kubernetes/pull/52849), [@liggitt](https://github.com/liggitt))
-* Fixes discovery information for scale subresources in the apps API group ([#54683](https://github.com/kubernetes/kubernetes/pull/54683), [@liggitt](https://github.com/liggitt))
-* BugFix: Exited containers are not Garbage Collected by the kubelet while the pod is running ([#53167](https://github.com/kubernetes/kubernetes/pull/53167), [@dashpole](https://github.com/dashpole))
-* fix azure pv crash due to volumeSource.ReadOnly value nil ([#54607](https://github.com/kubernetes/kubernetes/pull/54607), [@andyzhangx](https://github.com/andyzhangx))
-* kubeadm init: fix a bug that prevented the --token-ttl flag and tokenTTL configuration value from working as expected for infinite (0) values. ([#54640](https://github.com/kubernetes/kubernetes/pull/54640), [@mattmoyer](https://github.com/mattmoyer))
-* [fluentd-gcp addon] Fluentd now runs in its own network, not in the host one. ([#54395](https://github.com/kubernetes/kubernetes/pull/54395), [@crassirostris](https://github.com/crassirostris))
-* fix azure disk mount failure on coreos and some other distros ([#54334](https://github.com/kubernetes/kubernetes/pull/54334), [@andyzhangx](https://github.com/andyzhangx))
-* Fix for service controller so that it won't retry on doNotRetry service update failure. ([#54184](https://github.com/kubernetes/kubernetes/pull/54184), [@MrHohn](https://github.com/MrHohn))
-* BulkVerifyVolumes() implementation for vSphere ([#52131](https://github.com/kubernetes/kubernetes/pull/52131), [@BaluDontu](https://github.com/BaluDontu))
-* Added option lb-provider to OpenStack cloud provider config ([#54176](https://github.com/kubernetes/kubernetes/pull/54176), [@gonzolino](https://github.com/gonzolino))
-
-
-
-# v1.8.2
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.8/examples)
-
-## Downloads for v1.8.2
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes.tar.gz) | `06a800c414e776640a7861baa4f0b6edbd898c13ad3ebcd33860fe5d949bbdee`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-src.tar.gz) | `fbfb65a4eb1ddff32e302a0821204fa780ebb5b27298e31699c43c19da48191e`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-client-darwin-386.tar.gz) | `3eb81f1178ff73ca683738606acea1d9537a33c6e3d15571795a24af6c53dbd7`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-client-darwin-amd64.tar.gz) | `15da279f018a73f93b857639931c4ba8a714c86e5c5738c33840c47df44ac2a4`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-client-linux-386.tar.gz) | `bd9f144e6ddfc715fa77d9cb0310763e49f8121e894ed33714658fb2d6eb2675`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-client-linux-amd64.tar.gz) | `7c20d4a3859c07aadf9a1676876bafdf56187478a69d3bfca5277fb275febb96`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-client-linux-arm64.tar.gz) | `395c3fb5992509191cacbaf6e7ed4fd0fbee5c0b9c890f496879784454f88aa3`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-client-linux-arm.tar.gz) | `a1cff2f8ab5f77f000e20f87b00a3723a8323fec82926afcc984722ab3f8d714`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-client-linux-ppc64le.tar.gz) | `832a1e399802bfd8871cd911f17dbb6b2264680e9477c2944d442a3f9e5fa6f2`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-client-linux-s390x.tar.gz) | `6afc2c4a331ee70e095a6d1e1f11bf69923afb1830840d110459e32b849b1b6c`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-client-windows-386.tar.gz) | `ecaadb5a4c08357685dbaee288d1220bd60ff0f86281ec88a5467da6eebf213b`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-client-windows-amd64.tar.gz) | `b8ff337615f740b1501cf7284d7f0a51a82880dcf23fff2464f8d37045c27f3f`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-server-linux-amd64.tar.gz) | `8ccd4912473e0d334694434936a5ca9547caddaa39d771a1fb94620c5d6002d4`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-server-linux-arm64.tar.gz) | `39b3c61927c905f142d74fe69391156e6bf61cc5e7a798cdf2c295a76e72161d`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-server-linux-arm.tar.gz) | `fc6b01b233f8d0c61dd485d8d571c9a2e1a5b085f0d0db734a84c42b71416537`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-server-linux-ppc64le.tar.gz) | `6f6d8dcef0334736021d9f6cc2bbfdb78500483f8961e7ff14b09f1c67d37056`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-server-linux-s390x.tar.gz) | `6f1b6b5fb818fdb787cdf65ff3da81235b5b4db5b4a9b5579920d11dc8a3fa73`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-node-linux-amd64.tar.gz) | `93c6b5d2a5e4aaf8776f56e5b8f40038c76d3d03709124fb8900f83acb49c782`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-node-linux-arm64.tar.gz) | `ab4535e19825e0e9b76987dbb11d9fd746281e45a90f90b453dbc7d6fecb2c69`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-node-linux-arm.tar.gz) | `96acd6ec41d4a3ec7ea6f95acecf116755340915e3d261de760d9ed84708e3f0`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-node-linux-ppc64le.tar.gz) | `4256a8c315de083435fcdfc8ee2ae370bd603fa976218edadbf7bfe11adcf223`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-node-linux-s390x.tar.gz) | `30f2254bf442fc36fc23bd962930eb48fd000c9ffce81c26c0d64d4a0fd0c193`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.2/kubernetes-node-windows-amd64.tar.gz) | `b92c2670ce8dd75f744537abb6e98df84ce5a18da7df6b70741e92d9e57098bf`
-
-## Changelog since v1.8.1
-
-### Other notable changes
-
-* Allow for configuring etcd hostname in the manifest ([#54403](https://github.com/kubernetes/kubernetes/pull/54403), [@wojtek-t](https://github.com/wojtek-t))
-* Allow standard flags in client-gen. ([#53999](https://github.com/kubernetes/kubernetes/pull/53999), [@sttts](https://github.com/sttts))
-* Cluster Autoscaler 1.0.1 ([#54298](https://github.com/kubernetes/kubernetes/pull/54298), [@mwielgus](https://github.com/mwielgus))
-* Resolves forbidden error when accessing replicasets and daemonsets via the apps API group ([#54309](https://github.com/kubernetes/kubernetes/pull/54309), [@liggitt](https://github.com/liggitt))
-* kubelet: prevent removal of default labels from Node API objects on startup ([#54073](https://github.com/kubernetes/kubernetes/pull/54073), [@liggitt](https://github.com/liggitt))
-* Fix a bug that prevents client-go metrics from being registered in prometheus in multiple components. ([#53434](https://github.com/kubernetes/kubernetes/pull/53434), [@crassirostris](https://github.com/crassirostris))
-* Webhook always retries connection reset error. ([#53947](https://github.com/kubernetes/kubernetes/pull/53947), [@crassirostris](https://github.com/crassirostris))
-* Adjust batching audit webhook default parameters: increase queue size, batch size, and initial backoff. Add throttling to the batching audit webhook. Default rate limit is 10 QPS. ([#53417](https://github.com/kubernetes/kubernetes/pull/53417), [@crassirostris](https://github.com/crassirostris))
-* Address a bug which allowed the horizontal pod autoscaler to allocate `desiredReplicas` > `maxReplicas` in certain instances. ([#53690](https://github.com/kubernetes/kubernetes/pull/53690), [@mattjmcnaughton](https://github.com/mattjmcnaughton))
-* Fix metrics API group name in audit configuration ([#53493](https://github.com/kubernetes/kubernetes/pull/53493), [@piosz](https://github.com/piosz))
-* Use separate client for leader election in scheduler to avoid starving leader election by regular scheduler operations. ([#53793](https://github.com/kubernetes/kubernetes/pull/53793), [@wojtek-t](https://github.com/wojtek-t))
-* kubeadm: Strip bootstrap tokens from the `kubeadm-config` ConfigMap ([#53559](https://github.com/kubernetes/kubernetes/pull/53559), [@fabriziopandini](https://github.com/fabriziopandini))
-
-
-
-# v1.8.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.8/examples)
-
-## Downloads for v1.8.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes.tar.gz) | `15bf424a40544d2ff02eeba00d92a67409a31d2139c78b152b7c57a8555a1549`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-src.tar.gz) | `b2084cefd774b4b0ac032d80e97db056fcafc2d7549f5a396dc3a3739f2d7a0b`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-client-darwin-386.tar.gz) | `78dfcdc6f2c1e144bcce700b2aa179db29150b74f54335b4f5e36f929e56ee4b`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-client-darwin-amd64.tar.gz) | `bce8609e99ed8f0c4ccd8e9b275b8140030fee531fab6f01a755d563442240b4`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-client-linux-386.tar.gz) | `13beeea6846b19648fc09ffe345bca32ea52e041e321b787e243e9b35b2c1b83`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-client-linux-amd64.tar.gz) | `d7341402fe06f08e757f901674d2fb43d75161ac53bf2f41a875668e5ac2dad0`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-client-linux-arm64.tar.gz) | `aab4505e13f12a5cadbdb3980e5f8a5144b410c3d04bb74b8f25d2680908fb5c`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-client-linux-arm.tar.gz) | `aec3a3eeb64f22055acf6b16e82449435786f2bd578feb11847d53414c40c305`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-client-linux-ppc64le.tar.gz) | `72660598408b03ec428b3ba389c96ad6e2f3a036c7059d3760d34722ed0654fb`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-client-linux-s390x.tar.gz) | `5a02d0eb9987b0a32f22a82aa12a13e8f9fd8504d2339017f17881c48817ddfb`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-client-windows-386.tar.gz) | `2fda2cfe470254a1c109d7311f33fb6566f41bd34ec25f49b6c28802eecfb831`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-client-windows-amd64.tar.gz) | `2a7403be3bdcffd8907f59b144dca0378c0ffc014fd60282924e83ea743d0017`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-server-linux-amd64.tar.gz) | `8c7fc5b99be7dc6736bea5cabe06ef2c60765df1394cd1707e49a3eb8b8a3c8d`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-server-linux-arm64.tar.gz) | `812fbc06ca1df8c926b29891346c5737677a75b644591697a536c8d1aa834b2e`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-server-linux-arm.tar.gz) | `cc612f34b9d95ae49b02e1e772ff26b518a1e157c10e6147a13bafa4710b3768`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-server-linux-ppc64le.tar.gz) | `3ba0a6c6241fc70055acffbd16835c335f702ebf27d596e8b1d6e9cf7cd8d8f8`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-server-linux-s390x.tar.gz) | `cd0a731663b0f95cdaefcd54166ecf917cc2ddb470a3ed96f16f0cae9604f969`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-node-linux-amd64.tar.gz) | `4fccb39e01fb6f2e9120a03b3600d85079138086d8b39bdfb410b2738e6c17c4`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-node-linux-arm64.tar.gz) | `8b7578c1b39d2f525e28afbc56701b69d0c0d0b3b361d6c28740b40ffbeb7ffa`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-node-linux-arm.tar.gz) | `71eac41487d6226beb654c3a2fb49bb8f08ba38d6c844bb6588528325ba2ede9`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-node-linux-ppc64le.tar.gz) | `5ebece4e189257ba95d1b39c7d1b00fb4d0989a806aa2b76eb42f9a6300c4695`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-node-linux-s390x.tar.gz) | `a0a6658ee44d0e92c0f734c465e11262de6a6920d283e999e5b7ed5bab865403`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.1/kubernetes-node-windows-amd64.tar.gz) | `3381d308aef709ccaf2c9357ac2a0166d918ba06dc1128b20736df9667284599`
-
-## Changelog since v1.8.0
-
-### Action Required
-
-* PodSecurityPolicy: Fixes a compatibility issue that caused policies that previously allowed privileged pods to start forbidding them, due to an incorrect default value for `allowPrivilegeEscalation`. PodSecurityPolicy objects defined using a 1.8.0 client or server that intended to set `allowPrivilegeEscalation` to `false` must be reapplied after upgrading to 1.8.1. ([#53443](https://github.com/kubernetes/kubernetes/pull/53443), [@liggitt](https://github.com/liggitt))
-
-### Other notable changes
-
-* Fix to prevent downward api change break on older versions ([#53673](https://github.com/kubernetes/kubernetes/pull/53673), [@timothysc](https://github.com/timothysc))
-* Ignore extended resources that are not registered with kubelet during container resource allocation. ([#53547](https://github.com/kubernetes/kubernetes/pull/53547), [@jiayingz](https://github.com/jiayingz))
-* GCE: Bump GLBC version to [0.9.7](https://github.com/kubernetes/ingress/releases/tag/0.9.7). ([#53625](https://github.com/kubernetes/kubernetes/pull/53625), [@nikhiljindal](https://github.com/nikhiljindal))
-* kubeadm 1.8 now properly handles upgrades from to 1.7.x to newer release in 1.7 branch ([#53338](https://github.com/kubernetes/kubernetes/pull/53338), [@kad](https://github.com/kad))
-* Add generate-groups.sh and generate-internal-groups.sh to k8s.io/code-generator to easily run generators against CRD or User API Server types. ([#52186](https://github.com/kubernetes/kubernetes/pull/52186), [@sttts](https://github.com/sttts))
-* Don't remove extended resource capacities that are not registered with kubelet from node status. ([#53353](https://github.com/kubernetes/kubernetes/pull/53353), [@jiayingz](https://github.com/jiayingz))
-* kubeadm allows the kubelets in the cluster to automatically renew their client certificates ([#53252](https://github.com/kubernetes/kubernetes/pull/53252), [@kad](https://github.com/kad))
-* Bumped Heapster version to 1.4.3 - more details https://github.com/kubernetes/heapster/releases/tag/v1.4.3. ([#53377](https://github.com/kubernetes/kubernetes/pull/53377), [@loburm](https://github.com/loburm))
-* Change `kubeadm create token` to default to the group that almost everyone will want to use. The group is system:bootstrappers:kubeadm:default-node-token and is the group that kubeadm sets up, via an RBAC binding, for auto-approval (system:certificates.k8s.io:certificatesigningrequests:nodeclient). ([#53512](https://github.com/kubernetes/kubernetes/pull/53512), [@jbeda](https://github.com/jbeda))
-* GCE: Fix issue deleting internal load balancers when the firewall resource may not exist. ([#53450](https://github.com/kubernetes/kubernetes/pull/53450), [@nicksardo](https://github.com/nicksardo))
-* GCE: Fixes ILB sync on legacy networks and auto networks with unique subnet names ([#53410](https://github.com/kubernetes/kubernetes/pull/53410), [@nicksardo](https://github.com/nicksardo))
-* Fix the bug that query Kubelet's stats summary with CRI stats enabled results in error. ([#53107](https://github.com/kubernetes/kubernetes/pull/53107), [@Random-Liu](https://github.com/Random-Liu))
-* kubelet `--cert-dir` now defaults to `/var/lib/kubelet/pki`, in order to ensure bootstrapped and rotated certificates persist beyond a reboot. resolves an issue in kubeadm with false-positive `/var/lib/kubelet is not empty` message during pre-flight checks ([#53317](https://github.com/kubernetes/kubernetes/pull/53317), [@liggitt](https://github.com/liggitt))
-* Fix permissions for Metrics Server. ([#53330](https://github.com/kubernetes/kubernetes/pull/53330), [@kawych](https://github.com/kawych))
-* Fixes a performance issue ([#51899](https://github.com/kubernetes/kubernetes/pull/51899)) identified in large-scale clusters when deleting thousands of pods simultaneously across hundreds of nodes, by actively removing containers of deleted pods, rather than waiting for periodic garbage collection and batching resulting pod API deletion requests. ([#53233](https://github.com/kubernetes/kubernetes/pull/53233), [@dashpole](https://github.com/dashpole))
-* Fixes an issue with RBAC reconciliation that could cause duplicated subjects in some bootstrapped rolebindings on each restart of the API server. ([#53239](https://github.com/kubernetes/kubernetes/pull/53239), [@enj](https://github.com/enj))
-* Change ImageGCManage to consume ImageFS stats from StatsProvider ([#53094](https://github.com/kubernetes/kubernetes/pull/53094), [@yguo0905](https://github.com/yguo0905))
-* Fixes an issue with `kubectl set` commands encountering conversion errors for ReplicaSet and DaemonSet objects ([#53158](https://github.com/kubernetes/kubernetes/pull/53158), [@liggitt](https://github.com/liggitt))
-
-
-# v1.8.0
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.8/examples)
-
-## Downloads for v1.8.0
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes.tar.gz) | `802a2bc9e9da6d146c71cc446a5faf9304de47996e86134270c725e6440cbb7d`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-src.tar.gz) | `0ea97d20a2d47d9c5f8e791f63bee7e27f836e1a19cf0f15f39e726ae69906a0`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-client-darwin-386.tar.gz) | `22d82ec72e336700562f537b2e0250eb2700391f9b85b12dfc9a4c61428f1db1`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-client-darwin-amd64.tar.gz) | `de86af6d5b6da9680e93c3d65d889a8ccb59a3a701f3e4ca7a810ffd85ed5eda`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-client-linux-386.tar.gz) | `4fef05d4b392c2df9f8ffb33e66ee5415671258100c0180f2e1c0befc37a2ac3`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-client-linux-amd64.tar.gz) | `bef36b2cdcf66a14aa7fc2354c692fb649dc0521d2a76cd3ebde6ca4cb6bad09`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-client-linux-arm64.tar.gz) | `4cfd3057db15d1e9e5cabccec3771e1efa37f9d7acb47e90d42fece86daff608`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-client-linux-arm.tar.gz) | `29d9a5faf6a8a1a911fe675e10b8df665f6b82e8f3ee75ca901062f7a3af43ec`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-client-linux-ppc64le.tar.gz) | `f467c37c75ba5b7125bc2f831efe3776e2a85eeb7245c11aa8accc26cf14585b`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-client-linux-s390x.tar.gz) | `e0de490b6ce67abf1b158a57c103098ed974a594c677019032fce3d1c9825138`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-client-windows-386.tar.gz) | `02ea1cd79b591dbc313fab3d22a985219d46f939d79ecc3106fb21d0cb1422cb`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-client-windows-amd64.tar.gz) | `8ca1f609d1cf5ec6afb330cfb87d33d20af152324bed60fe4d91995328a257ff`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-server-linux-amd64.tar.gz) | `23422a7f11c3eab59d686a52abae1bce2f9e2a0916f98ed05c10591ba9c3cbad`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-server-linux-arm64.tar.gz) | `17a1e99010ae3a38f1aec7b3a09661521aba6c93a2e6dd54a3e0534e7d2fafe4`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-server-linux-arm.tar.gz) | `3aba33a9d06068dbf40418205fb8cb62e2987106093d0c65d99cbdf130e163ee`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-server-linux-ppc64le.tar.gz) | `84192c0d520559dfc257f3823f7bf196928b993619a92a27d36f19d2ef209706`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-server-linux-s390x.tar.gz) | `246da14c49c21f50c5bc0d6fc78c023f71ccb07a83e224fd3e40d62c4d1a09d0`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-node-linux-amd64.tar.gz) | `59589cdd56f14b8e879c1854f98072e5ae7ab36835520179fca4887fa9b705e5`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-node-linux-arm64.tar.gz) | `99d17807a819dd3d2764c2105f8bc90166126451dc38869b652e9c59be85dc39`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-node-linux-arm.tar.gz) | `53b1fa21ba4172bfdad677e60360be3e3f28b26656e83d4b63b038d8a31f3cf0`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-node-linux-ppc64le.tar.gz) | `9d10e2d1417fa6c18c152a5ac0202191bf27aab49e473926707c7de479112f46`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-node-linux-s390x.tar.gz) | `cb4e8e9b00484e3f96307e56c61107329fbfcf6eba8362a971053439f64b0304`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0/kubernetes-node-windows-amd64.tar.gz) | `6ca4af62b53947d854562f5a51f4a02daa4738b68015608a599ae416887ffce8`
-
-## Introduction to v1.8.0
-
-Kubernetes version 1.8 includes new features and enhancements, as well as fixes to identified issues. The release notes contain a brief overview of the important changes introduced in this release. The content is organized by Special Interest Groups ([SIGs][]).
-
-For initial installations, see the [Setup topics][] in the Kubernetes
-documentation.
-
-To upgrade to this release from a previous version, take any actions required
-[Before Upgrading](#before-upgrading).
-
-For more information about the release and for the latest documentation,
-see the [Kubernetes documentation](https://kubernetes.io/docs/home/).
-
-[Setup topics]: https://kubernetes.io/docs/setup/pick-right-solution/
-[SIGs]: https://github.com/kubernetes/community/blob/master/sig-list.md
-
-
-## Major Themes
-
-Kubernetes is developed by community members whose work is organized into
-[Special Interest Groups][]. For the 1.8 release, each SIG provides the
-themes that guided their work.
-
-[Special Interest Groups]: https://github.com/kubernetes/community/blob/master/sig-list.md
-
-### SIG API Machinery
-
-[SIG API Machinery][] is responsible for all aspects of the API server: API registration and discovery, generic API CRUD semantics, admission control, encoding/decoding, conversion, defaulting, persistence layer (etcd), OpenAPI, third-party resources, garbage collection, and client libraries.
-
-For the 1.8 release, SIG API Machinery focused on stability and on ecosystem enablement. Features include the ability to break large LIST calls into smaller chunks, improved support for API server customization with either custom API servers or Custom Resource Definitions, and client side event spam filtering.
-
-[Sig API Machinery]: https://github.com/kubernetes/community/tree/master/sig-api-machinery
-
-### SIG Apps
-
-[SIG Apps][] focuses on the Kubernetes APIs and the external tools that are required to deploy and operate Kubernetes workloads.
-
-For the 1.8 release, SIG Apps moved the Kubernetes workloads API to the new apps/v1beta2 group and version. The DaemonSet, Deployment, ReplicaSet, and StatefulSet objects are affected by this change. The new apps/v1beta2 group and version provide a stable and consistent API surface for building applications in Kubernetes. For details about deprecations and behavioral changes, see [Notable Features](#notable-features). SIG Apps intends to promote this version to GA in a future release.
-
-[SIG Apps]: https://github.com/kubernetes/community/tree/master/sig-apps
-
-### SIG Auth
-
-[SIG Auth][] is responsible for Kubernetes authentication and authorization, and for
-cluster security policies.
-
-For the 1.8 release, SIG Auth focused on stablizing existing features that were introduced
-in previous releases. RBAC was moved from beta to v1, and advanced auditing was moved from alpha
-to beta. Encryption of resources stored on disk (resources at rest) remained in alpha, and the SIG began exploring integrations with external key management systems.
-
-[SIG Auth]: https://github.com/kubernetes/community/tree/master/sig-auth
-
-### SIG Autoscaling
-
-[SIG Autoscaling][] is responsible for autoscaling-related components,
-such as the Horizontal Pod Autoscaler and Cluster Autoscaler.
-
-For the 1.8 release, SIG Autoscaling continued to focus on stabilizing
-features introduced in previous releases: the new version of the
-Horizontal Pod Autoscaler API, which supports custom metrics, and
-the Cluster Autoscaler, which provides improved performance and error reporting.
-
-[SIG Autoscaling]: https://github.com/kubernetes/community/tree/master/sig-autoscaling
-
-### SIG Cluster Lifecycle
-
-[SIG Cluster Lifecycle][] is responsible for the user experience of deploying,
-upgrading, and deleting clusters.
-
-For the 1.8 release, SIG Cluster Lifecycle continued to focus on expanding the
-capabilities of kubeadm, which is both a user-facing tool to manage clusters
-and a building block for higher-level provisioning systems. Starting
-with the 1.8 release, kubeadm supports a new upgrade command and includes alpha
-support for self hosting the cluster control plane.
-
-[SIG Cluster Lifecycle]: https://github.com/kubernetes/community/tree/master/sig-cluster-lifecycle
-
-### SIG Instrumentation
-
-[SIG Instrumentation][] is responsible for metrics production and
-collection.
-
-For the 1.8 release, SIG Instrumentation focused on stabilizing the APIs
-and components that are required to support the new version of the Horizontal Pod
-Autoscaler API: the resource metrics API, custom metrics API, and
-metrics-server, which is the new replacement for Heapster in the default monitoring
-pipeline.
-
-[SIG Instrumentation]: https://github.com/kubernetes/community/tree/master/sig-instrumentation
-
-### SIG Multi-cluster (formerly known as SIG Federation)
-
-[SIG Multi-cluster][] is responsible for infrastructure that supports
-the efficient and reliable management of multiple Kubernetes clusters,
-and applications that run in and across multiple clusters.
-
-For the 1.8 release, SIG Multicluster focussed on expanding the set of
-Kubernetes primitives that our Cluster Federation control plane
-supports, expanding the number of approaches taken to multi-cluster
-management (beyond our initial Federation approach), and preparing
-to release Federation for general availability ('GA').
-
-[SIG Multi-cluster]: https://github.com/kubernetes/community/tree/master/sig-federation
-
-### SIG Node
-
-[SIG Node][] is responsible for the components that support the controlled
-interactions between pods and host resources, and manage the lifecycle
-of pods scheduled on a node.
-
-For the 1.8 release, SIG Node continued to focus
-on a broad set of workload types, including hardware and performance
-sensitive workloads such as data analytics and deep learning. The SIG also
-delivered incremental improvements to node reliability.
-
-[SIG Node]: https://github.com/kubernetes/community/tree/master/sig-node
-
-### SIG Network
-
-[SIG Network][] is responsible for networking components, APIs, and plugins in Kubernetes.
-
-For the 1.8 release, SIG Network enhanced the NetworkPolicy API to support pod egress traffic policies.
-The SIG also provided match criteria that allow policy rules to match a source or destination CIDR. Both features are in beta. SIG Network also improved the kube-proxy to include an alpha IPVS mode in addition to the current iptables and userspace modes.
-
-[SIG Network]: https://github.com/kubernetes/community/tree/master/sig-network
-
-### SIG Scalability
-
-[SIG Scalability][] is responsible for scalability testing, measuring and
-improving system performance, and answering questions related to scalability.
-
-For the 1.8 release, SIG Scalability focused on automating large cluster
-scalability testing in a continuous integration (CI) environment. The SIG
-defined a concrete process for scalability testing, created
-documentation for the current scalability thresholds, and defined a new set of
-Service Level Indicators (SLIs) and Service Level Objectives (SLOs) for the system.
-Here's the release [scalability validation report].
-
-[SIG Scalability]: https://github.com/kubernetes/community/tree/master/sig-scalability
-[scalability validation report]: https://github.com/kubernetes/features/tree/master/release-1.8/scalability_validation_report.md
-
-### SIG Scheduling
-
-[SIG Scheduling][] is responsible for generic scheduler and scheduling components.
-
-For the 1.8 release, SIG Scheduling extended the concept of cluster sharing by introducing
-pod priority and pod preemption. These features allow mixing various types of workloads in a single cluster, and help reach
-higher levels of resource utilization and availability.
-These features are in alpha. SIG Scheduling also improved the internal APIs for scheduling and made them easier for other components and external schedulers to use.
-
-[SIG Scheduling]: https://github.com/kubernetes/community/tree/master/sig-scheduling
-
-### SIG Storage
-
-[SIG Storage][] is responsible for storage and volume plugin components.
-
-For the 1.8 release, SIG Storage extended the Kubernetes storage API. In addition to providing simple
-volume availability, the API now enables volume resizing and snapshotting. These features are in alpha.
-The SIG also focused on providing more control over storage: the ability to set requests and
-limits on ephemeral storage, the ability to specify mount options, more metrics, and improvements to Flex driver deployments.
-
-[SIG Storage]: https://github.com/kubernetes/community/tree/master/sig-storage
-
-## Before Upgrading
-
-Consider the following changes, limitations, and guidelines before you upgrade:
-
-* The kubelet now fails if swap is enabled on a node. To override the default and run with /proc/swaps on, set `--fail-swap-on=false`. The experimental flag `--experimental-fail-swap-on` is deprecated in this release, and will be removed in a future release.
-
-* The `autoscaling/v2alpha1` API is now at `autoscaling/v2beta1`. However, the form of the API remains unchanged. Migrate the `HorizontalPodAutoscaler` resources to `autoscaling/v2beta1` to persist the `HorizontalPodAutoscaler` changes introduced in `autoscaling/v2alpha1`. The Horizontal Pod Autoscaler changes include support for status conditions, and autoscaling on memory and custom metrics.
-
-* The metrics APIs, `custom-metrics.metrics.k8s.io` and `metrics`, were moved from `v1alpha1` to `v1beta1`, and renamed to `custom.metrics.k8s.io` and `metrics.k8s.io`, respectively. If you have deployed a custom metrics adapter, ensure that it supports the new API version. If you have deployed Heapster in aggregated API server mode, upgrade Heapster to support the latest API version.
-
-* Advanced auditing is the default auditing mechanism at `v1beta1`. The new version introduces the following changes:
-
- * The `--audit-policy-file` option is required if the `AdvancedAudit` feature is not explicitly turned off (`--feature-gates=AdvancedAudit=false`) on the API server.
- * The audit log file defaults to JSON encoding when using the advanced auditing feature gate.
- * An audit policy file without either an `apiVersion` or a `kind` field may be treated as invalid.
- * The webhook and log file now output the `v1beta1` event format.
-
- For more details, see [Advanced audit](https://kubernetes.io/docs/tasks/debug-application-cluster/audit/#advanced-audit).
-
-* The deprecated `ThirdPartyResource` (TPR) API was removed.
- To avoid losing your TPR data, [migrate to CustomResourceDefinition](https://kubernetes.io/docs/tasks/access-kubernetes-api/migrate-third-party-resource/).
-
-* The following deprecated flags were removed from `kube-controller-manager`:
-
- * `replication-controller-lookup-cache-size`
- * `replicaset-lookup-cache-size`
- * `daemonset-lookup-cache-size`
-
- Don't use these flags. Using deprecated flags causes the server to print a warning. Using a removed flag causes the server to abort the startup.
-
-* The following deprecated flags were removed from `kubelet`:
-
- * `api-servers` - add apiserver addresses to the kubeconfig file instead.
-
- Don't use these flags. Using deprecated flags causes the kubelet to print a warning. Using a removed flag causes the kubelet to abort the startup.
-
-* StatefulSet: The deprecated `pod.alpha.kubernetes.io/initialized` annotation for interrupting the StatefulSet Pod management is now ignored. StatefulSets with this annotation set to `true` or with no value will behave just as they did in previous versions. Dormant StatefulSets with the annotation set to `false` will become active after upgrading.
-
-* The CronJob object is now enabled by default at `v1beta1`. CronJob `v2alpha1` is still available, but it must be explicitly enabled. We recommend that you move any current CronJob objects to `batch/v1beta1.CronJob`. Be aware that if you specify the deprecated version, you may encounter Resource Not Found errors. These errors occur because the new controllers look for the new version during a rolling update.
-
-* The `batch/v2alpha1.ScheduledJob` was removed. Migrate to `batch/v1beta.CronJob` to continue managing time based jobs.
-
-* The `rbac/v1alpha1`, `settings/v1alpha1`, and `scheduling/v1alpha1` APIs are disabled by default.
-
-* The `system:node` role is no longer automatically granted to the `system:nodes` group in new clusters. The role gives broad read access to resources, including secrets and configmaps. Use the `Node` authorization mode to authorize the nodes in new clusters. To continue providing the `system:node` role to the members of the `system:nodes` group, create an installation-specific `ClusterRoleBinding` in the installation. ([#49638](https://github.com/kubernetes/kubernetes/pull/49638))
-
-## Known Issues
-
-This section contains a list of known issues reported in Kubernetes 1.8 release. The content is populated via [v1.8.x known issues and FAQ accumulator](https://github.com/kubernetes/kubernetes/issues/53004).
-
-* Kubelets using TLS bootstrapping (`--bootstrap-kubeconfig`) or certificate rotation (`--rotate-certificates`) store certificates in the directory specified by `--cert-dir`. The default location (`/var/run/kubernetes`) is automatically erased on reboot on some platforms, which can prevent the kubelet from authenticating to the API server after a reboot. Specifying a non-transient location, such as `--cert-dir=/var/lib/kubelet/pki`, is recommended.
-
-For more information, see [#53288](https://issue.k8s.io/53288).
-
-* `kubeadm init` and `kubeadm join` invocations on newly installed systems can encounter a `/var/lib/kubelet is not empty` message during pre-flight checks that prevents setup. If this is the only pre-flight failure, it can be safely ignored with `--skip-preflight-checks`.
-
-For more information, see [#53356](https://issue.k8s.io/53356#issuecomment-333748618).
-
-* A performance issue was identified in large-scale clusters when deleting thousands of pods simultaneously across hundreds of nodes. Kubelets in this scenario can encounter temporarily increased latency of `delete pod` API calls -- above the target service level objective of 1 second. If you run clusters with this usage pattern and if pod deletion latency could be an issue for you, you might want to wait until the issue is resolved before you upgrade.
-
-For more information and for updates on resolution of this issue, see [#51899](https://github.com/kubernetes/kubernetes/issues/51899).
-
-* Audit logs might impact the API server performance and the latency of large request and response calls. The issue is observed under the following conditions: if `AdvancedAuditing` feature gate is enabled, which is the default case, if audit logging uses the log backend in JSON format, or if the audit policy records large API calls for requests or responses.
-
-For more information, see [#51899](https://github.com/kubernetes/kubernetes/issues/51899).
-
-* Minikube version 0.22.2 or lower does not work with kubectl version 1.8 or higher. This issue is caused by the presence of an unregistered type in the minikube API server. New versions of kubectl force validate the OpenAPI schema, which is not registered with all known types in the minikube API server.
-
-For more information, see [#1996](https://github.com/kubernetes/minikube/issues/1996).
-
-* The `ENABLE_APISERVER_BASIC_AUDIT` configuration parameter for GCE deployments is broken, but deprecated.
-
-For more information, see [#53154](https://github.com/kubernetes/kubernetes/issues/53154).
-
-* `kubectl set` commands placed on ReplicaSet and DaemonSet occasionally return version errors. All set commands, including set image, set env, set resources, and set serviceaccounts, are affected.
-
-For more information, see [#53040](https://github.com/kubernetes/kubernetes/issues/53040).
-
-* Object quotas are not consistently charged or updated. Specifically, the object count quota does not reliably account for uninitialized objects. Some quotas are charged only when an object is initialized. Others are charged when an object is created, whether it is initialized or not. We plan to fix this issue in a future release.
-
-For more information, see [#53109](https://github.com/kubernetes/kubernetes/issues/53109).
-
-## Deprecations
-
-This section provides an overview of deprecated API versions, options, flags, and arguments. Deprecated means that we intend to remove the capability from a future release. After removal, the capability will no longer work. The sections are organized by SIGs.
-
-### Apps
-
-- The `.spec.rollbackTo` field of the Deployment kind is deprecated in `extensions/v1beta1`.
-
-- The `kubernetes.io/created-by` annotation is deprecated and will be removed in version 1.9.
- Use [ControllerRef](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/controller-ref.md) instead to determine which controller, if any, owns an object.
-
- - The `batch/v2alpha1.CronJob` is deprecated in favor of `batch/v1beta1`.
-
- - The `batch/v2alpha1.ScheduledJob` was removed. Use `batch/v1beta1.CronJob` instead.
-
-### Auth
-
- - The RBAC v1alpha1 API group is deprecated in favor of RBAC v1.
-
- - The API server flag `--experimental-bootstrap-token-auth` is deprecated in favor of `--enable-bootstrap-token-auth`. The `--experimental-bootstrap-token-auth` flag will be removed in version 1.9.
-
-### Autoscaling
-
- - Consuming metrics directly from Heapster is deprecated in favor of
- consuming metrics via an aggregated version of the resource metrics API.
-
- - In version 1.8, enable this behavior by setting the
- `--horizontal-pod-autoscaler-use-rest-clients` flag to `true`.
-
- - In version 1.9, this behavior will be enabled by default, and must be explicitly
- disabled by setting the `--horizontal-pod-autoscaler-use-rest-clients` flag to `false`.
-
-### Cluster Lifecycle
-
-- The `auto-detect` behavior of the kubelet's `--cloud-provider` flag is deprecated.
-
- - In version 1.8, the default value for the kubelet's `--cloud-provider` flag is `auto-detect`. Be aware that it works only on GCE, AWS and Azure.
-
- - In version 1.9, the default will be `""`, which means no built-in cloud provider extension will be enabled by default.
-
- - Enable an out-of-tree cloud provider with `--cloud-provider=external` in either version.
-
- For more information on deprecating auto-detecting cloud providers in kubelet, see PR [#51312](https://github.com/kubernetes/kubernetes/pull/51312) and [announcement](https://groups.google.com/forum/#!topic/kubernetes-dev/UAxwa2inbTA).
-
-- The `PersistentVolumeLabel` admission controller in the API server is deprecated.
-
- - The replacement is running a cloud-specific controller-manager (often referred to as `cloud-controller-manager`) with the `PersistentVolumeLabel` controller enabled. This new controller loop operates as the `PersistentVolumeLabel` admission controller did in previous versions.
-
- - Do not use the `PersistentVolumeLabel` admission controller in the configuration files and scripts unless you are dependent on the in-tree GCE and AWS cloud providers.
-
- - The `PersistentVolumeLabel` admission controller will be removed in a future release, when the out-of-tree versions of the GCE and AWS cloud providers move to GA. The cloud providers are marked alpha in version 1.9.
-
-### OpenStack
-
-- The `openstack-heat` provider for `kube-up` is deprecated and will be removed
- in a future release. Refer to Issue [#49213](https://github.com/kubernetes/kubernetes/issues/49213)
- for background information.
-
-### Scheduling
-
- - Opaque Integer Resources (OIRs) are deprecated and will be removed in
- version 1.9. Extended Resources (ERs) are a drop-in replacement for OIRs. You can use
- any domain name prefix outside of the `kubernetes.io/` domain instead of the
- `pod.alpha.kubernetes.io/opaque-int-resource-` prefix.
-
-## Notable Features
-
-### Workloads API (apps/v1beta2)
-
-Kubernetes 1.8 adds the apps/v1beta2 group and version, which now consists of the
-DaemonSet, Deployment, ReplicaSet and StatefulSet kinds. This group and version are part
-of the Kubernetes Workloads API. We plan to move them to v1 in an upcoming release, so you might want to plan your migration accordingly.
-
-For more information, see [the issue that describes this work in detail](https://github.com/kubernetes/features/issues/353)
-
-#### API Object Additions and Migrations
-
-- The DaemonSet, Deployment, ReplicaSet, and StatefulSet kinds
- are now in the apps/v1beta2 group and version.
-
-- The apps/v1beta2 group version adds a Scale subresource for the StatefulSet
-kind.
-
-- All kinds in the apps/v1beta2 group version add a corresponding conditions
- kind.
-
-#### Behavioral Changes
-
- - For all kinds in the API group version, a spec.selector default value is no longer
- available, because it's incompatible with `kubectl
- apply` and strategic merge patch. You must explicitly set the spec.selector value
- in your manifest. An object with a spec.selector value that does not match the labels in
- its spec.template is invalid.
-
- - Selector mutation is disabled for all kinds in the
- app/v1beta2 group version, because the controllers in the workloads API do not handle
- selector mutation in
- a consistent way. This restriction may be lifted in the future, but
- it is likely that that selectors will remain immutable after the move to v1.
- You can continue to use code that depends on mutable selectors by calling
- the apps/v1beta1 API in this release, but you should start planning for code
- that does not depend on mutable selectors.
-
- - Extended Resources are fully-qualified resource names outside the
- `kubernetes.io` domain. Extended Resource quantities must be integers.
- You can specify any resource name of the form `[aaa.]my-domain.bbb/ccc`
- in place of [Opaque Integer Resources](https://v1-6.docs.kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#opaque-integer-resources-alpha-feature).
- Extended resources cannot be overcommitted, so make sure that request and limit are equal
- if both are present in a container spec.
-
- - The default Bootstrap Token created with `kubeadm init` v1.8 expires
- and is deleted after 24 hours by default to limit the exposure of the
- valuable credential. You can create a new Bootstrap Token with
- `kubeadm token create` or make the default token permanently valid by specifying
- `--token-ttl 0` to `kubeadm init`. The default token can later be deleted with
- `kubeadm token delete`.
-
- - `kubeadm join` now delegates TLS Bootstrapping to the kubelet itself, instead
- of reimplementing the process. `kubeadm join` writes the bootstrap kubeconfig
- file to `/etc/kubernetes/bootstrap-kubelet.conf`.
-
-#### Defaults
-
- - The default spec.updateStrategy for the StatefulSet and DaemonSet kinds is
- RollingUpdate for the apps/v1beta2 group version. You can explicitly set
- the OnDelete strategy, and no strategy auto-conversion is applied to
- replace default values.
-
- - As mentioned in [Behavioral Changes](#behavioral-changes), selector
- defaults are disabled.
-
- - The default spec.revisionHistoryLimit for all applicable kinds in the
- apps/v1beta2 group version is 10.
-
- - In a CronJob object, the default spec.successfulJobsHistoryLimit is 3, and
- the default spec.failedJobsHistoryLimit is 1.
-
-### Workloads API (batch)
-
-- CronJob is now at `batch/v1beta1` ([#41039](https://github.com/kubernetes/kubernetes/issues/41039), [@soltysh](https://github.com/soltysh)).
-
-- `batch/v2alpha.CronJob` is deprecated in favor of `batch/v1beta` and will be removed in a future release.
-
-- Job can now set a failure policy using `.spec.backoffLimit`. The default value for this new field is 6. ([#30243](https://github.com/kubernetes/kubernetes/issues/30243), [@clamoriniere1A](https://github.com/clamoriniere1A)).
-
-- `batch/v2alpha1.ScheduledJob` is removed.
-
-- The Job controller now creates pods in batches instead of all at once. ([#49142](https://github.com/kubernetes/kubernetes/pull/49142), [@joelsmith](https://github.com/joelsmith)).
-
-- Short `.spec.ActiveDeadlineSeconds` is properly applied to a Job. ([#48545](https://github.com/kubernetes/kubernetes/pull/48454), [@weiwei4](https://github.com/weiwei04)).
-
-
-#### CLI Changes
-
-- [alpha] `kubectl` plugins: `kubectl` now allows binary extensibility. You can extend the default set of `kubectl` commands by writing plugins
- that provide new subcommands. Refer to the documentation for more information.
-
-- `kubectl rollout` and `rollback` now support StatefulSet.
-
-- `kubectl scale` now uses the Scale subresource for kinds in the apps/v1beta2 group.
-
-- `kubectl create configmap` and `kubectl create secret` subcommands now support
- the `--append-hash` flag, which enables unique but deterministic naming for
- objects generated from files, for example with `--from-file`.
-
-- `kubectl run` can set a service account name in the generated pod
- spec with the `--serviceaccount` flag.
-
-- `kubectl proxy` now correctly handles the `exec`, `attach`, and
- `portforward` commands. You must pass `--disable-filter` to the command to allow these commands.
-
-- Added `cronjobs.batch` to "all", so that `kubectl get all` returns them.
-
-- Added flag `--include-uninitialized` to `kubectl annotate`, `apply`, `edit-last-applied`,
- `delete`, `describe`, `edit`, `get`, `label,` and `set`. `--include-uninitialized=true` makes
- kubectl commands apply to uninitialized objects, which by default are ignored
- if the names of the objects are not provided. `--all` also makes kubectl
- commands apply to uninitialized objects. See the
- [initializer documentation](https://kubernetes.io/docs/admin/extensible-admission-controllers/) for more details.
-
-- Added RBAC reconcile commands with `kubectl auth reconcile -f FILE`. When
- passed a file which contains RBAC roles, rolebindings, clusterroles, or
- clusterrolebindings, this command computes covers and adds the missing rules.
- The logic required to properly apply RBAC permissions is more complicated
- than a JSON merge because you have to compute logical covers operations between
- rule sets. This means that we cannot use `kubectl apply` to update RBAC roles
- without risking breaking old clients, such as controllers.
-
-- `kubectl delete` no longer scales down workload API objects before deletion.
- Users who depend on ordered termination for the Pods of their StatefulSets
- must use `kubectl scale` to scale down the StatefulSet before deletion.
-
-- `kubectl run --env` no longer supports CSV parsing. To provide multiple environment
- variables, use the `--env` flag multiple times instead. Example: `--env ONE=1 --env TWO=2` instead of `--env ONE=1,TWO=2`.
-
-- Removed deprecated command `kubectl stop`.
-
-- Kubectl can now use http caching for the OpenAPI schema. The cache
- directory can be configured by passing the `--cache-dir` command line flag to kubectl.
- If set to an empty string, caching is disabled.
-
-- Kubectl now performs validation against OpenAPI schema instead of Swagger 1.2. If
- OpenAPI is not available on the server, it falls back to the old Swagger 1.2.
-
-- Added Italian translation for kubectl.
-
-- Added German translation for kubectl.
-
-#### Scheduling
-
-* [alpha] This version now supports pod priority and creation of PriorityClasses ([user doc](https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/))([design doc](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/scheduling/pod-priority-api.md))
-
-* [alpha] This version now supports priority-based preemption of pods ([user doc](https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/))([design doc](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/scheduling/pod-preemption.md))
-
-* [alpha] Users can now add taints to nodes by condition ([design doc](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/scheduling/taint-node-by-condition.md))
-
-#### Storage
-
-* [stable] Mount options
-
- * The ability to specify mount options for volumes is moved from beta to stable.
-
- * A new `MountOptions` field in the `PersistentVolume` spec is available to specify mount options. This field replaces an annotation.
-
- * A new `MountOptions` field in the `StorageClass` spec allows configuration of mount options for dynamically provisioned volumes.
-
-* [stable] Support Attach and Detach operations for ReadWriteOnce (RWO) volumes that use iSCSI and Fibre Channel plugins.
-
-* [stable] Expose storage usage metrics
-
- * The available capacity of a given Persistent Volume (PV) is available by calling the Kubernetes metrics API.
-
-* [stable] Volume plugin metrics
-
- * Success and latency metrics for all Kubernetes calls are available by calling the Kubernetes metrics API. You can request volume operations, including mount, unmount, attach, detach, provision, and delete.
-
-* [stable] The PV spec for Azure File, CephFS, iSCSI, and Glusterfs is modified to reference namespaced resources.
-
-* [stable] You can now customize the iSCSI initiator name per volume in the iSCSI volume plugin.
-
-* [stable] You can now specify the World Wide Identifier (WWID) for the volume identifier in the Fibre Channel volume plugin.
-
-* [beta] Reclaim policy in StorageClass
-
- * You can now configure the reclaim policy in StorageClass, instead of defaulting to `delete` for dynamically provisioned volumes.
-
-* [alpha] Volume resizing
-
- * You can now increase the size of a volume by calling the Kubernetes API.
-
- * For alpha, this feature increases only the size of the underlying volume. It does not support resizing the file system.
-
- * For alpha, volume resizing supports only Gluster volumes.
-
-* [alpha] Provide capacity isolation and resource management for local ephemeral storage
-
- * You can now set container requests, container limits, and node allocatable reservations for the new `ephemeral-storage` resource.
-
- * The `ephemeral-storage` resource includes all the disk space a container might consume with container overlay or scratch.
-
-* [alpha] Mount namespace propagation
-
- * The `VolumeMount.Propagation` field for `VolumeMount` in pod containers is now available.
-
- * You can now set `VolumeMount.Propagation` to `Bidirectional` to enable a particular mount for a container to propagate itself to the host or other containers.
-
-* [alpha] Improve Flex volume deployment
-
- * Flex volume driver deployment is simplified in the following ways:
-
- * New driver files can now be automatically discovered and initialized without requiring a kubelet or controller-manager restart.
-
- * A sample DaemonSet to deploy Flexvolume drivers is now available.
-
-* [prototype] Volume snapshots
-
- * You can now create a volume snapshot by calling the Kubernetes API.
-
- * Note that the prototype does not support quiescing before snapshot, so snapshots might be inconsistent.
-
- * In the prototype phase, this feature is external to the core Kubernetes. It's available at https://github.com/kubernetes-incubator/external-storage/tree/master/snapshot.
-
-### Cluster Federation
-
-#### [alpha] Federated Jobs
-
-Federated Jobs that are automatically deployed to multiple clusters
-are now supported. Cluster selection and weighting determine how Job
-parallelism and completions are spread across clusters. Federated Job
-status reflects the aggregate status across all underlying cluster
-jobs.
-
-#### [alpha] Federated Horizontal Pod Autoscaling (HPA)
-
-Federated HPAs are similar to the traditional Kubernetes HPAs, except
-that they span multiple clusters. Creating a Federated HPA targeting
-multiple clusters ensures that cluster-level autoscalers are
-consistently deployed across those clusters, and dynamically managed
-to ensure that autoscaling can occur optimially in all clusters,
-within a set of global constraints on the the total number of replicas
-permitted across all clusters. If replicas are not
-required in some clusters due to low system load or insufficient quota
-or capacity in those clusters, additional replicas are made available
-to the autoscalers in other clusters if required.
-
-### Node Components
-
-#### Autoscaling and Metrics
-
-* Support for custom metrics in the Horizontal Pod Autoscaler is now at v1beta1. The associated metrics APIs (custom metrics and resource/master metrics) were also moved to v1beta1. For more information, see [Before Upgrading](#before-upgrading).
-
-* `metrics-server` is now the recommended way to provide the resource
- metrics API. Deploy `metrics-server` as an add-on in the same way that you deploy Heapster.
-
-##### Cluster Autoscaler
-
-* Cluster autoscaler is now GA
-* Cluster support size is increased to 1000 nodes
-* Respect graceful pod termination of up to 10 minutes
-* Handle zone stock-outs and failures
-* Improve monitoring and error reporting
-
-#### Container Runtime Interface (CRI)
-
-* [alpha] Add a CRI validation test suite and CRI command-line tools. ([#292](https://github.com/kubernetes/features/issues/292), [@feiskyer](https://github.com/feiskyer))
-
-* [stable] [cri-o](https://github.com/kubernetes-incubator/cri-o): CRI implementation for OCI-based runtimes [[@mrunalp](https://github.com/mrunalp)]
-
- * Passed all the Kubernetes 1.7 end-to-end conformance test suites.
- * Verification against Kubernetes 1.8 is planned soon after the release.
-
-* [stable] [frakti](https://github.com/kubernetes/frakti): CRI implementation for hypervisor-based runtimes is now v1.1. [[@feiskyer](https://github.com/feiskyer)]
-
- * Enhance CNI plugin compatibility, supports flannel, calico, weave and so on.
- * Pass all CRI validation conformance tests and node end-to-end conformance tests.
- * Add experimental Unikernel support.
-
-* [alpha] [cri-containerd](https://github.com/kubernetes-incubator/cri-containerd): CRI implementation for containerd is now v1.0.0-alpha.0, [[@Random-Liu](https://github.com/Random-Liu)]
-
- * Feature complete. Support the full CRI API defined in v1.8.
- * Pass all the CRI validation tests and regular node end-to-end tests.
- * An ansible playbook is provided to configure a Kubernetes cri-containerd cluster with kubeadm.
-
-* Add support in Kubelet to consume container metrics via CRI. [[@yguo0905](https://github.com/yguo0905)]
- * There are known bugs that result in errors when querying Kubelet's stats summary API. We expect to fix them in v1.8.1.
-
-#### kubelet
-
-* [alpha] Kubelet now supports alternative container-level CPU affinity policies by using the new CPU manager. ([#375](https://github.com/kubernetes/features/issues/375), [@sjenning](https://github.com/sjenning), [@ConnorDoyle](https://github.com/ConnorDoyle))
-
-* [alpha] Applications may now request pre-allocated hugepages by using the new `hugepages` resource in the container resource requests. ([#275](https://github.com/kubernetes/features/issues/275), [@derekwaynecarr](https://github.com/derekwaynecarr))
-
-* [alpha] Add support for dynamic Kubelet configuration. ([#281](https://github.com/kubernetes/features/issues/281), [@mtaufen](https://github.com/mtaufen))
-
-* [alpha] Add the Hardware Device Plugins API. ([#368](https://github.com/kubernetes/features/issues/368), [[@jiayingz](https://github.com/jiayingz)], [[@RenaudWasTaken](https://github.com/RenaudWasTaken)])
-
-* [stable] Upgrade cAdvisor to v0.27.1 with the enhancement for node monitoring. [[@dashpole](https://github.com/dashpole)]
-
- * Fix journalctl leak
- * Fix container memory rss
- * Fix incorrect CPU usage with 4.7 kernel
- * OOM parser uses kmsg
- * Add hugepages support
- * Add CRI-O support
-
-* Sharing a PID namespace between containers in a pod is disabled by default in version 1.8. To enable for a node, use the `--docker-disable-shared-pid=false` kubelet flag. Be aware that PID namespace sharing requires Docker version greater than or equal to 1.13.1.
-
-* Fix issues related to the eviction manager.
-
-* Fix inconsistent Prometheus cAdvisor metrics.
-
-* Fix issues related to the local storage allocatable feature.
-
-### Auth
-
-* [GA] The RBAC API group has been promoted from v1beta1 to v1. No API changes were introduced.
-
-* [beta] Advanced auditing has been promoted from alpha to beta. The webhook and logging policy formats have changed since alpha, and may require modification.
-
-* [beta] Kubelet certificate rotation through the certificates API has been promoted from alpha to beta. RBAC cluster roles for the certificates controller have been added for common uses of the certificates API, such as the kubelet's.
-
-* [beta] SelfSubjectRulesReview, an API that lets a user see what actions they can perform with a namespace, has been added to the authorization.k8s.io API group. This bulk query is intended to enable UIs to show/hide actions based on the end user, and for users to quickly reason about their own permissions.
-
-* [alpha] Building on the 1.7 work to allow encryption of resources such as secrets, a mechanism to store resource encryption keys in external Key Management Systems (KMS) was introduced. This complements the original file-based storage and allows integration with multiple KMS. A Google Cloud KMS plugin was added and will be usable once the Google side of the integration is complete.
-
-* Websocket requests may now authenticate to the API server by passing a bearer token in a websocket subprotocol of the form `base64url.bearer.authorization.k8s.io.`. ([#47740](https://github.com/kubernetes/kubernetes/pull/47740), [@liggitt](https://github.com/liggitt))
-
-* Advanced audit now correctly reports impersonated user info. ([#48184](https://github.com/kubernetes/kubernetes/pull/48184), [@CaoShuFeng](https://github.com/CaoShuFeng))
-
-* Advanced audit policy now supports matching subresources and resource names, but the top level resource no longer matches the subresouce. For example "pods" no longer matches requests to the logs subresource of pods. Use "pods/logs" to match subresources. ([#48836](https://github.com/kubernetes/kubernetes/pull/48836), [@ericchiang](https://github.com/ericchiang))
-
-* Previously a deleted service account or bootstrapping token secret would be considered valid until it was reaped. It is now invalid as soon as the `deletionTimestamp` is set. ([#48343](https://github.com/kubernetes/kubernetes/pull/48343), [@deads2k](https://github.com/deads2k); [#49057](https://github.com/kubernetes/kubernetes/pull/49057), [@ericchiang](https://github.com/ericchiang))
-
-* The `--insecure-allow-any-token` flag has been removed from the API server. Users of the flag should use impersonation headers instead for debugging. ([#49045](https://github.com/kubernetes/kubernetes/pull/49045), [@ericchiang](https://github.com/ericchiang))
-
-* The NodeRestriction admission plugin now allows a node to evict pods bound to itself. ([#48707](https://github.com/kubernetes/kubernetes/pull/48707), [@danielfm](https://github.com/danielfm))
-
-* The OwnerReferencesPermissionEnforcement admission plugin now requires `update` permission on the `finalizers` subresource of the referenced owner in order to set `blockOwnerDeletion` on an owner reference. ([#49133](https://github.com/kubernetes/kubernetes/pull/49133), [@deads2k](https://github.com/deads2k))
-
-* The SubjectAccessReview API in the `authorization.k8s.io` API group now allows providing the user uid. ([#49677](https://github.com/kubernetes/kubernetes/pull/49677), [@dims](https://github.com/dims))
-
-* After a kubelet rotates its client cert, it now closes its connections to the API server to force a handshake using the new cert. Previously, the kubelet could keep its existing connection open, even if the cert used for that connection was expired and rejected by the API server. ([#49899](https://github.com/kubernetes/kubernetes/pull/49899), [@ericchiang](https://github.com/ericchiang))
-
-* PodSecurityPolicies can now specify a whitelist of allowed paths for host volumes. ([#50212](https://github.com/kubernetes/kubernetes/pull/50212), [@jhorwit2](https://github.com/jhorwit2))
-
-* API server authentication now caches successful bearer token authentication results for a few seconds. ([#50258](https://github.com/kubernetes/kubernetes/pull/50258), [@liggitt](https://github.com/liggitt))
-
-* The OpenID Connect authenticator can now use a custom prefix, or omit the default prefix, for username and groups claims through the --oidc-username-prefix and --oidc-groups-prefix flags. For example, the authenticator can map a user with the username "jane" to "google:jane" by supplying the "google:" username prefix. ([#50875](https://github.com/kubernetes/kubernetes/pull/50875), [@ericchiang](https://github.com/ericchiang))
-
-* The bootstrap token authenticator can now configure tokens with a set of extra groups in addition to `system:bootstrappers`. ([#50933](https://github.com/kubernetes/kubernetes/pull/50933), [@mattmoyer](https://github.com/mattmoyer))
-
-* Advanced audit allows logging failed login attempts.
- ([#51119](https://github.com/kubernetes/kubernetes/pull/51119), [@soltysh](https://github.com/soltysh))
-
-* A `kubectl auth reconcile` subcommand has been added for applying RBAC resources. When passed a file which contains RBAC roles, rolebindings, clusterroles, or clusterrolebindings, it will compute covers and add the missing rules. ([#51636](https://github.com/kubernetes/kubernetes/pull/51636), [@deads2k](https://github.com/deads2k))
-
-### Cluster Lifecycle
-
-#### kubeadm
-
-* [beta] A new `upgrade` subcommand allows you to automatically upgrade a self-hosted cluster created with kubeadm. ([#296](https://github.com/kubernetes/features/issues/296), [@luxas](https://github.com/luxas))
-
-* [alpha] An experimental self-hosted cluster can now easily be created with `kubeadm init`. Enable the feature by setting the SelfHosting feature gate to true: `--feature-gates=SelfHosting=true` ([#296](https://github.com/kubernetes/features/issues/296), [@luxas](https://github.com/luxas))
- * **NOTE:** Self-hosting will be the default way to host the control plane in the next release, v1.9
-
-* [alpha] A new `phase` subcommand supports performing only subtasks of the full `kubeadm init` flow. Combined with fine-grained configuration, kubeadm is now more easily consumable by higher-level provisioning tools like kops or GKE. ([#356](https://github.com/kubernetes/features/issues/356), [@luxas](https://github.com/luxas))
- * **NOTE:** This command is currently staged under `kubeadm alpha phase` and will be graduated to top level in a future release.
-
-#### kops
-
-* [alpha] Added support for targeting bare metal (or non-cloudprovider) machines. ([#360](https://github.com/kubernetes/features/issues/360), [@justinsb](https://github.com/justinsb)).
-
-* [alpha] kops now supports [running as a server](https://github.com/kubernetes/kops/blob/master/docs/api-server/README.md). ([#359](https://github.com/kubernetes/features/issues/359), [@justinsb](https://github.com/justinsb))
-
-* [beta] GCE support is promoted from alpha to beta. ([#358](https://github.com/kubernetes/features/issues/358), [@justinsb](https://github.com/justinsb)).
-
-#### Cluster Discovery/Bootstrap
-
-* [beta] The authentication and verification mechanism called Bootstrap Tokens is improved. Use Bootstrap Tokens to easily add new node identities to a cluster. ([#130](https://github.com/kubernetes/features/issues/130), [@luxas](https://github.com/luxas), [@jbeda](https://github.com/jbeda)).
-
-#### Multi-platform
-
-* [alpha] The Conformance e2e test suite now passes on the arm, arm64, and ppc64le platforms. ([#288](https://github.com/kubernetes/features/issues/288), [@luxas](https://github.com/luxas), [@mkumatag](https://github.com/mkumatag), [@ixdy](https://github.com/ixdy))
-
-#### Cloud Providers
-
-* [alpha] Support is improved for the pluggable, out-of-tree and out-of-core cloud providers. ([#88](https://github.com/kubernetes/features/issues/88), [@wlan0](https://github.com/wlan0))
-
-### Network
-
-#### network-policy
-
-* [beta] Apply NetworkPolicy based on CIDR ([#50033](https://github.com/kubernetes/kubernetes/pull/50033), [@cmluciano](https://github.com/cmluciano))
-
-* [beta] Support EgressRules in NetworkPolicy ([#51351](https://github.com/kubernetes/kubernetes/pull/51351), [@cmluciano](https://github.com/cmluciano))
-
-#### kube-proxy ipvs mode
-
-[alpha] Support ipvs mode for kube-proxy([#46580](https://github.com/kubernetes/kubernetes/pull/46580), [@haibinxie](https://github.com/haibinxie))
-
-### API Machinery
-
-#### kube-apiserver
-* Fixed an issue with `APIService` auto-registration. This issue affected rolling restarts of HA API servers that added or removed API groups being served.([#51921](https://github.com/kubernetes/kubernetes/pull/51921))
-
-* [Alpha] The Kubernetes API server now supports the ability to break large LIST calls into multiple smaller chunks. A client can specify a limit to the number of results to return. If more results exist, a token is returned that allows the client to continue the previous list call repeatedly until all results are retrieved. The resulting list is identical to a list call that does not perform chunking, thanks to capabilities provided by etcd3. This allows the server to use less memory and CPU when very large lists are returned. This feature is gated as APIListChunking and is not enabled by default. The 1.9 release will begin using this by default.([#48921](https://github.com/kubernetes/kubernetes/pull/48921))
-
-* Pods that are marked for deletion and have exceeded their grace period, but are not yet deleted, no longer count toward the resource quota.([#46542](https://github.com/kubernetes/kubernetes/pull/46542))
-
-
-#### Dynamic Admission Control
-
-* Pod spec is mutable when the pod is uninitialized. The API server requires the pod spec to be valid even if it's uninitialized. Updating the status field of uninitialized pods is invalid.([#51733](https://github.com/kubernetes/kubernetes/pull/51733))
-
-* Use of the alpha initializers feature now requires enabling the `Initializers` feature gate. This feature gate is automatically enabled if the `Initializers` admission plugin is enabled.([#51436](https://github.com/kubernetes/kubernetes/pull/51436))
-
-* [Action required] The validation rule for metadata.initializers.pending[x].name is tightened. The initializer name must contain at least three segments, separated by dots. You can create objects with pending initializers and not rely on the API server to add pending initializers according to `initializerConfiguration`. If you do so, update the initializer name in the existing objects and the configuration files to comply with the new validation rule.([#51283](https://github.com/kubernetes/kubernetes/pull/51283))
-
-* The webhook admission plugin now works even if the API server and the nodes are in two separate networks,for example, in GKE.
-The webhook admission plugin now lets the webhook author use the DNS name of the service as the CommonName when generating the server cert for the webhook.
-Action required:
-Regenerate the server cert for the admission webhooks. Previously, the CN value could be ignored while generating the server cert for the admission webhook. Now you must set it to the DNS name of the webhook service: `..svc`.([#50476](https://github.com/kubernetes/kubernetes/pull/50476))
-
-
-#### Custom Resource Definitions (CRDs)
-* [alpha] The CustomResourceDefinition API can now optionally
- [validate custom objects](https://kubernetes.io/docs/tasks/access-kubernetes-api/extend-api-custom-resource-definitions/#validation)
- based on a JSON schema provided in the CRD spec.
- Enable this alpha feature with the `CustomResourceValidation` feature gate in `kube-apiserver`.
-
-#### Garbage Collector
-* The garbage collector now supports custom APIs added via Custom Resource Definitions
- or aggregated API servers. The garbage collector controller refreshes periodically.
- Therefore, expect a latency of about 30 seconds between when an API is added and when
- the garbage collector starts to manage it.
-
-
-#### Monitoring/Prometheus
-* [action required] The WATCHLIST calls are now reported as WATCH verbs in prometheus for the apiserver_request_* series. A new "scope" label is added to all apiserver_request_* values that is either 'cluster', 'resource', or 'namespace' depending on which level the query is performed at.([#52237](https://github.com/kubernetes/kubernetes/pull/52237))
-
-
-#### Go Client
-* Add support for client-side spam filtering of events([#47367](https://github.com/kubernetes/kubernetes/pull/47367))
-
-
-## External Dependencies
-
-Continuous integration builds use Docker versions 1.11.2, 1.12.6, 1.13.1,
-and 17.03.2. These versions were validated on Kubernetes 1.8. However,
-consult an appropriate installation or upgrade guide before deciding what
-versions of Docker to use.
-
-- Docker 1.13.1 and 17.03.2
-
- - Shared PID namespace, live-restore, and overlay2 were validated.
-
- - **Known issues**
-
- - The default iptables FORWARD policy was changed from ACCEPT to
- DROP, which causes outbound container traffic to stop working by
- default. See
- [#40182](https://github.com/kubernetes/kubernetes/issues/40182) for
- the workaround.
-
- - The support for the v1 registries was removed.
-
-- Docker 1.12.6
-
- - Overlay2 and live-restore are not validated.
-
- - **Known issues**
-
- - Shared PID namespace does not work properly.
- ([#207](https://github.com/kubernetes/community/pull/207#issuecomment-281870043))
-
- - Docker reports incorrect exit codes for containers.
- ([#41516](https://github.com/kubernetes/kubernetes/issues/41516))
-
-- Docker 1.11.2
-
- - **Known issues**
-
- - Kernel crash with Aufs storage driver on Debian Jessie
- ([#27885](https://github.com/kubernetes/kubernetes/issues/27885)).
- The issue can be identified by using the node problem detector.
-
- - File descriptor leak on init/control.
- ([#275](https://github.com/containerd/containerd/issues/275))
-
- - Additional memory overhead per container.
- ([#21737](https://github.com/kubernetes/kubernetes/pull/21737))
-
- - Processes may be leaked when Docker is repeatedly terminated in a short
- time frame.
- ([#41450](https://github.com/kubernetes/kubernetes/issues/41450))
-- [v1.8.0-rc.1](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v180-rc1)
-- [v1.8.0-beta.1](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v180-beta1)
-- [v1.8.0-alpha.3](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v180-alpha3)
-- [v1.8.0-alpha.2](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v180-alpha2)
-- [v1.8.0-alpha.1](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG.md#v180-alpha1)
-
-
-
-# v1.8.0-rc.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.8/examples)
-
-## Downloads for v1.8.0-rc.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes.tar.gz) | `122d3ca2addb168c68e65a515bc42c21ad6c4bc71cb71591c699ba035765994b`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-src.tar.gz) | `8903266d4379f03059fcd9398d3bcd526b979b3c4b49e75aa13cce38de6f4e91`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-client-darwin-386.tar.gz) | `c4cae289498888db775abd833de1544adc632913e46879c6f770c931f29e5d3f`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-client-darwin-amd64.tar.gz) | `dd7081fc40e71be45cbae1bcd0f0932e5578d662a8054faea96c65efd1c1a134`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-client-linux-386.tar.gz) | `728265635b18db308a69ed249dc4a59658aa6db7d23bb3953923f1e54c2d620f`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-client-linux-amd64.tar.gz) | `2053862e5461f213c03381a9a05d70c0a28fdaf959600244257f6636ba92d058`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-client-linux-arm64.tar.gz) | `956cc6b5afb816734ff439e09323e56210293089858cb6deea92b8d3318463ac`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-client-linux-arm.tar.gz) | `eca7ff447699849db3ae2d76ac9dad07be86c2ebe652ef774639bf006499ddbc`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-client-linux-ppc64le.tar.gz) | `0d593c8034e54a683a629c034677b1c402e3e9516afcf174602e953818c8f0d1`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-client-linux-s390x.tar.gz) | `9a7c1771d710d78f4bf45ff41f1a312393a8ee8b0506ee09aeca449c3552a147`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-client-windows-386.tar.gz) | `345f50766c627e45f35705b72fb2f56e78cc824af123cf14f5a84954ac1d6c93`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-client-windows-amd64.tar.gz) | `ea98c0872fa6df3eb5af6f1a005c014a76a0b4b0af9a09fdf90d3bc6a7ee5725`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-server-linux-amd64.tar.gz) | `58799a02896f7d3c160088832186c8e9499c433e65f0f1eeb37763475e176473`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-server-linux-arm64.tar.gz) | `cd28ad39762cdf144e5191d4745e2629f37851265dfe44930295a0b13823a998`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-server-linux-arm.tar.gz) | `62c75adbe94d17163cbc3e8cbc4091fdb6f5e9dc90a8471aac3f9ee38e609d82`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-server-linux-ppc64le.tar.gz) | `cee4a1a33dec4facebfa6a1f7780aba6fee91f645fbc0a388e64e93c0d660b17`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-server-linux-s390x.tar.gz) | `b263139b615372dd95ce404b8e94a51594e7d22b25297934cb189d3c9078b4fb`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-node-linux-amd64.tar.gz) | `8d6688a224ebc5814e142d296072b7d2352fe86bd338539bd89ac9883b338c3d`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-node-linux-arm64.tar.gz) | `1db47ce33af16d8974028017738a6d211a3c7c0b6f0046f70ccc52875ef6cbdf`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-node-linux-arm.tar.gz) | `ec5eaddbb2a338ab16d801685f98746c465aad45b3d1dcf4dcfc361bd18eb124`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-node-linux-ppc64le.tar.gz) | `0ebf091215a2fcf1232a7f0eedf21f3786bbddae26619cf77098ab88670e1935`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-node-linux-s390x.tar.gz) | `7443c6753cc6e4d9591064ad87c619b27713f6bb45aef5dcabb1046c2d19f0f3`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0-rc.1/kubernetes-node-windows-amd64.tar.gz) | `b4bbb5521930fdc71dac52608c145e1e22cc2ab5e823492cbf1b7a46c317654a`
-
-## Changelog since v1.8.0-beta.1
-
-### Action Required
-
-* New GCE or GKE clusters created with `cluster/kube-up.sh` will not enable the legacy ABAC authorizer by default. If you would like to enable the legacy ABAC authorizer, export ENABLE_LEGACY_ABAC=true before running `cluster/kube-up.sh`. ([#51367](https://github.com/kubernetes/kubernetes/pull/51367), [@cjcullen](https://github.com/cjcullen))
-
-### Other notable changes
-
-* kubeadm: Use the release-1.8 branch by default ([#52085](https://github.com/kubernetes/kubernetes/pull/52085), [@luxas](https://github.com/luxas))
-* PersistentVolumeLabel admission controller is now deprecated. ([#52618](https://github.com/kubernetes/kubernetes/pull/52618), [@dims](https://github.com/dims))
-* Mark the LBaaS v1 of OpenStack cloud provider deprecated. ([#52821](https://github.com/kubernetes/kubernetes/pull/52821), [@FengyunPan](https://github.com/FengyunPan))
-* Mark image as deliberately optional in v1 Container struct. Many objects in the Kubernetes API inherit the container struct and only Pods require the field to be set. ([#48406](https://github.com/kubernetes/kubernetes/pull/48406), [@gyliu513](https://github.com/gyliu513))
-* [fluentd-gcp addon] Update Stackdriver plugin to version 0.6.7 ([#52565](https://github.com/kubernetes/kubernetes/pull/52565), [@crassirostris](https://github.com/crassirostris))
-* Remove duplicate proto errors in kubelet. ([#52132](https://github.com/kubernetes/kubernetes/pull/52132), [@adityadani](https://github.com/adityadani))
-* [fluentd-gcp addon] Remove audit logs from the fluentd configuration ([#52777](https://github.com/kubernetes/kubernetes/pull/52777), [@crassirostris](https://github.com/crassirostris))
-* Set defaults for successfulJobsHistoryLimit (3) and failedJobsHistoryLimit (1) in batch/v1beta1.CronJobs ([#52533](https://github.com/kubernetes/kubernetes/pull/52533), [@soltysh](https://github.com/soltysh))
-* Fix: update system spec to support Docker 17.03 ([#52666](https://github.com/kubernetes/kubernetes/pull/52666), [@yguo0905](https://github.com/yguo0905))
-* Fix panic in ControllerManager on GCE when it has a problem with creating external loadbalancer healthcheck ([#52646](https://github.com/kubernetes/kubernetes/pull/52646), [@gmarek](https://github.com/gmarek))
-* PSP: add support for using `*` as a value in `allowedCapabilities` to allow to request any capabilities ([#51337](https://github.com/kubernetes/kubernetes/pull/51337), [@php-coder](https://github.com/php-coder))
-* [fluentd-gcp addon] By default ingest apiserver audit logs written to file in JSON format. ([#52541](https://github.com/kubernetes/kubernetes/pull/52541), [@crassirostris](https://github.com/crassirostris))
-* The autoscaling/v2beta1 API group is now enabled by default. ([#52549](https://github.com/kubernetes/kubernetes/pull/52549), [@DirectXMan12](https://github.com/DirectXMan12))
-* Add CLUSTER_SIGNING_DURATION environment variable to cluster ([#52497](https://github.com/kubernetes/kubernetes/pull/52497), [@jcbsmpsn](https://github.com/jcbsmpsn))
- * configuration scripts to allow configuration of signing duration of
- * certificates issued via the Certificate Signing Request API.
-* Introduce policy to allow the HPA to consume the metrics.k8s.io and custom.metrics.k8s.io API groups. ([#52572](https://github.com/kubernetes/kubernetes/pull/52572), [@DirectXMan12](https://github.com/DirectXMan12))
-* kubelet to master communication when doing node status updates now has a timeout to prevent indefinite hangs ([#52176](https://github.com/kubernetes/kubernetes/pull/52176), [@liggitt](https://github.com/liggitt))
-* Introduced Metrics Server in version v0.2.0. For more details see https://github.com/kubernetes-incubator/metrics-server/releases/tag/v0.2.0. ([#52548](https://github.com/kubernetes/kubernetes/pull/52548), [@piosz](https://github.com/piosz))
-* Adds ROTATE_CERTIFICATES environment variable to kube-up.sh script for GCE ([#52115](https://github.com/kubernetes/kubernetes/pull/52115), [@jcbsmpsn](https://github.com/jcbsmpsn))
- * clusters. When that var is set to true, the command line flag enabling kubelet
- * client certificate rotation will be added to the kubelet command line.
-* Make sure that resources being updated are handled correctly by Quota system ([#52452](https://github.com/kubernetes/kubernetes/pull/52452), [@gnufied](https://github.com/gnufied))
-* WATCHLIST calls are now reported as WATCH verbs in prometheus for the apiserver_request_* series. A new "scope" label is added to all apiserver_request_* values that is either 'cluster', 'resource', or 'namespace' depending on which level the query is performed at. ([#52237](https://github.com/kubernetes/kubernetes/pull/52237), [@smarterclayton](https://github.com/smarterclayton))
-* Fixed the webhook admission plugin so that it works even if the apiserver and the nodes are in two networks (e.g., in GKE). ([#50476](https://github.com/kubernetes/kubernetes/pull/50476), [@caesarxuchao](https://github.com/caesarxuchao))
- * Fixed the webhook admission plugin so that webhook author could use the DNS name of the service as the CommonName when generating the server cert for the webhook.
- * Action required:
- * Anyone who generated server cert for admission webhooks need to regenerate the cert. Previously, when generating server cert for the admission webhook, the CN value doesn't matter. Now you must set it to the DNS name of the webhook service, i.e., `..svc`.
-* Ignore pods marked for deletion that exceed their grace period in ResourceQuota ([#46542](https://github.com/kubernetes/kubernetes/pull/46542), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* custom resources that use unconventional pluralization now work properly with kubectl and garbage collection ([#50012](https://github.com/kubernetes/kubernetes/pull/50012), [@deads2k](https://github.com/deads2k))
-* [fluentd-gcp addon] Fluentd will trim lines exceeding 100KB instead of dropping them. ([#52289](https://github.com/kubernetes/kubernetes/pull/52289), [@crassirostris](https://github.com/crassirostris))
-* dockershim: check the error when syncing the checkpoint. ([#52125](https://github.com/kubernetes/kubernetes/pull/52125), [@yujuhong](https://github.com/yujuhong))
-* By default, clusters on GCE no longer sends RequestReceived audit event, if advanced audit is configured. ([#52343](https://github.com/kubernetes/kubernetes/pull/52343), [@crassirostris](https://github.com/crassirostris))
-* [BugFix] Soft Eviction timer works correctly ([#52046](https://github.com/kubernetes/kubernetes/pull/52046), [@dashpole](https://github.com/dashpole))
-* Azuredisk mount on windows node ([#51252](https://github.com/kubernetes/kubernetes/pull/51252), [@andyzhangx](https://github.com/andyzhangx))
-* [fluentd-gcp addon] Bug with event-exporter leaking memory on metrics in clusters with CA is fixed. ([#52263](https://github.com/kubernetes/kubernetes/pull/52263), [@crassirostris](https://github.com/crassirostris))
-* kubeadm: Enable kubelet client certificate rotation ([#52196](https://github.com/kubernetes/kubernetes/pull/52196), [@luxas](https://github.com/luxas))
-* Scheduler predicate developer should respect equivalence class cache ([#52146](https://github.com/kubernetes/kubernetes/pull/52146), [@resouer](https://github.com/resouer))
-* The `kube-cloud-controller-manager` flag `--service-account-private-key-file` was non-functional and is now deprecated. ([#50289](https://github.com/kubernetes/kubernetes/pull/50289), [@liggitt](https://github.com/liggitt))
- * The `kube-cloud-controller-manager` flag `--use-service-account-credentials` is now honored consistently, regardless of whether `--service-account-private-key-file` was specified.
-* Fix credentials providers for docker sandbox image. ([#51870](https://github.com/kubernetes/kubernetes/pull/51870), [@feiskyer](https://github.com/feiskyer))
-* Fixed an issue looking up cronjobs when they existed in more than one API version ([#52227](https://github.com/kubernetes/kubernetes/pull/52227), [@liggitt](https://github.com/liggitt))
-* Add priority-based preemption to the scheduler. ([#50949](https://github.com/kubernetes/kubernetes/pull/50949), [@bsalamat](https://github.com/bsalamat))
-* Add CLUSTER_SIGNING_DURATION environment variable to cluster configuration scripts ([#51844](https://github.com/kubernetes/kubernetes/pull/51844), [@jcbsmpsn](https://github.com/jcbsmpsn))
- * to allow configuration of signing duration of certificates issued via the Certificate
- * Signing Request API.
-* Adding German translation for kubectl ([#51867](https://github.com/kubernetes/kubernetes/pull/51867), [@Steffen911](https://github.com/Steffen911))
-* The ScaleIO volume plugin can now read the SDC GUID value as node label scaleio.sdcGuid; if binary drv_cfg is not installed, the plugin will still work properly; if node label not found, it defaults to drv_cfg if installed. ([#50780](https://github.com/kubernetes/kubernetes/pull/50780), [@vladimirvivien](https://github.com/vladimirvivien))
-* A policy with 0 rules should return an error ([#51782](https://github.com/kubernetes/kubernetes/pull/51782), [@charrywanganthony](https://github.com/charrywanganthony))
-* Log a warning when --audit-policy-file not passed to apiserver ([#52071](https://github.com/kubernetes/kubernetes/pull/52071), [@CaoShuFeng](https://github.com/CaoShuFeng))
-
-
-
-# v1.8.0-beta.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.8/examples)
-
-## Downloads for v1.8.0-beta.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes.tar.gz) | `261e5ad47a718bcbb65c163f8e1130097e2d077541d6a68f3270de4e7256d796`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-src.tar.gz) | `e414e75cd1c72ca1fd202f6f0042ba1884b87bc6809bc2493ea2654c3d965656`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-client-darwin-386.tar.gz) | `b7745121e8d7074170f1ce8ded0fbc78b84abe8f8371933e97b76ba5551f26d8`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | `4cc45a3a5dbd2ca666ea6dc2a973a17929c1427f5c3296224eade50d8df10b9e`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-client-linux-386.tar.gz) | `a1dce30675b33e2c18a1343ee15556c9c65e85ee3c2b88f3cac414d95514a902`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | `7fa5bbdc4af80a7ce00c5939896e8e93e962a66d195a95878f1e1fe4a06a5272`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | `7d54528f892d3247e22093861c48407e7dc001304bb168cf8c882227d96fd6b2`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-client-linux-arm.tar.gz) | `17c074ae407b012b4bb2c88975c182df0317fefea98700fdadee12c70d114498`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | `074801a87eedd2e93bdeb894822a70aa371983aafce86f66ed473a1a3bf4628b`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | `2eb743f160b970a183b3ec81fc50108df2352b8a0c31951babb26e2c28fc8360`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-client-windows-386.tar.gz) | `21e5686253052773d7e4baa08fd4ce56c861ad01d49d87df0eb80f56801e7cc4`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | `07d2446c917cf749b38fa2bcaa2bd64af743df2ba19ad4b480c07be166f9ab16`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | `811eb1645f8691e5cf7f75ae8ab26e90cf0b36a69254f73c0ed4ba91f4c0db99`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | `e05c53ce80354d2776aa6832e074730aa35521f64ebf03a6c5a7753e7f2df8a3`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-server-linux-arm.tar.gz) | `57bc90e040faefa6af23b8637e8221a06282041ec9a16c2a630cc655d3c170df`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | `4feb30aef4f79954907fdec34d4b7d2985917abd8e35b34a9440a468889cb240`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | `85c0aaff6e832f711fb572582f10d9fe172c4d0680ac7589d1ec6e54742c436c`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-node-linux-amd64.tar.gz) | `5809dce1c13d05c7c85bddc4d31804b30c55fe70209c9d89b137598c25db863e`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-node-linux-arm64.tar.gz) | `d70c9d99f4b155b755728029036f68d79cff1648cfd3de257e3f2ce29bc07a31`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-node-linux-arm.tar.gz) | `efa29832aea28817466e25b55375574f314848c806d76fa0e4874f835399e9f0`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-node-linux-ppc64le.tar.gz) | `991507d4cd2014e776d63ae7a14b3bbbbf49597211d4fa1751701f21fbf44417`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-node-linux-s390x.tar.gz) | `4e1bd8e4465b2761632093a1235b788cc649af74d42dec297a97de8a0f764e46`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0-beta.1/kubernetes-node-windows-amd64.tar.gz) | `4f80d4c269c6f05fb30c8c682f1cdbe46f3f0e86ac7ca4b84a1ab0a835bfb24a`
-
-## Changelog since v1.8.0-alpha.3
-
-### Action Required
-
-* The OwnerReferencesPermissionEnforcement admission plugin now requires `update` permission on the `finalizers` subresource of the referenced owner in order to set `blockOwnerDeletion` on an owner reference. ([#49133](https://github.com/kubernetes/kubernetes/pull/49133), [@deads2k](https://github.com/deads2k))
-* The deprecated alpha and beta initContainer annotations are no longer supported. Init containers must be specified using the initContainers field in the pod spec. ([#51816](https://github.com/kubernetes/kubernetes/pull/51816), [@liggitt](https://github.com/liggitt))
-* Action required: validation rule on metadata.initializers.pending[x].name is tightened. The initializer name needs to contain at least three segments separated by dots. If you create objects with pending initializers, (i.e., not relying on apiserver adding pending initializers according to initializerconfiguration), you need to update the initializer name in existing objects and in configuration files to comply to the new validation rule. ([#51283](https://github.com/kubernetes/kubernetes/pull/51283), [@caesarxuchao](https://github.com/caesarxuchao))
-* Audit policy supports matching subresources and resource names, but the top level resource no longer matches the subresouce. For example "pods" no longer matches requests to the logs subresource of pods. Use "pods/logs" to match subresources. ([#48836](https://github.com/kubernetes/kubernetes/pull/48836), [@ericchiang](https://github.com/ericchiang))
-* Protobuf serialization does not distinguish between `[]` and `null`. ([#45294](https://github.com/kubernetes/kubernetes/pull/45294), [@liggitt](https://github.com/liggitt))
- * API fields previously capable of storing and returning either `[]` and `null` via JSON API requests (for example, the Endpoints `subsets` field) can now store only `null` when created using the protobuf content-type or stored in etcd using protobuf serialization (the default in 1.6+). JSON API clients should tolerate `null` values for such fields, and treat `null` and `[]` as equivalent in meaning unless specifically documented otherwise for a particular field.
-
-### Other notable changes
-
-* Fixes an issue with upgrade requests made via pod/service/node proxy subresources sending a non-absolute HTTP request-uri to backends ([#52065](https://github.com/kubernetes/kubernetes/pull/52065), [@liggitt](https://github.com/liggitt))
-* kubeadm: add `kubeadm phase addons` command ([#51171](https://github.com/kubernetes/kubernetes/pull/51171), [@andrewrynhard](https://github.com/andrewrynhard))
-* v2 of the autoscaling API group, including improvements to the HorizontalPodAutoscaler, has moved from alpha1 to beta1. ([#50708](https://github.com/kubernetes/kubernetes/pull/50708), [@DirectXMan12](https://github.com/DirectXMan12))
-* Fixed a bug where some alpha features were enabled by default. ([#51839](https://github.com/kubernetes/kubernetes/pull/51839), [@jennybuckley](https://github.com/jennybuckley))
-* Implement StatsProvider interface using CRI stats ([#51557](https://github.com/kubernetes/kubernetes/pull/51557), [@yguo0905](https://github.com/yguo0905))
-* set AdvancedAuditing feature gate to true by default ([#51943](https://github.com/kubernetes/kubernetes/pull/51943), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Migrate the metrics/v1alpha1 API to metrics/v1beta1. The HorizontalPodAutoscaler ([#51653](https://github.com/kubernetes/kubernetes/pull/51653), [@DirectXMan12](https://github.com/DirectXMan12))
- * controller REST client now uses that version. For v1beta1, the API is now known as
- * resource-metrics.metrics.k8s.io.
-* In GCE with COS, increase TasksMax for Docker service to raise cap on number of threads/processes used by containers. ([#51986](https://github.com/kubernetes/kubernetes/pull/51986), [@yujuhong](https://github.com/yujuhong))
-* Fixes an issue with APIService auto-registration affecting rolling HA apiserver restarts that add or remove API groups being served. ([#51921](https://github.com/kubernetes/kubernetes/pull/51921), [@liggitt](https://github.com/liggitt))
-* Sharing a PID namespace between containers in a pod is disabled by default in 1.8. To enable for a node, use the --docker-disable-shared-pid=false kubelet flag. Note that PID namespace sharing requires docker >= 1.13.1. ([#51634](https://github.com/kubernetes/kubernetes/pull/51634), [@verb](https://github.com/verb))
-* Build test targets for all server platforms ([#51873](https://github.com/kubernetes/kubernetes/pull/51873), [@luxas](https://github.com/luxas))
-* Add EgressRule to NetworkPolicy ([#51351](https://github.com/kubernetes/kubernetes/pull/51351), [@cmluciano](https://github.com/cmluciano))
-* Allow DNS resolution of service name for COS using containerized mounter. It fixed the issue with DNS resolution of NFS and Gluster services. ([#51645](https://github.com/kubernetes/kubernetes/pull/51645), [@jingxu97](https://github.com/jingxu97))
-* Fix journalctl leak on kubelet restart ([#51751](https://github.com/kubernetes/kubernetes/pull/51751), [@dashpole](https://github.com/dashpole))
- * Fix container memory rss
- * Add hugepages monitoring support
- * Fix incorrect CPU usage metrics with 4.7 kernel
- * Add tmpfs monitoring support
-* Support for Huge pages in empty_dir volume plugin ([#50072](https://github.com/kubernetes/kubernetes/pull/50072), [@squall0gd](https://github.com/squall0gd))
- * [Huge pages](https://www.kernel.org/doc/Documentation/vm/hugetlbpage.txt) can now be used with empty dir volume plugin.
-* Alpha support for pre-allocated hugepages ([#50859](https://github.com/kubernetes/kubernetes/pull/50859), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* add support for client-side spam filtering of events ([#47367](https://github.com/kubernetes/kubernetes/pull/47367), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Provide a way to omit Event stages in audit policy ([#49280](https://github.com/kubernetes/kubernetes/pull/49280), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Introduced Metrics Server ([#51792](https://github.com/kubernetes/kubernetes/pull/51792), [@piosz](https://github.com/piosz))
-* Implement Controller for growing persistent volumes ([#49727](https://github.com/kubernetes/kubernetes/pull/49727), [@gnufied](https://github.com/gnufied))
-* Kubernetes 1.8 supports docker version 1.11.x, 1.12.x and 1.13.x. And also supports overlay2. ([#51845](https://github.com/kubernetes/kubernetes/pull/51845), [@Random-Liu](https://github.com/Random-Liu))
-* The Deployment, DaemonSet, and ReplicaSet kinds in the extensions/v1beta1 group version are now deprecated, as are the Deployment, StatefulSet, and ControllerRevision kinds in apps/v1beta1. As they will not be removed until after a GA version becomes available, you may continue to use these kinds in existing code. However, all new code should be developed against the apps/v1beta2 group version. ([#51828](https://github.com/kubernetes/kubernetes/pull/51828), [@kow3ns](https://github.com/kow3ns))
-* kubeadm: Detect kubelet readiness and error out if the kubelet is unhealthy ([#51369](https://github.com/kubernetes/kubernetes/pull/51369), [@luxas](https://github.com/luxas))
-* Fix providerID update validation ([#51761](https://github.com/kubernetes/kubernetes/pull/51761), [@karataliu](https://github.com/karataliu))
-* Calico has been updated to v2.5, RBAC added, and is now automatically scaled when GCE clusters are resized. ([#51237](https://github.com/kubernetes/kubernetes/pull/51237), [@gunjan5](https://github.com/gunjan5))
-* Add backoff policy and failed pod limit for a job ([#51153](https://github.com/kubernetes/kubernetes/pull/51153), [@clamoriniere1A](https://github.com/clamoriniere1A))
-* Adds a new alpha EventRateLimit admission control that is used to limit the number of event queries that are accepted by the API Server. ([#50925](https://github.com/kubernetes/kubernetes/pull/50925), [@staebler](https://github.com/staebler))
-* The OpenID Connect authenticator can now use a custom prefix, or omit the default prefix, for username and groups claims through the --oidc-username-prefix and --oidc-groups-prefix flags. For example, the authenticator can map a user with the username "jane" to "google:jane" by supplying the "google:" username prefix. ([#50875](https://github.com/kubernetes/kubernetes/pull/50875), [@ericchiang](https://github.com/ericchiang))
-* Implemented `kubeadm upgrade plan` for checking whether you can upgrade your cluster to a newer version ([#48899](https://github.com/kubernetes/kubernetes/pull/48899), [@luxas](https://github.com/luxas))
- * Implemented `kubeadm upgrade apply` for upgrading your cluster from one version to an other
-* Switch to audit.k8s.io/v1beta1 in audit. ([#51719](https://github.com/kubernetes/kubernetes/pull/51719), [@soltysh](https://github.com/soltysh))
-* update QEMU version to v2.9.1 ([#50597](https://github.com/kubernetes/kubernetes/pull/50597), [@dixudx](https://github.com/dixudx))
-* controllers backoff better in face of quota denial ([#49142](https://github.com/kubernetes/kubernetes/pull/49142), [@joelsmith](https://github.com/joelsmith))
-* The event table output under `kubectl describe` has been simplified to show only the most essential info. ([#51748](https://github.com/kubernetes/kubernetes/pull/51748), [@smarterclayton](https://github.com/smarterclayton))
-* Use arm32v7|arm64v8 images instead of the deprecated armhf|aarch64 image organizations ([#50602](https://github.com/kubernetes/kubernetes/pull/50602), [@dixudx](https://github.com/dixudx))
-* audit newest impersonated user info in the ResponseStarted, ResponseComplete audit stage ([#48184](https://github.com/kubernetes/kubernetes/pull/48184), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Fixed bug in AWS provider to handle multiple IPs when using more than 1 network interface per ec2 instance. ([#50112](https://github.com/kubernetes/kubernetes/pull/50112), [@jlz27](https://github.com/jlz27))
-* Add flag "--include-uninitialized" to kubectl annotate, apply, edit-last-applied, delete, describe, edit, get, label, set. "--include-uninitialized=true" makes kubectl commands apply to uninitialized objects, which by default are ignored if the names of the objects are not provided. "--all" also makes kubectl commands apply to uninitialized objects. Please see the [initializer](https://kubernetes.io/docs/admin/extensible-admission-controllers/) doc for more details. ([#50497](https://github.com/kubernetes/kubernetes/pull/50497), [@dixudx](https://github.com/dixudx))
-* GCE: Service object now supports "Network Tiers" as an Alpha feature via annotations. ([#51301](https://github.com/kubernetes/kubernetes/pull/51301), [@yujuhong](https://github.com/yujuhong))
-* When using kube-up.sh on GCE, user could set env `ENABLE_POD_PRIORITY=true` to enable pod priority feature gate. ([#51069](https://github.com/kubernetes/kubernetes/pull/51069), [@MrHohn](https://github.com/MrHohn))
-* The names generated for ControllerRevision and ReplicaSet are consistent with the GenerateName functionality of the API Server and will not contain "bad words". ([#51538](https://github.com/kubernetes/kubernetes/pull/51538), [@kow3ns](https://github.com/kow3ns))
-* PersistentVolumeClaim metrics like "volume_stats_inodes" and "volume_stats_capacity_bytes" are now reported via kubelet prometheus ([#51553](https://github.com/kubernetes/kubernetes/pull/51553), [@wongma7](https://github.com/wongma7))
-* When using IP aliases, use a secondary range rather than subnetwork to reserve cluster IPs. ([#51690](https://github.com/kubernetes/kubernetes/pull/51690), [@bowei](https://github.com/bowei))
-* IPAM controller unifies handling of node pod CIDR range allocation. ([#51374](https://github.com/kubernetes/kubernetes/pull/51374), [@bowei](https://github.com/bowei))
- * It is intended to supersede the logic that is currently in range_allocator
- * and cloud_cidr_allocator. (ALPHA FEATURE)
- * Note: for this change, the other allocators still exist and are the default.
- * It supports two modes:
- * CIDR range allocations done within the cluster that are then propagated out to the cloud provider.
- * Cloud provider managed IPAM that is then reflected into the cluster.
-* Alpha list paging implementation ([#48921](https://github.com/kubernetes/kubernetes/pull/48921), [@smarterclayton](https://github.com/smarterclayton))
-* add reconcile command to kubectl auth ([#51636](https://github.com/kubernetes/kubernetes/pull/51636), [@deads2k](https://github.com/deads2k))
-* Advanced audit allows logging failed login attempts ([#51119](https://github.com/kubernetes/kubernetes/pull/51119), [@soltysh](https://github.com/soltysh))
-* kubeadm: Add support for using an external CA whose key is never stored in the cluster ([#50832](https://github.com/kubernetes/kubernetes/pull/50832), [@nckturner](https://github.com/nckturner))
-* the custom metrics API (custom.metrics.k8s.io) has moved from v1alpha1 to v1beta1 ([#50920](https://github.com/kubernetes/kubernetes/pull/50920), [@DirectXMan12](https://github.com/DirectXMan12))
-* Add backoff policy and failed pod limit for a job ([#48075](https://github.com/kubernetes/kubernetes/pull/48075), [@clamoriniere1A](https://github.com/clamoriniere1A))
-* Performs validation (when applying for example) against OpenAPI schema rather than Swagger 1.0. ([#51364](https://github.com/kubernetes/kubernetes/pull/51364), [@apelisse](https://github.com/apelisse))
-* Make all e2e tests lookup image to use from a centralized place. In that centralized place, add support for multiple platforms. ([#49457](https://github.com/kubernetes/kubernetes/pull/49457), [@mkumatag](https://github.com/mkumatag))
-* kubelet has alpha support for mount propagation. It is disabled by default and it is there for testing only. This feature may be redesigned or even removed in a future release. ([#46444](https://github.com/kubernetes/kubernetes/pull/46444), [@jsafrane](https://github.com/jsafrane))
-* Add selfsubjectrulesreview API for allowing users to query which permissions they have in a given namespace. ([#48051](https://github.com/kubernetes/kubernetes/pull/48051), [@xilabao](https://github.com/xilabao))
-* Kubelet re-binds /var/lib/kubelet directory with rshared mount propagation during startup if it is not shared yet. ([#45724](https://github.com/kubernetes/kubernetes/pull/45724), [@jsafrane](https://github.com/jsafrane))
-* Deviceplugin jiayingz ([#51209](https://github.com/kubernetes/kubernetes/pull/51209), [@jiayingz](https://github.com/jiayingz))
-* Make logdump support kubemark and support gke with 'use_custom_instance_list' ([#51834](https://github.com/kubernetes/kubernetes/pull/51834), [@shyamjvs](https://github.com/shyamjvs))
-* add apps/v1beta2 conversion test ([#49645](https://github.com/kubernetes/kubernetes/pull/49645), [@dixudx](https://github.com/dixudx))
-* Fixed an issue ([#47800](https://github.com/kubernetes/kubernetes/pull/47800)) where `kubectl logs -f` failed with `unexpected stream type ""`. ([#50381](https://github.com/kubernetes/kubernetes/pull/50381), [@sczizzo](https://github.com/sczizzo))
-* GCE: Internal load balancer IPs are now reserved during service sync to prevent losing the address to another service. ([#51055](https://github.com/kubernetes/kubernetes/pull/51055), [@nicksardo](https://github.com/nicksardo))
-* Switch JSON marshal/unmarshal to json-iterator library. Performance should be close to previous with no generated code. ([#48287](https://github.com/kubernetes/kubernetes/pull/48287), [@thockin](https://github.com/thockin))
-* Adds optional group and version information to the discovery interface, so that if an endpoint uses non-default values, the proper value of "kind" can be determined. Scale is a common example. ([#49971](https://github.com/kubernetes/kubernetes/pull/49971), [@deads2k](https://github.com/deads2k))
-* [#43077](https://github.com/kubernetes/kubernetes/pull/43077) introduced a condition where DaemonSet controller did not respect the TerminationGracePeriodSeconds of the Pods it created. This is now corrected. ([#51279](https://github.com/kubernetes/kubernetes/pull/51279), [@kow3ns](https://github.com/kow3ns))
-* Add a persistent volume label controller to the cloud-controller-manager ([#44680](https://github.com/kubernetes/kubernetes/pull/44680), [@rrati](https://github.com/rrati))
-* Tainted nodes by conditions as following: ([#49257](https://github.com/kubernetes/kubernetes/pull/49257), [@k82cn](https://github.com/k82cn))
- * 'node.kubernetes.io/network-unavailable=:NoSchedule' if NetworkUnavailable is true
- * 'node.kubernetes.io/disk-pressure=:NoSchedule' if DiskPressure is true
- * 'node.kubernetes.io/memory-pressure=:NoSchedule' if MemoryPressure is true
- * 'node.kubernetes.io/out-of-disk=:NoSchedule' if OutOfDisk is true
-* rbd: default image format to v2 instead of deprecated v1 ([#51574](https://github.com/kubernetes/kubernetes/pull/51574), [@dillaman](https://github.com/dillaman))
-* Surface reasonable error when client detects connection closed. ([#51381](https://github.com/kubernetes/kubernetes/pull/51381), [@mengqiy](https://github.com/mengqiy))
-* Allow PSP's to specify a whitelist of allowed paths for host volume ([#50212](https://github.com/kubernetes/kubernetes/pull/50212), [@jhorwit2](https://github.com/jhorwit2))
-* For Deployment, ReplicaSet, and DaemonSet, selectors are now immutable when updating via the new `apps/v1beta2` API. For backward compatibility, selectors can still be changed when updating via `apps/v1beta1` or `extensions/v1beta1`. ([#50719](https://github.com/kubernetes/kubernetes/pull/50719), [@crimsonfaith91](https://github.com/crimsonfaith91))
-* Allows kubectl to use http caching mechanism for the OpenAPI schema. The cache directory can be configured through `--cache-dir` command line flag to kubectl. If set to empty string, caching will be disabled. ([#50404](https://github.com/kubernetes/kubernetes/pull/50404), [@apelisse](https://github.com/apelisse))
-* Pod log attempts are now reported in apiserver prometheus metrics with verb `CONNECT` since they can run for very long periods of time. ([#50123](https://github.com/kubernetes/kubernetes/pull/50123), [@WIZARD-CXY](https://github.com/WIZARD-CXY))
-* The `emptyDir.sizeLimit` field is now correctly omitted from API requests and responses when unset. ([#50163](https://github.com/kubernetes/kubernetes/pull/50163), [@jingxu97](https://github.com/jingxu97))
-* Promote CronJobs to batch/v1beta1. ([#51465](https://github.com/kubernetes/kubernetes/pull/51465), [@soltysh](https://github.com/soltysh))
-* Add local ephemeral storage support to LimitRange ([#50757](https://github.com/kubernetes/kubernetes/pull/50757), [@NickrenREN](https://github.com/NickrenREN))
-* Add mount options field to StorageClass. The options listed there are automatically added to PVs provisioned using the class. ([#51228](https://github.com/kubernetes/kubernetes/pull/51228), [@wongma7](https://github.com/wongma7))
-* Implement IPVS-based in-cluster service load balancing ([#46580](https://github.com/kubernetes/kubernetes/pull/46580), [@dujun1990](https://github.com/dujun1990))
-* Release the kubelet client certificate rotation as beta. ([#51045](https://github.com/kubernetes/kubernetes/pull/51045), [@jcbsmpsn](https://github.com/jcbsmpsn))
-* Adds --append-hash flag to kubectl create configmap/secret, which will append a short hash of the configmap/secret contents to the name during creation. ([#49961](https://github.com/kubernetes/kubernetes/pull/49961), [@mtaufen](https://github.com/mtaufen))
-* Add validation for CustomResources via JSON Schema. ([#47263](https://github.com/kubernetes/kubernetes/pull/47263), [@nikhita](https://github.com/nikhita))
-* enqueue a sync task to wake up jobcontroller to check job ActiveDeadlineSeconds in time ([#48454](https://github.com/kubernetes/kubernetes/pull/48454), [@weiwei04](https://github.com/weiwei04))
-* Remove previous local ephemeral storage resource names: "ResourceStorageOverlay" and "ResourceStorageScratch" ([#51425](https://github.com/kubernetes/kubernetes/pull/51425), [@NickrenREN](https://github.com/NickrenREN))
-* Add `retainKeys` to patchStrategy for v1 Volumes and extentions/v1beta1 DeploymentStrategy. ([#50296](https://github.com/kubernetes/kubernetes/pull/50296), [@mengqiy](https://github.com/mengqiy))
-* Add mount options field to PersistentVolume spec ([#50919](https://github.com/kubernetes/kubernetes/pull/50919), [@wongma7](https://github.com/wongma7))
-* Use of the alpha initializers feature now requires enabling the `Initializers` feature gate. This feature gate is auto-enabled if the `Initialzers` admission plugin is enabled. ([#51436](https://github.com/kubernetes/kubernetes/pull/51436), [@liggitt](https://github.com/liggitt))
-* Fix inconsistent Prometheus cAdvisor metrics ([#51473](https://github.com/kubernetes/kubernetes/pull/51473), [@bboreham](https://github.com/bboreham))
-* Add local ephemeral storage to downward API ([#50435](https://github.com/kubernetes/kubernetes/pull/50435), [@NickrenREN](https://github.com/NickrenREN))
-* kubectl zsh autocompletion will work with compinit ([#50561](https://github.com/kubernetes/kubernetes/pull/50561), [@cblecker](https://github.com/cblecker))
-* When using kube-up.sh on GCE, user could set env `KUBE_PROXY_DAEMONSET=true` to run kube-proxy as a DaemonSet. kube-proxy is run as static pods by default. ([#50705](https://github.com/kubernetes/kubernetes/pull/50705), [@MrHohn](https://github.com/MrHohn))
-* Add --request-timeout to kube-apiserver to make global request timeout configurable. ([#51415](https://github.com/kubernetes/kubernetes/pull/51415), [@jpbetz](https://github.com/jpbetz))
-* Deprecate auto detecting cloud providers in kubelet. Auto detecting cloud providers go against the initiative for out-of-tree cloud providers as we'll now depend on cAdvisor integrations with cloud providers instead of the core repo. In the near future, `--cloud-provider` for kubelet will either be an empty string or `external`. ([#51312](https://github.com/kubernetes/kubernetes/pull/51312), [@andrewsykim](https://github.com/andrewsykim))
-* Add local ephemeral storage support to Quota ([#49610](https://github.com/kubernetes/kubernetes/pull/49610), [@NickrenREN](https://github.com/NickrenREN))
-* Kubelet updates default labels if those are deprecated ([#47044](https://github.com/kubernetes/kubernetes/pull/47044), [@mrIncompetent](https://github.com/mrIncompetent))
-* Add error count and time-taken metrics for storage operations such as mount and attach, per-volume-plugin. ([#50036](https://github.com/kubernetes/kubernetes/pull/50036), [@wongma7](https://github.com/wongma7))
-* A new predicates, named 'CheckNodeCondition', was added to replace node condition filter. 'NetworkUnavailable', 'OutOfDisk' and 'NotReady' maybe reported as a reason when failed to schedule pods. ([#51117](https://github.com/kubernetes/kubernetes/pull/51117), [@k82cn](https://github.com/k82cn))
-* Add support for configurable groups for bootstrap token authentication. ([#50933](https://github.com/kubernetes/kubernetes/pull/50933), [@mattmoyer](https://github.com/mattmoyer))
-* Fix forbidden message format ([#49006](https://github.com/kubernetes/kubernetes/pull/49006), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* make volumesInUse sorted in node status updates ([#49849](https://github.com/kubernetes/kubernetes/pull/49849), [@dixudx](https://github.com/dixudx))
-* Adds `InstanceExists` and `InstanceExistsByProviderID` to cloud provider interface for the cloud controller manager ([#51087](https://github.com/kubernetes/kubernetes/pull/51087), [@prydie](https://github.com/prydie))
-* Dynamic Flexvolume plugin discovery. Flexvolume plugins can now be discovered on the fly rather than only at system initialization time. ([#50031](https://github.com/kubernetes/kubernetes/pull/50031), [@verult](https://github.com/verult))
-* add fieldSelector spec.schedulerName ([#50582](https://github.com/kubernetes/kubernetes/pull/50582), [@dixudx](https://github.com/dixudx))
-* Change eviction manager to manage one single local ephemeral storage resource ([#50889](https://github.com/kubernetes/kubernetes/pull/50889), [@NickrenREN](https://github.com/NickrenREN))
-* Cloud Controller Manager now sets Node.Spec.ProviderID ([#50730](https://github.com/kubernetes/kubernetes/pull/50730), [@andrewsykim](https://github.com/andrewsykim))
-* Paramaterize session affinity timeout seconds in service API for Client IP based session affinity. ([#49850](https://github.com/kubernetes/kubernetes/pull/49850), [@m1093782566](https://github.com/m1093782566))
-* Changing scheduling part of the alpha feature 'LocalStorageCapacityIsolation' to manage one single local ephemeral storage resource ([#50819](https://github.com/kubernetes/kubernetes/pull/50819), [@NickrenREN](https://github.com/NickrenREN))
-* set --audit-log-format default to json ([#50971](https://github.com/kubernetes/kubernetes/pull/50971), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* kubeadm: Implement a `--dry-run` mode and flag for `kubeadm` ([#51122](https://github.com/kubernetes/kubernetes/pull/51122), [@luxas](https://github.com/luxas))
-* kubectl rollout `history`, `status`, and `undo` subcommands now support StatefulSets. ([#49674](https://github.com/kubernetes/kubernetes/pull/49674), [@crimsonfaith91](https://github.com/crimsonfaith91))
-* Add IPBlock to Network Policy ([#50033](https://github.com/kubernetes/kubernetes/pull/50033), [@cmluciano](https://github.com/cmluciano))
-* Adding Italian translation for kubectl ([#50155](https://github.com/kubernetes/kubernetes/pull/50155), [@lucab85](https://github.com/lucab85))
-* Simplify capabilities handling in FlexVolume. ([#51169](https://github.com/kubernetes/kubernetes/pull/51169), [@MikaelCluseau](https://github.com/MikaelCluseau))
-* cloudprovider.Zones should support external cloud providers ([#50858](https://github.com/kubernetes/kubernetes/pull/50858), [@andrewsykim](https://github.com/andrewsykim))
-* Finalizers are now honored on custom resources, and on other resources even when garbage collection is disabled via the apiserver flag `--enable-garbage-collector=false` ([#51148](https://github.com/kubernetes/kubernetes/pull/51148), [@ironcladlou](https://github.com/ironcladlou))
-* Renamed the API server flag `--experimental-bootstrap-token-auth` to `--enable-bootstrap-token-auth`. The old value is accepted with a warning in 1.8 and will be removed in 1.9. ([#51198](https://github.com/kubernetes/kubernetes/pull/51198), [@mattmoyer](https://github.com/mattmoyer))
-* Azure file persistent volumes can use a new `secretNamespace` field to reference a secret in a different namespace than the one containing their bound persistent volume claim. The azure file persistent volume provisioner honors a corresponding `secretNamespace` storage class parameter to determine where to place secrets containing the storage account key. ([#47660](https://github.com/kubernetes/kubernetes/pull/47660), [@rootfs](https://github.com/rootfs))
-* Bumped gRPC version to 1.3.0 ([#51154](https://github.com/kubernetes/kubernetes/pull/51154), [@RenaudWasTaken](https://github.com/RenaudWasTaken))
-* Delete load balancers if the UIDs for services don't match. ([#50539](https://github.com/kubernetes/kubernetes/pull/50539), [@brendandburns](https://github.com/brendandburns))
-* Show events when describing service accounts ([#51035](https://github.com/kubernetes/kubernetes/pull/51035), [@mrogers950](https://github.com/mrogers950))
-* implement proposal 34058: hostPath volume type ([#46597](https://github.com/kubernetes/kubernetes/pull/46597), [@dixudx](https://github.com/dixudx))
-* HostAlias is now supported for both non-HostNetwork Pods and HostNetwork Pods. ([#50646](https://github.com/kubernetes/kubernetes/pull/50646), [@rickypai](https://github.com/rickypai))
-* CRDs support metadata.generation and implement spec/status split ([#50764](https://github.com/kubernetes/kubernetes/pull/50764), [@nikhita](https://github.com/nikhita))
-* Allow attach of volumes to multiple nodes for vSphere ([#51066](https://github.com/kubernetes/kubernetes/pull/51066), [@BaluDontu](https://github.com/BaluDontu))
-
-
-
-# v1.8.0-alpha.3
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/master/examples)
-
-## Downloads for v1.8.0-alpha.3
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes.tar.gz) | `c99042c4826352b724dc02c8d92c01c49e1ad1663d2c55e0bce931fe4d76c1e3`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-src.tar.gz) | `3ee0cd3594bd5b326f042044d87e120fe335bd8e722635220dd5741485ab3493`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-client-darwin-386.tar.gz) | `c716e167383d118373d7b10425bb8db6033675e4520591017c688575f28a596d`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-client-darwin-amd64.tar.gz) | `dfe87cad00600049c841c8fd96c49088d4f7cdd34e5a903ef8048f75718f2d21`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-client-linux-386.tar.gz) | `97242dffee822cbf4e3e373acf05e9dc2f40176b18f4532a60264ecf92738356`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-client-linux-amd64.tar.gz) | `42e25e810333b00434217bae0aece145f82d0c7043faea83ff62bed079bae651`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-client-linux-arm64.tar.gz) | `7f9683c90dc894ee8cd7ad30ec58d0d49068d35478a71b315d2b7805ec28e14a`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-client-linux-arm.tar.gz) | `76347a154128e97cdd81674045b28035d89d509b35dda051f2cbc58c9b67fed4`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-client-linux-ppc64le.tar.gz) | `c991cbbf0afa6eccd005b6e5ea28b0b20ecbc79ab7d64e32c24e03fcf05b48ff`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-client-linux-s390x.tar.gz) | `94c2c29e8fd20d2a5c4f96098bd5c7d879a78e872f59c3c58ca1c775a57ddefb`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-client-windows-386.tar.gz) | `bc98fd5dc01c6e6117c2c78d65884190bf99fd1fec0904e2af05e6dbf503ccc8`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-client-windows-amd64.tar.gz) | `e32b56dbc69045b5b2821a2e3eb3c3b4a18cf4c11afd44e0c7c9c0e67bb38d02`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-server-linux-amd64.tar.gz) | `5446addff583b0dc977b91375f3c399242f7996e1f66f52b9e14c015add3bf13`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-server-linux-arm64.tar.gz) | `91e3cffed119b5105f6a6f74f583113384a26c746b459029c12babf45f680119`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-server-linux-arm.tar.gz) | `d4cb93787651193ef4fdd1d10a4822101586b2994d6b0e04d064687df8729910`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-server-linux-ppc64le.tar.gz) | `916e7f63a4e0c67d9f106fdda6eb24efcc94356b05cd9eb288e45fac9ff79fe8`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-server-linux-s390x.tar.gz) | `15b999b08f5fe0d8252f8a1c7e936b9e06f2b01132010b3cece547ab00b45282`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-node-linux-amd64.tar.gz) | `9120f6a06053ed91566d378a26ae455f521ab46911f257d64f629d93d143b369`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-node-linux-arm64.tar.gz) | `30af817f5de0ecb8a95ec898fba5b97e6b4f224927e1cf7efaf2d5479b23c116`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-node-linux-arm.tar.gz) | `8b0913e461d8ac821c2104a1f0b4efe3151f0d8e8598e0945e60b4ba7ac2d1a0`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-node-linux-ppc64le.tar.gz) | `a78a3a837c0fbf6e092b312472c89ef0f3872c268b0a5e1e344e725a88c0717d`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-node-linux-s390x.tar.gz) | `a0a38c5830fc1b7996c5befc24502991fc8a095f82cf81ddd0a301163143a2c5`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.3/kubernetes-node-windows-amd64.tar.gz) | `8af4253fe2c582843de329d12d84dbdc5f9f823f68ee08a42809864efc7c368d`
-
-## Changelog since v1.8.0-alpha.2
-
-### Action Required
-
-* Remove deprecated kubectl command aliases `apiversions, clusterinfo, resize, rollingupdate, run-container, update` ([#49935](https://github.com/kubernetes/kubernetes/pull/49935), [@xiangpengzhao](https://github.com/xiangpengzhao))
-* The following deprecated flags have been removed from `kube-controller-manager`: `replication-controller-lookup-cache-size`, `replicaset-lookup-cache-size`, and `daemonset-lookup-cache-size`. Make sure you no longer attempt to set them. ([#50678](https://github.com/kubernetes/kubernetes/pull/50678), [@xiangpengzhao](https://github.com/xiangpengzhao))
-* Beta annotations `service.beta.kubernetes.io/external-traffic` and `service.beta.kubernetes.io/healthcheck-nodeport` have been removed. Please use fields `service.spec.externalTrafficPolicy` and `service.spec.healthCheckNodePort` instead. ([#50224](https://github.com/kubernetes/kubernetes/pull/50224), [@xiangpengzhao](https://github.com/xiangpengzhao))
-* A cluster using the AWS cloud provider will need to label existing nodes and resources with a ClusterID or the kube-controller-manager will not start. To run without a ClusterID pass --allow-untagged-cloud=true to the kube-controller-manager on startup. ([#49215](https://github.com/kubernetes/kubernetes/pull/49215), [@rrati](https://github.com/rrati))
-* RBAC: the `system:node` role is no longer automatically granted to the `system:nodes` group in new clusters. It is recommended that nodes be authorized using the `Node` authorization mode instead. Installations that wish to continue giving all members of the `system:nodes` group the `system:node` role (which grants broad read access, including all secrets and configmaps) must create an installation-specific `ClusterRoleBinding`. ([#49638](https://github.com/kubernetes/kubernetes/pull/49638), [@liggitt](https://github.com/liggitt))
-* StatefulSet: The deprecated `pod.alpha.kubernetes.io/initialized` annotation for interrupting StatefulSet Pod management is now ignored. If you were setting it to `true` or leaving it unset, no action is required. However, if you were setting it to `false`, be aware that previously-dormant StatefulSets may become active after upgrading. ([#49251](https://github.com/kubernetes/kubernetes/pull/49251), [@enisoc](https://github.com/enisoc))
-* add some more deprecation warnings to cluster ([#49148](https://github.com/kubernetes/kubernetes/pull/49148), [@mikedanese](https://github.com/mikedanese))
-* The --insecure-allow-any-token flag has been removed from kube-apiserver. Users of the flag should use impersonation headers instead for debugging. ([#49045](https://github.com/kubernetes/kubernetes/pull/49045), [@ericchiang](https://github.com/ericchiang))
-* Restored cAdvisor prometheus metrics to the main port -- a regression that existed in v1.7.0-v1.7.2 ([#49079](https://github.com/kubernetes/kubernetes/pull/49079), [@smarterclayton](https://github.com/smarterclayton))
- * cAdvisor metrics can now be scraped from `/metrics/cadvisor` on the kubelet ports.
- * Note that you have to update your scraping jobs to get kubelet-only metrics from `/metrics` and `container_*` metrics from `/metrics/cadvisor`
-* Change the default kubeadm bootstrap token TTL from infinite to 24 hours. This is a breaking change. If you require the old behavior, use `kubeadm init --token-ttl 0` / `kubeadm token create --ttl 0`. ([#48783](https://github.com/kubernetes/kubernetes/pull/48783), [@mattmoyer](https://github.com/mattmoyer))
-
-### Other notable changes
-
-* Remove duplicate command example from `kubectl port-forward --help` ([#50229](https://github.com/kubernetes/kubernetes/pull/50229), [@tcharding](https://github.com/tcharding))
-* Adds a new `kubeadm config` command that lets users tell `kubeadm upgrade` what kubeadm configuration to use and lets users view the current state. ([#50980](https://github.com/kubernetes/kubernetes/pull/50980), [@luxas](https://github.com/luxas))
-* Kubectl uses openapi for validation. If OpenAPI is not available on the server, it defaults back to the old Swagger. ([#50546](https://github.com/kubernetes/kubernetes/pull/50546), [@apelisse](https://github.com/apelisse))
-* kubectl show node role if defined ([#50438](https://github.com/kubernetes/kubernetes/pull/50438), [@dixudx](https://github.com/dixudx))
-* iSCSI volume plugin: iSCSI initiatorname support ([#48789](https://github.com/kubernetes/kubernetes/pull/48789), [@mtanino](https://github.com/mtanino))
-* On AttachDetachController node status update, do not retry when node doesn't exist but keep the node entry in cache. ([#50806](https://github.com/kubernetes/kubernetes/pull/50806), [@verult](https://github.com/verult))
-* Prevent unneeded endpoint updates ([#50934](https://github.com/kubernetes/kubernetes/pull/50934), [@joelsmith](https://github.com/joelsmith))
-* Affinity in annotations alpha feature is no longer supported in 1.8. Anyone upgrading from 1.7 with AffinityInAnnotation feature enabled must ensure pods (specifically with pod anti-affinity PreferredDuringSchedulingIgnoredDuringExecution) with empty TopologyKey fields must be removed before upgrading to 1.8. ([#49976](https://github.com/kubernetes/kubernetes/pull/49976), [@aveshagarwal](https://github.com/aveshagarwal))
-* - kubeadm now supports "ci/latest-1.8" or "ci-cross/latest-1.8" and similar labels. ([#49119](https://github.com/kubernetes/kubernetes/pull/49119), [@kad](https://github.com/kad))
-* kubeadm: Adds dry-run support for kubeadm using the `--dry-run` option ([#50631](https://github.com/kubernetes/kubernetes/pull/50631), [@luxas](https://github.com/luxas))
-* Change GCE installs (kube-up.sh) to use GCI/COS for node OS, by default. ([#46512](https://github.com/kubernetes/kubernetes/pull/46512), [@thockin](https://github.com/thockin))
-* Use CollisionCount for collision avoidance when creating ControllerRevisions in StatefulSet controller ([#50490](https://github.com/kubernetes/kubernetes/pull/50490), [@liyinan926](https://github.com/liyinan926))
-* AWS: Arbitrarily choose first (lexicographically) subnet in AZ ([#50255](https://github.com/kubernetes/kubernetes/pull/50255), [@mattlandis](https://github.com/mattlandis))
-* Change CollisionCount from int64 to int32 across controllers ([#50575](https://github.com/kubernetes/kubernetes/pull/50575), [@dixudx](https://github.com/dixudx))
-* fix GPU resource validation that incorrectly allows zero limits ([#50218](https://github.com/kubernetes/kubernetes/pull/50218), [@dixudx](https://github.com/dixudx))
-* The `kubernetes.io/created-by` annotation is now deprecated and will be removed in v1.9. Use [ControllerRef](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/controller-ref.md) instead to determine which controller, if any, owns an object. ([#50536](https://github.com/kubernetes/kubernetes/pull/50536), [@crimsonfaith91](https://github.com/crimsonfaith91))
-* Disable Docker's health check until we officially support it ([#50796](https://github.com/kubernetes/kubernetes/pull/50796), [@yguo0905](https://github.com/yguo0905))
-* Add ControllerRevision to apps/v1beta2 ([#50698](https://github.com/kubernetes/kubernetes/pull/50698), [@liyinan926](https://github.com/liyinan926))
-* StorageClass has a new field to configure reclaim policy of dynamically provisioned PVs. ([#47987](https://github.com/kubernetes/kubernetes/pull/47987), [@wongma7](https://github.com/wongma7))
-* Rerun init containers when the pod needs to be restarted ([#47599](https://github.com/kubernetes/kubernetes/pull/47599), [@yujuhong](https://github.com/yujuhong))
-* Resources outside the `*kubernetes.io` namespace are integers and cannot be over-committed. ([#48922](https://github.com/kubernetes/kubernetes/pull/48922), [@ConnorDoyle](https://github.com/ConnorDoyle))
-* apps/v1beta2 is enabled by default. DaemonSet, Deployment, ReplicaSet, and StatefulSet have been moved to this group version. ([#50643](https://github.com/kubernetes/kubernetes/pull/50643), [@kow3ns](https://github.com/kow3ns))
-* TLS cert storage for self-hosted clusters is now configurable. You can store them as secrets (alpha) or as usual host mounts. ([#50762](https://github.com/kubernetes/kubernetes/pull/50762), [@jamiehannaford](https://github.com/jamiehannaford))
-* Remove deprecated command 'kubectl stop' ([#46927](https://github.com/kubernetes/kubernetes/pull/46927), [@shiywang](https://github.com/shiywang))
-* Add new Prometheus metric that monitors the remaining lifetime of certificates used to authenticate requests to the API server. ([#50387](https://github.com/kubernetes/kubernetes/pull/50387), [@jcbsmpsn](https://github.com/jcbsmpsn))
-* Upgrade advanced audit to version v1beta1 ([#49115](https://github.com/kubernetes/kubernetes/pull/49115), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Cluster Autoscaler - fixes issues with taints and updates kube-proxy cpu request. ([#50514](https://github.com/kubernetes/kubernetes/pull/50514), [@mwielgus](https://github.com/mwielgus))
-* fluentd-elasticsearch addon: change the fluentd base image to fix crashes on systems with non-standard systemd installation ([#50679](https://github.com/kubernetes/kubernetes/pull/50679), [@aknuds1](https://github.com/aknuds1))
-* advanced audit: shutdown batching audit webhook gracefully ([#50577](https://github.com/kubernetes/kubernetes/pull/50577), [@crassirostris](https://github.com/crassirostris))
-* Add Priority admission controller for monitoring and resolving PriorityClasses. ([#49322](https://github.com/kubernetes/kubernetes/pull/49322), [@bsalamat](https://github.com/bsalamat))
-* apiservers: add synchronous shutdown mechanism on SIGTERM+INT ([#50439](https://github.com/kubernetes/kubernetes/pull/50439), [@sttts](https://github.com/sttts))
-* Fix kubernetes-worker charm hook failure when applying labels ([#50633](https://github.com/kubernetes/kubernetes/pull/50633), [@Cynerva](https://github.com/Cynerva))
-* kubeadm: Implementing the controlplane phase ([#50302](https://github.com/kubernetes/kubernetes/pull/50302), [@fabriziopandini](https://github.com/fabriziopandini))
-* Refactor addons into multiple packages ([#50214](https://github.com/kubernetes/kubernetes/pull/50214), [@andrewrynhard](https://github.com/andrewrynhard))
-* Kubelet now manages `/etc/hosts` file for both hostNetwork Pods and non-hostNetwork Pods. ([#49140](https://github.com/kubernetes/kubernetes/pull/49140), [@rickypai](https://github.com/rickypai))
-* After 1.8, admission controller will add 'MemoryPressure' toleration to Guaranteed and Burstable pods. ([#50180](https://github.com/kubernetes/kubernetes/pull/50180), [@k82cn](https://github.com/k82cn))
-* A new predicates, named 'CheckNodeCondition', was added to replace node condition filter. 'NetworkUnavailable', 'OutOfDisk' and 'NotReady' maybe reported as a reason when failed to schedule pods. ([#50362](https://github.com/kubernetes/kubernetes/pull/50362), [@k82cn](https://github.com/k82cn))
-* fix apps DeploymentSpec conversion issue ([#49719](https://github.com/kubernetes/kubernetes/pull/49719), [@dixudx](https://github.com/dixudx))
-* fluentd-gcp addon: Fix a bug in the event-exporter, when repeated events were not sent to Stackdriver. ([#50511](https://github.com/kubernetes/kubernetes/pull/50511), [@crassirostris](https://github.com/crassirostris))
-* not allowing "kubectl edit " when you got an empty list ([#50205](https://github.com/kubernetes/kubernetes/pull/50205), [@dixudx](https://github.com/dixudx))
-* fixes kubefed's ability to create RBAC roles in version-skewed clusters ([#50537](https://github.com/kubernetes/kubernetes/pull/50537), [@liggitt](https://github.com/liggitt))
-* API server authentication now caches successful bearer token authentication results for a few seconds. ([#50258](https://github.com/kubernetes/kubernetes/pull/50258), [@liggitt](https://github.com/liggitt))
-* Added field CollisionCount to StatefulSetStatus in both apps/v1beta1 and apps/v1beta2 ([#49983](https://github.com/kubernetes/kubernetes/pull/49983), [@liyinan926](https://github.com/liyinan926))
-* FC volume plugin: Support WWID for volume identifier ([#48741](https://github.com/kubernetes/kubernetes/pull/48741), [@mtanino](https://github.com/mtanino))
-* kubeadm: added enhanced TLS validation for token-based discovery in `kubeadm join` using a new `--discovery-token-ca-cert-hash` flag. ([#49520](https://github.com/kubernetes/kubernetes/pull/49520), [@mattmoyer](https://github.com/mattmoyer))
-* federation: Support for leader-election among federation controller-manager instances introduced. ([#46090](https://github.com/kubernetes/kubernetes/pull/46090), [@shashidharatd](https://github.com/shashidharatd))
-* New get-kube.sh option: KUBERNETES_SKIP_RELEASE_VALIDATION ([#50391](https://github.com/kubernetes/kubernetes/pull/50391), [@pipejakob](https://github.com/pipejakob))
-* Azure: Allow VNet to be in a separate Resource Group. ([#49725](https://github.com/kubernetes/kubernetes/pull/49725), [@sylr](https://github.com/sylr))
-* fix bug when azure cloud provider configuration file is not specified ([#49283](https://github.com/kubernetes/kubernetes/pull/49283), [@dixudx](https://github.com/dixudx))
-* The `rbac.authorization.k8s.io/v1beta1` API has been promoted to `rbac.authorization.k8s.io/v1` with no changes. ([#49642](https://github.com/kubernetes/kubernetes/pull/49642), [@liggitt](https://github.com/liggitt))
- * The `rbac.authorization.k8s.io/v1alpha1` version is deprecated and will be removed in a future release.
-* Fix an issue where if a CSR is not approved initially by the SAR approver is not retried. ([#49788](https://github.com/kubernetes/kubernetes/pull/49788), [@mikedanese](https://github.com/mikedanese))
-* The v1.Service.PublishNotReadyAddresses field is added to notify DNS addons to publish the notReadyAddresses of Enpdoints. The "service.alpha.kubernetes.io/tolerate-unready-endpoints" annotation has been deprecated and will be removed when clients have sufficient time to consume the field. ([#49061](https://github.com/kubernetes/kubernetes/pull/49061), [@kow3ns](https://github.com/kow3ns))
-* vSphere cloud provider: vSphere cloud provider code refactoring ([#49164](https://github.com/kubernetes/kubernetes/pull/49164), [@BaluDontu](https://github.com/BaluDontu))
-* `cluster/gke` has been removed. GKE end-to-end testing should be done using `kubetest --deployment=gke` ([#50338](https://github.com/kubernetes/kubernetes/pull/50338), [@zmerlynn](https://github.com/zmerlynn))
-* kubeadm: Upload configuration used at 'kubeadm init' time to ConfigMap for easier upgrades ([#50320](https://github.com/kubernetes/kubernetes/pull/50320), [@luxas](https://github.com/luxas))
-* Adds (alpha feature) the ability to dynamically configure Kubelets by enabling the DynamicKubeletConfig feature gate, posting a ConfigMap to the API server, and setting the spec.configSource field on Node objects. See the proposal at https://github.com/kubernetes/community/blob/master/contributors/design-proposals/node/dynamic-kubelet-configuration.md for details. ([#46254](https://github.com/kubernetes/kubernetes/pull/46254), [@mtaufen](https://github.com/mtaufen))
-* Remove deprecated ScheduledJobs endpoints, use CronJobs instead. ([#49930](https://github.com/kubernetes/kubernetes/pull/49930), [@soltysh](https://github.com/soltysh))
-* [Federation] Make the hpa scale time window configurable ([#49583](https://github.com/kubernetes/kubernetes/pull/49583), [@irfanurrehman](https://github.com/irfanurrehman))
-* fuse daemons for GlusterFS and CephFS are now run in their own systemd scope when Kubernetes runs on a system with systemd. ([#49640](https://github.com/kubernetes/kubernetes/pull/49640), [@jsafrane](https://github.com/jsafrane))
-* `kubectl proxy` will now correctly handle the `exec`, `attach`, and `portforward` commands. You must pass `--disable-filter` to the command in order to allow these endpoints. ([#49534](https://github.com/kubernetes/kubernetes/pull/49534), [@smarterclayton](https://github.com/smarterclayton))
-* Copy annotations from a StatefulSet's metadata to the ControllerRevisions it owns ([#50263](https://github.com/kubernetes/kubernetes/pull/50263), [@liyinan926](https://github.com/liyinan926))
-* Make rolling update the default update strategy for v1beta2.DaemonSet and v1beta2.StatefulSet ([#50175](https://github.com/kubernetes/kubernetes/pull/50175), [@foxish](https://github.com/foxish))
-* Deprecate Deployment .spec.rollbackTo field ([#49340](https://github.com/kubernetes/kubernetes/pull/49340), [@janetkuo](https://github.com/janetkuo))
-* Collect metrics from Heapster in Stackdriver mode. ([#50290](https://github.com/kubernetes/kubernetes/pull/50290), [@piosz](https://github.com/piosz))
-* [Federation] HPA controller ([#45993](https://github.com/kubernetes/kubernetes/pull/45993), [@irfanurrehman](https://github.com/irfanurrehman))
-* Relax restrictions on environment variable names. ([#48986](https://github.com/kubernetes/kubernetes/pull/48986), [@timoreimann](https://github.com/timoreimann))
-* The node condition 'NodeInodePressure' was removed, as kubelet did not report it. ([#50124](https://github.com/kubernetes/kubernetes/pull/50124), [@k82cn](https://github.com/k82cn))
-* Fix premature return ([#49834](https://github.com/kubernetes/kubernetes/pull/49834), [@guoshimin](https://github.com/guoshimin))
-* StatefulSet uses scale subresource when scaling in accord with ReplicationController, ReplicaSet, and Deployment implementations. ([#49168](https://github.com/kubernetes/kubernetes/pull/49168), [@crimsonfaith91](https://github.com/crimsonfaith91))
-* Feature gates now determine whether a cluster is self-hosted. For more information, see the FeatureGates configuration flag. ([#50241](https://github.com/kubernetes/kubernetes/pull/50241), [@jamiehannaford](https://github.com/jamiehannaford))
-* Updates Cinder AttachDisk operation to be more reliable by delegating Detaches to volume manager. ([#50042](https://github.com/kubernetes/kubernetes/pull/50042), [@jingxu97](https://github.com/jingxu97))
-* add fieldSelector podIP ([#50091](https://github.com/kubernetes/kubernetes/pull/50091), [@dixudx](https://github.com/dixudx))
-* Return Audit-Id http response header for trouble shooting ([#49377](https://github.com/kubernetes/kubernetes/pull/49377), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Status objects for 404 API errors will have the correct APIVersion ([#49868](https://github.com/kubernetes/kubernetes/pull/49868), [@shiywang](https://github.com/shiywang))
-* Fix incorrect retry logic in scheduler ([#50106](https://github.com/kubernetes/kubernetes/pull/50106), [@julia-stripe](https://github.com/julia-stripe))
-* Enforce explicit references to API group client interfaces in clientsets to avoid ambiguity. ([#49370](https://github.com/kubernetes/kubernetes/pull/49370), [@sttts](https://github.com/sttts))
-* update dashboard image version ([#49855](https://github.com/kubernetes/kubernetes/pull/49855), [@zouyee](https://github.com/zouyee))
-* kubeadm: Implementing the kubeconfig phase fully ([#49419](https://github.com/kubernetes/kubernetes/pull/49419), [@fabriziopandini](https://github.com/fabriziopandini))
-* fixes a bug around using the Global config ElbSecurityGroup where Kuberentes would modify the passed in Security Group. ([#49805](https://github.com/kubernetes/kubernetes/pull/49805), [@nbutton23](https://github.com/nbutton23))
-* Fluentd DaemonSet in the fluentd-elasticsearch addon is configured via ConfigMap and includes journald plugin ([#50082](https://github.com/kubernetes/kubernetes/pull/50082), [@crassirostris](https://github.com/crassirostris))
- * Elasticsearch StatefulSet in the fluentd-elasticsearch addon uses local storage instead of PVC by default
-* Add possibility to use multiple floatingip pools in openstack loadbalancer ([#49697](https://github.com/kubernetes/kubernetes/pull/49697), [@zetaab](https://github.com/zetaab))
-* The 504 timeout error was returning a JSON error body that indicated it was a 500. The body contents now correctly report a 500 error. ([#49678](https://github.com/kubernetes/kubernetes/pull/49678), [@smarterclayton](https://github.com/smarterclayton))
-* add examples for kubectl run --labels ([#49862](https://github.com/kubernetes/kubernetes/pull/49862), [@dixudx](https://github.com/dixudx))
-* Kubelet will by default fail with swap enabled from now on. The experimental flag "--experimental-fail-swap-on" has been deprecated, please set the new "--fail-swap-on" flag to false if you wish to run with /proc/swaps on. ([#47181](https://github.com/kubernetes/kubernetes/pull/47181), [@dims](https://github.com/dims))
-* Fix bug in scheduler that caused initially unschedulable pods to stuck in Pending state forever. ([#50028](https://github.com/kubernetes/kubernetes/pull/50028), [@julia-stripe](https://github.com/julia-stripe))
-* GCE: Bump GLBC version to 0.9.6 ([#50096](https://github.com/kubernetes/kubernetes/pull/50096), [@nicksardo](https://github.com/nicksardo))
-* Remove 0,1,3 from rand.String, to avoid 'bad words' ([#50070](https://github.com/kubernetes/kubernetes/pull/50070), [@dixudx](https://github.com/dixudx))
-* Fix data race during addition of new CRD ([#50098](https://github.com/kubernetes/kubernetes/pull/50098), [@nikhita](https://github.com/nikhita))
-* Do not try to run preStopHook when the gracePeriod is 0 ([#49449](https://github.com/kubernetes/kubernetes/pull/49449), [@dhilipkumars](https://github.com/dhilipkumars))
-* The SubjectAccessReview API in the authorization.k8s.io API group now allows providing the user uid. ([#49677](https://github.com/kubernetes/kubernetes/pull/49677), [@dims](https://github.com/dims))
-* Increase default value of apps/v1beta2 DeploymentSpec.RevisionHistoryLimit to 10 ([#49924](https://github.com/kubernetes/kubernetes/pull/49924), [@dixudx](https://github.com/dixudx))
-* Upgrade Elasticsearch/Kibana to 5.5.1 in fluentd-elasticsearch addon ([#48722](https://github.com/kubernetes/kubernetes/pull/48722), [@aknuds1](https://github.com/aknuds1))
- * Switch to basing our image of Elasticsearch in fluentd-elasticsearch addon off the official one
- * Switch to the official image of Kibana in fluentd-elasticsearch addon
- * Use StatefulSet for Elasticsearch instead of ReplicationController, with persistent volume claims
- * Require authenticating towards Elasticsearch, as Elasticsearch 5.5 by default requires basic authentication
-* Rebase hyperkube image on debian-hyperkube-base, based on debian-base. ([#48365](https://github.com/kubernetes/kubernetes/pull/48365), [@ixdy](https://github.com/ixdy))
-* change apps/v1beta2 StatefulSet observedGeneration (optional field) from a pointer to an int for consistency ([#49607](https://github.com/kubernetes/kubernetes/pull/49607), [@dixudx](https://github.com/dixudx))
-* After a kubelet rotates its client cert, it now closes its connections to the API server to force a handshake using the new cert. Previously, the kubelet could keep its existing connection open, even if the cert used for that connection was expired and rejected by the API server. ([#49899](https://github.com/kubernetes/kubernetes/pull/49899), [@ericchiang](https://github.com/ericchiang))
-* Improve our Instance Metadata coverage in Azure. ([#49237](https://github.com/kubernetes/kubernetes/pull/49237), [@brendandburns](https://github.com/brendandburns))
-* Add etcd connectivity endpoint to healthz ([#49412](https://github.com/kubernetes/kubernetes/pull/49412), [@bjhaid](https://github.com/bjhaid))
-* kube-proxy will emit "FailedToStartNodeHealthcheck" event when fails to start healthz server. ([#49267](https://github.com/kubernetes/kubernetes/pull/49267), [@MrHohn](https://github.com/MrHohn))
-* Fixed a bug in the API server watch cache, which could cause a missing watch event immediately after cache initialization. ([#49992](https://github.com/kubernetes/kubernetes/pull/49992), [@liggitt](https://github.com/liggitt))
-* Enforcement of fsGroup; enable ScaleIO multiple-instance volume mapping; default PVC capacity; alignment of PVC, PV, and volume names for dynamic provisioning ([#48999](https://github.com/kubernetes/kubernetes/pull/48999), [@vladimirvivien](https://github.com/vladimirvivien))
-* In GCE, add measures to prevent corruption of known_tokens.csv. ([#49897](https://github.com/kubernetes/kubernetes/pull/49897), [@mikedanese](https://github.com/mikedanese))
-* kubeadm: Fix join preflight check false negative ([#49825](https://github.com/kubernetes/kubernetes/pull/49825), [@erhudy](https://github.com/erhudy))
-* route_controller will emit "FailedToCreateRoute" event when fails to create route. ([#49821](https://github.com/kubernetes/kubernetes/pull/49821), [@MrHohn](https://github.com/MrHohn))
-* Fix incorrect parsing of io_priority in Portworx volume StorageClass and add support for new paramters. ([#49526](https://github.com/kubernetes/kubernetes/pull/49526), [@harsh-px](https://github.com/harsh-px))
-* The API Server now automatically creates RBAC ClusterRoles for CSR approving. ([#49284](https://github.com/kubernetes/kubernetes/pull/49284), [@luxas](https://github.com/luxas))
- * Each deployment method should bind users/groups to the ClusterRoles if they are using this feature.
-* Adds AllowPrivilegeEscalation to control whether a process can gain more privileges than its parent process ([#47019](https://github.com/kubernetes/kubernetes/pull/47019), [@jessfraz](https://github.com/jessfraz))
-* `hack/local-up-cluster.sh` now enables the Node authorizer by default. Authorization modes can be overridden with the `AUTHORIZATION_MODE` environment variable, and the `ENABLE_RBAC` environment variable is no longer used. ([#49812](https://github.com/kubernetes/kubernetes/pull/49812), [@liggitt](https://github.com/liggitt))
-* rename stop.go file to delete.go to avoid confusion ([#49533](https://github.com/kubernetes/kubernetes/pull/49533), [@dixudx](https://github.com/dixudx))
-* Adding option to set the federation api server port if nodeport is set ([#46283](https://github.com/kubernetes/kubernetes/pull/46283), [@ktsakalozos](https://github.com/ktsakalozos))
-* The garbage collector now supports custom APIs added via CustomResourceDefinition or aggregated apiservers. Note that the garbage collector controller refreshes periodically, so there is a latency between when the API is added and when the garbage collector starts to manage it. ([#47665](https://github.com/kubernetes/kubernetes/pull/47665), [@ironcladlou](https://github.com/ironcladlou))
-* set the juju master charm state to blocked if the services appear to be failing ([#49717](https://github.com/kubernetes/kubernetes/pull/49717), [@wwwtyro](https://github.com/wwwtyro))
-* keep-terminated-pod-volumes flag on kubelet is deprecated. ([#47539](https://github.com/kubernetes/kubernetes/pull/47539), [@gnufied](https://github.com/gnufied))
-* kubectl describe podsecuritypolicy describes all fields. ([#45813](https://github.com/kubernetes/kubernetes/pull/45813), [@xilabao](https://github.com/xilabao))
-* Added flag support to kubectl plugins ([#47267](https://github.com/kubernetes/kubernetes/pull/47267), [@fabianofranz](https://github.com/fabianofranz))
-* Adding metrics support to local volume ([#49598](https://github.com/kubernetes/kubernetes/pull/49598), [@sbezverk](https://github.com/sbezverk))
-* Bug fix: Parsing of `--requestheader-group-headers` in requests should be case-insensitive. ([#49219](https://github.com/kubernetes/kubernetes/pull/49219), [@jmillikin-stripe](https://github.com/jmillikin-stripe))
-* Fix instance metadata service URL. ([#49081](https://github.com/kubernetes/kubernetes/pull/49081), [@brendandburns](https://github.com/brendandburns))
-* Add a new API object apps/v1beta2.ReplicaSet ([#49238](https://github.com/kubernetes/kubernetes/pull/49238), [@janetkuo](https://github.com/janetkuo))
-* fix pdb validation bug on PodDisruptionBudgetSpec ([#48706](https://github.com/kubernetes/kubernetes/pull/48706), [@dixudx](https://github.com/dixudx))
-* Revert deprecation of vCenter port in vSphere Cloud Provider. ([#49689](https://github.com/kubernetes/kubernetes/pull/49689), [@divyenpatel](https://github.com/divyenpatel))
-* Rev version of Calico's Typha daemon used in add-on to v0.2.3 to pull in bug-fixes. ([#48469](https://github.com/kubernetes/kubernetes/pull/48469), [@fasaxc](https://github.com/fasaxc))
-* set default adminid for rbd deleter if unset ([#49271](https://github.com/kubernetes/kubernetes/pull/49271), [@dixudx](https://github.com/dixudx))
-* Adding type apps/v1beta2.DaemonSet ([#49071](https://github.com/kubernetes/kubernetes/pull/49071), [@foxish](https://github.com/foxish))
-* Fix nil value issue when creating json patch for merge ([#49259](https://github.com/kubernetes/kubernetes/pull/49259), [@dixudx](https://github.com/dixudx))
-* Adds metrics for checking reflector health. ([#48224](https://github.com/kubernetes/kubernetes/pull/48224), [@deads2k](https://github.com/deads2k))
-* remove deads2k from volume reviewer ([#49566](https://github.com/kubernetes/kubernetes/pull/49566), [@deads2k](https://github.com/deads2k))
-* Unify genclient tags and add more fine control on verbs generated ([#49192](https://github.com/kubernetes/kubernetes/pull/49192), [@mfojtik](https://github.com/mfojtik))
-* kubeadm: Fixes a small bug where `--config` and `--skip-*` flags couldn't be passed at the same time in validation. ([#49498](https://github.com/kubernetes/kubernetes/pull/49498), [@luxas](https://github.com/luxas))
-* Remove depreciated flags: --low-diskspace-threshold-mb and --outofdisk-transition-frequency, which are replaced by --eviction-hard ([#48846](https://github.com/kubernetes/kubernetes/pull/48846), [@dashpole](https://github.com/dashpole))
-* Fixed OpenAPI Description and Nickname of API objects with subresources ([#49357](https://github.com/kubernetes/kubernetes/pull/49357), [@mbohlool](https://github.com/mbohlool))
-* set RBD default values as constant vars ([#49274](https://github.com/kubernetes/kubernetes/pull/49274), [@dixudx](https://github.com/dixudx))
-* Fix a bug with binding mount directories and files using flexVolumes ([#49118](https://github.com/kubernetes/kubernetes/pull/49118), [@adelton](https://github.com/adelton))
-* PodPreset is not injected if conflict occurs while applying PodPresets to a Pod. ([#47864](https://github.com/kubernetes/kubernetes/pull/47864), [@droot](https://github.com/droot))
-* `kubectl drain` no longer spins trying to delete pods that do not exist ([#49444](https://github.com/kubernetes/kubernetes/pull/49444), [@eparis](https://github.com/eparis))
-* Support specifying of FSType in StorageClass ([#45345](https://github.com/kubernetes/kubernetes/pull/45345), [@codablock](https://github.com/codablock))
-* The NodeRestriction admission plugin now allows a node to evict pods bound to itself ([#48707](https://github.com/kubernetes/kubernetes/pull/48707), [@danielfm](https://github.com/danielfm))
-* more robust stat handling from ceph df output in the kubernetes-master charm create-rbd-pv action ([#49394](https://github.com/kubernetes/kubernetes/pull/49394), [@wwwtyro](https://github.com/wwwtyro))
-* added cronjobs.batch to all, so kubectl get all returns them. ([#49326](https://github.com/kubernetes/kubernetes/pull/49326), [@deads2k](https://github.com/deads2k))
-* Update status to show failing services. ([#49296](https://github.com/kubernetes/kubernetes/pull/49296), [@ktsakalozos](https://github.com/ktsakalozos))
-* Fixes [#49418](https://github.com/kubernetes/kubernetes/pull/49418) where kube-controller-manager can panic on volume.CanSupport methods and enter a crash loop. ([#49420](https://github.com/kubernetes/kubernetes/pull/49420), [@gnufied](https://github.com/gnufied))
-* Add a new API version apps/v1beta2 ([#48746](https://github.com/kubernetes/kubernetes/pull/48746), [@janetkuo](https://github.com/janetkuo))
-* Websocket requests to aggregated APIs now perform TLS verification using the service DNS name instead of the backend server's IP address, consistent with non-websocket requests. ([#49353](https://github.com/kubernetes/kubernetes/pull/49353), [@liggitt](https://github.com/liggitt))
-* kubeadm: Don't set a specific `spc_t` SELinux label on the etcd Static Pod as that is more privs than etcd needs and due to that `spc_t` isn't compatible with some OSes. ([#49328](https://github.com/kubernetes/kubernetes/pull/49328), [@euank](https://github.com/euank))
-* GCE Cloud Provider: New created LoadBalancer type Service will have health checks for nodes by default if all nodes have version >= v1.7.2. ([#49330](https://github.com/kubernetes/kubernetes/pull/49330), [@MrHohn](https://github.com/MrHohn))
-* hack/local-up-cluster.sh now enables RBAC authorization by default ([#49323](https://github.com/kubernetes/kubernetes/pull/49323), [@mtanino](https://github.com/mtanino))
-* Use port 20256 for node-problem-detector in standalone mode. ([#49316](https://github.com/kubernetes/kubernetes/pull/49316), [@ajitak](https://github.com/ajitak))
-* Fixed unmounting of vSphere volumes when kubelet runs in a container. ([#49111](https://github.com/kubernetes/kubernetes/pull/49111), [@jsafrane](https://github.com/jsafrane))
-* use informers for quota evaluation of core resources where possible ([#49230](https://github.com/kubernetes/kubernetes/pull/49230), [@deads2k](https://github.com/deads2k))
-* additional backoff in azure cloudprovider ([#48967](https://github.com/kubernetes/kubernetes/pull/48967), [@jackfrancis](https://github.com/jackfrancis))
-* allow impersonate serviceaccount in cli ([#48253](https://github.com/kubernetes/kubernetes/pull/48253), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Add PriorityClass API object under new "scheduling" API group ([#48377](https://github.com/kubernetes/kubernetes/pull/48377), [@bsalamat](https://github.com/bsalamat))
-* Added golint check for pkg/kubelet. ([#47316](https://github.com/kubernetes/kubernetes/pull/47316), [@k82cn](https://github.com/k82cn))
-* azure: acr: support MSI with preview ACR with AAD auth ([#48981](https://github.com/kubernetes/kubernetes/pull/48981), [@colemickens](https://github.com/colemickens))
-* Set default CIDR to /16 for Juju deployments ([#49182](https://github.com/kubernetes/kubernetes/pull/49182), [@ktsakalozos](https://github.com/ktsakalozos))
-* Fix pod preset to ignore input pod namespace in favor of request namespace ([#49120](https://github.com/kubernetes/kubernetes/pull/49120), [@jpeeler](https://github.com/jpeeler))
-* Previously a deleted bootstrapping token secret would be considered valid until it was reaped. Now it is invalid as soon as the deletionTimestamp is set. ([#49057](https://github.com/kubernetes/kubernetes/pull/49057), [@ericchiang](https://github.com/ericchiang))
-* Set default snap channel on charms to 1.7 stable ([#48874](https://github.com/kubernetes/kubernetes/pull/48874), [@ktsakalozos](https://github.com/ktsakalozos))
-* prevent unsetting of nonexistent previous port in kubeapi-load-balancer charm ([#49033](https://github.com/kubernetes/kubernetes/pull/49033), [@wwwtyro](https://github.com/wwwtyro))
-* kubeadm: Make kube-proxy tolerate the external cloud provider taint so that an external cloud provider can be easily used on top of kubeadm ([#49017](https://github.com/kubernetes/kubernetes/pull/49017), [@luxas](https://github.com/luxas))
-* Fix Pods using Portworx volumes getting stuck in ContainerCreating phase. ([#48898](https://github.com/kubernetes/kubernetes/pull/48898), [@harsh-px](https://github.com/harsh-px))
-* hpa: Prevent scaling below MinReplicas if desiredReplicas is zero ([#48997](https://github.com/kubernetes/kubernetes/pull/48997), [@johanneswuerbach](https://github.com/johanneswuerbach))
-* Kubelet CRI: move seccomp from annotations to security context. ([#46332](https://github.com/kubernetes/kubernetes/pull/46332), [@feiskyer](https://github.com/feiskyer))
-* Never prevent deletion of resources as part of namespace lifecycle ([#48733](https://github.com/kubernetes/kubernetes/pull/48733), [@liggitt](https://github.com/liggitt))
-* The generic RESTClient type (`k8s.io/client-go/rest`) no longer exposes `LabelSelectorParam` or `FieldSelectorParam` methods - use `VersionedParams` with `metav1.ListOptions` instead. The `UintParam` method has been removed. The `timeout` parameter will no longer cause an error when using `Param()`. ([#48991](https://github.com/kubernetes/kubernetes/pull/48991), [@smarterclayton](https://github.com/smarterclayton))
-* Support completion for kubectl config delete-cluster ([#48381](https://github.com/kubernetes/kubernetes/pull/48381), [@superbrothers](https://github.com/superbrothers))
-* Could get the patch from kubectl edit command ([#46091](https://github.com/kubernetes/kubernetes/pull/46091), [@xilabao](https://github.com/xilabao))
-* Added scheduler integration test owners. ([#46930](https://github.com/kubernetes/kubernetes/pull/46930), [@k82cn](https://github.com/k82cn))
-* `kubectl run` learned how to set a service account name in the generated pod spec with the `--serviceaccount` flag. ([#46318](https://github.com/kubernetes/kubernetes/pull/46318), [@liggitt](https://github.com/liggitt))
-* Fix share name generation in azure file provisioner. ([#48326](https://github.com/kubernetes/kubernetes/pull/48326), [@karataliu](https://github.com/karataliu))
-* Fixed a bug where a jsonpath filter would return an error if one of the items being evaluated did not contain all of the nested elements in the filter query. ([#47846](https://github.com/kubernetes/kubernetes/pull/47846), [@ncdc](https://github.com/ncdc))
-* Uses the port config option in the kubeapi-load-balancer charm. ([#48958](https://github.com/kubernetes/kubernetes/pull/48958), [@wwwtyro](https://github.com/wwwtyro))
-* azure: support retrieving access tokens via managed identity extension ([#48854](https://github.com/kubernetes/kubernetes/pull/48854), [@colemickens](https://github.com/colemickens))
-* Add a runtime warning about the kubeadm default token TTL changes. ([#48838](https://github.com/kubernetes/kubernetes/pull/48838), [@mattmoyer](https://github.com/mattmoyer))
-* Azure PD (Managed/Blob) ([#46360](https://github.com/kubernetes/kubernetes/pull/46360), [@khenidak](https://github.com/khenidak))
-* Redirect all examples README to the the kubernetes/examples repo ([#46362](https://github.com/kubernetes/kubernetes/pull/46362), [@sebgoa](https://github.com/sebgoa))
-* Fix a regression that broke the `--config` flag for `kubeadm init`. ([#48915](https://github.com/kubernetes/kubernetes/pull/48915), [@mattmoyer](https://github.com/mattmoyer))
-* Fluentd-gcp DaemonSet exposes different set of metrics. ([#48812](https://github.com/kubernetes/kubernetes/pull/48812), [@crassirostris](https://github.com/crassirostris))
-* MountPath should be absolute ([#48815](https://github.com/kubernetes/kubernetes/pull/48815), [@dixudx](https://github.com/dixudx))
-* Updated comments of func in testapi. ([#48407](https://github.com/kubernetes/kubernetes/pull/48407), [@k82cn](https://github.com/k82cn))
-* Fix service controller crash loop when Service with GCP LoadBalancer uses static IP ([#48848](https://github.com/kubernetes/kubernetes/pull/48848), [@nicksardo](https://github.com/nicksardo)) ([#48849](https://github.com/kubernetes/kubernetes/pull/48849), [@nicksardo](https://github.com/nicksardo))
-* Fix pods failing to start when subPath is a dangling symlink from kubelet point of view, which can happen if it is running inside a container ([#48555](https://github.com/kubernetes/kubernetes/pull/48555), [@redbaron](https://github.com/redbaron))
-* Add initial support for the Azure instance metadata service. ([#48243](https://github.com/kubernetes/kubernetes/pull/48243), [@brendandburns](https://github.com/brendandburns))
-* Added new flag to `kubeadm init`: --node-name, that lets you specify the name of the Node object that will be created ([#48594](https://github.com/kubernetes/kubernetes/pull/48594), [@GheRivero](https://github.com/GheRivero))
-* Added pod evictors for new zone. ([#47952](https://github.com/kubernetes/kubernetes/pull/47952), [@k82cn](https://github.com/k82cn))
-* kube-up and kubemark will default to using cos (GCI) images for nodes. ([#48279](https://github.com/kubernetes/kubernetes/pull/48279), [@abgworrall](https://github.com/abgworrall))
- * The previous default was container-vm (CVM, "debian"), which is deprecated.
- * If you need to explicitly use container-vm for some reason, you should set
- * KUBE_NODE_OS_DISTRIBUTION=debian
-* kubectl: Fix bug that showed terminated/evicted pods even without `--show-all`. ([#48786](https://github.com/kubernetes/kubernetes/pull/48786), [@janetkuo](https://github.com/janetkuo))
-* Fixed GlusterFS volumes taking too long to time out ([#48709](https://github.com/kubernetes/kubernetes/pull/48709), [@jsafrane](https://github.com/jsafrane))
-
-
-
-# v1.8.0-alpha.2
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/master/examples)
-
-## Downloads for v1.8.0-alpha.2
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes.tar.gz) | `26d8079fa6b2d82682db809827d260bbab8e6d0f45e457260b8c5ce640432426`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-src.tar.gz) | `141e5c1bf66b69f3c22870b2ab6159abc3b38c12cc20f41c8193044e16df3205`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-client-darwin-386.tar.gz) | `6ca63da27ca0c1efa04d079d90eba7e6f01a6e9581317892538be6a97ee64d95`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | `0bfbd97f7fb7ce5e1228134d8ca40168553d179bfa44cbd5e925a6543fb3bbf5`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-client-linux-386.tar.gz) | `29d395cc61c91c602e32412e51d4eae333942e6b9da235270768d11c040733c3`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | `b1172bbb1d80ba29612d4de08dc4942b40b0f7d580dbb8ed4423c221f78920fe`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | `994621c4a9d0644e3e8a4f12f563588036412bb72f0104b888f7a2605d3a8015`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | `1e0dd9e4e9730a8cd54d8eb7036d5d7307bd930a91d0fcb105601b2d03fda15d`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-client-linux-ppc64le.tar.gz) | `bdcf58f419b42d83ce8adb350388c962b8934782294f9715b617cdbdf201cc36`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-client-linux-s390x.tar.gz) | `5c58217cffb34043fae951222bfd429165c68439f590c8fb8e33e54fe1cab0de`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-client-windows-386.tar.gz) | `f78ec125f734433c9fc75a9d35dc7bdfa6d145f1cc071ff2e3a5435beef3368f`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | `78dca9aadc140e2868b0a3d1a77b5058e22f24710f9c7956d755b473b575bb9d`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | `802bb71cf19147857a50e842a00d50641f78fec5c5791a524639f7af70f9e1d4`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | `b8f15c32320188981d5e75c474d4e826e45f59083eb66304151da112fb3052b1`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | `8f800befc32d8402a581c47254db921d54caa31c50513c257b251435756918f1`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-server-linux-ppc64le.tar.gz) | `a406bd0aaa92633dbb43216312971164b0230ea01c77679d12b9ffc873956d0d`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-server-linux-s390x.tar.gz) | `8e038b4ccdfc89a08204927c8097a51bd9e786a97c2f9d73fca763ebee6c2373`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-node-linux-amd64.tar.gz) | `1a9725cfb55991680fc75cb862d8a74d76f453be9e9f8ad043d62d5911ab50b9`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-node-linux-arm64.tar.gz) | `44fbdd86048bea2cb3d2d6ec1b6cb2c4ae19cb32f6df28e15392cd7f028a4350`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-node-linux-arm.tar.gz) | `76d9d36aa182fb93aab7a01f22f7a008ad2906a6224b4c009074100676403337`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-node-linux-ppc64le.tar.gz) | `07327ce6fe78bbae3d34b185b54ea0204bf875df488f0293ee1271599189160d`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-node-linux-s390x.tar.gz) | `e84a8c638834c435f82560b86f1a14ec861a8fc967a7cd7055ab86526ce744d0`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.2/kubernetes-node-windows-amd64.tar.gz) | `f0f69dc70751e3be2d564aa272f7fe67e86e91c7de3034776b98faddef51a73d`
-
-## Changelog since v1.7.0
-
-### Action Required
-
-* The deprecated ThirdPartyResource (TPR) API has been removed. To avoid losing your TPR data, you must [migrate to CustomResourceDefinition](https://kubernetes.io/docs/tasks/access-kubernetes-api/migrate-third-party-resource/) before upgrading. ([#48353](https://github.com/kubernetes/kubernetes/pull/48353), [@deads2k](https://github.com/deads2k))
-
-### Other notable changes
-
-* Removed scheduler dependencies to testapi. ([#48405](https://github.com/kubernetes/kubernetes/pull/48405), [@k82cn](https://github.com/k82cn))
-* kubeadm: Fix a bug where `kubeadm join` would wait 5 seconds without doing anything. Now `kubeadm join` executes the tasks immediately. ([#48737](https://github.com/kubernetes/kubernetes/pull/48737), [@mattmoyer](https://github.com/mattmoyer))
-* Reduce amount of noise in Stackdriver Logging, generated by the event-exporter component in the fluentd-gcp addon. ([#48712](https://github.com/kubernetes/kubernetes/pull/48712), [@crassirostris](https://github.com/crassirostris))
-* To allow the userspace proxy to work correctly on multi-interface hosts when using the non-default-route interface, you may now set the `bindAddress` configuration option to an IP address assigned to a network interface. The proxy will use that IP address for any required NAT operations instead of the IP address of the interface which has the default route. ([#48613](https://github.com/kubernetes/kubernetes/pull/48613), [@dcbw](https://github.com/dcbw))
-* Move Mesos Cloud Provider out of Kubernetes Repo ([#47232](https://github.com/kubernetes/kubernetes/pull/47232), [@gyliu513](https://github.com/gyliu513))
-* - kubeadm now can accept versions like "1.6.4" where previously it strictly required "v1.6.4" ([#48507](https://github.com/kubernetes/kubernetes/pull/48507), [@kad](https://github.com/kad))
-* kubeadm: Implementing the certificates phase fully ([#48196](https://github.com/kubernetes/kubernetes/pull/48196), [@fabriziopandini](https://github.com/fabriziopandini))
-* Added case on 'terminated-but-not-yet-deleted' for Admit. ([#48322](https://github.com/kubernetes/kubernetes/pull/48322), [@k82cn](https://github.com/k82cn))
-* `kubectl run --env` no longer supports CSV parsing. To provide multiple env vars, use the `--env` flag multiple times instead of having env vars separated by commas. E.g. `--env ONE=1 --env TWO=2` instead of `--env ONE=1,TWO=2`. ([#47460](https://github.com/kubernetes/kubernetes/pull/47460), [@mengqiy](https://github.com/mengqiy))
-* Local storage teardown fix ([#48402](https://github.com/kubernetes/kubernetes/pull/48402), [@ianchakeres](https://github.com/ianchakeres))
-* support json output for log backend of advanced audit ([#48605](https://github.com/kubernetes/kubernetes/pull/48605), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Requests with the query parameter `?watch=` are treated by the API server as a request to watch, but authorization and metrics were not correctly identifying those as watch requests, instead grouping them as list calls. ([#48583](https://github.com/kubernetes/kubernetes/pull/48583), [@smarterclayton](https://github.com/smarterclayton))
-* As part of the NetworkPolicy "v1" changes, it is also now ([#47123](https://github.com/kubernetes/kubernetes/pull/47123), [@danwinship](https://github.com/danwinship))
- * possible to update the spec field of an existing
- * NetworkPolicy. (Previously you had to delete and recreate a
- * NetworkPolicy if you wanted to change it.)
-* Fix udp service blackhole problem when number of backends changes from 0 to non-0 ([#48524](https://github.com/kubernetes/kubernetes/pull/48524), [@freehan](https://github.com/freehan))
-* kubeadm: Make self-hosting work by using DaemonSets and split it out to a phase that can be invoked via the CLI ([#47435](https://github.com/kubernetes/kubernetes/pull/47435), [@luxas](https://github.com/luxas))
-* Added new flag to `kubeadm join`: --node-name, that lets you specify the name of the Node object that's gonna be created ([#48538](https://github.com/kubernetes/kubernetes/pull/48538), [@GheRivero](https://github.com/GheRivero))
-* Fix Audit-ID header key ([#48492](https://github.com/kubernetes/kubernetes/pull/48492), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Checked container spec when killing container. ([#48194](https://github.com/kubernetes/kubernetes/pull/48194), [@k82cn](https://github.com/k82cn))
-* Fix kubectl describe for pods with controllerRef ([#45467](https://github.com/kubernetes/kubernetes/pull/45467), [@ddysher](https://github.com/ddysher))
-* Skip errors when unregistering juju kubernetes-workers ([#48144](https://github.com/kubernetes/kubernetes/pull/48144), [@ktsakalozos](https://github.com/ktsakalozos))
-* Configures the Juju Charm code to run kube-proxy with conntrack-max-per-core set to 0 when in an lxc as a workaround for issues when mounting /sys/module/nf_conntrack/parameters/hashsize ([#48450](https://github.com/kubernetes/kubernetes/pull/48450), [@wwwtyro](https://github.com/wwwtyro))
-* Group and order imported packages. ([#48399](https://github.com/kubernetes/kubernetes/pull/48399), [@k82cn](https://github.com/k82cn))
-* RBAC role and role-binding reconciliation now ensures namespaces exist when reconciling on startup. ([#48480](https://github.com/kubernetes/kubernetes/pull/48480), [@liggitt](https://github.com/liggitt))
-* Fix charms leaving services running after remove-unit ([#48446](https://github.com/kubernetes/kubernetes/pull/48446), [@Cynerva](https://github.com/Cynerva))
-* Added helper funcs to schedulercache.Resource. ([#46926](https://github.com/kubernetes/kubernetes/pull/46926), [@k82cn](https://github.com/k82cn))
-* When performing a GET then PUT, the kube-apiserver must write the canonical representation of the object to etcd if the current value does not match. That allows external agents to migrate content in etcd from one API version to another, across different storage types, or across varying encryption levels. This fixes a bug introduced in 1.5 where we unintentionally stopped writing the newest data. ([#48394](https://github.com/kubernetes/kubernetes/pull/48394), [@smarterclayton](https://github.com/smarterclayton))
-* Fixed kubernetes charms not restarting services after snap upgrades ([#48440](https://github.com/kubernetes/kubernetes/pull/48440), [@Cynerva](https://github.com/Cynerva))
-* Fix: namespace-create have kubectl in path ([#48439](https://github.com/kubernetes/kubernetes/pull/48439), [@ktsakalozos](https://github.com/ktsakalozos))
-* add validate for advanced audit policy ([#47784](https://github.com/kubernetes/kubernetes/pull/47784), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Support NoSchedule taints correctly in DaemonSet controller. ([#48189](https://github.com/kubernetes/kubernetes/pull/48189), [@mikedanese](https://github.com/mikedanese))
-* Adds configuration option for Swift object store container name to OpenStack Heat provider. ([#48281](https://github.com/kubernetes/kubernetes/pull/48281), [@hogepodge](https://github.com/hogepodge))
-* Allow the system:heapster ClusterRole read access to deployments ([#48357](https://github.com/kubernetes/kubernetes/pull/48357), [@faraazkhan](https://github.com/faraazkhan))
-* Ensure get_password is accessing a file that exists. ([#48351](https://github.com/kubernetes/kubernetes/pull/48351), [@ktsakalozos](https://github.com/ktsakalozos))
-* GZip openapi schema if accepted by client ([#48151](https://github.com/kubernetes/kubernetes/pull/48151), [@apelisse](https://github.com/apelisse))
-* Fixes issue where you could not mount NFS or glusterFS volumes using hostnames on GCI/GKE with COS images. ([#42376](https://github.com/kubernetes/kubernetes/pull/42376), [@jingxu97](https://github.com/jingxu97))
-* Previously a deleted service account token secret would be considered valid until it was reaped. Now it is invalid as soon as the deletionTimestamp is set. ([#48343](https://github.com/kubernetes/kubernetes/pull/48343), [@deads2k](https://github.com/deads2k))
-* Securing the cluster created by Juju ([#47835](https://github.com/kubernetes/kubernetes/pull/47835), [@ktsakalozos](https://github.com/ktsakalozos))
-* addon-resizer flapping behavior was removed. ([#46850](https://github.com/kubernetes/kubernetes/pull/46850), [@x13n](https://github.com/x13n))
-* Change default `httpGet` probe `User-Agent` to `kube-probe/` if none specified, overriding the default Go `User-Agent`. ([#47729](https://github.com/kubernetes/kubernetes/pull/47729), [@paultyng](https://github.com/paultyng))
-* Registries backed by the generic Store's `Update` implementation support delete-on-update, which allows resources to be automatically deleted during an update provided: ([#48065](https://github.com/kubernetes/kubernetes/pull/48065), [@ironcladlou](https://github.com/ironcladlou))
- * Garbage collection is enabled for the Store
- * The resource being updated has no finalizers
- * The resource being updated has a non-nil DeletionGracePeriodSeconds equal to 0
- * With this fix, Custom Resource instances now also support delete-on-update behavior under the same circumstances.
-* Fixes an edge case where "kubectl apply view-last-applied" would emit garbage if the data contained Go format codes. ([#45611](https://github.com/kubernetes/kubernetes/pull/45611), [@atombender](https://github.com/atombender))
-* Bumped Heapster to v1.4.0. ([#48205](https://github.com/kubernetes/kubernetes/pull/48205), [@piosz](https://github.com/piosz))
- * More details about the release https://github.com/kubernetes/heapster/releases/tag/v1.4.0
-* In GCE and in a "private master" setup, do not set the network-plugin provider to CNI by default if a network policy provider is given. ([#48004](https://github.com/kubernetes/kubernetes/pull/48004), [@dnardo](https://github.com/dnardo))
-* Add generic NoSchedule toleration to fluentd in gcp config. ([#48182](https://github.com/kubernetes/kubernetes/pull/48182), [@gmarek](https://github.com/gmarek))
-* kubeadm: Expose only the cluster-info ConfigMap in the kube-public ns ([#48050](https://github.com/kubernetes/kubernetes/pull/48050), [@luxas](https://github.com/luxas))
-* Fixes kubelet race condition in container manager. ([#48123](https://github.com/kubernetes/kubernetes/pull/48123), [@msau42](https://github.com/msau42))
-* Bump GCE ContainerVM to container-vm-v20170627 ([#48159](https://github.com/kubernetes/kubernetes/pull/48159), [@zmerlynn](https://github.com/zmerlynn))
-* Add PriorityClassName and Priority fields to PodSpec. ([#45610](https://github.com/kubernetes/kubernetes/pull/45610), [@bsalamat](https://github.com/bsalamat))
-* Add a failsafe for etcd not returning a connection string ([#48054](https://github.com/kubernetes/kubernetes/pull/48054), [@ktsakalozos](https://github.com/ktsakalozos))
-* Fix fluentd-gcp configuration to facilitate JSON parsing ([#48139](https://github.com/kubernetes/kubernetes/pull/48139), [@crassirostris](https://github.com/crassirostris))
-* Setting env var ENABLE_BIG_CLUSTER_SUBNETS=true will allow kube-up.sh to start clusters bigger that 4095 Nodes on GCE. ([#47513](https://github.com/kubernetes/kubernetes/pull/47513), [@gmarek](https://github.com/gmarek))
-* When determining the default external host of the kube apiserver, any configured cloud provider is now consulted ([#47038](https://github.com/kubernetes/kubernetes/pull/47038), [@yastij](https://github.com/yastij))
-* Updated comments for functions. ([#47242](https://github.com/kubernetes/kubernetes/pull/47242), [@k82cn](https://github.com/k82cn))
-* Fix setting juju worker labels during deployment ([#47178](https://github.com/kubernetes/kubernetes/pull/47178), [@ktsakalozos](https://github.com/ktsakalozos))
-* `kubefed init` correctly checks for RBAC API enablement. ([#48077](https://github.com/kubernetes/kubernetes/pull/48077), [@liggitt](https://github.com/liggitt))
-* The garbage collector now cascades deletion properly when deleting an object with propagationPolicy="background". This resolves issue [#44046](https://github.com/kubernetes/kubernetes/issues/44046), so that when a deployment is deleted with propagationPolicy="background", the garbage collector ensures dependent pods are deleted as well. ([#44058](https://github.com/kubernetes/kubernetes/pull/44058), [@caesarxuchao](https://github.com/caesarxuchao))
-* Fix restart action on juju kubernetes-master ([#47170](https://github.com/kubernetes/kubernetes/pull/47170), [@ktsakalozos](https://github.com/ktsakalozos))
-* e2e: bump kubelet's resurce usage limit ([#47971](https://github.com/kubernetes/kubernetes/pull/47971), [@yujuhong](https://github.com/yujuhong))
-* Cluster Autoscaler 0.6 ([#48074](https://github.com/kubernetes/kubernetes/pull/48074), [@mwielgus](https://github.com/mwielgus))
-* Checked whether balanced Pods were created. ([#47488](https://github.com/kubernetes/kubernetes/pull/47488), [@k82cn](https://github.com/k82cn))
-* Update protobuf time serialization for a one second granularity ([#47975](https://github.com/kubernetes/kubernetes/pull/47975), [@deads2k](https://github.com/deads2k))
-* Bumped Heapster to v1.4.0-beta.0 ([#47961](https://github.com/kubernetes/kubernetes/pull/47961), [@piosz](https://github.com/piosz))
-* `kubectl api-versions` now always fetches information about enabled API groups and versions instead of using the local cache. ([#48016](https://github.com/kubernetes/kubernetes/pull/48016), [@liggitt](https://github.com/liggitt))
-* Removes alpha feature gate for affinity annotations. ([#47869](https://github.com/kubernetes/kubernetes/pull/47869), [@timothysc](https://github.com/timothysc))
-* Websocket requests may now authenticate to the API server by passing a bearer token in a websocket subprotocol of the form `base64url.bearer.authorization.k8s.io.` ([#47740](https://github.com/kubernetes/kubernetes/pull/47740), [@liggitt](https://github.com/liggitt))
-* Update cadvisor to v0.26.1 ([#47940](https://github.com/kubernetes/kubernetes/pull/47940), [@Random-Liu](https://github.com/Random-Liu))
-* Bump up npd version to v0.4.1 ([#47892](https://github.com/kubernetes/kubernetes/pull/47892), [@ajitak](https://github.com/ajitak))
-* Allow StorageClass Ceph RBD to specify image format and image features. ([#45805](https://github.com/kubernetes/kubernetes/pull/45805), [@weiwei04](https://github.com/weiwei04))
-* Removed mesos related labels. ([#46824](https://github.com/kubernetes/kubernetes/pull/46824), [@k82cn](https://github.com/k82cn))
-* Add RBAC support to fluentd-elasticsearch cluster addon ([#46203](https://github.com/kubernetes/kubernetes/pull/46203), [@simt2](https://github.com/simt2))
-* Avoid redundant copying of tars during kube-up for gce if the same file already exists ([#46792](https://github.com/kubernetes/kubernetes/pull/46792), [@ianchakeres](https://github.com/ianchakeres))
-* container runtime version has been added to the output of `kubectl get nodes -o=wide` as `CONTAINER-RUNTIME` ([#46646](https://github.com/kubernetes/kubernetes/pull/46646), [@rickypai](https://github.com/rickypai))
-* cAdvisor binds only to the interface that kubelet is running on instead of all interfaces. ([#47195](https://github.com/kubernetes/kubernetes/pull/47195), [@dims](https://github.com/dims))
-* The schema of the API that are served by the kube-apiserver, together with a small amount of generated code, are moved to k8s.io/api (https://github.com/kubernetes/api). ([#44784](https://github.com/kubernetes/kubernetes/pull/44784), [@caesarxuchao](https://github.com/caesarxuchao))
-
-
-
-# v1.8.0-alpha.1
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/master/examples)
-
-## Downloads for v1.8.0-alpha.1
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes.tar.gz) | `47088d4a0b79ce75a90e73b1dd7f864fc17fe5ff5cea553a072c7a277a70a104`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-src.tar.gz) | `ec2cb19b55e24c7b9728437fb9e39a442c07b68eaea636b2f6bb340e4b9696dc`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-client-darwin-386.tar.gz) | `c2fb538ce73f0ed74bd343485cd8873efcff580e4d948ea4bf2732f1b059e463`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-client-darwin-amd64.tar.gz) | `01a1cb673fbb764e47edaea07c1d3fdddd99bbd7b025f9b2498f38c99d5be4b2`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-client-linux-386.tar.gz) | `5bebebf12fb39db8be10f9758a92ce385013d07e629741421b09da88bd9fc0f1`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-client-linux-amd64.tar.gz) | `b02ae110b3694562b195189c3cb8eca21095153d0cb5552360053304dee425f1`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-client-linux-arm64.tar.gz) | `e6220b9e62856ad8345cb845c1365b3f177ee22d6f9718f11a1f373d7a70fd21`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-client-linux-arm.tar.gz) | `e35c62a3781841898c91724af136fbb35fd99cf15ca5ec947c1a4bc2f6e4a73d`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-client-linux-ppc64le.tar.gz) | `7b02c25a764bd367e9931006def88d3fc03cf9e846cce2e77cfbc95f0e206433`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-client-linux-s390x.tar.gz) | `ab6ba1bf43dd28c776a8cc5cae44413c45a7405f2996c277aba5ee3f6f73e305`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-client-windows-386.tar.gz) | `eb1516db15807111ef03547b0104dcb89a310481ef8f867a65f3c57f20f56e30`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-client-windows-amd64.tar.gz) | `525e599a2846fe166a5f1eb14483edee9d6b866aa096e16896f6544afad31768`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-server-linux-amd64.tar.gz) | `bb0a37bb1fefa735ec1eb651fec60c22b180c9bca1bd5e0317e1bcdbf4aa0819`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-server-linux-arm64.tar.gz) | `68fd804bd1f4d944a25112a67ef8b1cbae55051b110134850715b6f51f93f40c`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-server-linux-arm.tar.gz) | `822161bee3e8b3b64bb7cea297264729b3cc6d6a008c86f16b4aef16cde5b0de`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-server-linux-ppc64le.tar.gz) | `9354336df2694427e3d6bc9b0b1fe286f3f9a7f6ef8f239bd6319b4af1c02162`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-server-linux-s390x.tar.gz) | `d4a87e3713f190a4cc7db1f43a6105c3c95e1eb8de45ae269b9bd1ecd52296ce`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-node-linux-amd64.tar.gz) | `dc7c5865041008fcfdad050380fb33c23a361f7a1f4fbce78b164e2906a1b7f9`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-node-linux-arm64.tar.gz) | `d572cec5ec679e5543e9ee5e2529a51bb8d5ca5f3773e4218c5491a0bd77b7a4`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-node-linux-arm.tar.gz) | `4b0fae35ed01ca66fb0f82ea2ea7f804378f592d0c15425dc3934f4b7b6f19a8`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-node-linux-ppc64le.tar.gz) | `d5684a2d1a640e7b0fdf82a3faa0edef2b20e50a83ff6baea461699b0d74b583`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-node-linux-s390x.tar.gz) | `bb444cc79035044cfb58cbe3d7bccd7998522dcf6d993441cf29fd03c249897c`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.8.0-alpha.1/kubernetes-node-windows-amd64.tar.gz) | `9b54e823c504601193b5ae2d37cb1d297ae9b5acfa1497b6f530a835071a7b6d`
-
-## Changelog since v1.7.0-alpha.4
-
-### Action Required
-
-* The following alpha API groups were unintentionally enabled by default in previous releases, and will no longer be enabled by default in v1.8: ([#47690](https://github.com/kubernetes/kubernetes/pull/47690), [@caesarxuchao](https://github.com/caesarxuchao))
- * rbac.authorization.k8s.io/v1alpha1
- * settings.k8s.io/v1alpha1
- * If you wish to continue using them in v1.8, please enable them explicitly using the `--runtime-config` flag of the apiserver (for example, `--runtime-config="rbac.authorization.k8s.io/v1alpha1,settings.k8s.io/v1alpha1"`)
-* Paths containing backsteps (for example, "../bar") are no longer allowed in hostPath volume paths, or in volumeMount subpaths ([#47290](https://github.com/kubernetes/kubernetes/pull/47290), [@jhorwit2](https://github.com/jhorwit2))
-* Azure: Change container permissions to private for provisioned volumes. If you have existing Azure volumes that were created by Kubernetes v1.6.0-v1.6.5, you should change the permissions on them manually. ([#47605](https://github.com/kubernetes/kubernetes/pull/47605), [@brendandburns](https://github.com/brendandburns))
-* New and upgraded 1.7 GCE/GKE clusters no longer have an RBAC ClusterRoleBinding that grants the `cluster-admin` ClusterRole to the `default` service account in the `kube-system` namespace. ([#46750](https://github.com/kubernetes/kubernetes/pull/46750), [@cjcullen](https://github.com/cjcullen))
- * If this permission is still desired, run the following command to explicitly grant it, either before or after upgrading to 1.7:
- * kubectl create clusterrolebinding kube-system-default --serviceaccount=kube-system:default --clusterrole=cluster-admin
-* kube-apiserver: a new authorization mode (`--authorization-mode=Node`) authorizes nodes to access secrets, configmaps, persistent volume claims and persistent volumes related to their pods. ([#46076](https://github.com/kubernetes/kubernetes/pull/46076), [@liggitt](https://github.com/liggitt))
- * Nodes must use client credentials that place them in the `system:nodes` group with a username of `system:node:` in order to be authorized by the node authorizer (the credentials obtained by the kubelet via TLS bootstrapping satisfy these requirements)
- * When used in combination with the `RBAC` authorization mode (`--authorization-mode=Node,RBAC`), the `system:node` role is no longer automatically granted to the `system:nodes` group.
-* kube-controller-manager has dropped support for the `--insecure-experimental-approve-all-kubelet-csrs-for-group` flag. Instead, the `csrapproving` controller uses authorization checks to determine whether to approve certificate signing requests: ([#45619](https://github.com/kubernetes/kubernetes/pull/45619), [@mikedanese](https://github.com/mikedanese))
- * requests for a TLS client certificate for any node are approved if the CSR creator has `create` permission on the `certificatesigningrequests` resource and `nodeclient` subresource in the `certificates.k8s.io` API group
- * requests from a node for a TLS client certificate for itself are approved if the CSR creator has `create` permission on the `certificatesigningrequests` resource and the `selfnodeclient` subresource in the `certificates.k8s.io` API group
- * requests from a node for a TLS serving certificate for itself are approved if the CSR creator has `create` permission on the `certificatesigningrequests` resource and the `selfnodeserver` subresource in the `certificates.k8s.io` API group
-* Support updating storageclasses in etcd to storage.k8s.io/v1. You must do this prior to upgrading to 1.8. ([#46116](https://github.com/kubernetes/kubernetes/pull/46116), [@ncdc](https://github.com/ncdc))
-* The namespace API object no longer supports the deletecollection operation. ([#46407](https://github.com/kubernetes/kubernetes/pull/46407), [@liggitt](https://github.com/liggitt))
-* NetworkPolicy has been moved from `extensions/v1beta1` to the new ([#39164](https://github.com/kubernetes/kubernetes/pull/39164), [@danwinship](https://github.com/danwinship))
- `networking.k8s.io/v1` API group. The structure remains unchanged from
- the beta1 API.
- The `net.beta.kubernetes.io/network-policy` annotation on Namespaces
- to opt in to isolation has been removed. Instead, isolation is now
- determined at a per-pod level, with pods being isolated if there is
- any NetworkPolicy whose spec.podSelector targets them. Pods that are
- targeted by NetworkPolicies accept traffic that is accepted by any of
- the NetworkPolicies (and nothing else), and pods that are not targeted
- by any NetworkPolicy accept all traffic by default.
- Action Required:
- When upgrading to Kubernetes 1.7 (and a network plugin that supports
- the new NetworkPolicy v1 semantics), to ensure full behavioral
- compatibility with v1beta1:
- 1. In Namespaces that previously had the "DefaultDeny" annotation,
- you can create equivalent v1 semantics by creating a
- NetworkPolicy that matches all pods but does not allow any
- traffic:
-
- ```yaml
- kind: NetworkPolicy
- apiVersion: networking.k8s.io/v1
- metadata:
- name: default-deny
- spec:
- podSelector:
- ```
-
- This will ensure that pods that aren't matched by any other
- NetworkPolicy will continue to be fully-isolated, as they were
- before.
- 2. In Namespaces that previously did not have the "DefaultDeny"
- annotation, you should delete any existing NetworkPolicy
- objects. These would have had no effect before, but with v1
- semantics they might cause some traffic to be blocked that you
- didn't intend to be blocked.
-
-### Other notable changes
-
-* kubectl logs with label selector supports specifying a container name ([#44282](https://github.com/kubernetes/kubernetes/pull/44282), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Adds an approval work flow to the the certificate approver that will approve certificate signing requests from kubelets that meet all the criteria of kubelet server certificates. ([#46884](https://github.com/kubernetes/kubernetes/pull/46884), [@jcbsmpsn](https://github.com/jcbsmpsn))
-* AWS: Maintain a cache of all instances, to fix problem with > 200 nodes with ELBs ([#47410](https://github.com/kubernetes/kubernetes/pull/47410), [@justinsb](https://github.com/justinsb))
-* Bump GLBC version to 0.9.5 - fixes [loss of manually modified GCLB health check settings](https://github.com/kubernetes/kubernetes/issues/47559) upon upgrade from pre-1.6.4 to either 1.6.4 or 1.6.5. ([#47567](https://github.com/kubernetes/kubernetes/pull/47567), [@nicksardo](https://github.com/nicksardo))
-* Update cluster-proportional-autoscaler, metadata-proxy, and fluentd-gcp addons with fixes for CVE-2016-4448, CVE-2016-8859, CVE-2016-9841, CVE-2016-9843, and CVE-2017-9526. ([#47545](https://github.com/kubernetes/kubernetes/pull/47545), [@ixdy](https://github.com/ixdy))
-* AWS: Batch DescribeInstance calls with nodeNames to 150 limit, to stay within AWS filter limits. ([#47516](https://github.com/kubernetes/kubernetes/pull/47516), [@gnufied](https://github.com/gnufied))
-* AWS: Process disk attachments even with duplicate NodeNames ([#47406](https://github.com/kubernetes/kubernetes/pull/47406), [@justinsb](https://github.com/justinsb))
-* kubefed will now configure NodeInternalIP as the federation API server endpoint when NodeExternalIP is unavailable for federation API servers exposed as NodePort services ([#46960](https://github.com/kubernetes/kubernetes/pull/46960), [@lukaszo](https://github.com/lukaszo))
-* PodSecurityPolicy now recognizes pods that specify `runAsNonRoot: false` in their security context and does not overwrite the specified value ([#47073](https://github.com/kubernetes/kubernetes/pull/47073), [@Q-Lee](https://github.com/Q-Lee))
-* Bump GLBC version to 0.9.4 ([#47468](https://github.com/kubernetes/kubernetes/pull/47468), [@nicksardo](https://github.com/nicksardo))
-* Stackdriver Logging deployment exposes metrics on node port 31337 when enabled. ([#47402](https://github.com/kubernetes/kubernetes/pull/47402), [@crassirostris](https://github.com/crassirostris))
-* Update to kube-addon-manager:v6.4-beta.2: kubectl v1.6.4 and refreshed base images ([#47389](https://github.com/kubernetes/kubernetes/pull/47389), [@ixdy](https://github.com/ixdy))
-* Enable iptables -w in kubeadm selfhosted ([#46372](https://github.com/kubernetes/kubernetes/pull/46372), [@cmluciano](https://github.com/cmluciano))
-* Azure plugin for client auth ([#43987](https://github.com/kubernetes/kubernetes/pull/43987), [@cosmincojocar](https://github.com/cosmincojocar))
-* Fix dynamic provisioning of PVs with inaccurate AccessModes by refusing to provision when PVCs ask for AccessModes that can't be satisfied by the PVs' underlying volume plugin ([#47274](https://github.com/kubernetes/kubernetes/pull/47274), [@wongma7](https://github.com/wongma7))
-* AWS: Avoid spurious ELB listener recreation - ignore case when matching protocol ([#47391](https://github.com/kubernetes/kubernetes/pull/47391), [@justinsb](https://github.com/justinsb))
-* gce kube-up: The `Node` authorization mode and `NodeRestriction` admission controller are now enabled ([#46796](https://github.com/kubernetes/kubernetes/pull/46796), [@mikedanese](https://github.com/mikedanese))
-* update gophercloud/gophercloud dependency for reauthentication fixes ([#45545](https://github.com/kubernetes/kubernetes/pull/45545), [@stuart-warren](https://github.com/stuart-warren))
-* fix sync loop health check with separating runtime errors ([#47124](https://github.com/kubernetes/kubernetes/pull/47124), [@andyxning](https://github.com/andyxning))
-* servicecontroller: Fix node selection logic on initial LB creation ([#45773](https://github.com/kubernetes/kubernetes/pull/45773), [@justinsb](https://github.com/justinsb))
-* Fix iSCSI iSER mounting. ([#47281](https://github.com/kubernetes/kubernetes/pull/47281), [@mtanino](https://github.com/mtanino))
-* StorageOS Volume Driver ([#42156](https://github.com/kubernetes/kubernetes/pull/42156), [@croomes](https://github.com/croomes))
- * [StorageOS](http://www.storageos.com) can be used as a storage provider for Kubernetes. With StorageOS, capacity from local or attached storage is pooled across the cluster, providing converged infrastructure for cloud-native applications.
-* CRI has been moved to package `pkg/kubelet/apis/cri/v1alpha1/runtime`. ([#47113](https://github.com/kubernetes/kubernetes/pull/47113), [@feiskyer](https://github.com/feiskyer))
-* Make gcp auth provider not to override the Auth header if it's already exits ([#45575](https://github.com/kubernetes/kubernetes/pull/45575), [@wanghaoran1988](https://github.com/wanghaoran1988))
-* Allow pods to opt out of PodPreset mutation via an annotation on the pod. ([#44965](https://github.com/kubernetes/kubernetes/pull/44965), [@jpeeler](https://github.com/jpeeler))
-* Add Traditional Chinese translation for kubectl ([#46559](https://github.com/kubernetes/kubernetes/pull/46559), [@warmchang](https://github.com/warmchang))
-* Remove Initializers from admission-control in kubernetes-master charm for pre-1.7 ([#46987](https://github.com/kubernetes/kubernetes/pull/46987), [@Cynerva](https://github.com/Cynerva))
-* Added state guards to the idle_status messaging in the kubernetes-master charm to make deployment faster on initial deployment. ([#47183](https://github.com/kubernetes/kubernetes/pull/47183), [@chuckbutler](https://github.com/chuckbutler))
-* Bump up Node Problem Detector version to v0.4.0, which added support of parsing log from /dev/kmsg and ABRT. ([#46743](https://github.com/kubernetes/kubernetes/pull/46743), [@Random-Liu](https://github.com/Random-Liu))
-* kubeadm: Enable the Node Authorizer/Admission plugin in v1.7 ([#46879](https://github.com/kubernetes/kubernetes/pull/46879), [@luxas](https://github.com/luxas))
-* Deprecated Binding objects in 1.7. ([#47041](https://github.com/kubernetes/kubernetes/pull/47041), [@k82cn](https://github.com/k82cn))
-* Add secretbox and AES-CBC encryption modes to at rest encryption. AES-CBC is considered superior to AES-GCM because it is resistant to nonce-reuse attacks, and secretbox uses Poly1305 and XSalsa20. ([#46916](https://github.com/kubernetes/kubernetes/pull/46916), [@smarterclayton](https://github.com/smarterclayton))
-* The HorizontalPodAutoscaler controller will now only send updates when it has new status information, reducing the number of writes caused by the controller. ([#47078](https://github.com/kubernetes/kubernetes/pull/47078), [@DirectXMan12](https://github.com/DirectXMan12))
-* gpusInUse info error when kubelet restarts ([#46087](https://github.com/kubernetes/kubernetes/pull/46087), [@tianshapjq](https://github.com/tianshapjq))
-* kubeadm: Modifications to cluster-internal resources installed by kubeadm will be overwritten when upgrading from v1.6 to v1.7. ([#47081](https://github.com/kubernetes/kubernetes/pull/47081), [@luxas](https://github.com/luxas))
-* Added exponential backoff to Azure cloudprovider ([#46660](https://github.com/kubernetes/kubernetes/pull/46660), [@jackfrancis](https://github.com/jackfrancis))
-* fixed HostAlias in PodSpec to allow `foo.bar` hostnames instead of just `foo` DNS labels. ([#46809](https://github.com/kubernetes/kubernetes/pull/46809), [@rickypai](https://github.com/rickypai))
-* Implements rolling update for StatefulSets. Updates can be performed using the RollingUpdate, Paritioned, or OnDelete strategies. OnDelete implements the manual behavior from 1.6. status now tracks ([#46669](https://github.com/kubernetes/kubernetes/pull/46669), [@kow3ns](https://github.com/kow3ns))
- * replicas, readyReplicas, currentReplicas, and updatedReplicas. The semantics of replicas is now consistent with DaemonSet and ReplicaSet, and readyReplicas has the semantics that replicas did prior to this release.
-* Add Japanese translation for kubectl ([#46756](https://github.com/kubernetes/kubernetes/pull/46756), [@girikuncoro](https://github.com/girikuncoro))
-* federation: Add admission controller for policy-based placement ([#44786](https://github.com/kubernetes/kubernetes/pull/44786), [@tsandall](https://github.com/tsandall))
-* Get command uses OpenAPI schema to enhance display for a resource if run with flag 'use-openapi-print-columns'. ([#46235](https://github.com/kubernetes/kubernetes/pull/46235), [@droot](https://github.com/droot))
- * An example command:
- * kubectl get pods --use-openapi-print-columns
-* add gzip compression to GET and LIST requests ([#45666](https://github.com/kubernetes/kubernetes/pull/45666), [@ilackarms](https://github.com/ilackarms))
-* Fix the bug where container cannot run as root when SecurityContext.RunAsNonRoot is false. ([#47009](https://github.com/kubernetes/kubernetes/pull/47009), [@yujuhong](https://github.com/yujuhong))
-* Fixes a bug with cAdvisorPort in the KubeletConfiguration that prevented setting it to 0, which is in fact a valid option, as noted in issue [#11710](https://github.com/kubernetes/kubernetes/pull/11710). ([#46876](https://github.com/kubernetes/kubernetes/pull/46876), [@mtaufen](https://github.com/mtaufen))
-* Stackdriver cluster logging now deploys a new component to export Kubernetes events. ([#46700](https://github.com/kubernetes/kubernetes/pull/46700), [@crassirostris](https://github.com/crassirostris))
-* Alpha feature: allows users to set storage limit to isolate EmptyDir volumes. It enforces the limit by evicting pods that exceed their storage limits ([#45686](https://github.com/kubernetes/kubernetes/pull/45686), [@jingxu97](https://github.com/jingxu97))
-* Adds the `Categories []string` field to API resources, which represents the list of group aliases (e.g. "all") that every resource belongs to. ([#43338](https://github.com/kubernetes/kubernetes/pull/43338), [@fabianofranz](https://github.com/fabianofranz))
-* Promote kubelet tls bootstrap to beta. Add a non-experimental flag to use it and deprecate the old flag. ([#46799](https://github.com/kubernetes/kubernetes/pull/46799), [@mikedanese](https://github.com/mikedanese))
-* Fix disk partition discovery for brtfs ([#46816](https://github.com/kubernetes/kubernetes/pull/46816), [@dashpole](https://github.com/dashpole))
- * Add ZFS support
- * Add overlay2 storage driver support
-* Support creation of GCP Internal Load Balancers from Service objects ([#46663](https://github.com/kubernetes/kubernetes/pull/46663), [@nicksardo](https://github.com/nicksardo))
-* Introduces status conditions to the HorizontalPodAutoscaler in autoscaling/v2alpha1, indicating the current status of a given HorizontalPodAutoscaler, and why it is or is not scaling. ([#46550](https://github.com/kubernetes/kubernetes/pull/46550), [@DirectXMan12](https://github.com/DirectXMan12))
-* Support OpenAPI spec aggregation for kube-aggregator ([#46734](https://github.com/kubernetes/kubernetes/pull/46734), [@mbohlool](https://github.com/mbohlool))
-* Implement kubectl rollout undo and history for DaemonSet ([#46144](https://github.com/kubernetes/kubernetes/pull/46144), [@janetkuo](https://github.com/janetkuo))
-* Respect PDBs during node upgrades and add test coverage to the ServiceTest upgrade test. ([#45748](https://github.com/kubernetes/kubernetes/pull/45748), [@mml](https://github.com/mml))
-* Disk Pressure triggers the deletion of terminated containers on the node. ([#45896](https://github.com/kubernetes/kubernetes/pull/45896), [@dashpole](https://github.com/dashpole))
-* Add the `alpha.image-policy.k8s.io/failed-open=true` annotation when the image policy webhook encounters an error and fails open. ([#46264](https://github.com/kubernetes/kubernetes/pull/46264), [@Q-Lee](https://github.com/Q-Lee))
-* Enable kubelet csr bootstrap in GCE/GKE ([#40760](https://github.com/kubernetes/kubernetes/pull/40760), [@mikedanese](https://github.com/mikedanese))
-* Implement Daemonset history ([#45924](https://github.com/kubernetes/kubernetes/pull/45924), [@janetkuo](https://github.com/janetkuo))
-* When switching from the `service.beta.kubernetes.io/external-traffic` annotation to the new ([#46716](https://github.com/kubernetes/kubernetes/pull/46716), [@thockin](https://github.com/thockin))
- * `externalTrafficPolicy` field, the values chnag as follows:
- * "OnlyLocal" becomes "Local"
- * "Global" becomes "Cluster".
-* Fix kubelet reset liveness probe failure count across pod restart boundaries ([#46371](https://github.com/kubernetes/kubernetes/pull/46371), [@sjenning](https://github.com/sjenning))
-* The gce metadata server can be hidden behind a proxy, hiding the kubelet's token. ([#45565](https://github.com/kubernetes/kubernetes/pull/45565), [@Q-Lee](https://github.com/Q-Lee))
-* AWS: Allow configuration of a single security group for ELBs ([#45500](https://github.com/kubernetes/kubernetes/pull/45500), [@nbutton23](https://github.com/nbutton23))
-* Allow remote admission controllers to be dynamically added and removed by administrators. External admission controllers make an HTTP POST containing details of the requested action which the service can approve or reject. ([#46388](https://github.com/kubernetes/kubernetes/pull/46388), [@lavalamp](https://github.com/lavalamp))
-* iscsi storage plugin: Fix dangling session when using multiple target portal addresses. ([#46239](https://github.com/kubernetes/kubernetes/pull/46239), [@mtanino](https://github.com/mtanino))
-* Duplicate recurring Events now include the latest event's Message string ([#46034](https://github.com/kubernetes/kubernetes/pull/46034), [@kensimon](https://github.com/kensimon))
-* With --feature-gates=RotateKubeletClientCertificate=true set, the kubelet will ([#41912](https://github.com/kubernetes/kubernetes/pull/41912), [@jcbsmpsn](https://github.com/jcbsmpsn))
- * request a client certificate from the API server during the boot cycle and pause
- * waiting for the request to be satisfied. It will continually refresh the certificate
- * as the certificates expiration approaches.
-* The Kubernetes API supports retrieving tabular output for API resources via a new mime-type `application/json;as=Table;v=v1alpha1;g=meta.k8s.io`. The returned object (if the server supports it) will be of type `meta.k8s.io/v1alpha1` with `Table`, and contain column and row information related to the resource. Each row will contain information about the resource - by default it will be the object metadata, but callers can add the `?includeObject=Object` query parameter and receive the full object. In the future kubectl will use this to retrieve the results of `kubectl get`. ([#40848](https://github.com/kubernetes/kubernetes/pull/40848), [@smarterclayton](https://github.com/smarterclayton))
-* This change add nonResourceURL to kubectl auth cani ([#46432](https://github.com/kubernetes/kubernetes/pull/46432), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Webhook added to the API server which omits structured audit log events. ([#45919](https://github.com/kubernetes/kubernetes/pull/45919), [@ericchiang](https://github.com/ericchiang))
-* By default, --low-diskspace-threshold-mb is not set, and --eviction-hard includes "nodefs.available<10%,nodefs.inodesFree<5%" ([#46448](https://github.com/kubernetes/kubernetes/pull/46448), [@dashpole](https://github.com/dashpole))
-* kubectl edit and kubectl apply will keep the ordering of elements in merged lists ([#45980](https://github.com/kubernetes/kubernetes/pull/45980), [@mengqiy](https://github.com/mengqiy))
-* [Federation][kubefed]: Use StorageClassName for etcd pvc ([#46323](https://github.com/kubernetes/kubernetes/pull/46323), [@marun](https://github.com/marun))
-* Restrict active deadline seconds max allowed value to be maximum uint32 ([#46640](https://github.com/kubernetes/kubernetes/pull/46640), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Implement kubectl get controllerrevisions ([#46655](https://github.com/kubernetes/kubernetes/pull/46655), [@janetkuo](https://github.com/janetkuo))
-* Local storage plugin ([#44897](https://github.com/kubernetes/kubernetes/pull/44897), [@msau42](https://github.com/msau42))
-* With `--feature-gates=RotateKubeletServerCertificate=true` set, the kubelet will ([#45059](https://github.com/kubernetes/kubernetes/pull/45059), [@jcbsmpsn](https://github.com/jcbsmpsn))
- * request a server certificate from the API server during the boot cycle and pause
- * waiting for the request to be satisfied. It will continually refresh the certificate as
- * the certificates expiration approaches.
-* Allow PSP's to specify a whitelist of allowed paths for host volume based on path prefixes ([#43946](https://github.com/kubernetes/kubernetes/pull/43946), [@jhorwit2](https://github.com/jhorwit2))
-* Add `kubectl config rename-context` ([#46114](https://github.com/kubernetes/kubernetes/pull/46114), [@arthur0](https://github.com/arthur0))
-* Fix AWS EBS volumes not getting detached from node if routine to verify volumes are attached runs while the node is down ([#46463](https://github.com/kubernetes/kubernetes/pull/46463), [@wongma7](https://github.com/wongma7))
-* Move hardPodAffinitySymmetricWeight to scheduler policy config ([#44159](https://github.com/kubernetes/kubernetes/pull/44159), [@wanghaoran1988](https://github.com/wanghaoran1988))
-* AWS: support node port health check ([#43585](https://github.com/kubernetes/kubernetes/pull/43585), [@foolusion](https://github.com/foolusion))
-* Add generic Toleration for NoExecute Taints to NodeProblemDetector ([#45883](https://github.com/kubernetes/kubernetes/pull/45883), [@gmarek](https://github.com/gmarek))
-* support replaceKeys patch strategy and directive for strategic merge patch ([#44597](https://github.com/kubernetes/kubernetes/pull/44597), [@mengqiy](https://github.com/mengqiy))
-* Augment CRI to support retrieving container stats from the runtime. ([#45614](https://github.com/kubernetes/kubernetes/pull/45614), [@yujuhong](https://github.com/yujuhong))
-* Prevent kubelet from setting allocatable < 0 for a resource upon initial creation. ([#46516](https://github.com/kubernetes/kubernetes/pull/46516), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* add --non-resource-url to kubectl create clusterrole ([#45809](https://github.com/kubernetes/kubernetes/pull/45809), [@CaoShuFeng](https://github.com/CaoShuFeng))
-* Add `kubectl apply edit-last-applied` subcommand ([#42256](https://github.com/kubernetes/kubernetes/pull/42256), [@shiywang](https://github.com/shiywang))
-* Adding admissionregistration API group which enables dynamic registration of initializers and external admission webhooks. It is an alpha feature. ([#46294](https://github.com/kubernetes/kubernetes/pull/46294), [@caesarxuchao](https://github.com/caesarxuchao))
-* Fix log spam due to unnecessary status update when node is deleted. ([#45923](https://github.com/kubernetes/kubernetes/pull/45923), [@verult](https://github.com/verult))
-* GCE installs will now avoid IP masquerade for all RFC-1918 IP blocks, rather than just 10.0.0.0/8. This means that clusters can ([#46473](https://github.com/kubernetes/kubernetes/pull/46473), [@thockin](https://github.com/thockin))
- * be created in 192.168.0.0./16 and 172.16.0.0/12 while preserving the container IPs (which would be lost before).
-* `set selector` and `set subject` no longer print "running in local/dry-run mode..." at the top, so their output can be piped as valid yaml or json ([#46507](https://github.com/kubernetes/kubernetes/pull/46507), [@bboreham](https://github.com/bboreham))
-* ControllerRevision type added for StatefulSet and DaemonSet history. ([#45867](https://github.com/kubernetes/kubernetes/pull/45867), [@kow3ns](https://github.com/kow3ns))
-* Bump Go version to 1.8.3 ([#46429](https://github.com/kubernetes/kubernetes/pull/46429), [@wojtek-t](https://github.com/wojtek-t))
-* Upgrade Elasticsearch Addon to v5.4.0 ([#45589](https://github.com/kubernetes/kubernetes/pull/45589), [@it-svit](https://github.com/it-svit))
-* PodDisruptionBudget now uses ControllerRef to decide which controller owns a given Pod, so it doesn't get confused by controllers with overlapping selectors. ([#45003](https://github.com/kubernetes/kubernetes/pull/45003), [@krmayankk](https://github.com/krmayankk))
-* aws: Support for ELB tagging by users ([#45932](https://github.com/kubernetes/kubernetes/pull/45932), [@lpabon](https://github.com/lpabon))
-* Portworx volume driver no longer has to run on the master. ([#45518](https://github.com/kubernetes/kubernetes/pull/45518), [@harsh-px](https://github.com/harsh-px))
-* kube-proxy: ratelimit runs of iptables by sync-period flags ([#46266](https://github.com/kubernetes/kubernetes/pull/46266), [@thockin](https://github.com/thockin))
-* Deployments are updated to use (1) a more stable hashing algorithm (fnv) than the previous one (adler) and (2) a hashing collision avoidance mechanism that will ensure new rollouts will not block on hashing collisions anymore. ([#44774](https://github.com/kubernetes/kubernetes/pull/44774), [@kargakis](https://github.com/kargakis))
-* The Prometheus metrics for the kube-apiserver for tracking incoming API requests and latencies now return the `subresource` label for correctly attributing the type of API call. ([#46354](https://github.com/kubernetes/kubernetes/pull/46354), [@smarterclayton](https://github.com/smarterclayton))
-* Add Simplified Chinese translation for kubectl ([#45573](https://github.com/kubernetes/kubernetes/pull/45573), [@shiywang](https://github.com/shiywang))
-* The --namespace flag is now honored for in-cluster clients that have an empty configuration. ([#46299](https://github.com/kubernetes/kubernetes/pull/46299), [@ncdc](https://github.com/ncdc))
-* Fix init container status reporting when active deadline is exceeded. ([#46305](https://github.com/kubernetes/kubernetes/pull/46305), [@sjenning](https://github.com/sjenning))
-* Improves performance of Cinder volume attach/detach operations ([#41785](https://github.com/kubernetes/kubernetes/pull/41785), [@jamiehannaford](https://github.com/jamiehannaford))
-* GCE and AWS dynamic provisioners extension: admins can configure zone(s) in which a persistent volume shall be created. ([#38505](https://github.com/kubernetes/kubernetes/pull/38505), [@pospispa](https://github.com/pospispa))
-* Break the 'certificatesigningrequests' controller into a 'csrapprover' controller and 'csrsigner' controller. ([#45514](https://github.com/kubernetes/kubernetes/pull/45514), [@mikedanese](https://github.com/mikedanese))
-* Modifies kubefed to create and the federation controller manager to use credentials associated with a service account rather than the user's credentials. ([#42042](https://github.com/kubernetes/kubernetes/pull/42042), [@perotinus](https://github.com/perotinus))
-* Adds a MaxUnavailable field to PodDisruptionBudget ([#45587](https://github.com/kubernetes/kubernetes/pull/45587), [@foxish](https://github.com/foxish))
-* The behavior of some watch calls to the server when filtering on fields was incorrect. If watching objects with a filter, when an update was made that no longer matched the filter a DELETE event was correctly sent. However, the object that was returned by that delete was not the (correct) version before the update, but instead, the newer version. That meant the new object was not matched by the filter. This was a regression from behavior between cached watches on the server side and uncached watches, and thus broke downstream API clients. ([#46223](https://github.com/kubernetes/kubernetes/pull/46223), [@smarterclayton](https://github.com/smarterclayton))
-* vSphere cloud provider: vSphere Storage policy Support for dynamic volume provisioning ([#46176](https://github.com/kubernetes/kubernetes/pull/46176), [@BaluDontu](https://github.com/BaluDontu))
-* Add support for emitting metrics from openstack cloudprovider about storage operations. ([#46008](https://github.com/kubernetes/kubernetes/pull/46008), [@NickrenREN](https://github.com/NickrenREN))
-* 'kubefed init' now supports overriding the default etcd image name with the --etcd-image parameter. ([#46247](https://github.com/kubernetes/kubernetes/pull/46247), [@marun](https://github.com/marun))
-* remove the elasticsearch template ([#45952](https://github.com/kubernetes/kubernetes/pull/45952), [@harryge00](https://github.com/harryge00))
-* Adds the `CustomResourceDefinition` (crd) types to the `kube-apiserver`. These are the successors to `ThirdPartyResource`. See https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/thirdpartyresources.md for more details. ([#46055](https://github.com/kubernetes/kubernetes/pull/46055), [@deads2k](https://github.com/deads2k))
-* StatefulSets now include an alpha scaling feature accessible by setting the `spec.podManagementPolicy` field to `Parallel`. The controller will not wait for pods to be ready before adding the other pods, and will replace deleted pods as needed. Since parallel scaling creates pods out of order, you cannot depend on predictable membership changes within your set. ([#44899](https://github.com/kubernetes/kubernetes/pull/44899), [@smarterclayton](https://github.com/smarterclayton))
-* fix kubelet event recording for selected events. ([#46246](https://github.com/kubernetes/kubernetes/pull/46246), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Moved qos to api.helpers. ([#44906](https://github.com/kubernetes/kubernetes/pull/44906), [@k82cn](https://github.com/k82cn))
-* Kubelet PLEG updates the relist timestamp only after successfully relisting. ([#45496](https://github.com/kubernetes/kubernetes/pull/45496), [@andyxning](https://github.com/andyxning))
-* OpenAPI spec is now available in protobuf binary and gzip format (with ETag support) ([#45836](https://github.com/kubernetes/kubernetes/pull/45836), [@mbohlool](https://github.com/mbohlool))
-* Added support to a hierarchy of kubectl plugins (a tree of plugins as children of other plugins). ([#45981](https://github.com/kubernetes/kubernetes/pull/45981), [@fabianofranz](https://github.com/fabianofranz))
- * Added exported env vars to kubectl plugins so that plugin developers have access to global flags, namespace, the plugin descriptor and the full path to the caller binary.
-* Ignored mirror pods in PodPreset admission plugin. ([#45958](https://github.com/kubernetes/kubernetes/pull/45958), [@k82cn](https://github.com/k82cn))
-* Don't try to attach volume to new node if it is already attached to another node and the volume does not support multi-attach. ([#45346](https://github.com/kubernetes/kubernetes/pull/45346), [@codablock](https://github.com/codablock))
-* The Calico version included in kube-up for GCE has been updated to v2.2. ([#38169](https://github.com/kubernetes/kubernetes/pull/38169), [@caseydavenport](https://github.com/caseydavenport))
-* Kubelet: Fix image garbage collector attempting to remove in-use images. ([#46121](https://github.com/kubernetes/kubernetes/pull/46121), [@Random-Liu](https://github.com/Random-Liu))
-* Add ip-masq-agent addon to the addons folder which is used in GCE if --non-masquerade-cidr is set to 0/0 ([#46038](https://github.com/kubernetes/kubernetes/pull/46038), [@dnardo](https://github.com/dnardo))
-* Fix serialization of EnforceNodeAllocatable ([#44606](https://github.com/kubernetes/kubernetes/pull/44606), [@ivan4th](https://github.com/ivan4th))
-* Add --write-config-to flag to kube-proxy to allow users to write the default configuration settings to a file. ([#45908](https://github.com/kubernetes/kubernetes/pull/45908), [@ncdc](https://github.com/ncdc))
-* The `NodeRestriction` admission plugin limits the `Node` and `Pod` objects a kubelet can modify. In order to be limited by this admission plugin, kubelets must use credentials in the `system:nodes` group, with a username in the form `system:node:`. Such kubelets will only be allowed to modify their own `Node` API object, and only modify `Pod` API objects that are bound to their node. ([#45929](https://github.com/kubernetes/kubernetes/pull/45929), [@liggitt](https://github.com/liggitt))
-* vSphere cloud provider: Report same Node IP as both internal and external. ([#45201](https://github.com/kubernetes/kubernetes/pull/45201), [@abrarshivani](https://github.com/abrarshivani))
-* The options passed to a flexvolume plugin's mount command now contains the pod name (`kubernetes.io/pod.name`), namespace (`kubernetes.io/pod.namespace`), uid (`kubernetes.io/pod.uid`), and service account name (`kubernetes.io/serviceAccount.name`). ([#39488](https://github.com/kubernetes/kubernetes/pull/39488), [@liggitt](https://github.com/liggitt))
-
-
-Please see the [Releases Page](https://github.com/kubernetes/kubernetes/releases) for older releases.
-
-Release notes of older releases can be found in:
-- [CHANGELOG-1.2.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.2.md)
-- [CHANGELOG-1.3.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.3.md)
-- [CHANGELOG-1.4.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.4.md)
-- [CHANGELOG-1.5.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.5.md)
-- [CHANGELOG-1.6.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.6.md)
-- [CHANGELOG-1.7.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.7.md)
diff --git a/vendor/k8s.io/kubernetes/CHANGELOG-1.9.md b/vendor/k8s.io/kubernetes/CHANGELOG-1.9.md
index c03c7673cbc0..1ee4998990e3 100644
--- a/vendor/k8s.io/kubernetes/CHANGELOG-1.9.md
+++ b/vendor/k8s.io/kubernetes/CHANGELOG-1.9.md
@@ -1,33 +1,1078 @@
-- [v1.9.0-alpha.3](#v190-alpha3)
- - [Downloads for v1.9.0-alpha.3](#downloads-for-v190-alpha3)
+- [v1.9.0](#v190)
+ - [Downloads for v1.9.0](#downloads-for-v190)
- [Client Binaries](#client-binaries)
- [Server Binaries](#server-binaries)
- [Node Binaries](#node-binaries)
- - [Changelog since v1.9.0-alpha.2](#changelog-since-v190-alpha2)
- - [Action Required](#action-required)
- - [Other notable changes](#other-notable-changes)
-- [v1.9.0-alpha.2](#v190-alpha2)
- - [Downloads for v1.9.0-alpha.2](#downloads-for-v190-alpha2)
+ - [1.9 Release Notes](#19-release-notes)
+ - [WARNING: etcd backup strongly recommended](#warning-etcd-backup-strongly-recommended)
+ - [Introduction to 1.9.0](#introduction-to-190)
+ - [Major themes](#major-themes)
+ - [API Machinery](#api-machinery)
+ - [Apps](#apps)
+ - [Auth](#auth)
+ - [AWS](#aws)
+ - [Azure](#azure)
+ - [Cluster Lifecycle](#cluster-lifecycle)
+ - [Instrumentation](#instrumentation)
+ - [Network](#network)
+ - [Node](#node)
+ - [OpenStack](#openstack)
+ - [Storage](#storage)
+ - [Windows](#windows)
+ - [Before Upgrading](#before-upgrading)
+ - [**API Machinery**](#api-machinery-1)
+ - [**Auth**](#auth-1)
+ - [**CLI**](#cli)
+ - [**Cluster Lifecycle**](#cluster-lifecycle-1)
+ - [**Multicluster**](#multicluster)
+ - [**Node**](#node-1)
+ - [**Network**](#network-1)
+ - [**Scheduling**](#scheduling)
+ - [**Storage**](#storage-1)
+ - [**OpenStack**](#openstack-1)
+ - [Known Issues](#known-issues)
+ - [Deprecations](#deprecations)
+ - [**API Machinery**](#api-machinery-2)
+ - [**Auth**](#auth-2)
+ - [**Cluster Lifecycle**](#cluster-lifecycle-2)
+ - [**Network**](#network-2)
+ - [**Storage**](#storage-2)
+ - [**Scheduling**](#scheduling-1)
+ - [**Node**](#node-2)
+ - [Notable Changes](#notable-changes)
+ - [**Workloads API (apps/v1)**](#workloads-api-appsv1)
+ - [**API Machinery**](#api-machinery-3)
+ - [**Admission Control**](#admission-control)
+ - [**API & API server**](#api-&-api-server)
+ - [**Audit**](#audit)
+ - [**Custom Resources**](#custom-resources)
+ - [**Other**](#other)
+ - [**Apps**](#apps-1)
+ - [**Auth**](#auth-3)
+ - [**Audit**](#audit-1)
+ - [**RBAC**](#rbac)
+ - [**Other**](#other-1)
+ - [**GCE**](#gce)
+ - [**Autoscaling**](#autoscaling)
+ - [**AWS**](#aws-1)
+ - [**Azure**](#azure-1)
+ - [**CLI**](#cli-1)
+ - [**Kubectl**](#kubectl)
+ - [**Cluster Lifecycle**](#cluster-lifecycle-3)
+ - [**API Server**](#api-server)
+ - [**Cloud Provider Integration**](#cloud-provider-integration)
+ - [**Kubeadm**](#kubeadm)
+ - [**Juju**](#juju)
+ - [**Other**](#other-2)
+ - [**GCP**](#gcp)
+ - [**Instrumentation**](#instrumentation-1)
+ - [**Audit**](#audit-2)
+ - [**Other**](#other-3)
+ - [**Multicluster**](#multicluster-1)
+ - [**Federation**](#federation)
+ - [**Network**](#network-3)
+ - [**IPv6**](#ipv6)
+ - [**IPVS**](#ipvs)
+ - [**Kube-Proxy**](#kube-proxy)
+ - [**CoreDNS**](#coredns)
+ - [**Other**](#other-4)
+ - [**Node**](#node-3)
+ - [**Pod API**](#pod-api)
+ - [**Hardware Accelerators**](#hardware-accelerators)
+ - [**Container Runtime**](#container-runtime)
+ - [**Kubelet**](#kubelet)
+ - [**Other**](#other-5)
+ - [**OpenStack**](#openstack-2)
+ - [**Scheduling**](#scheduling-2)
+ - [**Hardware Accelerators**](#hardware-accelerators-1)
+ - [**Other**](#other-6)
+ - [**Storage**](#storage-3)
+ - [External Dependencies](#external-dependencies)
+- [v1.9.0-beta.2](#v190-beta2)
+ - [Downloads for v1.9.0-beta.2](#downloads-for-v190-beta2)
- [Client Binaries](#client-binaries-1)
- [Server Binaries](#server-binaries-1)
- [Node Binaries](#node-binaries-1)
- - [Changelog since v1.8.0](#changelog-since-v180)
- - [Action Required](#action-required-1)
- - [Other notable changes](#other-notable-changes-1)
-- [v1.9.0-alpha.1](#v190-alpha1)
- - [Downloads for v1.9.0-alpha.1](#downloads-for-v190-alpha1)
+ - [Changelog since v1.9.0-beta.1](#changelog-since-v190-beta1)
+ - [Other notable changes](#other-notable-changes)
+- [v1.9.0-beta.1](#v190-beta1)
+ - [Downloads for v1.9.0-beta.1](#downloads-for-v190-beta1)
- [Client Binaries](#client-binaries-2)
- [Server Binaries](#server-binaries-2)
- [Node Binaries](#node-binaries-2)
- - [Changelog since v1.8.0-alpha.3](#changelog-since-v180-alpha3)
- - [Action Required](#action-required-2)
+ - [Changelog since v1.9.0-alpha.3](#changelog-since-v190-alpha3)
+ - [Action Required](#action-required)
+ - [Other notable changes](#other-notable-changes-1)
+- [v1.9.0-alpha.3](#v190-alpha3)
+ - [Downloads for v1.9.0-alpha.3](#downloads-for-v190-alpha3)
+ - [Client Binaries](#client-binaries-3)
+ - [Server Binaries](#server-binaries-3)
+ - [Node Binaries](#node-binaries-3)
+ - [Changelog since v1.9.0-alpha.2](#changelog-since-v190-alpha2)
+ - [Action Required](#action-required-1)
- [Other notable changes](#other-notable-changes-2)
+- [v1.9.0-alpha.2](#v190-alpha2)
+ - [Downloads for v1.9.0-alpha.2](#downloads-for-v190-alpha2)
+ - [Client Binaries](#client-binaries-4)
+ - [Server Binaries](#server-binaries-4)
+ - [Node Binaries](#node-binaries-4)
+ - [Changelog since v1.8.0](#changelog-since-v180)
+ - [Action Required](#action-required-2)
+ - [Other notable changes](#other-notable-changes-3)
+- [v1.9.0-alpha.1](#v190-alpha1)
+ - [Downloads for v1.9.0-alpha.1](#downloads-for-v190-alpha1)
+ - [Client Binaries](#client-binaries-5)
+ - [Server Binaries](#server-binaries-5)
+ - [Node Binaries](#node-binaries-5)
+ - [Changelog since v1.8.0-alpha.3](#changelog-since-v180-alpha3)
+ - [Action Required](#action-required-3)
+ - [Other notable changes](#other-notable-changes-4)
+# v1.9.0
+
+[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.9/examples)
+
+## Downloads for v1.9.0
+
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes.tar.gz) | `d8a52a97382a418b69d46a8b3946bd95c404e03a2d50489d16b36517c9dbc7f4`
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-src.tar.gz) | `95d35ad7d274e5ed207674983c3e8ec28d8190c17e635ee922e2af8349fb031b`
+
+### Client Binaries
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-client-darwin-386.tar.gz) | `2646aa4badf9281b42b921c1e9e2ed235e1305d331423f252a3380396e0c383f`
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-client-darwin-amd64.tar.gz) | `e76e69cf58399c10908afce8bb8d1f12cb8811de7b24e657e5f9fc80e7b9b6fb`
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-client-linux-386.tar.gz) | `bcd5ca428eb78fdaadbcf9ff78d9cbcbf70585a2d2582342a4460e55f3bbad13`
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-client-linux-amd64.tar.gz) | `ba96c8e71dba68b1b3abcad769392fb4df53e402cb65ef25cd176346ee2c39e8`
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-client-linux-arm64.tar.gz) | `80ceae744fbbfc7759c3d95999075f98e5d86d80e53ea83d16fa8e849da4073d`
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-client-linux-arm.tar.gz) | `86b271e2518230f3502708cbe8f188a3a68b913c812247b8cc6fbb4c9f35f6c8`
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-client-linux-ppc64le.tar.gz) | `8b7506ab64ceb2ff470120432d7a6a93adf14e14e612b3c53b3c238d334b55e2`
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-client-linux-s390x.tar.gz) | `c066aa75a99c141410f9b9a78d230aff4a14dee472fe2b17729e902739798831`
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-client-windows-386.tar.gz) | `a315535d6a64842a7c2efbf2bb876c0b73db7efd4c848812af07956c2446f526`
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-client-windows-amd64.tar.gz) | `5d2ba1f008253da1a784c8bb5266d026fb6fdac5d22133b51e86d348dbaff49b`
+
+### Server Binaries
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-server-linux-amd64.tar.gz) | `a8d7be19e3b662681dc50dc0085ca12045979530a27d0200cf986ada3eff4d32`
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-server-linux-arm64.tar.gz) | `8ef6ad23c60a50b4255ff41db044b2f5922e2a4b0332303065d9e66688a0b026`
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-server-linux-arm.tar.gz) | `7cb99cf65553c9637ee6f55821ea3f778873a9912917ebbd6203e06d5effb055`
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-server-linux-ppc64le.tar.gz) | `529b0f45a0fc688aa624aa2b850f28807ce2be3ac1660189f20cd3ae864ac064`
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-server-linux-s390x.tar.gz) | `692f0c198da712f15ff93a4634c67f9105e3ec603240b50b51a84480ed63e987`
+
+### Node Binaries
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-node-linux-amd64.tar.gz) | `7ff3f526d1c4ec23516a65ecec3b947fd8f52d8c0605473b1a87159399dfeab1`
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-node-linux-arm64.tar.gz) | `fada290471467c341734a3cfff63cd0f867aad95623b67096029d76c459bde06`
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-node-linux-arm.tar.gz) | `ded3640bef5f9701f7f622de4ed162cd2e5a968e80a6a56b843ba84a0b146fac`
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-node-linux-ppc64le.tar.gz) | `a83ebe3b360d33c2190bffd5bf0e2c68268ca2c85e3b5295c1a71ddb517a4f90`
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-node-linux-s390x.tar.gz) | `1210efdf35ec5e0b2e96ff7e456e340684ff12dbea36aa255ac592ca7195e168`
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.9.0/kubernetes-node-windows-amd64.tar.gz) | `9961ad142abc7e769bbe962aeb30a014065fae83291a2d65bc2da91f04fbf185`
+
+## 1.9 Release Notes
+
+## WARNING: etcd backup strongly recommended
+
+Before updating to 1.9, you are strongly recommended to back up your etcd data. Consult the installation procedure you are using (kargo, kops, kube-up, kube-aws, kubeadm etc) for specific advice.
+
+Some upgrade methods might upgrade etcd from 3.0 to 3.1 automatically when you upgrade from Kubernetes 1.8, unless you specify otherwise. Because [etcd does not support downgrading](https://coreos.com/etcd/docs/latest/upgrades/upgrade_3_1.html), you'll need to either remain on etcd 3.1 or restore from a backup if you want to downgrade back to Kubernetes 1.8.
+
+## Introduction to 1.9.0
+
+Kubernetes version 1.9 includes new features and enhancements, as well as fixes to identified issues. The release notes contain a brief overview of the important changes introduced in this release. The content is organized by Special Interest Group ([SIG](https://github.com/kubernetes/community/blob/master/sig-list.md)).
+
+For initial installations, see the [Setup topics](https://kubernetes.io/docs/setup/pick-right-solution/) in the Kubernetes documentation.
+
+To upgrade to this release from a previous version, first take any actions required [Before Upgrading](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.9.md#before-upgrading).
+
+For more information about this release and for the latest documentation, see the [Kubernetes documentation](https://kubernetes.io/docs/home/).
+
+## Major themes
+
+Kubernetes is developed by community members whose work is organized into
+[Special Interest Groups](https://github.com/kubernetes/community/blob/master/sig-list.md), which provide the themes that guide their work. For the 1.9 release, these themes included:
+
+### API Machinery
+
+Extensibility. SIG API Machinery added a new class of admission control webhooks (mutating), and brought the admission control webhooks to beta.
+
+### Apps
+
+The core workloads API, which is composed of the DaemonSet, Deployment, ReplicaSet, and StatefulSet kinds, has been promoted to GA stability in the apps/v1 group version. As such, the apps/v1beta2 group version is deprecated, and all new code should use the kinds in the apps/v1 group version.
+
+### Auth
+
+SIG Auth focused on extension-related authorization improvements. Permissions can now be added to the built-in RBAC admin/edit/view roles using [cluster role aggregation](https://kubernetes.io/docs/admin/authorization/rbac/#aggregated-clusterroles). [Webhook authorizers](https://kubernetes.io/docs/admin/authorization/webhook/) can now deny requests and short-circuit checking subsequent authorizers. Performance and usability of the beta [PodSecurityPolicy](https://kubernetes.io/docs/concepts/policy/pod-security-policy/) feature was also improved.
+
+### AWS
+
+In v1.9 SIG AWS has improved stability of EBS support across the board. If a Volume is “stuck” in the attaching state to a node for too long a unschedulable taint will be applied to the node, so a Kubernetes admin can [take manual steps to correct the error](http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-attaching-volume.html). Users are encouraged to ensure they are monitoring for the taint, and should consider automatically terminating instances in this state.
+
+In addition, support for NVMe disks has been added to Kubernetes, and a service of type LoadBalancer can now be backed with an NLB instead of an ELB (alpha).
+
+### Azure
+
+SIG Azure worked on improvements in the cloud provider, including significant work on the Azure Load Balancer implementation.
+
+### Cluster Lifecycle
+
+SIG Cluster Lifecycle has been focusing on improving kubeadm in order to bring it to GA in a future release, as well as developing the [Cluster API](https://github.com/kubernetes/kube-deploy/tree/master/cluster-api). For kubeadm, most new features, such as support for CoreDNS, IPv6 and Dynamic Kubelet Configuration, have gone in as alpha features. We expect to graduate these features to beta and beyond in the next release. The initial Cluster API spec and GCE sample implementation were developed from scratch during this cycle, and we look forward to stabilizing them into something production-grade during 2018.
+
+### Instrumentation
+
+In v1.9 we focused on improving stability of the components owned by the SIG, including Heapster, Custom Metrics API adapters for Prometheus, and Stackdriver.
+
+### Network
+
+In v1.9 SIG Network has implemented alpha support for IPv6, and alpha support for CoreDNS as a drop-in replacement for kube-dns. Additionally, SIG Network has begun the deprecation process for the extensions/v1beta1 NetworkPolicy API in favor of the networking.k8s.io/v1 equivalent.
+
+### Node
+
+SIG Node iterated on the ability to support more workloads with better performance and improved reliability. Alpha features were improved around hardware accelerator support, device plugins enablement, and cpu pinning policies to enable us to graduate these features to beta in a future release. In addition, a number of reliability and performance enhancements were made across the node to help operators in production.
+
+### OpenStack
+
+In this cycle, SIG OpenStack focused on configuration simplification through smarter defaults and the use of auto-detection wherever feasible (Block Storage API versions, Security Groups) as well as updating API support, including:
+
+* Block Storage (Cinder) V3 is now supported.
+* Load Balancer (Octavia) V2 is now supported, in addition to Neutron LBaaS V2.
+* Neutron LBaas V1 support has been removed.
+
+This work enables Kubernetes to take full advantage of the relevant services as exposed by OpenStack clouds. Refer to the [Cloud Providers](https://kubernetes.io/docs/concepts/cluster-administration/cloud-providers/#openstack) documentation for more information.
+
+### Storage
+
+[SIG Storage](https://github.com/kubernetes/community/tree/master/sig-storage) is responsible for storage and volume plugin components.
+
+For the 1.9 release, SIG Storage made Kubernetes more pluggable and modular by introducing an alpha implementation of the Container Storage Interface (CSI). CSI will make installing new volume plugins as easy as deploying a pod, and enable third-party storage providers to develop their plugins without the need to add code to the core Kubernetes codebase.
+
+The SIG also focused on adding functionality to the Kubernetes volume subsystem, such as alpha support for exposing volumes as block devices inside containers, extending the alpha volume-resizing support to more volume plugins, and topology-aware volume scheduling.
+
+### Windows
+
+We are advancing support for Windows Server and Windows Server Containers to beta along with continued feature and functional advancements on both the Kubernetes and Windows platforms. This opens the door for many Windows-specific applications and workloads to run on Kubernetes, significantly expanding the implementation scenarios and the enterprise reach of Kubernetes.
+
+## Before Upgrading
+
+Consider the following changes, limitations, and guidelines before you upgrade:
+
+### **API Machinery**
+
+* The admission API, which is used when the API server calls admission control webhooks, is moved from `admission.v1alpha1` to `admission.v1beta1`. You must **delete any existing webhooks before you upgrade** your cluster, and update them to use the latest API. This change is not backward compatible.
+* The admission webhook configurations API, part of the admissionregistration API, is now at v1beta1. Delete any existing webhook configurations before you upgrade, and update your configuration files to use the latest API. For this and the previous change, see also [the documentation]([https://kubernetes.io/docs/admin/extensible-admission-controllers/#external-admission-webhooks](https://kubernetes.io/docs/admin/extensible-admission-controllers/#external-admission-webhooks)).
+* A new `ValidatingAdmissionWebhook` is added (replacing `GenericAdmissionWebhook`) and is available in the generic API server. You must update your API server configuration file to pass the webhook to the `--admission-control` flag. ([#55988](https://github.com/kubernetes/kubernetes/pull/55988),[ @caesarxuchao](https://github.com/caesarxuchao)) ([#54513](https://github.com/kubernetes/kubernetes/pull/54513),[ @deads2k](https://github.com/deads2k))
+* The deprecated options `--portal-net` and `--service-node-ports` for the API server are removed. ([#52547](https://github.com/kubernetes/kubernetes/pull/52547),[ @xiangpengzhao](https://github.com/xiangpengzhao))
+
+### **Auth**
+
+* PodSecurityPolicy: A compatibility issue with the allowPrivilegeEscalation field that caused policies to start denying pods they previously allowed was fixed. If you defined PodSecurityPolicy objects using a 1.8.0 client or server and set allowPrivilegeEscalation to false, these objects must be reapplied after you upgrade. ([#53443](https://github.com/kubernetes/kubernetes/pull/53443),[ @liggitt](https://github.com/liggitt))
+* KMS: Alpha integration with GCP KMS was removed in favor of a future out-of-process extension point. Discontinue use of the GCP KMS integration and ensure [data has been decrypted](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#decrypting-all-data) (or reencrypted with a different provider) before upgrading ([#54759](https://github.com/kubernetes/kubernetes/pull/54759),[ @sakshamsharma](https://github.com/sakshamsharma))
+
+### **CLI**
+
+* Swagger 1.2 validation is removed for kubectl. The options `--use-openapi` and `--schema-cache-dir` are also removed because they are no longer needed. ([#53232](https://github.com/kubernetes/kubernetes/pull/53232),[ @apelisse](https://github.com/apelisse))
+
+### **Cluster Lifecycle**
+
+* You must either specify the `--discovery-token-ca-cert-hash` flag to `kubeadm join`, or opt out of the CA pinning feature using `--discovery-token-unsafe-skip-ca-verification`.
+* The default `auto-detect` behavior of the kubelet's `--cloud-provider` flag is removed.
+ * You can manually set `--cloud-provider=auto-detect`, but be aware that this behavior will be removed completely in a future version.
+ * Best practice for version 1.9 and future versions is to explicitly set a cloud-provider. See [the documentation](https://kubernetes.io/docs/getting-started-guides/scratch/#cloud-providers)
+* The kubeadm `--skip-preflight-checks` flag is now deprecated and will be removed in a future release.
+* If you are using the cloud provider API to determine the external host address of the apiserver, set `--external-hostname` explicitly instead. The cloud provider detection has been deprecated and will be removed in the future ([#54516](https://github.com/kubernetes/kubernetes/pull/54516),[ @dims](https://github.com/dims))
+
+### **Multicluster**
+
+* Development of Kubernetes Federation has moved to [github.com/kubernetes/federation](github.com/kubernetes/federation). This move out of tree also means that Federation will begin releasing separately from Kubernetes. Impact:
+ * Federation-specific behavior will no longer be included in kubectl
+ * kubefed will no longer be released as part of Kubernetes
+ * The Federation servers will no longer be included in the hyperkube binary and image. ([#53816](https://github.com/kubernetes/kubernetes/pull/53816),[ @marun](https://github.com/marun))
+
+### **Node**
+
+* The kubelet `--network-plugin-dir` flag is removed. This flag was deprecated in version 1.7, and is replaced with `--cni-bin-dir`. ([#53564](https://github.com/kubernetes/kubernetes/pull/53564),[ @supereagle](https://github.com/supereagle))
+* kubelet's `--cloud-provider` flag no longer defaults to "auto-detect". If you want cloud-provider support in kubelet, you must set a specific cloud-provider explicitly. ([#53573](https://github.com/kubernetes/kubernetes/pull/53573),[ @dims](https://github.com/dims))
+
+### **Network**
+
+* NetworkPolicy objects are now stored in etcd in v1 format. After you upgrade to version 1.9, make sure that all NetworkPolicy objects are migrated to v1. ([#51955](https://github.com/kubernetes/kubernetes/pull/51955), [@danwinship](https://github.com/danwinship))
+* The API group/version for the kube-proxy configuration has changed from `componentconfig/v1alpha1` to `kubeproxy.config.k8s.io/v1alpha1`. If you are using a config file for kube-proxy instead of the command line flags, you must change its apiVersion to `kubeproxy.config.k8s.io/v1alpha1`. ([#53645](https://github.com/kubernetes/kubernetes/pull/53645), [@xiangpengzhao](https://github.com/xiangpengzhao))
+* The "ServiceNodeExclusion" feature gate must now be enabled for the `alpha.service-controller.kubernetes.io/exclude-balancer` annotation on nodes to be honored. ([#54644](https://github.com/kubernetes/kubernetes/pull/54644),[ @brendandburns](https://github.com/brendandburns))
+
+### **Scheduling**
+
+* Taint key `unreachable` is now in GA.
+* Taint key `notReady` is changed to `not-ready`, and is also now in GA.
+* These changes are automatically updated for taints. Tolerations for these taints must be updated manually. Specifically, you must:
+ * Change `node.alpha.kubernetes.io/notReady` to `node.kubernetes.io/not-ready`
+ * Change `node.alpha.kubernetes.io/unreachable` to `node.kubernetes.io/unreachable`
+* The `node.kubernetes.io/memory-pressure` taint now respects the configured whitelist. To use it, you must add it to the whitelist.([#55251](https://github.com/kubernetes/kubernetes/pull/55251),[ @deads2k](https://github.com/deads2k))
+* Refactor kube-scheduler configuration ([#52428](https://github.com/kubernetes/kubernetes/pull/52428))
+ * The kube-scheduler command now supports a --config flag which is the location of a file containing a serialized scheduler configuration. Most other kube-scheduler flags are now deprecated. ([#52562](https://github.com/kubernetes/kubernetes/pull/52562),[ @ironcladlou](https://github.com/ironcladlou))
+* Opaque integer resources (OIR), which were (deprecated in v1.8.), have been removed. ([#55103](https://github.com/kubernetes/kubernetes/pull/55103),[ @ConnorDoyle](https://github.com/ConnorDoyle))
+
+### **Storage**
+
+* [alpha] The LocalPersistentVolumes alpha feature now also requires the VolumeScheduling alpha feature. This is a breaking change, and the following changes are required:
+ * The VolumeScheduling feature gate must also be enabled on kube-scheduler and kube-controller-manager components.
+ * The NoVolumeNodeConflict predicate has been removed. For non-default schedulers, update your scheduler policy.
+ * The CheckVolumeBinding predicate must be enabled in non-default schedulers. ([#55039](https://github.com/kubernetes/kubernetes/pull/55039),[ @msau42](https://github.com/msau42))
+
+### **OpenStack**
+
+* Remove the LbaasV1 of OpenStack cloud provider, currently only support LbaasV2. ([#52717](https://github.com/kubernetes/kubernetes/pull/52717),[ @FengyunPan](https://github.com/FengyunPan))
+
+## Known Issues
+
+This section contains a list of known issues reported in Kubernetes 1.9 release. The content is populated from the [v1.9.x known issues and FAQ accumulator](https://github.com/kubernetes/kubernetes/issues/57159](https://github.com/kubernetes/kubernetes/issues/57159).
+
+* If you are adding Windows Server Virtual Machines as nodes to your Kubernetes environment, there is a compatibility issue with certain virtualization products. Specifically the Windows version of the kubelet.exe calls `GetPhysicallyInstalledSystemMemory` to get the physical memory installed on Windows machines and reports it as part of node metrics to heapster. This API call fails for VMware and VirtualBox virtualization environments. This issue is not present in bare metal Windows deployments, in Hyper-V, or on some of the popular public cloud providers.
+
+* If you run `kubectl get po` while the API server in unreachable, a misleading error is returned: `the server doesn't have a resource type "po"`. To work around this issue, specify the full resource name in the command instead of the abbreviation: `kubectl get pods`. This issue will be fixed in a future release.
+
+ For more information, see [#57198](https://github.com/kubernetes/kubernetes/issues/57198).
+
+* Mutating and validating webhook configurations are continuously polled by the API server (once per second). This issue will be fixed in a future release.
+
+ For more information, see [#56357](https://github.com/kubernetes/kubernetes/issues/56357).
+
+* Audit logging is slow because writes to the log are performed synchronously with requests to the log. This issue will be fixed in a future release.
+
+ For more information, see [#53006](https://github.com/kubernetes/kubernetes/issues/53006).
+
+* Custom Resource Definitions (CRDs) are not properly deleted under certain conditions. This issue will be fixed in a future release.
+
+ For more information, see [#56348](https://github.com/kubernetes/kubernetes/issues/56348).
+
+* API server times out after performing a rolling update of the etcd cluster. This issue will be fixed in a future release.
+
+ For more information, see [#47131](https://github.com/kubernetes/kubernetes/issues/47131)
+
+* If a namespaced resource is owned by a cluster scoped resource, and the namespaced dependent is processed before the cluster scoped owner has ever been observed by the garbage collector, the dependent will be erroneously deleted.
+
+ For more information, see [#54940](https://github.com/kubernetes/kubernetes/issues/54940)
+
+## Deprecations
+
+This section provides an overview of deprecated API versions, options, flags, and arguments. Deprecated means that we intend to remove the capability from a future release. After removal, the capability will no longer work. The sections are organized by SIGs.
+
+### **API Machinery**
+
+* The kube-apiserver `--etcd-quorum-read` flag is deprecated and the ability to switch off quorum read will be removed in a future release. ([#53795](https://github.com/kubernetes/kubernetes/pull/53795),[ @xiangpengzhao](https://github.com/xiangpengzhao))
+* The `/ui` redirect in kube-apiserver is deprecated and will be removed in Kubernetes 1.10. ([#53046](https://github.com/kubernetes/kubernetes/pull/53046), [@maciaszczykm](https://github.com/maciaszczykm))
+* `etcd2` as a backend is deprecated and support will be removed in Kubernetes 1.13 or 1.14.
+
+### **Auth**
+
+* Default controller-manager options for `--cluster-signing-cert-file` and `--cluster-signing-key-file` are deprecated and will be removed in a future release. ([#54495](https://github.com/kubernetes/kubernetes/pull/54495),[ @mikedanese](https://github.com/mikedanese))
+* RBAC objects are now stored in etcd in v1 format. After upgrading to 1.9, ensure all RBAC objects (Roles, RoleBindings, ClusterRoles, ClusterRoleBindings) are at v1. v1alpha1 support is deprecated and will be removed in a future release. ([#52950](https://github.com/kubernetes/kubernetes/pull/52950),[ @liggitt](https://github.com/liggitt))
+
+### **Cluster Lifecycle**
+
+* kube-apiserver: `--ssh-user` and `--ssh-keyfile` are now deprecated and will be removed in a future release. Users of SSH tunnel functionality in Google Container Engine for the Master -> Cluster communication should plan alternate methods for bridging master and node networks. ([#54433](https://github.com/kubernetes/kubernetes/pull/54433),[ @dims](https://github.com/dims))
+* The kubeadm `--skip-preflight-checks` flag is now deprecated and will be removed in a future release.
+* If you are using the cloud provider API to determine the external host address of the apiserver, set `--external-hostname` explicitly instead. The cloud provider detection has been deprecated and will be removed in the future ([#54516](https://github.com/kubernetes/kubernetes/pull/54516),[ @dims](https://github.com/dims))
+
+### **Network**
+
+* The NetworkPolicy extensions/v1beta1 API is now deprecated and will be removed in a future release. This functionality has been migrated to a dedicated v1 API - networking.k8s.io/v1. v1beta1 Network Policies can be upgraded to the v1 API with the [cluster/update-storage-objects.sh script](https://github.com/danwinship/kubernetes/blob/master/cluster/update-storage-objects.sh). Documentation can be found [here](https://kubernetes.io/docs/concepts/services-networking/network-policies/). ([#56425](https://github.com/kubernetes/kubernetes/pull/56425), [@cmluciano](https://github.com/cmluciano))
+
+### **Storage**
+
+* The `volume.beta.kubernetes.io/storage-class` annotation is deprecated. It will be removed in a future release. For the StorageClass API object, use v1, and in place of the annotation use `v1.PersistentVolumeClaim.Spec.StorageClassName` and `v1.PersistentVolume.Spec.StorageClassName` instead. ([#53580](https://github.com/kubernetes/kubernetes/pull/53580),[ @xiangpengzhao](https://github.com/xiangpengzhao))
+
+### **Scheduling**
+
+* The kube-scheduler command now supports a `--config` flag, which is the location of a file containing a serialized scheduler configuration. Most other kube-scheduler flags are now deprecated. ([#52562](https://github.com/kubernetes/kubernetes/pull/52562),[ @ironcladlou](https://github.com/ironcladlou))
+
+### **Node**
+
+* The kubelet's `--enable-custom-metrics` flag is now deprecated. ([#54154](https://github.com/kubernetes/kubernetes/pull/54154),[ @mtaufen](https://github.com/mtaufen))
+
+## Notable Changes
+
+### **Workloads API (apps/v1)**
+
+As announced with the release of version 1.8, the Kubernetes Workloads API is at v1 in version 1.9. This API consists of the DaemonSet, Deployment, ReplicaSet and StatefulSet kinds.
+
+### **API Machinery**
+
+#### **Admission Control**
+
+* Admission webhooks are now in beta, and include the following:
+ * Mutation support for admission webhooks. ([#54892](https://github.com/kubernetes/kubernetes/pull/54892),[ @caesarxuchao](https://github.com/caesarxuchao))
+ * Webhook admission now takes a config file that describes how to authenticate to webhook servers ([#54414](https://github.com/kubernetes/kubernetes/pull/54414),[ @deads2k](https://github.com/deads2k))
+ * The dynamic admission webhook now supports a URL in addition to a service reference, to accommodate out-of-cluster webhooks. ([#54889](https://github.com/kubernetes/kubernetes/pull/54889),[ @lavalamp](https://github.com/lavalamp))
+ * Added `namespaceSelector` to `externalAdmissionWebhook` configuration to allow applying webhooks only to objects in the namespaces that have matching labels. ([#54727](https://github.com/kubernetes/kubernetes/pull/54727),[ @caesarxuchao](https://github.com/caesarxuchao))
+* Metrics are added for monitoring admission plugins, including the new dynamic (webhook-based) ones. ([#55183](https://github.com/kubernetes/kubernetes/pull/55183),[ @jpbetz](https://github.com/jpbetz))
+* The PodSecurityPolicy annotation kubernetes.io/psp on pods is set only once on create. ([#55486](https://github.com/kubernetes/kubernetes/pull/55486),[ @sttts](https://github.com/sttts))
+
+#### **API & API server**
+
+* Fixed a bug related to discovery information for scale subresources in the apps API group ([#54683](https://github.com/kubernetes/kubernetes/pull/54683),[ @liggitt](https://github.com/liggitt))
+* Fixed a bug that prevented client-go metrics from being registered in Prometheus. This bug affected multiple components. ([#53434](https://github.com/kubernetes/kubernetes/pull/53434),[ @crassirostris](https://github.com/crassirostris))
+
+#### **Audit**
+
+* Fixed a bug so that `kube-apiserver` now waits for open connections to finish before exiting. This fix provides graceful shutdown and ensures that the audit backend no longer drops events on shutdown. ([#53695](https://github.com/kubernetes/kubernetes/pull/53695),[ @hzxuzhonghu](https://github.com/hzxuzhonghu))
+* Webhooks now always retry sending if a connection reset error is returned. ([#53947](https://github.com/kubernetes/kubernetes/pull/53947),[ @crassirostris](https://github.com/crassirostris))
+
+#### **Custom Resources**
+
+* Validation of resources defined by a Custom Resource Definition (CRD) is now in beta ([#54647](https://github.com/kubernetes/kubernetes/pull/54647),[ @colemickens](https://github.com/colemickens))
+* An example CRD controller has been added, at [github.com/kubernetes/sample-controller](github.com/kubernetes/sample-controller). ([#52753](https://github.com/kubernetes/kubernetes/pull/52753),[ @munnerz](https://github.com/munnerz))
+* Custom resources served by CustomResourceDefinition objects now support field selectors for `metadata.name` and `metadata.namespace`. Also fixed an issue with watching a single object; earlier versions could watch only a collection, and so a watch on an instance would fail. ([#53345](https://github.com/kubernetes/kubernetes/pull/53345),[ @ncdc](https://github.com/ncdc))
+
+#### **Other**
+
+* `kube-apiserver` now runs with the default value for `service-cluster-ip-range` ([#52870](https://github.com/kubernetes/kubernetes/pull/52870),[ @jennybuckley](https://github.com/jennybuckley))
+* Add `--etcd-compaction-interval` to apiserver for controlling request of compaction to etcd3 from apiserver. ([#51765](https://github.com/kubernetes/kubernetes/pull/51765),[ @mitake](https://github.com/mitake))
+* The httpstream/spdy calls now support CIDR notation for NO_PROXY ([#54413](https://github.com/kubernetes/kubernetes/pull/54413),[ @kad](https://github.com/kad))
+* Code generation for CRD and User API server types is improved with the addition of two new scripts to k8s.io/code-generator: `generate-groups.sh` and `generate-internal-groups.sh`. ([#52186](https://github.com/kubernetes/kubernetes/pull/52186),[ @sttts](https://github.com/sttts))
+* [beta] Flag `--chunk-size={SIZE}` is added to `kubectl get` to customize the number of results returned in large lists of resources. This reduces the perceived latency of managing large clusters because the server returns the first set of results to the client much more quickly. Pass 0 to disable this feature.([#53768](https://github.com/kubernetes/kubernetes/pull/53768),[ @smarterclayton](https://github.com/smarterclayton))
+* [beta] API chunking via the limit and continue request parameters is promoted to beta in this release. Client libraries using the Informer or ListWatch types will automatically opt in to chunking. ([#52949](https://github.com/kubernetes/kubernetes/pull/52949),[ @smarterclayton](https://github.com/smarterclayton))
+* The `--etcd-quorum-read` flag now defaults to true to ensure correct operation with HA etcd clusters. This flag is deprecated and the flag will be removed in future versions, as well as the ability to turn off this functionality. ([#53717](https://github.com/kubernetes/kubernetes/pull/53717),[ @liggitt](https://github.com/liggitt))
+* Add events.k8s.io api group with v1beta1 API containing redesigned event type. ([#49112](https://github.com/kubernetes/kubernetes/pull/49112),[ @gmarek](https://github.com/gmarek))
+* Fixed a bug where API discovery failures were crashing the kube controller manager via the garbage collector. ([#55259](https://github.com/kubernetes/kubernetes/pull/55259),[ @ironcladlou](https://github.com/ironcladlou))
+* `conversion-gen` is now usable in a context without a vendored k8s.io/kubernetes. The Kubernetes core API is removed from `default extra-peer-dirs`. ([#54394](https://github.com/kubernetes/kubernetes/pull/54394),[ @sttts](https://github.com/sttts))
+* Fixed a bug where the `client-gen` tag for code-generator required a newline between a comment block and a statement. tag shortcomings when newline is omitted ([#53893](https://github.com/kubernetes/kubernetes/pull/53893)) ([#55233](https://github.com/kubernetes/kubernetes/pull/55233),[ @sttts](https://github.com/sttts))
+* The Apiserver proxy now rewrites the URL when a service returns an absolute path with the request's host. ([#52556](https://github.com/kubernetes/kubernetes/pull/52556),[ @roycaihw](https://github.com/roycaihw))
+* The gRPC library is updated to pick up data race fix ([#53124](https://github.com/kubernetes/kubernetes/pull/53124)) ([#53128](https://github.com/kubernetes/kubernetes/pull/53128),[ @dixudx](https://github.com/dixudx))
+* Fixed server name verification of aggregated API servers and webhook admission endpoints ([#56415](https://github.com/kubernetes/kubernetes/pull/56415),[ @liggitt](https://github.com/liggitt))
+
+### **Apps**
+
+* The `kubernetes.io/created-by` annotation is no longer added to controller-created objects. Use the `metadata.ownerReferences` item with controller set to `true` to determine which controller, if any, owns an object. ([#54445](https://github.com/kubernetes/kubernetes/pull/54445),[ @crimsonfaith91](https://github.com/crimsonfaith91))
+* StatefulSet controller now creates a label for each Pod in a StatefulSet. The label is `statefulset.kubernetes.io/pod-name`, where `pod-name` = the name of the Pod. This allows users to create a Service per Pod to expose a connection to individual Pods. ([#55329](https://github.com/kubernetes/kubernetes/pull/55329),[ @kow3ns](https://github.com/kow3ns))
+* DaemonSet status includes a new field named `conditions`, making it consistent with other workloads controllers. ([#55272](https://github.com/kubernetes/kubernetes/pull/55272),[ @janetkuo](https://github.com/janetkuo))
+* StatefulSet status now supports conditions, making it consistent with other core controllers in v1 ([#55268](https://github.com/kubernetes/kubernetes/pull/55268),[ @foxish](https://github.com/foxish))
+* The default garbage collection policy for Deployment, DaemonSet, StatefulSet, and ReplicaSet has changed from OrphanDependents to DeleteDependents when the deletion is requested through an `apps/v1` endpoint. ([#55148](https://github.com/kubernetes/kubernetes/pull/55148),[ @dixudx](https://github.com/dixudx))
+ * Clients using older endpoints will be unaffected. This change is only at the REST API level and is independent of the default behavior of particular clients (e.g. this does not affect the default for the kubectl `--cascade` flag).
+ * If you upgrade your client-go libs and use the `AppsV1()` interface, please note that the default garbage collection behavior is changed.
+
+### **Auth**
+
+#### **Audit**
+
+* RequestReceivedTimestamp and StageTimestamp are added to audit events ([#52981](https://github.com/kubernetes/kubernetes/pull/52981),[ @CaoShuFeng](https://github.com/CaoShuFeng))
+* Advanced audit policy now supports a policy wide omitStage ([#54634](https://github.com/kubernetes/kubernetes/pull/54634),[ @CaoShuFeng](https://github.com/CaoShuFeng))
+
+#### **RBAC**
+
+* New permissions have been added to default RBAC roles ([#52654](https://github.com/kubernetes/kubernetes/pull/52654),[ @liggitt](https://github.com/liggitt)):
+ * The default admin and edit roles now include read/write permissions
+ * The view role includes read permissions on poddisruptionbudget.policy resources.
+* RBAC rules can now match the same subresource on any resource using the form `*/(subresource)`. For example, `*/scale` matches requests to `replicationcontroller/scale`. ([#53722](https://github.com/kubernetes/kubernetes/pull/53722),[ @deads2k](https://github.com/deads2k))
+* The RBAC bootstrapping policy now allows authenticated users to create selfsubjectrulesreviews. ([#56095](https://github.com/kubernetes/kubernetes/pull/56095),[ @ericchiang](https://github.com/ericchiang))
+* RBAC ClusterRoles can now select other roles to aggregate. ([#54005](https://github.com/kubernetes/kubernetes/pull/54005),[ @deads2k](https://github.com/deads2k))
+* Fixed an issue with RBAC reconciliation that caused duplicated subjects in some bootstrapped RoleBinding objects on each restart of the API server. ([#53239](https://github.com/kubernetes/kubernetes/pull/53239),[ @enj](https://github.com/enj))
+
+#### **Other**
+
+* Pod Security Policy can now manage access to specific FlexVolume drivers ([#53179](https://github.com/kubernetes/kubernetes/pull/53179),[ @wanghaoran1988](https://github.com/wanghaoran1988))
+* Audit policy files without apiVersion and kind are treated as invalid. ([#54267](https://github.com/kubernetes/kubernetes/pull/54267),[ @ericchiang](https://github.com/ericchiang))
+* Fixed a bug that where forbidden errors were encountered when accessing ReplicaSet and DaemonSets objects via the apps API group. ([#54309](https://github.com/kubernetes/kubernetes/pull/54309),[ @liggitt](https://github.com/liggitt))
+* Improved PodSecurityPolicy admission latency. ([#55643](https://github.com/kubernetes/kubernetes/pull/55643),[ @tallclair](https://github.com/tallclair))
+* kube-apiserver: `--oidc-username-prefix` and `--oidc-group-prefix` flags are now correctly enabled. ([#56175](https://github.com/kubernetes/kubernetes/pull/56175),[ @ericchiang](https://github.com/ericchiang))
+* If multiple PodSecurityPolicy objects allow a submitted pod, priority is given to policies that do not require default values for any fields in the pod spec. If default values are required, the first policy ordered by name that allows the pod is used. ([#52849](https://github.com/kubernetes/kubernetes/pull/52849),[ @liggitt](https://github.com/liggitt))
+* A new controller automatically cleans up Certificate Signing Requests that are Approved and Issued, or Denied. ([#51840](https://github.com/kubernetes/kubernetes/pull/51840),[ @jcbsmpsn](https://github.com/jcbsmpsn))
+* PodSecurityPolicies have been added for all in-tree cluster addons ([#55509](https://github.com/kubernetes/kubernetes/pull/55509),[ @tallclair](https://github.com/tallclair))
+
+#### **GCE**
+
+* Added support for PodSecurityPolicy on GCE: `ENABLE_POD_SECURITY_POLICY=true` enables the admission controller, and installs policies for default addons. ([#52367](https://github.com/kubernetes/kubernetes/pull/52367),[ @tallclair](https://github.com/tallclair))
+
+### **Autoscaling**
+
+* HorizontalPodAutoscaler objects now properly functions on scalable resources in any API group. Fixed by adding a polymorphic scale client. ([#53743](https://github.com/kubernetes/kubernetes/pull/53743),[ @DirectXMan12](https://github.com/DirectXMan12))
+* Fixed a set of minor issues with Cluster Autoscaler 1.0.1 ([#54298](https://github.com/kubernetes/kubernetes/pull/54298),[ @mwielgus](https://github.com/mwielgus))
+* HPA tolerance is now configurable by setting the `horizontal-pod-autoscaler-tolerance` flag. ([#52275](https://github.com/kubernetes/kubernetes/pull/52275),[ @mattjmcnaughton](https://github.com/mattjmcnaughton))
+* Fixed a bug that allowed the horizontal pod autoscaler to allocate more `desiredReplica` objects than `maxReplica` objects in certain instances. ([#53690](https://github.com/kubernetes/kubernetes/pull/53690),[ @mattjmcnaughton](https://github.com/mattjmcnaughton))
+
+### **AWS**
+
+* Nodes can now use instance types (such as C5) that use NVMe. ([#56607](https://github.com/kubernetes/kubernetes/pull/56607), [@justinsb](https://github.com/justinsb))
+* Nodes are now unreachable if volumes are stuck in the attaching state. Implemented by applying a taint to the node. ([#55558](https://github.com/kubernetes/kubernetes/pull/55558),[ @gnufied](https://github.com/gnufied))
+* Volumes are now checked for available state before attempting to attach or delete a volume in EBS. ([#55008](https://github.com/kubernetes/kubernetes/pull/55008),[ @gnufied](https://github.com/gnufied))
+* Fixed a bug where error log messages were breaking into two lines. ([#49826](https://github.com/kubernetes/kubernetes/pull/49826),[ @dixudx](https://github.com/dixudx))
+* Fixed a bug so that volumes are now detached from stopped nodes. ([#55893](https://github.com/kubernetes/kubernetes/pull/55893),[ @gnufied](https://github.com/gnufied))
+* You can now override the health check parameters for AWS ELBs by specifying annotations on the corresponding service. The new annotations are: `healthy-threshold`, `unhealthy-threshold`, `timeout`, `interval`. The prefix for all annotations is `service.beta.kubernetes.io/aws-load-balancer-healthcheck-`. ([#56024](https://github.com/kubernetes/kubernetes/pull/56024),[ @dimpavloff](https://github.com/dimpavloff))
+* Fixed a bug so that AWS ECR credentials are now supported in the China region. ([#50108](https://github.com/kubernetes/kubernetes/pull/50108),[ @zzq889](https://github.com/zzq889))
+* Added Amazon NLB support ([#53400](https://github.com/kubernetes/kubernetes/pull/53400),[ @micahhausler](https://github.com/micahhausler))
+* Additional annotations are now properly set or updated for AWS load balancers ([#55731](https://github.com/kubernetes/kubernetes/pull/55731),[ @georgebuckerfield](https://github.com/georgebuckerfield))
+* AWS SDK is updated to version 1.12.7 ([#53561](https://github.com/kubernetes/kubernetes/pull/53561),[ @justinsb](https://github.com/justinsb))
+
+### **Azure**
+
+* Fixed several issues with properly provisioning Azure disk storage ([#55927](https://github.com/kubernetes/kubernetes/pull/55927),[ @andyzhangx](https://github.com/andyzhangx))
+* A new service annotation `service.beta.kubernetes.io/azure-dns-label-name` now sets the Azure DNS label for a public IP address. ([#47849](https://github.com/kubernetes/kubernetes/pull/47849),[ @tomerf](https://github.com/tomerf))
+* Support for GetMountRefs function added; warning messages no longer displayed. ([#54670](https://github.com/kubernetes/kubernetes/pull/54670), [#52401](https://github.com/kubernetes/kubernetes/pull/52401),[ @andyzhangx](https://github.com/andyzhangx))
+* Fixed an issue where an Azure PersistentVolume object would crash because the value of `volumeSource.ReadOnly` was set to nil. ([#54607](https://github.com/kubernetes/kubernetes/pull/54607),[ @andyzhangx](https://github.com/andyzhangx))
+* Fixed an issue with Azure disk mount failures on CoreOS and some other distros ([#54334](https://github.com/kubernetes/kubernetes/pull/54334),[ @andyzhangx](https://github.com/andyzhangx))
+* GRS, RAGRS storage account types are now supported for Azure disks. ([#55931](https://github.com/kubernetes/kubernetes/pull/55931),[ @andyzhangx](https://github.com/andyzhangx))
+* Azure NSG rules are now restricted so that external access is allowed only to the load balancer IP. ([#54177](https://github.com/kubernetes/kubernetes/pull/54177),[ @itowlson](https://github.com/itowlson))
+* Azure NSG rules can be consolidated to reduce the likelihood of hitting Azure resource limits (available only in regions where the Augmented Security Groups preview is available). ([#55740](https://github.com/kubernetes/kubernetes/pull/55740), [@itowlson](https://github.com/itowlson))
+* The Azure SDK is upgraded to v11.1.1. ([#54971](https://github.com/kubernetes/kubernetes/pull/54971),[ @itowlson](https://github.com/itowlson))
+* You can now create Windows mount paths ([#51240](https://github.com/kubernetes/kubernetes/pull/51240),[ @andyzhangx](https://github.com/andyzhangx))
+* Fixed a controller manager crash issue on a manually created k8s cluster. ([#53694](https://github.com/kubernetes/kubernetes/pull/53694),[ @andyzhangx](https://github.com/andyzhangx))
+* Azure-based clusters now support unlimited mount points. ([#54668](https://github.com/kubernetes/kubernetes/pull/54668)) ([#53629](https://github.com/kubernetes/kubernetes/pull/53629),[ @andyzhangx](https://github.com/andyzhangx))
+* Load balancer reconciliation now considers NSG rules based not only on Name, but also on Protocol, SourcePortRange, DestinationPortRange, SourceAddressPrefix, DestinationAddressPrefix, Access, and Direction. This change makes it possible to update NSG rules under more conditions. ([#55752](https://github.com/kubernetes/kubernetes/pull/55752),[ @kevinkim9264](https://github.com/kevinkim9264))
+* Custom mountOptions for the azurefile StorageClass object are now respected. Specifically, `dir_mode` and `file_mode` can now be customized. ([#54674](https://github.com/kubernetes/kubernetes/pull/54674),[ @andyzhangx](https://github.com/andyzhangx))
+* Azure Load Balancer Auto Mode: Services can be annotated to allow auto selection of available load balancers and to provide specific availability sets that host the load balancers (for example, `service.beta.kubernetes.io/azure-load-balancer-mode=auto|as1,as2...`)
+
+### **CLI**
+
+#### **Kubectl**
+
+* `kubectl cp` can now copy a remote file into a local directory. ([#46762](https://github.com/kubernetes/kubernetes/pull/46762),[ @bruceauyeung](https://github.com/bruceauyeung))
+* `kubectl cp` now honors destination names for directories. A complete directory is now copied; in previous versions only the file contents were copied. ([#51215](https://github.com/kubernetes/kubernetes/pull/51215),[ @juanvallejo](https://github.com/juanvallejo))
+* You can now use `kubectl get` with a fieldSelector. ([#50140](https://github.com/kubernetes/kubernetes/pull/50140),[ @dixudx](https://github.com/dixudx))
+* Secret data containing Docker registry auth objects is now generated using the config.json format ([#53916](https://github.com/kubernetes/kubernetes/pull/53916),[ @juanvallejo](https://github.com/juanvallejo))
+* `kubectl apply` now calculates the diff between the current and new configurations based on the OpenAPI spec. If the OpenAPI spec is not available, it falls back to baked-in types. ([#51321](https://github.com/kubernetes/kubernetes/pull/51321),[ @mengqiy](https://github.com/mengqiy))
+* `kubectl explain` now explains `apiservices` and `customresourcedefinition`. (Updated to use OpenAPI instead of Swagger 1.2.) ([#53228](https://github.com/kubernetes/kubernetes/pull/53228),[ @apelisse](https://github.com/apelisse))
+* `kubectl get` now uses OpenAPI schema extensions by default to select columns for custom types. ([#53483](https://github.com/kubernetes/kubernetes/pull/53483),[ @apelisse](https://github.com/apelisse))
+* kubectl `top node` now sorts by name and `top pod` sorts by namespace. Fixed a bug where results were inconsistently sorted. ([#53560](https://github.com/kubernetes/kubernetes/pull/53560),[ @dixudx](https://github.com/dixudx))
+* Added --dry-run option to kubectl drain. ([#52440](https://github.com/kubernetes/kubernetes/pull/52440),[ @juanvallejo](https://github.com/juanvallejo))
+* Kubectl now outputs for columns specified by -o custom-columns but not found in object, rather than "xxx is not found" ([#51750](https://github.com/kubernetes/kubernetes/pull/51750),[ @jianhuiz](https://github.com/jianhuiz))
+* `kubectl create pdb` no longer sets the min-available field by default. ([#53047](https://github.com/kubernetes/kubernetes/pull/53047),[ @yuexiao-wang](https://github.com/yuexiao-wang))
+* The canonical pronunciation of kubectl is "cube control".
+* Added --raw to kubectl create to POST using the normal transport. ([#54245](https://github.com/kubernetes/kubernetes/pull/54245),[ @deads2k](https://github.com/deads2k))
+* Added kubectl `create priorityclass` subcommand ([#54858](https://github.com/kubernetes/kubernetes/pull/54858),[ @wackxu](https://github.com/wackxu))
+* Fixed an issue where `kubectl set` commands occasionally encountered conversion errors for ReplicaSet and DaemonSet objects ([#53158](https://github.com/kubernetes/kubernetes/pull/53158),[ @liggitt](https://github.com/liggitt))
+
+### **Cluster Lifecycle**
+
+#### **API Server**
+
+* [alpha] Added an `--endpoint-reconciler-type` command-line argument to select the endpoint reconciler to use. The default is to use the 'master-count' reconciler which is the default for 1.9 and in use prior to 1.9. The 'lease' reconciler stores endpoints within the storage api for better cleanup of deleted (or removed) API servers. The 'none' reconciler is a no-op reconciler, which can be used in self-hosted environments. ([#51698](https://github.com/kubernetes/kubernetes/pull/51698), [@rphillips](https://github.com/rphillips))
+
+#### **Cloud Provider Integration**
+
+* Added `cloud-controller-manager` to `hyperkube`. This is useful as a number of deployment tools run all of the kubernetes components from the `hyperkube `image/binary. It also makes testing easier as a single binary/image can be built and pushed quickly. ([#54197](https://github.com/kubernetes/kubernetes/pull/54197),[ @colemickens](https://github.com/colemickens))
+* Added the concurrent service sync flag to the Cloud Controller Manager to allow changing the number of workers. (`--concurrent-service-syncs`) ([#55561](https://github.com/kubernetes/kubernetes/pull/55561),[ @jhorwit2](https://github.com/jhorwit2))
+* kubelet's --cloud-provider flag no longer defaults to "auto-detect". If you want cloud-provider support in kubelet, you must set a specific cloud-provider explicitly. ([#53573](https://github.com/kubernetes/kubernetes/pull/53573),[ @dims](https://github.com/dims))
+
+#### **Kubeadm**
+
+* kubeadm health checks can now be skipped with `--ignore-preflight-errors`; the `--skip-preflight-checks` flag is now deprecated and will be removed in a future release. ([#56130](https://github.com/kubernetes/kubernetes/pull/56130),[ @anguslees](https://github.com/anguslees)) ([#56072](https://github.com/kubernetes/kubernetes/pull/56072),[ @kad](https://github.com/kad))
+* You now have the option to use CoreDNS instead of KubeDNS. To install CoreDNS instead of kube-dns, set CLUSTER_DNS_CORE_DNS to 'true'. This support is experimental. ([#52501](https://github.com/kubernetes/kubernetes/pull/52501),[ @rajansandeep](https://github.com/rajansandeep)) ([#55728](https://github.com/kubernetes/kubernetes/pull/55728),[ @rajansandeep](https://github.com/rajansandeep))
+* Added --print-join-command flag for kubeadm token create. ([#56185](https://github.com/kubernetes/kubernetes/pull/56185),[ @mattmoyer](https://github.com/mattmoyer))
+* Added a new --etcd-upgrade keyword to kubeadm upgrade apply. When this keyword is specified, etcd's static pod gets upgraded to the etcd version officially recommended for a target kubernetes release. ([#55010](https://github.com/kubernetes/kubernetes/pull/55010),[ @sbezverk](https://github.com/sbezverk))
+* Kubeadm now supports Kubelet Dynamic Configuration on an alpha level. ([#55803](https://github.com/kubernetes/kubernetes/pull/55803),[ @xiangpengzhao](https://github.com/xiangpengzhao))
+* Added support for adding a Windows node ([#53553](https://github.com/kubernetes/kubernetes/pull/53553),[ @bsteciuk](https://github.com/bsteciuk))
+
+#### **Juju**
+
+* Added support for SAN entries in the master node certificate. ([#54234](https://github.com/kubernetes/kubernetes/pull/54234),[ @hyperbolic2346](https://github.com/hyperbolic2346))
+* Add extra-args configs for scheduler and controller-manager to kubernetes-master charm ([#55185](https://github.com/kubernetes/kubernetes/pull/55185),[ @Cynerva](https://github.com/Cynerva))
+* Add support for RBAC ([#53820](https://github.com/kubernetes/kubernetes/pull/53820),[ @ktsakalozos](https://github.com/ktsakalozos))
+* Fixed iptables FORWARD policy for Docker 1.13 in kubernetes-worker charm ([#54796](https://github.com/kubernetes/kubernetes/pull/54796),[ @Cynerva](https://github.com/Cynerva))
+* Upgrading the kubernetes-master units now results in staged upgrades just like the kubernetes-worker nodes. Use the upgrade action in order to continue the upgrade process on each unit such as juju run-action kubernetes-master/0 upgrade ([#55990](https://github.com/kubernetes/kubernetes/pull/55990),[ @hyperbolic2346](https://github.com/hyperbolic2346))
+* Added extra_sans config option to kubeapi-load-balancer charm. This allows the user to specify extra SAN entries on the certificate generated for the load balancer. ([#54947](https://github.com/kubernetes/kubernetes/pull/54947),[ @hyperbolic2346](https://github.com/hyperbolic2346))
+* Added extra-args configs to kubernetes-worker charm ([#55334](https://github.com/kubernetes/kubernetes/pull/55334),[ @Cynerva](https://github.com/Cynerva))
+
+#### **Other**
+
+* Base images have been bumped to Debian Stretch (9) ([#52744](https://github.com/kubernetes/kubernetes/pull/52744),[ @rphillips](https://github.com/rphillips))
+* Upgraded to go1.9. ([#51375](https://github.com/kubernetes/kubernetes/pull/51375),[ @cblecker](https://github.com/cblecker))
+* Add-on manager now supports HA masters. ([#55466](https://github.com/kubernetes/kubernetes/pull/55466),[ #55782](https://github.com/x13n),[ @x13n](https://github.com/x13n))
+* Hyperkube can now run from a non-standard path. ([#54570](https://github.com/kubernetes/kubernetes/pull/54570))
+
+#### **GCP**
+
+* The service account made available on your nodes is now configurable. ([#52868](https://github.com/kubernetes/kubernetes/pull/52868),[ @ihmccreery](https://github.com/ihmccreery))
+* GCE nodes with NVIDIA GPUs attached now expose nvidia.com/gpu as a resource instead of alpha.kubernetes.io/nvidia-gpu. ([#54826](https://github.com/kubernetes/kubernetes/pull/54826),[ @mindprince](https://github.com/mindprince))
+* Docker's live-restore on COS/ubuntu can now be disabled ([#55260](https://github.com/kubernetes/kubernetes/pull/55260),[ @yujuhong](https://github.com/yujuhong))
+* Metadata concealment is now controlled by the ENABLE_METADATA_CONCEALMENT env var. See cluster/gce/config-default.sh for more info. ([#54150](https://github.com/kubernetes/kubernetes/pull/54150),[ @ihmccreery](https://github.com/ihmccreery))
+* Masquerading rules are now added by default to GCE/GKE ([#55178](https://github.com/kubernetes/kubernetes/pull/55178),[ @dnardo](https://github.com/dnardo))
+* Fixed master startup issues with concurrent iptables invocations. ([#55945](https://github.com/kubernetes/kubernetes/pull/55945),[ @x13n](https://github.com/x13n))
+* Fixed issue deleting internal load balancers when the firewall resource may not exist. ([#53450](https://github.com/kubernetes/kubernetes/pull/53450),[ @nicksardo](https://github.com/nicksardo))
+
+### **Instrumentation**
+
+#### **Audit**
+
+* Adjust batching audit webhook default parameters: increase queue size, batch size, and initial backoff. Add throttling to the batching audit webhook. Default rate limit is 10 QPS. ([#53417](https://github.com/kubernetes/kubernetes/pull/53417),[ @crassirostris](https://github.com/crassirostris))
+ * These parameters are also now configurable. ([#56638](https://github.com/kubernetes/kubernetes/pull/56638), [@crassirostris](https://github.com/crassirostris))
+
+#### **Other**
+
+* Fix a typo in prometheus-to-sd configuration, that drops some stackdriver metrics. ([#56473](https://github.com/kubernetes/kubernetes/pull/56473),[ @loburm](https://github.com/loburm))
+* [fluentd-elasticsearch addon] Elasticsearch and Kibana are updated to version 5.6.4 ([#55400](https://github.com/kubernetes/kubernetes/pull/55400),[ @mrahbar](https://github.com/mrahbar))
+* fluentd now supports CRI log format. ([#54777](https://github.com/kubernetes/kubernetes/pull/54777),[ @Random-Liu](https://github.com/Random-Liu))
+* Bring all prom-to-sd container to the same image version ([#54583](https://github.com/kubernetes/kubernetes/pull/54583))
+ * Reduce log noise produced by prometheus-to-sd, by bumping it to version 0.2.2. ([#54635](https://github.com/kubernetes/kubernetes/pull/54635),[ @loburm](https://github.com/loburm))
+* [fluentd-elasticsearch addon] Elasticsearch service name can be overridden via env variable ELASTICSEARCH_SERVICE_NAME ([#54215](https://github.com/kubernetes/kubernetes/pull/54215),[ @mrahbar](https://github.com/mrahbar))
+
+### **Multicluster**
+
+#### **Federation**
+
+* Kubefed init now supports --imagePullSecrets and --imagePullPolicy, making it possible to use private registries. ([#50740](https://github.com/kubernetes/kubernetes/pull/50740),[ @dixudx](https://github.com/dixudx))
+* Updated cluster printer to enable --show-labels ([#53771](https://github.com/kubernetes/kubernetes/pull/53771),[ @dixudx](https://github.com/dixudx))
+* Kubefed init now supports --nodeSelector, enabling you to determine on what node the controller will be installed. ([#50749](https://github.com/kubernetes/kubernetes/pull/50749),[ @dixudx](https://github.com/dixudx))
+
+### **Network**
+
+#### **IPv6**
+
+* [alpha] IPv6 support has been added. Notable IPv6 support details include:
+ * Support for IPv6-only Kubernetes cluster deployments. **Note:** This feature does not provide dual-stack support.
+ * Support for IPv6 Kubernetes control and data planes.
+ * Support for Kubernetes IPv6 cluster deployments using kubeadm.
+ * Support for the iptables kube-proxy backend using ip6tables.
+ * Relies on CNI 0.6.0 binaries for IPv6 pod networking.
+ * Adds IPv6 support for kube-dns using SRV records.
+ * Caveats
+ * Only the CNI bridge and local-ipam plugins have been tested for the alpha release, although other CNI plugins do support IPv6.
+ * HostPorts are not supported.
+* An IPv6 network mask for pod or cluster cidr network must be /66 or longer. For example: 2001:db1::/66, 2001:dead:beef::/76, 2001:cafe::/118 are supported. 2001:db1::/64 is not supported
+* For details, see [the complete list of merged pull requests for IPv6 support](https://github.com/kubernetes/kubernetes/pulls?utf8=%E2%9C%93&q=is%3Apr+is%3Amerged+label%3Aarea%2Fipv6).
+
+#### **IPVS**
+
+* You can now use the --cleanup-ipvs flag to tell kube-proxy whether to flush all existing ipvs rules in on startup ([#56036](https://github.com/kubernetes/kubernetes/pull/56036),[ @m1093782566](https://github.com/m1093782566))
+* Graduate kube-proxy IPVS mode to beta. ([#56623](https://github.com/kubernetes/kubernetes/pull/56623), [@m1093782566](https://github.com/m1093782566))
+
+#### **Kube-Proxy**
+
+* Added iptables rules to allow Pod traffic even when default iptables policy is to reject. ([#52569](https://github.com/kubernetes/kubernetes/pull/52569),[ @tmjd](https://github.com/tmjd))
+* You can once again use 0 values for conntrack min, max, max per core, tcp close wait timeout, and tcp established timeout; this functionality was broken in 1.8. ([#55261](https://github.com/kubernetes/kubernetes/pull/55261),[ @ncdc](https://github.com/ncdc))
+
+#### **CoreDNS**
+
+* You now have the option to use CoreDNS instead of KubeDNS. To install CoreDNS instead of kube-dns, set CLUSTER_DNS_CORE_DNS to 'true'. This support is experimental. ([#52501](https://github.com/kubernetes/kubernetes/pull/52501),[ @rajansandeep](https://github.com/rajansandeep)) ([#55728](https://github.com/kubernetes/kubernetes/pull/55728),[ @rajansandeep](https://github.com/rajansandeep))
+
+#### **Other**
+
+* Pod addresses will now be removed from the list of endpoints when the pod is in graceful termination. ([#54828](https://github.com/kubernetes/kubernetes/pull/54828),[ @freehan](https://github.com/freehan))
+* You can now use a new supported service annotation for AWS clusters, `service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy`, which lets you specify which [predefined AWS SSL policy](http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-security-policy-table.html) you would like to use. ([#54507](https://github.com/kubernetes/kubernetes/pull/54507),[ @micahhausler](https://github.com/micahhausler))
+* Termination grace period for the calico/node add-on DaemonSet has been eliminated, reducing downtime during a rolling upgrade or deletion. ([#55015](https://github.com/kubernetes/kubernetes/pull/55015),[ @fasaxc](https://github.com/fasaxc))
+* Fixed bad conversion in host port chain name generating func which led to some unreachable host ports. ([#55153](https://github.com/kubernetes/kubernetes/pull/55153),[ @chenchun](https://github.com/chenchun))
+* Fixed IPVS availability check ([#51874](https://github.com/kubernetes/kubernetes/pull/51874),[ @vfreex](https://github.com/vfreex))
+* The output for kubectl describe networkpolicy * has been enhanced to be more useful. ([#46951](https://github.com/kubernetes/kubernetes/pull/46951),[ @aanm](https://github.com/aanm))
+* Kernel modules are now loaded automatically inside a kube-proxy pod ([#52003](https://github.com/kubernetes/kubernetes/pull/52003),[ @vfreex](https://github.com/vfreex))
+* Improve resilience by annotating kube-dns addon with podAntiAffinity to prefer scheduling on different nodes. ([#52193](https://github.com/kubernetes/kubernetes/pull/52193),[ @StevenACoffman](https://github.com/StevenACoffman))
+* [alpha] Added DNSConfig field to PodSpec. "None" mode for DNSPolicy is now supported. ([#55848](https://github.com/kubernetes/kubernetes/pull/55848),[ @MrHohn](https://github.com/MrHohn))
+* You can now add "options" to the host's /etc/resolv.conf (or --resolv-conf), and they will be copied into pod's resolv.conf when dnsPolicy is Default. Being able to customize options is important because it is common to leverage options to fine-tune the behavior of DNS client. ([#54773](https://github.com/kubernetes/kubernetes/pull/54773),[ @phsiao](https://github.com/phsiao))
+* Fixed a bug so that the service controller no longer retries if doNotRetry service update fails. ([#54184](https://github.com/kubernetes/kubernetes/pull/54184),[ @MrHohn](https://github.com/MrHohn))
+* Added --no-negcache flag to kube-dns to prevent caching of NXDOMAIN responses. ([#53604](https://github.com/kubernetes/kubernetes/pull/53604),[ @cblecker](https://github.com/cblecker))
+
+### **Node**
+
+#### **Pod API**
+
+* A single value in metadata.annotations/metadata.labels can now be passed into the containers via the Downward API. ([#55902](https://github.com/kubernetes/kubernetes/pull/55902),[ @yguo0905](https://github.com/yguo0905))
+* Pods will no longer briefly transition to a "Pending" state during the deletion process. ([#54593](https://github.com/kubernetes/kubernetes/pull/54593),[ @dashpole](https://github.com/dashpole))
+* Added pod-level local ephemeral storage metric to the Summary API. Pod-level ephemeral storage reports the total filesystem usage for the containers and emptyDir volumes in the measured Pod. ([#55447](https://github.com/kubernetes/kubernetes/pull/55447),[ @jingxu97](https://github.com/jingxu97))
+
+#### **Hardware Accelerators**
+
+* Kubelet now exposes metrics for NVIDIA GPUs attached to the containers. ([#55188](https://github.com/kubernetes/kubernetes/pull/55188),[ @mindprince](https://github.com/mindprince))
+* The device plugin Alpha API no longer supports returning artifacts per device as part of AllocateResponse. ([#53031](https://github.com/kubernetes/kubernetes/pull/53031),[ @vishh](https://github.com/vishh))
+* Fix to ignore extended resources that are not registered with kubelet during container resource allocation. ([#53547](https://github.com/kubernetes/kubernetes/pull/53547),[ @jiayingz](https://github.com/jiayingz))
+
+
+#### **Container Runtime**
+* [alpha] [cri-tools](https://github.com/kubernetes-incubator/cri-tools): CLI and validation tools for CRI is now v1.0.0-alpha.0. This release mainly focuses on UX improvements. [[@feiskyer](https://github.com/feiskyer)]
+ * Make crictl command more user friendly and add more subcommands.
+ * Integrate with CRI verbose option to provide extra debug information.
+ * Update CRI to kubernetes v1.9.
+ * Bug fixes in validation test suites.
+* [beta] [cri-containerd](https://github.com/kubernetes-incubator/cri-containerd): CRI implementation for containerd is now v1.0.0-beta.0, [[@Random-Liu](https://github.com/Random-Liu)]
+ * This release supports Kubernetes 1.9+ and containerd v1.0.0+.
+ * Pass all Kubernetes 1.9 e2e test, node e2e test and CRI validation tests.
+ * [Kube-up.sh integration](https://github.com/kubernetes-incubator/cri-containerd/blob/master/docs/kube-up.md).
+ * [Full crictl integration including CRI verbose option.](https://github.com/kubernetes-incubator/cri-containerd/blob/master/docs/crictl.md)
+ * Integration with cadvisor to provide better summary api support.
+* [stable] [cri-o](https://github.com/kubernetes-incubator/cri-o): CRI implementation for OCI-based runtimes is now v1.9. [[@mrunalp](https://github.com/mrunalp)]
+ * Pass all the Kubernetes 1.9 end-to-end test suites and now gating PRs as well
+ * Pass all the CRI validation tests
+ * Release has been focused on bug fixes, stability and performance with runc and Clear Containers
+ * Minikube integration
+* [stable] [frakti](https://github.com/kubernetes/frakti): CRI implementation for hypervisor-based runtimes is now v1.9. [[@resouer](https://github.com/resouer)]
+ * Added ARM64 release. Upgraded to CNI 0.6.0, added block device as Pod volume mode. Fixed CNI plugin compatibility.
+ * Passed all CRI validation conformance tests and node end-to-end conformance tests.
+* [alpha] [rktlet](https://github.com/kubernetes-incubator/rktlet): CRI implementation for the rkt runtime is now v0.1.0. [[@iaguis](https://github.com/iaguis)]
+ * This is the first release of rktlet and it implements support for the CRI including fetching images, running pods, CNI networking, logging and exec.
+This release passes 129/145 Kubernetes e2e conformance tests.
+* Container Runtime Interface API change. [[@yujuhong](https://github.com/yujuhong)]
+ * A new field is added to CRI container log format to support splitting a long log line into multiple lines. ([#55922](https://github.com/kubernetes/kubernetes/pull/55922), [@Random-Liu](https://github.com/Random-Liu))
+ * CRI now supports debugging via a verbose option for status functions. ([#53965](https://github.com/kubernetes/kubernetes/pull/53965), [@Random-Liu](https://github.com/Random-Liu))
+ * Kubelet can now provide full summary api support for the CRI container runtime, with the exception of container log stats. ([#55810](https://github.com/kubernetes/kubernetes/pull/55810), [@abhi](https://github.com/abhi))
+ * CRI now uses the correct localhost seccomp path when provided with input in the format of localhost//profileRoot/profileName. ([#55450](https://github.com/kubernetes/kubernetes/pull/55450), [@feiskyer](https://github.com/feiskyer))
+
+
+#### **Kubelet**
+
+* The EvictionHard, EvictionSoft, EvictionSoftGracePeriod, EvictionMinimumReclaim, SystemReserved, and KubeReserved fields in the KubeletConfiguration object (`kubeletconfig/v1alpha1`) are now of type map[string]string, which facilitates writing JSON and YAML files. ([#54823](https://github.com/kubernetes/kubernetes/pull/54823),[ @mtaufen](https://github.com/mtaufen))
+* Relative paths in the Kubelet's local config files (`--init-config-dir`) will now be resolved relative to the location of the containing files. ([#55648](https://github.com/kubernetes/kubernetes/pull/55648),[ @mtaufen](https://github.com/mtaufen))
+* It is now possible to set multiple manifest URL headers with the kubelet's `--manifest-url-header` flag. Multiple headers for the same key will be added in the order provided. The ManifestURLHeader field in KubeletConfiguration object (kubeletconfig/v1alpha1) is now a map[string][]string, which facilitates writing JSON and YAML files. ([#54643](https://github.com/kubernetes/kubernetes/pull/54643),[ @mtaufen](https://github.com/mtaufen))
+* The Kubelet's feature gates are now specified as a map when provided via a JSON or YAML KubeletConfiguration, rather than as a string of key-value pairs, making them less awkward for users. ([#53025](https://github.com/kubernetes/kubernetes/pull/53025),[ @mtaufen](https://github.com/mtaufen))
+
+##### **Other**
+
+* Fixed a performance issue ([#51899](https://github.com/kubernetes/kubernetes/pull/51899)) identified in large-scale clusters when deleting thousands of pods simultaneously across hundreds of nodes, by actively removing containers of deleted pods, rather than waiting for periodic garbage collection and batching resulting pod API deletion requests. ([#53233](https://github.com/kubernetes/kubernetes/pull/53233),[ @dashpole](https://github.com/dashpole))
+* Problems deleting local static pods have been resolved. ([#48339](https://github.com/kubernetes/kubernetes/pull/48339),[ @dixudx](https://github.com/dixudx))
+* CRI now only calls UpdateContainerResources when cpuset is set. ([#53122](https://github.com/kubernetes/kubernetes/pull/53122),[ @resouer](https://github.com/resouer))
+* Containerd monitoring is now supported. ([#56109](https://github.com/kubernetes/kubernetes/pull/56109),[ @dashpole](https://github.com/dashpole))
+* deviceplugin has been extended to more gracefully handle the full device plugin lifecycle, including: ([#55088](https://github.com/kubernetes/kubernetes/pull/55088),[ @jiayingz](https://github.com/jiayingz))
+ * Kubelet now uses an explicit cm.GetDevicePluginResourceCapacity() function that makes it possible to more accurately determine what resources are inactive and return a more accurate view of available resources.
+ * Extends the device plugin checkpoint data to record registered resources so that we can finish resource removing devices even upon kubelet restarts.
+ * Passes sourcesReady from kubelet to the device plugin to avoid removing inactive pods during the grace period of kubelet restart.
+ * Extends the gpu_device_plugin e2e_node test to verify that scheduled pods can continue to run even after a device plugin deletion and kubelet restart.
+* The NodeController no longer supports kubelet 1.2. ([#48996](https://github.com/kubernetes/kubernetes/pull/48996),[ @k82cn](https://github.com/k82cn))
+* Kubelet now provides more specific events via FailedSync when unable to sync a pod. ([#53857](https://github.com/kubernetes/kubernetes/pull/53857),[ @derekwaynecarr](https://github.com/derekwaynecarr))
+* You can now disable AppArmor by setting the AppArmor profile to unconfined. ([#52395](https://github.com/kubernetes/kubernetes/pull/52395),[ @dixudx](https://github.com/dixudx))
+* ImageGCManage now consumes ImageFS stats from StatsProvider rather than cadvisor. ([#53094](https://github.com/kubernetes/kubernetes/pull/53094),[ @yguo0905](https://github.com/yguo0905))
+* Hyperkube now supports the support --experimental-dockershim kubelet flag. ([#54508](https://github.com/kubernetes/kubernetes/pull/54508),[ @ivan4th](https://github.com/ivan4th))
+* Kubelet no longer removes default labels from Node API objects on startup ([#54073](https://github.com/kubernetes/kubernetes/pull/54073),[ @liggitt](https://github.com/liggitt))
+* The overlay2 container disk metrics for Docker and CRI-O now work properly. ([#54827](https://github.com/kubernetes/kubernetes/pull/54827),[ @dashpole](https://github.com/dashpole))
+* Removed docker dependency during kubelet start up. ([#54405](https://github.com/kubernetes/kubernetes/pull/54405),[ @resouer](https://github.com/resouer))
+* Added Windows support to the system verification check. ([#53730](https://github.com/kubernetes/kubernetes/pull/53730),[ @bsteciuk](https://github.com/bsteciuk))
+* Kubelet no longer removes unregistered extended resource capacities from node status; cluster admins will have to manually remove extended resources exposed via device plugins when they the remove plugins themselves. ([#53353](https://github.com/kubernetes/kubernetes/pull/53353),[ @jiayingz](https://github.com/jiayingz))
+* The stats summary network value now takes into account multiple network interfaces, and not just eth0. ([#52144](https://github.com/kubernetes/kubernetes/pull/52144),[ @andyxning](https://github.com/andyxning))
+* Base images have been bumped to Debian Stretch (9). ([#52744](https://github.com/kubernetes/kubernetes/pull/52744),[ @rphillips](https://github.com/rphillips))
+
+### **OpenStack**
+
+* OpenStack Cinder support has been improved:
+ * Cinder version detection now works properly. ([#53115](https://github.com/kubernetes/kubernetes/pull/53115),[ @FengyunPan](https://github.com/FengyunPan))
+ * The OpenStack cloud provider now supports Cinder v3 API. ([#52910](https://github.com/kubernetes/kubernetes/pull/52910),[ @FengyunPan](https://github.com/FengyunPan))
+* Load balancing is now more flexible:
+ * The OpenStack LBaaS v2 Provider is now [configurable](https://kubernetes.io/docs/concepts/cluster-administration/cloud-providers/#openstack). ([#54176](https://github.com/kubernetes/kubernetes/pull/54176),[ @gonzolino](https://github.com/gonzolino))
+ * OpenStack Octavia v2 is now supported as a load balancer provider in addition to the existing support for the Neutron LBaaS V2 implementation. Neutron LBaaS V1 support has been removed. ([#55393](https://github.com/kubernetes/kubernetes/pull/55393),[ @jamiehannaford](https://github.com/jamiehannaford))
+* OpenStack security group support has been beefed up ([#50836](https://github.com/kubernetes/kubernetes/pull/50836),[ @FengyunPan](https://github.com/FengyunPan)):
+ * Kubernetes will now automatically determine the security group for the node
+ * Nodes can now belong to multiple security groups
+
+### **Scheduling**
+
+#### **Hardware Accelerators**
+
+* Add ExtendedResourceToleration admission controller. This facilitates creation of dedicated nodes with extended resources. If operators want to create dedicated nodes with extended resources (such as GPUs, FPGAs, and so on), they are expected to taint the node with extended resource name as the key. This admission controller, if enabled, automatically adds tolerations for such taints to pods requesting extended resources, so users don't have to manually add these tolerations. ([#55839](https://github.com/kubernetes/kubernetes/pull/55839),[ @mindprince](https://github.com/mindprince))
+
+#### **Other**
+
+* Scheduler cache ignores updates to an assumed pod if updates are limited to pod annotations. ([#54008](https://github.com/kubernetes/kubernetes/pull/54008),[ @yguo0905](https://github.com/yguo0905))
+* Issues with namespace deletion have been resolved. ([#53720](https://github.com/kubernetes/kubernetes/pull/53720),[ @shyamjvs](https://github.com/shyamjvs)) ([#53793](https://github.com/kubernetes/kubernetes/pull/53793),[ @wojtek-t](https://github.com/wojtek-t))
+* Pod preemption has been improved.
+ * Now takes PodDisruptionBudget into account. ([#56178](https://github.com/kubernetes/kubernetes/pull/56178),[ @bsalamat](https://github.com/bsalamat))
+ * Nominated pods are taken into account during scheduling to avoid starvation of higher priority pods. ([#55933](https://github.com/kubernetes/kubernetes/pull/55933),[ @bsalamat](https://github.com/bsalamat))
+* Fixed 'Schedulercache is corrupted' error in kube-scheduler ([#55262](https://github.com/kubernetes/kubernetes/pull/55262),[ @liggitt](https://github.com/liggitt))
+* The kube-scheduler command now supports a --config flag which is the location of a file containing a serialized scheduler configuration. Most other kube-scheduler flags are now deprecated. ([#52562](https://github.com/kubernetes/kubernetes/pull/52562),[ @ironcladlou](https://github.com/ironcladlou))
+* A new scheduling queue helps schedule the highest priority pending pod first. ([#55109](https://github.com/kubernetes/kubernetes/pull/55109),[ @bsalamat](https://github.com/bsalamat))
+* A Pod can now listen to the same port on multiple IP addresses. ([#52421](https://github.com/kubernetes/kubernetes/pull/52421),[ @WIZARD-CXY](https://github.com/WIZARD-CXY))
+* Object count quotas supported on all standard resources using count/. syntax ([#54320](https://github.com/kubernetes/kubernetes/pull/54320),[ @derekwaynecarr](https://github.com/derekwaynecarr))
+* Apply algorithm in scheduler by feature gates. ([#52723](https://github.com/kubernetes/kubernetes/pull/52723),[ @k82cn](https://github.com/k82cn))
+* A new priority function ResourceLimitsPriorityMap (disabled by default and behind alpha feature gate and not part of the scheduler's default priority functions list) that assigns a lowest possible score of 1 to a node that satisfies one or both of input pod's cpu and memory limits, mainly to break ties between nodes with same scores. ([#55906](https://github.com/kubernetes/kubernetes/pull/55906),[ @aveshagarwal](https://github.com/aveshagarwal))
+* Kubelet evictions now take pod priority into account ([#53542](https://github.com/kubernetes/kubernetes/pull/53542),[ @dashpole](https://github.com/dashpole))
+* PodTolerationRestriction admisson plugin: if namespace level tolerations are empty, now they override cluster level tolerations. ([#54812](https://github.com/kubernetes/kubernetes/pull/54812),[ @aveshagarwal](https://github.com/aveshagarwal))
+
+### **Storage**
+
+* [stable] `PersistentVolume` and `PersistentVolumeClaim` objects must now have a capacity greater than zero.
+* [stable] Mutation of `PersistentVolumeSource` after creation is no longer allowed
+* [alpha] Deletion of `PersistentVolumeClaim` objects that are in use by a pod no longer permitted (if alpha feature is enabled).
+* [alpha] Container Storage Interface
+ * New CSIVolumeSource enables Kubernetes to use external CSI drivers to provision, attach, and mount volumes.
+* [alpha] Raw block volumes
+ * Support for surfacing volumes as raw block devices added to Kubernetes storage system.
+ * Only Fibre Channel volume plugin supports exposes this functionality, in this release.
+* [alpha] Volume resizing
+ * Added file system resizing for the following volume plugins: GCE PD, Ceph RBD, AWS EBS, OpenStack Cinder
+* [alpha] Topology Aware Volume Scheduling
+ * Improved volume scheduling for Local PersistentVolumes, by allowing the scheduler to make PersistentVolume binding decisions while respecting the Pod's scheduling requirements.
+ * Dynamic provisioning is not supported with this feature yet.
+* [alpha] Containerized mount utilities
+ * Allow mount utilities, used to mount volumes, to run inside a container instead of on the host.
+* Bug Fixes
+ * ScaleIO volume plugin is no longer dependent on the drv_cfg binary, so a Kubernetes cluster can easily run a containerized kubelet. ([#54956](https://github.com/kubernetes/kubernetes/pull/54956),[ @vladimirvivien](https://github.com/vladimirvivien))
+ * AWS EBS Volumes are detached from stopped AWS nodes. ([#55893](https://github.com/kubernetes/kubernetes/pull/55893),[ @gnufied](https://github.com/gnufied))
+ * AWS EBS volumes are detached if attached to a different node than expected. ([#55491](https://github.com/kubernetes/kubernetes/pull/55491),[ @gnufied](https://github.com/gnufied))
+ * PV Recycle now works in environments that use architectures other than x86. ([#53958](https://github.com/kubernetes/kubernetes/pull/53958),[ @dixudx](https://github.com/dixudx))
+ * Pod Security Policy can now manage access to specific FlexVolume drivers.([#53179](https://github.com/kubernetes/kubernetes/pull/53179),[ @wanghaoran1988](https://github.com/wanghaoran1988))
+ * To prevent unauthorized access to CHAP Secrets, you can now set the secretNamespace storage class parameters for the following volume types:
+ * ScaleIO; StoragePool and ProtectionDomain attributes no longer default to the value default. ([#54013](https://github.com/kubernetes/kubernetes/pull/54013),[ @vladimirvivien](https://github.com/vladimirvivien))
+ * RBD Persistent Volume Sources ([#54302](https://github.com/kubernetes/kubernetes/pull/54302),[ @sbezverk](https://github.com/sbezverk))
+ * iSCSI Persistent Volume Sources ([#51530](https://github.com/kubernetes/kubernetes/pull/51530),[ @rootfs](https://github.com/rootfs))
+ * In GCE multizonal clusters, `PersistentVolume` objects will no longer be dynamically provisioned in zones without nodes. ([#52322](https://github.com/kubernetes/kubernetes/pull/52322),[ @davidz627](https://github.com/davidz627))
+ * Multi Attach PVC errors and events are now more useful and less noisy. ([#53401](https://github.com/kubernetes/kubernetes/pull/53401),[ @gnufied](https://github.com/gnufied))
+ * The compute-rw scope has been removed from GCE nodes ([#53266](https://github.com/kubernetes/kubernetes/pull/53266),[ @mikedanese](https://github.com/mikedanese))
+ * Updated vSphere cloud provider to support k8s cluster spread across multiple vCenters ([#55845](https://github.com/kubernetes/kubernetes/pull/55845),[ @rohitjogvmw](https://github.com/rohitjogvmw))
+ * vSphere: Fix disk is not getting detached when PV is provisioned on clustered datastore. ([#54438](https://github.com/kubernetes/kubernetes/pull/54438),[ @pshahzeb](https://github.com/pshahzeb))
+ * If a non-absolute mountPath is passed to the kubelet, it must now be prefixed with the appropriate root path. ([#55665](https://github.com/kubernetes/kubernetes/pull/55665),[ @brendandburns](https://github.com/brendandburns))
+
+## External Dependencies
+
+* The supported etcd server version is **3.1.10**, as compared to 3.0.17 in v1.8 ([#49393](https://github.com/kubernetes/kubernetes/pull/49393),[ @hongchaodeng](https://github.com/hongchaodeng))
+* The validated docker versions are the same as for v1.8: **1.11.2 to 1.13.1 and 17.03.x**
+* The Go version was upgraded from go1.8.3 to **go1.9.2** ([#51375](https://github.com/kubernetes/kubernetes/pull/51375),[ @cblecker](https://github.com/cblecker))
+ * The minimum supported go version bumps to 1.9.1. ([#55301](https://github.com/kubernetes/kubernetes/pull/55301),[ @xiangpengzhao](https://github.com/xiangpengzhao))
+ * Kubernetes has been upgraded to go1.9.2 ([#55420](https://github.com/kubernetes/kubernetes/pull/55420),[ @cblecker](https://github.com/cblecker))
+* CNI was upgraded to **v0.6.0** ([#51250](https://github.com/kubernetes/kubernetes/pull/51250),[ @dixudx](https://github.com/dixudx))
+* The dashboard add-on has been updated to [v1.8.0](https://github.com/kubernetes/dashboard/releases/tag/v1.8.0). ([#53046](https://github.com/kubernetes/kubernetes/pull/53046), [@maciaszczykm](https://github.com/maciaszczykm))
+* Heapster has been updated to [v1.5.0](https://github.com/kubernetes/heapster/releases/tag/v1.5.0). ([#57046](https://github.com/kubernetes/kubernetes/pull/57046), [@piosz](https://github.com/piosz))
+* Cluster Autoscaler has been updated to [v1.1.0](https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.1.0). ([#56969](https://github.com/kubernetes/kubernetes/pull/56969), [@mwielgus](https://github.com/mwielgus))
+* Update kube-dns 1.14.7 ([#54443](https://github.com/kubernetes/kubernetes/pull/54443),[ @bowei](https://github.com/bowei))
+* Update influxdb to v1.3.3 and grafana to v4.4.3 ([#53319](https://github.com/kubernetes/kubernetes/pull/53319),[ @kairen](https://github.com/kairen))
+- [v1.9.0-beta.2](#v190-beta2)
+- [v1.9.0-beta.1](#v190-beta1)
+- [v1.9.0-alpha.3](#v190-alpha3)
+- [v1.9.0-alpha.2](#v190-alpha2)
+- [v1.9.0-alpha.1](#v190-alpha1)
+
+
+
+# v1.9.0-beta.2
+
+[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.9/examples)
+
+## Downloads for v1.9.0-beta.2
+
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes.tar.gz) | `e5c88addf6aca01635f283021a72e05be99daf3e87fd3cda92477d0ed63c2d11`
+[kubernetes-src.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-src.tar.gz) | `2419a0ef3681460b64eefc083d07377786b308f6cc62d0618a5c74dfb4729b03`
+
+### Client Binaries
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes-client-darwin-386.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-client-darwin-386.tar.gz) | `68d971576c3e9a16fb736f06c07ce53b8371fc67c2f37fb60e9f3a366cd37a80`
+[kubernetes-client-darwin-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-client-darwin-amd64.tar.gz) | `36251b7b6043adb79706ac115181aa7ecf365ced9198a4c192f1fbc2817d030c`
+[kubernetes-client-linux-386.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-client-linux-386.tar.gz) | `585a3dd6a3440988bce3f83ea14fb9a0a18011bc62e28959301861faa06d6da9`
+[kubernetes-client-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-client-linux-amd64.tar.gz) | `169769d6030d8c1d9d9bc01408b62ea3275d4632a7de85392fc95a48feeba522`
+[kubernetes-client-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-client-linux-arm64.tar.gz) | `7841c2af49be9ae04cda305165b172021c0e72d809c2271d05061330c220256b`
+[kubernetes-client-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-client-linux-arm.tar.gz) | `9ab32843cec68b036de83f54a68c2273a913be5180dc20b5cf1e084b314a9a2d`
+[kubernetes-client-linux-ppc64le.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-client-linux-ppc64le.tar.gz) | `5a2bb39b78ef381382f9b8aac17d5dbcbef08a80ad3518ff2cf6c65bd7a6d07d`
+[kubernetes-client-linux-s390x.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-client-linux-s390x.tar.gz) | `ddf4b3780f5879b9fb9115353cc26234cfc3a6db63a3cd39122340189a4bf0ca`
+[kubernetes-client-windows-386.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-client-windows-386.tar.gz) | `5960a0a50c92a788e90eca9d85a1d12ff1d41264816b55b3a1a28ffd3f6acf93`
+[kubernetes-client-windows-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-client-windows-amd64.tar.gz) | `d85778ace9bf25f5d3626aef3a9419a2c4aaa3847d5e0c2bf34d4dd8ae6b5205`
+
+### Server Binaries
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-server-linux-amd64.tar.gz) | `43e16b3d79c2805d712fd61ed6fd110d9db09a60d39584ef78c24821eb32b77a`
+[kubernetes-server-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-server-linux-arm64.tar.gz) | `8580e454e6c467a30687ff5c85248919b3c0d2d0114e28cb3bf64d2e8998ff00`
+[kubernetes-server-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-server-linux-arm.tar.gz) | `d2e767be85ebf7c6c537c8e796e8fe0ce8a3f2ca526984490646acd30bf5e6fc`
+[kubernetes-server-linux-ppc64le.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-server-linux-ppc64le.tar.gz) | `81dd9072e805c181b4db2dfd00fe2bdb43c00da9e07b50285bce703bfd0d75ba`
+[kubernetes-server-linux-s390x.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-server-linux-s390x.tar.gz) | `f432c816c755d05e62cb5d5e8ac08dcb60d0df6d5121e1adaf42a32de65d6174`
+
+### Node Binaries
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-node-linux-amd64.tar.gz) | `2bf2268735ca4ecbdca1a692b25329d6d9d4805963cbe0cfcbb92fc725c42481`
+[kubernetes-node-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-node-linux-arm64.tar.gz) | `3bb4a695fd2e4fca1c77283c1ad6c2914d12b33d9c5f64ac9c630a42d5e30ab2`
+[kubernetes-node-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-node-linux-arm.tar.gz) | `331c1efadf99dcb634c8da301349e3be63d27a5c5f06cc124b59fcc8b8a91cb0`
+[kubernetes-node-linux-ppc64le.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-node-linux-ppc64le.tar.gz) | `ab036fdb64ed4702d7dbbadddf77af90de35f73aa13854bb5accf82acc95c7e6`
+[kubernetes-node-linux-s390x.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-node-linux-s390x.tar.gz) | `8257af566f98325549de320d2167c1f56fd137b6225c70f6c1e34507ba124a1f`
+[kubernetes-node-windows-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release-dashpole/release/v1.9.0-beta.2/kubernetes-node-windows-amd64.tar.gz) | `4146fcb5bb6bf3e04641b27e4aa8501649178716fa16bd9bcb7f1fe3449db7f2`
+
+## Changelog since v1.9.0-beta.1
+
+### Other notable changes
+
+* Add pvc as part of equivalence hash ([#56577](https://github.com/kubernetes/kubernetes/pull/56577), [@resouer](https://github.com/resouer))
+* Fix port number and default Stackdriver Metadata Agent in daemon set configuration. ([#56576](https://github.com/kubernetes/kubernetes/pull/56576), [@kawych](https://github.com/kawych))
+* Declare ipvs proxier beta ([#56623](https://github.com/kubernetes/kubernetes/pull/56623), [@m1093782566](https://github.com/m1093782566))
+* Enable admissionregistration.k8s.io/v1beta1 by default in kube-apiserver. ([#56687](https://github.com/kubernetes/kubernetes/pull/56687), [@sttts](https://github.com/sttts))
+* Support autoprobing floating-network-id for openstack cloud provider ([#52013](https://github.com/kubernetes/kubernetes/pull/52013), [@FengyunPan](https://github.com/FengyunPan))
+* Audit webhook batching parameters are now configurable via command-line flags in the apiserver. ([#56638](https://github.com/kubernetes/kubernetes/pull/56638), [@crassirostris](https://github.com/crassirostris))
+* Update kubectl to the stable version ([#54345](https://github.com/kubernetes/kubernetes/pull/54345), [@zouyee](https://github.com/zouyee))
+* [scheduler] Fix issue new pod with affinity stuck at `creating` because node had been deleted but its pod still exists. ([#53647](https://github.com/kubernetes/kubernetes/pull/53647), [@wenlxie](https://github.com/wenlxie))
+* Updated Dashboard add-on to version 1.8.0: The Dashboard add-on now deploys with https enabled. The Dashboard can be accessed via kubectl proxy at http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/. The /ui redirect is deprecated and will be removed in 1.10. ([#53046](https://github.com/kubernetes/kubernetes/pull/53046), [@maciaszczykm](https://github.com/maciaszczykm))
+* AWS: Detect EBS volumes mounted via NVME and mount them ([#56607](https://github.com/kubernetes/kubernetes/pull/56607), [@justinsb](https://github.com/justinsb))
+* fix CreateVolume func: use search mode instead ([#54687](https://github.com/kubernetes/kubernetes/pull/54687), [@andyzhangx](https://github.com/andyzhangx))
+* kubelet: fix bug where `runAsUser: MustRunAsNonRoot` strategy didn't reject a pod with a non-numeric `USER`. ([#56503](https://github.com/kubernetes/kubernetes/pull/56503), [@php-coder](https://github.com/php-coder))
+* kube-proxy addon tolerates all NoExecute and NoSchedule taints by default. ([#56589](https://github.com/kubernetes/kubernetes/pull/56589), [@mindprince](https://github.com/mindprince))
+* Do not do file system resize on read-only mounts ([#56587](https://github.com/kubernetes/kubernetes/pull/56587), [@gnufied](https://github.com/gnufied))
+* Mark v1beta1 NetworkPolicy types as deprecated ([#56425](https://github.com/kubernetes/kubernetes/pull/56425), [@cmluciano](https://github.com/cmluciano))
+* Fix problem with /bin/bash ending up linked to dash ([#55018](https://github.com/kubernetes/kubernetes/pull/55018), [@dims](https://github.com/dims))
+* Modifying etcd recovery steps for the case of failed upgrade ([#56500](https://github.com/kubernetes/kubernetes/pull/56500), [@sbezverk](https://github.com/sbezverk))
+
+
+
+# v1.9.0-beta.1
+
+[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.9/examples)
+
+## Downloads for v1.9.0-beta.1
+
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes.tar.gz) | `ffdcf0f7cd972340bc666395d759fc18573a32775d38ed3f4fd99d4369e856e4`
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-src.tar.gz) | `09bee9a955987d53c7a65d2f1a3129854ca3a34f9fb38218f0c58f5bd603494a`
+
+### Client Binaries
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-client-darwin-386.tar.gz) | `9d54db976ca7a12e9208e5595b552b094e0cc532b49ba6e919d776e52e56f4a8`
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | `0a22af2c6c84ff8b3022c0ecebf4ba3021048fceddf7375c87c13a83488ffe2c`
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-client-linux-386.tar.gz) | `84bb638c8e61d7a7b415d49d76d166f3924052338c454d1ae57ae36eb37445c6`
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | `08b56240288d17f147485e79c5f6594391c5b46e26450d64e7510f65db1f9a79`
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | `7206573b131a8915d3bc14aa660fb44890ed79fdbd498bc8f9951c221aa12ea5`
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-client-linux-arm.tar.gz) | `7ad21796b0e0a9d247beb41d6b3a3d0aaa822b85adae4c90533ba0ef94c05b2e`
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | `2076328ca0958a96c8f551b91a393aa2d6fc24bef92991a1a4d9fc8df52519a7`
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | `17ac0aba9a4e2003cb3d06bd631032b760d1a2d521c60a25dc26687aadb5ba14`
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-client-windows-386.tar.gz) | `3a2bebd4adb6e1bf2b30a8cedb7ec212fc43c4b02e26a0a60c3429e478a86073`
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | `fcc852e97f0e64d1025344aefd042ceff05227bfded80142bfa99927de1a5f0e`
+
+### Server Binaries
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | `7ed2a789b86f258f1739cb165276150512a171a715da9372aeff000e946548fd`
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | `e4e04a33698ac665a3e61fd8d60d4010fec6b0e3b0627dee9a965c2c2a510e3a`
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-server-linux-arm.tar.gz) | `befce41457fc15c8fadf37ee5bf80b83405279c60665cfb9ecfc9f61fcd549c7`
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | `e59e4fb84d6b890e9c6cb216ebb20546212e6c14feb077d9d0761c88e2685f4c`
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | `0aa47d01907ea78b9a1a8001536d5091fca93409b81bac6eb3e90a4dff6c3faa`
+
+### Node Binaries
+
+filename | sha256 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-node-linux-amd64.tar.gz) | `107bfaf72b8b6d3b5c163e61ed169c89288958750636c16bc3d781cf94bf5f4c`
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-node-linux-arm64.tar.gz) | `6bc58e913a2467548664ece743617a1e595f6223100a1bad27e9a90bdf2e2927`
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-node-linux-arm.tar.gz) | `d4ff8f37d7c95f7ca3aca30fa3c191f2cc5e48f0159ac6a5395ec09092574baa`
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-node-linux-ppc64le.tar.gz) | `a88d65343ccb515c4eaab11352e69afee4a19c7fa345b08aaffa854b225cf305`
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-node-linux-s390x.tar.gz) | `16d6a67d18273460cab4c293a5b130d4827f41ee4bf5b79b07c60ef517f580cd`
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.9.0-beta.1/kubernetes-node-windows-amd64.tar.gz) | `f086659462b6dcdd78abdf13bed339dd67c1111931bae962044aa4ae2396921d`
+
+## Changelog since v1.9.0-alpha.3
+
+### Action Required
+
+* Adds alpha support for volume scheduling, which allows the scheduler to make PersistentVolume binding decisions while respecting the Pod's scheduling requirements. Dynamic provisioning is not supported with this feature yet. ([#55039](https://github.com/kubernetes/kubernetes/pull/55039), [@msau42](https://github.com/msau42))
+ * Action required for existing users of the LocalPersistentVolumes alpha feature:
+ * The VolumeScheduling feature gate also has to be enabled on kube-scheduler and kube-controller-manager.
+ * The NoVolumeNodeConflict predicate has been removed. For non-default schedulers, update your scheduler policy.
+ * The CheckVolumeBinding predicate has to be enabled in non-default schedulers.
+* Action required: ([#56004](https://github.com/kubernetes/kubernetes/pull/56004), [@caesarxuchao](https://github.com/caesarxuchao))
+ * The `admission/v1alpha1` API has graduated to `v1beta1`. Please delete your existing webhooks before upgrading the cluster, and update your admission webhooks to use the latest API, because the API has backwards incompatible changes.
+ * The webhook registration related part of the `admissionregistration` API has graduated to `v1beta1`. Please delete your existing configurations before upgrading the cluster, and update your configuration file to use the latest API.
+* [action required] kubeadm join: Error out if CA pinning isn't used or opted out of ([#55468](https://github.com/kubernetes/kubernetes/pull/55468), [@yuexiao-wang](https://github.com/yuexiao-wang))
+ * kubeadm now requires the user to specify either the `--discovery-token-ca-cert-hash` flag or the `--discovery-token-unsafe-skip-ca-verification` flag.
+
+### Other notable changes
+
+* A new priority function `ResourceLimitsPriorityMap` (disabled by default and behind alpha feature gate and not part of the scheduler's default priority functions list) that assigns a lowest possible score of 1 to a node that satisfies one or both of input pod's cpu and memory limits, mainly to break ties between nodes with same scores. ([#55906](https://github.com/kubernetes/kubernetes/pull/55906), [@aveshagarwal](https://github.com/aveshagarwal))
+* AWS: Fix detaching volume from stopped nodes. ([#55893](https://github.com/kubernetes/kubernetes/pull/55893), [@gnufied](https://github.com/gnufied))
+* Fix stats summary network value when multiple network interfaces are available. ([#52144](https://github.com/kubernetes/kubernetes/pull/52144), [@andyxning](https://github.com/andyxning))
+* Fix a typo in prometheus-to-sd configuration, that drops some stackdriver metrics. ([#56473](https://github.com/kubernetes/kubernetes/pull/56473), [@loburm](https://github.com/loburm))
+* Fixes server name verification of aggregated API servers and webhook admission endpoints ([#56415](https://github.com/kubernetes/kubernetes/pull/56415), [@liggitt](https://github.com/liggitt))
+* OpenStack cloud provider supports Cinder v3 API. ([#52910](https://github.com/kubernetes/kubernetes/pull/52910), [@FengyunPan](https://github.com/FengyunPan))
+* kube-up: Add optional addon CoreDNS. ([#55728](https://github.com/kubernetes/kubernetes/pull/55728), [@rajansandeep](https://github.com/rajansandeep))
+ * Install CoreDNS instead of kube-dns by setting CLUSTER_DNS_CORE_DNS value to 'true'.
+* kubeadm health checks can also be skipped with `--ignore-checks-errors` ([#56130](https://github.com/kubernetes/kubernetes/pull/56130), [@anguslees](https://github.com/anguslees))
+* Adds kubeadm support for using ComponentConfig for the kube-proxy ([#55972](https://github.com/kubernetes/kubernetes/pull/55972), [@rpothier](https://github.com/rpothier))
+* Pod Security Policy can now manage access to specific FlexVolume drivers ([#53179](https://github.com/kubernetes/kubernetes/pull/53179), [@wanghaoran1988](https://github.com/wanghaoran1988))
+* PVC Finalizing Controller is introduced in order to prevent deletion of a PVC that is being used by a pod. ([#55824](https://github.com/kubernetes/kubernetes/pull/55824), [@pospispa](https://github.com/pospispa))
+* Kubelet can provide full summary api support except container log stats for CRI container runtime now. ([#55810](https://github.com/kubernetes/kubernetes/pull/55810), [@abhi](https://github.com/abhi))
+* Add support for resizing EBS disks ([#56118](https://github.com/kubernetes/kubernetes/pull/56118), [@gnufied](https://github.com/gnufied))
+* Add PodDisruptionBudget support during pod preemption ([#56178](https://github.com/kubernetes/kubernetes/pull/56178), [@bsalamat](https://github.com/bsalamat))
+* Fix CRI localhost seccomp path in format localhost//profileRoot/profileName. ([#55450](https://github.com/kubernetes/kubernetes/pull/55450), [@feiskyer](https://github.com/feiskyer))
+* kubeadm: Add CoreDNS support for kubeadm "upgrade" and "alpha phases addons". ([#55952](https://github.com/kubernetes/kubernetes/pull/55952), [@rajansandeep](https://github.com/rajansandeep))
+* The default garbage collection policy for Deployment, DaemonSet, StatefulSet, and ReplicaSet has changed from OrphanDependents to DeleteDependents when the deletion is requested through an `apps/v1` endpoint. Clients using older endpoints will be unaffected. This change is only at the REST API level and is independent of the default behavior of particular clients (e.g. this does not affect the default for the kubectl `--cascade` flag). ([#55148](https://github.com/kubernetes/kubernetes/pull/55148), [@dixudx](https://github.com/dixudx))
+ * If you upgrade your client-go libs and use the `AppsV1()` interface, please note that the default garbage collection behavior is changed.
+* Add resize support for ceph RBD ([#52767](https://github.com/kubernetes/kubernetes/pull/52767), [@NickrenREN](https://github.com/NickrenREN))
+* Expose single annotation/label via downward API ([#55902](https://github.com/kubernetes/kubernetes/pull/55902), [@yguo0905](https://github.com/yguo0905))
+* kubeadm: added `--print-join-command` flag for `kubeadm token create`. ([#56185](https://github.com/kubernetes/kubernetes/pull/56185), [@mattmoyer](https://github.com/mattmoyer))
+* Implement kubelet side file system resizing. Also implement GCE PD resizing ([#55815](https://github.com/kubernetes/kubernetes/pull/55815), [@gnufied](https://github.com/gnufied))
+* Improved PodSecurityPolicy admission latency, but validation errors are no longer limited to only errors from authorized policies. ([#55643](https://github.com/kubernetes/kubernetes/pull/55643), [@tallclair](https://github.com/tallclair))
+* Add containerd monitoring support ([#56109](https://github.com/kubernetes/kubernetes/pull/56109), [@dashpole](https://github.com/dashpole))
+* Add pod-level CPU and memory stats from pod cgroup information ([#55969](https://github.com/kubernetes/kubernetes/pull/55969), [@jingxu97](https://github.com/jingxu97))
+* kubectl apply use openapi to calculate diff be default. It will fall back to use baked-in types when openapi is not available. ([#51321](https://github.com/kubernetes/kubernetes/pull/51321), [@mengqiy](https://github.com/mengqiy))
+* It is now possible to override the healthcheck parameters for AWS ELBs via annotations on the corresponding service. The new annotations are `healthy-threshold`, `unhealthy-threshold`, `timeout`, `interval` (all prefixed with `service.beta.kubernetes.io/aws-load-balancer-healthcheck-`) ([#56024](https://github.com/kubernetes/kubernetes/pull/56024), [@dimpavloff](https://github.com/dimpavloff))
+* Adding etcd version display to kubeadm upgrade plan subcommand ([#56156](https://github.com/kubernetes/kubernetes/pull/56156), [@sbezverk](https://github.com/sbezverk))
+* [fluentd-gcp addon] Fixes fluentd deployment on GCP when custom resources are set. ([#55950](https://github.com/kubernetes/kubernetes/pull/55950), [@crassirostris](https://github.com/crassirostris))
+* [fluentd-elasticsearch addon] Elasticsearch and Kibana are updated to version 5.6.4 ([#55400](https://github.com/kubernetes/kubernetes/pull/55400), [@mrahbar](https://github.com/mrahbar))
+* install ipset in debian-iptables docker image ([#56115](https://github.com/kubernetes/kubernetes/pull/56115), [@m1093782566](https://github.com/m1093782566))
+* Add cleanup-ipvs flag for kube-proxy ([#56036](https://github.com/kubernetes/kubernetes/pull/56036), [@m1093782566](https://github.com/m1093782566))
+* Remove opaque integer resources (OIR) support (deprecated in v1.8.) ([#55103](https://github.com/kubernetes/kubernetes/pull/55103), [@ConnorDoyle](https://github.com/ConnorDoyle))
+* Implement volume resize for cinder ([#51498](https://github.com/kubernetes/kubernetes/pull/51498), [@NickrenREN](https://github.com/NickrenREN))
+* Block volumes Support: FC plugin update ([#51493](https://github.com/kubernetes/kubernetes/pull/51493), [@mtanino](https://github.com/mtanino))
+* kube-apiserver: fixed --oidc-username-prefix and --oidc-group-prefix flags which previously weren't correctly enabled ([#56175](https://github.com/kubernetes/kubernetes/pull/56175), [@ericchiang](https://github.com/ericchiang))
+* New kubeadm flag `--ignore-preflight-errors` that enables to decrease severity of each individual error to warning. ([#56072](https://github.com/kubernetes/kubernetes/pull/56072), [@kad](https://github.com/kad))
+ * Old flag `--skip-preflight-checks` is marked as deprecated and acts as `--ignore-preflight-errors=all`
+* Block volumes Support: CRI, volumemanager and operationexecutor changes ([#51494](https://github.com/kubernetes/kubernetes/pull/51494), [@mtanino](https://github.com/mtanino))
+* StatefulSet controller will create a label for each Pod in a StatefulSet. The label is named statefulset.kubernetes.io/pod-name and it is equal to the name of the Pod. This allows users to create a Service per Pod to expose a connection to individual Pods. ([#55329](https://github.com/kubernetes/kubernetes/pull/55329), [@kow3ns](https://github.com/kow3ns))
+* Initial basic bootstrap-checkpoint support ([#50984](https://github.com/kubernetes/kubernetes/pull/50984), [@timothysc](https://github.com/timothysc))
+* Add DNSConfig field to PodSpec and support "None" mode for DNSPolicy (Alpha). ([#55848](https://github.com/kubernetes/kubernetes/pull/55848), [@MrHohn](https://github.com/MrHohn))
+* Add pod-level local ephemeral storage metric in Summary API. Pod-level ephemeral storage reports the total filesystem usage for the containers and emptyDir volumes in the measured Pod. ([#55447](https://github.com/kubernetes/kubernetes/pull/55447), [@jingxu97](https://github.com/jingxu97))
+* Kubernetes update Azure nsg rules based on not just difference in Name, but also in Protocol, SourcePortRange, DestinationPortRange, SourceAddressPrefix, DestinationAddressPrefix, Access, and Direction. ([#55752](https://github.com/kubernetes/kubernetes/pull/55752), [@kevinkim9264](https://github.com/kevinkim9264))
+* Add support to take nominated pods into account during scheduling to avoid starvation of higher priority pods. ([#55933](https://github.com/kubernetes/kubernetes/pull/55933), [@bsalamat](https://github.com/bsalamat))
+* Add Amazon NLB support - Fixes [#52173](https://github.com/kubernetes/kubernetes/pull/52173) ([#53400](https://github.com/kubernetes/kubernetes/pull/53400), [@micahhausler](https://github.com/micahhausler))
+* Extends deviceplugin to gracefully handle full device plugin lifecycle. ([#55088](https://github.com/kubernetes/kubernetes/pull/55088), [@jiayingz](https://github.com/jiayingz))
+* A new field is added to CRI container log format to support splitting a long log line into multiple lines. ([#55922](https://github.com/kubernetes/kubernetes/pull/55922), [@Random-Liu](https://github.com/Random-Liu))
+* [advanced audit]add a policy wide omitStage ([#54634](https://github.com/kubernetes/kubernetes/pull/54634), [@CaoShuFeng](https://github.com/CaoShuFeng))
+* Fix a bug in GCE multizonal clusters where PersistentVolumes were sometimes created in zones without nodes. ([#52322](https://github.com/kubernetes/kubernetes/pull/52322), [@davidz627](https://github.com/davidz627))
+* With this change ([#55845](https://github.com/kubernetes/kubernetes/pull/55845), [@rohitjogvmw](https://github.com/rohitjogvmw))
+ * - User should be able to create k8s cluster which spans across multiple ESXi clusters, datacenters or even vCenters.
+ * - vSphere cloud provider (VCP) uses OS hostname and not vSphere Inventory VM Name.
+ * That means, now VCP can handle cases where user changes VM inventory name.
+ * - VCP can handle cases where VM migrates to other ESXi cluster or datacenter or vCenter.
+ * The only requirement is the shared storage. VCP needs shared storage on all Node VMs.
+* The RBAC bootstrapping policy now allows authenticated users to create selfsubjectrulesreviews. ([#56095](https://github.com/kubernetes/kubernetes/pull/56095), [@ericchiang](https://github.com/ericchiang))
+* Defaulting of controller-manager options for --cluster-signing-cert-file and --cluster-signing-key-file is deprecated and will be removed in a later release. ([#54495](https://github.com/kubernetes/kubernetes/pull/54495), [@mikedanese](https://github.com/mikedanese))
+* Add ExtendedResourceToleration admission controller. This facilitates creation of dedicated nodes with extended resources. If operators want to create dedicated nodes with extended resources (like GPUs, FPGAs etc.), they are expected to taint the node with extended resource name as the key. This admission controller, if enabled, automatically adds tolerations for such taints to pods requesting extended resources, so users don't have to manually add these tolerations. ([#55839](https://github.com/kubernetes/kubernetes/pull/55839), [@mindprince](https://github.com/mindprince))
+* Move unreachable taint key out of alpha. ([#54208](https://github.com/kubernetes/kubernetes/pull/54208), [@resouer](https://github.com/resouer))
+ * Please note the existing pods with the alpha toleration should be updated by user himself to tolerate the GA taint.
+* add GRS, RAGRS storage account type support for azure disk ([#55931](https://github.com/kubernetes/kubernetes/pull/55931), [@andyzhangx](https://github.com/andyzhangx))
+* Upgrading the kubernetes-master units now results in staged upgrades just like the kubernetes-worker nodes. Use the upgrade action in order to continue the upgrade process on each unit such as `juju run-action kubernetes-master/0 upgrade` ([#55990](https://github.com/kubernetes/kubernetes/pull/55990), [@hyperbolic2346](https://github.com/hyperbolic2346))
+* Using ipset doing SNAT and packet filtering in IPVS kube-proxy ([#54219](https://github.com/kubernetes/kubernetes/pull/54219), [@m1093782566](https://github.com/m1093782566))
+* Add a new scheduling queue that helps schedule the highest priority pending pod first. ([#55109](https://github.com/kubernetes/kubernetes/pull/55109), [@bsalamat](https://github.com/bsalamat))
+* Adds to **kubeadm upgrade apply**, a new **--etcd-upgrade** keyword. When this keyword is specified, etcd's static pod gets upgraded to the etcd version officially recommended for a target kubernetes release. ([#55010](https://github.com/kubernetes/kubernetes/pull/55010), [@sbezverk](https://github.com/sbezverk))
+* Adding vishh as an reviewer/approver for hack directory ([#54007](https://github.com/kubernetes/kubernetes/pull/54007), [@vishh](https://github.com/vishh))
+* The `GenericAdmissionWebhook` is renamed as `ValidatingAdmissionWebhook`. Please update you apiserver configuration file to use the new name to pass to the apiserver's `--admission-control` flag. ([#55988](https://github.com/kubernetes/kubernetes/pull/55988), [@caesarxuchao](https://github.com/caesarxuchao))
+* iSCSI Persistent Volume Sources can now reference CHAP Secrets in namespaces other than the namespace of the bound Persistent Volume Claim ([#51530](https://github.com/kubernetes/kubernetes/pull/51530), [@rootfs](https://github.com/rootfs))
+* Bugfix: master startup script on GCP no longer fails randomly due to concurrent iptables invocations. ([#55945](https://github.com/kubernetes/kubernetes/pull/55945), [@x13n](https://github.com/x13n))
+* fix azure disk storage account init issue ([#55927](https://github.com/kubernetes/kubernetes/pull/55927), [@andyzhangx](https://github.com/andyzhangx))
+* Allow code-generator tags in the 2nd closest comment block and directly above a statement. ([#55233](https://github.com/kubernetes/kubernetes/pull/55233), [@sttts](https://github.com/sttts))
+* Ensure additional resource tags are set/updated AWS load balancers ([#55731](https://github.com/kubernetes/kubernetes/pull/55731), [@georgebuckerfield](https://github.com/georgebuckerfield))
+* `kubectl get` will now use OpenAPI schema extensions by default to select columns for custom types. ([#53483](https://github.com/kubernetes/kubernetes/pull/53483), [@apelisse](https://github.com/apelisse))
+* AWS: Apply taint to a node if volumes being attached to it are stuck in attaching state ([#55558](https://github.com/kubernetes/kubernetes/pull/55558), [@gnufied](https://github.com/gnufied))
+* Kubeadm now supports for Kubelet Dynamic Configuration. ([#55803](https://github.com/kubernetes/kubernetes/pull/55803), [@xiangpengzhao](https://github.com/xiangpengzhao))
+* Added mutation supports to admission webhooks. ([#54892](https://github.com/kubernetes/kubernetes/pull/54892), [@caesarxuchao](https://github.com/caesarxuchao))
+* Upgrade to go1.9.2 ([#55420](https://github.com/kubernetes/kubernetes/pull/55420), [@cblecker](https://github.com/cblecker))
+* If a non-absolute mountPath is passed to the kubelet, prefix it with the appropriate root path. ([#55665](https://github.com/kubernetes/kubernetes/pull/55665), [@brendandburns](https://github.com/brendandburns))
+* action-required: please update your admission webhook to use the latest [Admission API](https://github.com/kubernetes/api/tree/master/admission). ([#55829](https://github.com/kubernetes/kubernetes/pull/55829), [@cheftako](https://github.com/cheftako))
+ * `admission/v1alpha1#AdmissionReview` now contains `AdmissionRequest` and `AdmissionResponse`. `AdmissionResponse` includes a `Patch` field to allow mutating webhooks to send json patch to the apiserver.
+* support mount options in azure file ([#54674](https://github.com/kubernetes/kubernetes/pull/54674), [@andyzhangx](https://github.com/andyzhangx))
+* Support AWS ECR credentials in China ([#50108](https://github.com/kubernetes/kubernetes/pull/50108), [@zzq889](https://github.com/zzq889))
+* The EvictionHard, EvictionSoft, EvictionSoftGracePeriod, EvictionMinimumReclaim, SystemReserved, and KubeReserved fields in the KubeletConfiguration object (kubeletconfig/v1alpha1) are now of type map[string]string, which facilitates writing JSON and YAML files. ([#54823](https://github.com/kubernetes/kubernetes/pull/54823), [@mtaufen](https://github.com/mtaufen))
+* Added service annotation for AWS ELB SSL policy ([#54507](https://github.com/kubernetes/kubernetes/pull/54507), [@micahhausler](https://github.com/micahhausler))
+* Implement correction mechanism for dangling volumes attached for deleted pods ([#55491](https://github.com/kubernetes/kubernetes/pull/55491), [@gnufied](https://github.com/gnufied))
+* Promote validation for custom resources defined through CRD to beta ([#54647](https://github.com/kubernetes/kubernetes/pull/54647), [@colemickens](https://github.com/colemickens))
+* Octavia v2 now supported as a LB provider ([#55393](https://github.com/kubernetes/kubernetes/pull/55393), [@jamiehannaford](https://github.com/jamiehannaford))
+* Kubelet now exposes metrics for NVIDIA GPUs attached to the containers. ([#55188](https://github.com/kubernetes/kubernetes/pull/55188), [@mindprince](https://github.com/mindprince))
+* Addon manager supports HA masters. ([#55782](https://github.com/kubernetes/kubernetes/pull/55782), [@x13n](https://github.com/x13n))
+* Fix kubeadm reset crictl command ([#55717](https://github.com/kubernetes/kubernetes/pull/55717), [@runcom](https://github.com/runcom))
+* Fix code-generators to produce correct code when GroupName, PackageName and/or GoName differ. ([#55614](https://github.com/kubernetes/kubernetes/pull/55614), [@sttts](https://github.com/sttts))
+* Fixes bad conversion in host port chain name generating func which leads to some unreachable host ports. ([#55153](https://github.com/kubernetes/kubernetes/pull/55153), [@chenchun](https://github.com/chenchun))
+* Relative paths in the Kubelet's local config files (--init-config-dir) will be resolved relative to the location of the containing files. ([#55648](https://github.com/kubernetes/kubernetes/pull/55648), [@mtaufen](https://github.com/mtaufen))
+* kubeadm: Fix a bug on some OSes where the kubelet tried to mount a volume path that is non-existent and on a read-only filesystem ([#55320](https://github.com/kubernetes/kubernetes/pull/55320), [@andrewrynhard](https://github.com/andrewrynhard))
+* add hostIP and protocol to the original hostport predicates procedure in scheduler. ([#52421](https://github.com/kubernetes/kubernetes/pull/52421), [@WIZARD-CXY](https://github.com/WIZARD-CXY))
+
+
+
# v1.9.0-alpha.3
[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/master/examples)
diff --git a/vendor/k8s.io/kubernetes/Godeps/Godeps.json b/vendor/k8s.io/kubernetes/Godeps/Godeps.json
index fe43770a94fd..851e8d0588ee 100644
--- a/vendor/k8s.io/kubernetes/Godeps/Godeps.json
+++ b/vendor/k8s.io/kubernetes/Godeps/Godeps.json
@@ -106,7 +106,7 @@
},
{
"ImportPath": "github.com/Microsoft/go-winio",
- "Comment": "v0.4.4-7-g7843996",
+ "Comment": "v0.4.5",
"Rev": "78439966b38d69bf38227fbf57ac8a6fee70f69a"
},
{
@@ -487,32 +487,32 @@
},
{
"ImportPath": "github.com/containernetworking/cni/libcni",
- "Comment": "v0.6.0-rc1-6-ga7885cb",
+ "Comment": "v0.6.0",
"Rev": "a7885cb6f8ab03fba07852ded351e4f5e7a112bf"
},
{
"ImportPath": "github.com/containernetworking/cni/pkg/invoke",
- "Comment": "v0.6.0-rc1-6-ga7885cb",
+ "Comment": "v0.6.0",
"Rev": "a7885cb6f8ab03fba07852ded351e4f5e7a112bf"
},
{
"ImportPath": "github.com/containernetworking/cni/pkg/types",
- "Comment": "v0.6.0-rc1-6-ga7885cb",
+ "Comment": "v0.6.0",
"Rev": "a7885cb6f8ab03fba07852ded351e4f5e7a112bf"
},
{
"ImportPath": "github.com/containernetworking/cni/pkg/types/020",
- "Comment": "v0.6.0-rc1-6-ga7885cb",
+ "Comment": "v0.6.0",
"Rev": "a7885cb6f8ab03fba07852ded351e4f5e7a112bf"
},
{
"ImportPath": "github.com/containernetworking/cni/pkg/types/current",
- "Comment": "v0.6.0-rc1-6-ga7885cb",
+ "Comment": "v0.6.0",
"Rev": "a7885cb6f8ab03fba07852ded351e4f5e7a112bf"
},
{
"ImportPath": "github.com/containernetworking/cni/pkg/version",
- "Comment": "v0.6.0-rc1-6-ga7885cb",
+ "Comment": "v0.6.0",
"Rev": "a7885cb6f8ab03fba07852ded351e4f5e7a112bf"
},
{
@@ -907,167 +907,167 @@
},
{
"ImportPath": "github.com/docker/distribution/digestset",
- "Comment": "v2.6.0-rc.1-209-gedc3ab2",
+ "Comment": "v2.6.0-rc.1-209-gedc3ab29",
"Rev": "edc3ab29cdff8694dd6feb85cfeb4b5f1b38ed9c"
},
{
"ImportPath": "github.com/docker/distribution/reference",
- "Comment": "v2.6.0-rc.1-209-gedc3ab2",
+ "Comment": "v2.6.0-rc.1-209-gedc3ab29",
"Rev": "edc3ab29cdff8694dd6feb85cfeb4b5f1b38ed9c"
},
{
"ImportPath": "github.com/docker/docker/api",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/blkiodev",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/container",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/events",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/filters",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/image",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/mount",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/network",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/registry",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/strslice",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/swarm",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/swarm/runtime",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/time",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/versions",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/api/types/volume",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/client",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/pkg/ioutils",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/pkg/jsonlog",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/pkg/jsonmessage",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/pkg/longpath",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/pkg/mount",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/pkg/stdcopy",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/pkg/symlink",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/pkg/system",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/pkg/term",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/pkg/term/windows",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/docker/pkg/tlsconfig",
- "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616f",
+ "Comment": "docs-v1.12.0-rc4-2016-07-15-7401-g4f3616fb1",
"Rev": "4f3616fb1c112e206b88cb7a9922bf49067a7756"
},
{
"ImportPath": "github.com/docker/go-connections/nat",
- "Comment": "v0.2.1-30-g3ede32e",
+ "Comment": "v0.3.0",
"Rev": "3ede32e2033de7505e6500d6c868c2b9ed9f169d"
},
{
"ImportPath": "github.com/docker/go-connections/sockets",
- "Comment": "v0.2.1-30-g3ede32e",
+ "Comment": "v0.3.0",
"Rev": "3ede32e2033de7505e6500d6c868c2b9ed9f169d"
},
{
"ImportPath": "github.com/docker/go-connections/tlsconfig",
- "Comment": "v0.2.1-30-g3ede32e",
+ "Comment": "v0.3.0",
"Rev": "3ede32e2033de7505e6500d6c868c2b9ed9f169d"
},
{
@@ -1077,7 +1077,7 @@
},
{
"ImportPath": "github.com/docker/libnetwork/ipvs",
- "Comment": "v0.8.0-dev.2-910-gba46b92",
+ "Comment": "v0.8.0-dev.2-910-gba46b928",
"Rev": "ba46b928444931e6865d8618dc03622cac79aa6f"
},
{
@@ -1204,117 +1204,117 @@
},
{
"ImportPath": "github.com/gogo/protobuf/gogoproto",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/compare",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/defaultcheck",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/description",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/embedcheck",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/enumstringer",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/equal",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/face",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/gostring",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/marshalto",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/oneofcheck",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/populate",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/size",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/stringer",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/testgen",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/union",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/plugin/unmarshal",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/proto",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/protoc-gen-gogo/descriptor",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/protoc-gen-gogo/generator",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/protoc-gen-gogo/grpc",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/protoc-gen-gogo/plugin",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/sortkeys",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
@@ -1324,12 +1324,12 @@
},
{
"ImportPath": "github.com/gogo/protobuf/vanity",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
"ImportPath": "github.com/gogo/protobuf/vanity/command",
- "Comment": "v0.4-3-gc0656ed",
+ "Comment": "v0.4-3-gc0656edd",
"Rev": "c0656edd0d9eab7c66d1eb0c568f9039345796f7"
},
{
@@ -1382,218 +1382,218 @@
},
{
"ImportPath": "github.com/google/cadvisor/accelerators",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/api",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/cache/memory",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/client/v2",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/collector",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/container",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/container/common",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/container/containerd",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/container/crio",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/container/docker",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/container/libcontainer",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/container/raw",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/container/rkt",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/container/systemd",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/devicemapper",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/events",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/fs",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/healthz",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/http",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/http/mux",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/info/v1",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/info/v2",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/machine",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/manager",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/manager/watcher",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/manager/watcher/raw",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/manager/watcher/rkt",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/metrics",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/pages",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/pages/static",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/storage",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/summary",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/utils",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/utils/cloudinfo",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/utils/cpuload",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/utils/cpuload/netlink",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/utils/docker",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/utils/oomparser",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/utils/sysfs",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/utils/sysinfo",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/validate",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/version",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/cadvisor/zfs",
- "Comment": "v0.28.2",
- "Rev": "49440c7e0af98f96993e4d4b5777991f65091f23"
+ "Comment": "v0.28.3",
+ "Rev": "1e567c2ac359c3ed1303e0c80b6cf08edefc841d"
},
{
"ImportPath": "github.com/google/certificate-transparency/go",
@@ -1633,115 +1633,123 @@
},
{
"ImportPath": "github.com/gophercloud/gophercloud",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/blockstorage/extensions/volumeactions",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/blockstorage/v1/volumes",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/blockstorage/v2/volumes",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/blockstorage/v3/volumes",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/common/extensions",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/compute/v2/extensions/attachinterfaces",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/compute/v2/extensions/volumeattach",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/compute/v2/flavors",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/compute/v2/images",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/compute/v2/servers",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/identity/v2/tenants",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/identity/v2/tokens",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/identity/v3/extensions/trusts",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/identity/v3/tokens",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/extensions",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
+ },
+ {
+ "ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/external",
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/layer3/floatingips",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/layer3/routers",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/lbaas_v2/listeners",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/lbaas_v2/loadbalancers",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/lbaas_v2/monitors",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/lbaas_v2/pools",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/security/groups",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/security/rules",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
+ },
+ {
+ "ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/networks",
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/networking/v2/ports",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/openstack/utils",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gophercloud/gophercloud/pagination",
- "Rev": "db5f840b1d1a595280d643defc09ce277996959e"
+ "Rev": "8183543f90d1aef267a5ecc209f2e0715b355acb"
},
{
"ImportPath": "github.com/gorilla/context",
@@ -2243,77 +2251,77 @@
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/apparmor",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/cgroups",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/cgroups/fs",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/cgroups/rootless",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/cgroups/systemd",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/configs",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/configs/validate",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/criurpc",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/keys",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/seccomp",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/stacktrace",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/system",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/user",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
"ImportPath": "github.com/opencontainers/runc/libcontainer/utils",
- "Comment": "v1.0.0-rc4-50-g4d6e672",
+ "Comment": "v1.0.0-rc4-50-g4d6e6720",
"Rev": "4d6e6720a7c885c37b4cb083c0d372dda3425120"
},
{
diff --git a/vendor/k8s.io/kubernetes/Godeps/LICENSES b/vendor/k8s.io/kubernetes/Godeps/LICENSES
index 95d876a70f64..41b5664763fa 100644
--- a/vendor/k8s.io/kubernetes/Godeps/LICENSES
+++ b/vendor/k8s.io/kubernetes/Godeps/LICENSES
@@ -58330,6 +58330,205 @@ specific language governing permissions and limitations under the License.
================================================================================
+================================================================================
+= vendor/github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/external licensed under: =
+
+Copyright 2012-2013 Rackspace, Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may not use
+this file except in compliance with the License. You may obtain a copy of the
+License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed
+under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+CONDITIONS OF ANY KIND, either express or implied. See the License for the
+specific language governing permissions and limitations under the License.
+
+------
+
+ Apache License
+ Version 2.0, January 2004
+ http://www.apache.org/licenses/
+
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+ 1. Definitions.
+
+ "License" shall mean the terms and conditions for use, reproduction,
+ and distribution as defined by Sections 1 through 9 of this document.
+
+ "Licensor" shall mean the copyright owner or entity authorized by
+ the copyright owner that is granting the License.
+
+ "Legal Entity" shall mean the union of the acting entity and all
+ other entities that control, are controlled by, or are under common
+ control with that entity. For the purposes of this definition,
+ "control" means (i) the power, direct or indirect, to cause the
+ direction or management of such entity, whether by contract or
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
+ outstanding shares, or (iii) beneficial ownership of such entity.
+
+ "You" (or "Your") shall mean an individual or Legal Entity
+ exercising permissions granted by this License.
+
+ "Source" form shall mean the preferred form for making modifications,
+ including but not limited to software source code, documentation
+ source, and configuration files.
+
+ "Object" form shall mean any form resulting from mechanical
+ transformation or translation of a Source form, including but
+ not limited to compiled object code, generated documentation,
+ and conversions to other media types.
+
+ "Work" shall mean the work of authorship, whether in Source or
+ Object form, made available under the License, as indicated by a
+ copyright notice that is included in or attached to the work
+ (an example is provided in the Appendix below).
+
+ "Derivative Works" shall mean any work, whether in Source or Object
+ form, that is based on (or derived from) the Work and for which the
+ editorial revisions, annotations, elaborations, or other modifications
+ represent, as a whole, an original work of authorship. For the purposes
+ of this License, Derivative Works shall not include works that remain
+ separable from, or merely link (or bind by name) to the interfaces of,
+ the Work and Derivative Works thereof.
+
+ "Contribution" shall mean any work of authorship, including
+ the original version of the Work and any modifications or additions
+ to that Work or Derivative Works thereof, that is intentionally
+ submitted to Licensor for inclusion in the Work by the copyright owner
+ or by an individual or Legal Entity authorized to submit on behalf of
+ the copyright owner. For the purposes of this definition, "submitted"
+ means any form of electronic, verbal, or written communication sent
+ to the Licensor or its representatives, including but not limited to
+ communication on electronic mailing lists, source code control systems,
+ and issue tracking systems that are managed by, or on behalf of, the
+ Licensor for the purpose of discussing and improving the Work, but
+ excluding communication that is conspicuously marked or otherwise
+ designated in writing by the copyright owner as "Not a Contribution."
+
+ "Contributor" shall mean Licensor and any individual or Legal Entity
+ on behalf of whom a Contribution has been received by Licensor and
+ subsequently incorporated within the Work.
+
+ 2. Grant of Copyright License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ copyright license to reproduce, prepare Derivative Works of,
+ publicly display, publicly perform, sublicense, and distribute the
+ Work and such Derivative Works in Source or Object form.
+
+ 3. Grant of Patent License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ (except as stated in this section) patent license to make, have made,
+ use, offer to sell, sell, import, and otherwise transfer the Work,
+ where such license applies only to those patent claims licensable
+ by such Contributor that are necessarily infringed by their
+ Contribution(s) alone or by combination of their Contribution(s)
+ with the Work to which such Contribution(s) was submitted. If You
+ institute patent litigation against any entity (including a
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
+ or a Contribution incorporated within the Work constitutes direct
+ or contributory patent infringement, then any patent licenses
+ granted to You under this License for that Work shall terminate
+ as of the date such litigation is filed.
+
+ 4. Redistribution. You may reproduce and distribute copies of the
+ Work or Derivative Works thereof in any medium, with or without
+ modifications, and in Source or Object form, provided that You
+ meet the following conditions:
+
+ (a) You must give any other recipients of the Work or
+ Derivative Works a copy of this License; and
+
+ (b) You must cause any modified files to carry prominent notices
+ stating that You changed the files; and
+
+ (c) You must retain, in the Source form of any Derivative Works
+ that You distribute, all copyright, patent, trademark, and
+ attribution notices from the Source form of the Work,
+ excluding those notices that do not pertain to any part of
+ the Derivative Works; and
+
+ (d) If the Work includes a "NOTICE" text file as part of its
+ distribution, then any Derivative Works that You distribute must
+ include a readable copy of the attribution notices contained
+ within such NOTICE file, excluding those notices that do not
+ pertain to any part of the Derivative Works, in at least one
+ of the following places: within a NOTICE text file distributed
+ as part of the Derivative Works; within the Source form or
+ documentation, if provided along with the Derivative Works; or,
+ within a display generated by the Derivative Works, if and
+ wherever such third-party notices normally appear. The contents
+ of the NOTICE file are for informational purposes only and
+ do not modify the License. You may add Your own attribution
+ notices within Derivative Works that You distribute, alongside
+ or as an addendum to the NOTICE text from the Work, provided
+ that such additional attribution notices cannot be construed
+ as modifying the License.
+
+ You may add Your own copyright statement to Your modifications and
+ may provide additional or different license terms and conditions
+ for use, reproduction, or distribution of Your modifications, or
+ for any such Derivative Works as a whole, provided Your use,
+ reproduction, and distribution of the Work otherwise complies with
+ the conditions stated in this License.
+
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
+ any Contribution intentionally submitted for inclusion in the Work
+ by You to the Licensor shall be under the terms and conditions of
+ this License, without any additional terms or conditions.
+ Notwithstanding the above, nothing herein shall supersede or modify
+ the terms of any separate license agreement you may have executed
+ with Licensor regarding such Contributions.
+
+ 6. Trademarks. This License does not grant permission to use the trade
+ names, trademarks, service marks, or product names of the Licensor,
+ except as required for reasonable and customary use in describing the
+ origin of the Work and reproducing the content of the NOTICE file.
+
+ 7. Disclaimer of Warranty. Unless required by applicable law or
+ agreed to in writing, Licensor provides the Work (and each
+ Contributor provides its Contributions) on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+ implied, including, without limitation, any warranties or conditions
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+ PARTICULAR PURPOSE. You are solely responsible for determining the
+ appropriateness of using or redistributing the Work and assume any
+ risks associated with Your exercise of permissions under this License.
+
+ 8. Limitation of Liability. In no event and under no legal theory,
+ whether in tort (including negligence), contract, or otherwise,
+ unless required by applicable law (such as deliberate and grossly
+ negligent acts) or agreed to in writing, shall any Contributor be
+ liable to You for damages, including any direct, indirect, special,
+ incidental, or consequential damages of any character arising as a
+ result of this License or out of the use or inability to use the
+ Work (including but not limited to damages for loss of goodwill,
+ work stoppage, computer failure or malfunction, or any and all
+ other commercial damages or losses), even if such Contributor
+ has been advised of the possibility of such damages.
+
+ 9. Accepting Warranty or Additional Liability. While redistributing
+ the Work or Derivative Works thereof, You may choose to offer,
+ and charge a fee for, acceptance of support, warranty, indemnity,
+ or other liability obligations and/or rights consistent with this
+ License. However, in accepting such obligations, You may act only
+ on Your own behalf and on Your sole responsibility, not on behalf
+ of any other Contributor, and only if You agree to indemnify,
+ defend, and hold each Contributor harmless for any liability
+ incurred by, or claims asserted against, such Contributor by reason
+ of your accepting any such warranty or additional liability.
+
+ END OF TERMS AND CONDITIONS
+
+= vendor/github.com/gophercloud/gophercloud/LICENSE dd19699707373c2ca31531a659130416
+================================================================================
+
+
================================================================================
= vendor/github.com/gophercloud/gophercloud/openstack/networking/v2/extensions/layer3/floatingips licensed under: =
@@ -59922,6 +60121,205 @@ specific language governing permissions and limitations under the License.
================================================================================
+================================================================================
+= vendor/github.com/gophercloud/gophercloud/openstack/networking/v2/networks licensed under: =
+
+Copyright 2012-2013 Rackspace, Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may not use
+this file except in compliance with the License. You may obtain a copy of the
+License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed
+under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+CONDITIONS OF ANY KIND, either express or implied. See the License for the
+specific language governing permissions and limitations under the License.
+
+------
+
+ Apache License
+ Version 2.0, January 2004
+ http://www.apache.org/licenses/
+
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+ 1. Definitions.
+
+ "License" shall mean the terms and conditions for use, reproduction,
+ and distribution as defined by Sections 1 through 9 of this document.
+
+ "Licensor" shall mean the copyright owner or entity authorized by
+ the copyright owner that is granting the License.
+
+ "Legal Entity" shall mean the union of the acting entity and all
+ other entities that control, are controlled by, or are under common
+ control with that entity. For the purposes of this definition,
+ "control" means (i) the power, direct or indirect, to cause the
+ direction or management of such entity, whether by contract or
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
+ outstanding shares, or (iii) beneficial ownership of such entity.
+
+ "You" (or "Your") shall mean an individual or Legal Entity
+ exercising permissions granted by this License.
+
+ "Source" form shall mean the preferred form for making modifications,
+ including but not limited to software source code, documentation
+ source, and configuration files.
+
+ "Object" form shall mean any form resulting from mechanical
+ transformation or translation of a Source form, including but
+ not limited to compiled object code, generated documentation,
+ and conversions to other media types.
+
+ "Work" shall mean the work of authorship, whether in Source or
+ Object form, made available under the License, as indicated by a
+ copyright notice that is included in or attached to the work
+ (an example is provided in the Appendix below).
+
+ "Derivative Works" shall mean any work, whether in Source or Object
+ form, that is based on (or derived from) the Work and for which the
+ editorial revisions, annotations, elaborations, or other modifications
+ represent, as a whole, an original work of authorship. For the purposes
+ of this License, Derivative Works shall not include works that remain
+ separable from, or merely link (or bind by name) to the interfaces of,
+ the Work and Derivative Works thereof.
+
+ "Contribution" shall mean any work of authorship, including
+ the original version of the Work and any modifications or additions
+ to that Work or Derivative Works thereof, that is intentionally
+ submitted to Licensor for inclusion in the Work by the copyright owner
+ or by an individual or Legal Entity authorized to submit on behalf of
+ the copyright owner. For the purposes of this definition, "submitted"
+ means any form of electronic, verbal, or written communication sent
+ to the Licensor or its representatives, including but not limited to
+ communication on electronic mailing lists, source code control systems,
+ and issue tracking systems that are managed by, or on behalf of, the
+ Licensor for the purpose of discussing and improving the Work, but
+ excluding communication that is conspicuously marked or otherwise
+ designated in writing by the copyright owner as "Not a Contribution."
+
+ "Contributor" shall mean Licensor and any individual or Legal Entity
+ on behalf of whom a Contribution has been received by Licensor and
+ subsequently incorporated within the Work.
+
+ 2. Grant of Copyright License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ copyright license to reproduce, prepare Derivative Works of,
+ publicly display, publicly perform, sublicense, and distribute the
+ Work and such Derivative Works in Source or Object form.
+
+ 3. Grant of Patent License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ (except as stated in this section) patent license to make, have made,
+ use, offer to sell, sell, import, and otherwise transfer the Work,
+ where such license applies only to those patent claims licensable
+ by such Contributor that are necessarily infringed by their
+ Contribution(s) alone or by combination of their Contribution(s)
+ with the Work to which such Contribution(s) was submitted. If You
+ institute patent litigation against any entity (including a
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
+ or a Contribution incorporated within the Work constitutes direct
+ or contributory patent infringement, then any patent licenses
+ granted to You under this License for that Work shall terminate
+ as of the date such litigation is filed.
+
+ 4. Redistribution. You may reproduce and distribute copies of the
+ Work or Derivative Works thereof in any medium, with or without
+ modifications, and in Source or Object form, provided that You
+ meet the following conditions:
+
+ (a) You must give any other recipients of the Work or
+ Derivative Works a copy of this License; and
+
+ (b) You must cause any modified files to carry prominent notices
+ stating that You changed the files; and
+
+ (c) You must retain, in the Source form of any Derivative Works
+ that You distribute, all copyright, patent, trademark, and
+ attribution notices from the Source form of the Work,
+ excluding those notices that do not pertain to any part of
+ the Derivative Works; and
+
+ (d) If the Work includes a "NOTICE" text file as part of its
+ distribution, then any Derivative Works that You distribute must
+ include a readable copy of the attribution notices contained
+ within such NOTICE file, excluding those notices that do not
+ pertain to any part of the Derivative Works, in at least one
+ of the following places: within a NOTICE text file distributed
+ as part of the Derivative Works; within the Source form or
+ documentation, if provided along with the Derivative Works; or,
+ within a display generated by the Derivative Works, if and
+ wherever such third-party notices normally appear. The contents
+ of the NOTICE file are for informational purposes only and
+ do not modify the License. You may add Your own attribution
+ notices within Derivative Works that You distribute, alongside
+ or as an addendum to the NOTICE text from the Work, provided
+ that such additional attribution notices cannot be construed
+ as modifying the License.
+
+ You may add Your own copyright statement to Your modifications and
+ may provide additional or different license terms and conditions
+ for use, reproduction, or distribution of Your modifications, or
+ for any such Derivative Works as a whole, provided Your use,
+ reproduction, and distribution of the Work otherwise complies with
+ the conditions stated in this License.
+
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
+ any Contribution intentionally submitted for inclusion in the Work
+ by You to the Licensor shall be under the terms and conditions of
+ this License, without any additional terms or conditions.
+ Notwithstanding the above, nothing herein shall supersede or modify
+ the terms of any separate license agreement you may have executed
+ with Licensor regarding such Contributions.
+
+ 6. Trademarks. This License does not grant permission to use the trade
+ names, trademarks, service marks, or product names of the Licensor,
+ except as required for reasonable and customary use in describing the
+ origin of the Work and reproducing the content of the NOTICE file.
+
+ 7. Disclaimer of Warranty. Unless required by applicable law or
+ agreed to in writing, Licensor provides the Work (and each
+ Contributor provides its Contributions) on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+ implied, including, without limitation, any warranties or conditions
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+ PARTICULAR PURPOSE. You are solely responsible for determining the
+ appropriateness of using or redistributing the Work and assume any
+ risks associated with Your exercise of permissions under this License.
+
+ 8. Limitation of Liability. In no event and under no legal theory,
+ whether in tort (including negligence), contract, or otherwise,
+ unless required by applicable law (such as deliberate and grossly
+ negligent acts) or agreed to in writing, shall any Contributor be
+ liable to You for damages, including any direct, indirect, special,
+ incidental, or consequential damages of any character arising as a
+ result of this License or out of the use or inability to use the
+ Work (including but not limited to damages for loss of goodwill,
+ work stoppage, computer failure or malfunction, or any and all
+ other commercial damages or losses), even if such Contributor
+ has been advised of the possibility of such damages.
+
+ 9. Accepting Warranty or Additional Liability. While redistributing
+ the Work or Derivative Works thereof, You may choose to offer,
+ and charge a fee for, acceptance of support, warranty, indemnity,
+ or other liability obligations and/or rights consistent with this
+ License. However, in accepting such obligations, You may act only
+ on Your own behalf and on Your sole responsibility, not on behalf
+ of any other Contributor, and only if You agree to indemnify,
+ defend, and hold each Contributor harmless for any liability
+ incurred by, or claims asserted against, such Contributor by reason
+ of your accepting any such warranty or additional liability.
+
+ END OF TERMS AND CONDITIONS
+
+= vendor/github.com/gophercloud/gophercloud/LICENSE dd19699707373c2ca31531a659130416
+================================================================================
+
+
================================================================================
= vendor/github.com/gophercloud/gophercloud/openstack/networking/v2/ports licensed under: =
diff --git a/vendor/k8s.io/kubernetes/api/openapi-spec/swagger.json b/vendor/k8s.io/kubernetes/api/openapi-spec/swagger.json
index 7bde5cc5824d..c83bcfcf7417 100644
--- a/vendor/k8s.io/kubernetes/api/openapi-spec/swagger.json
+++ b/vendor/k8s.io/kubernetes/api/openapi-spec/swagger.json
@@ -2,7 +2,7 @@
"swagger": "2.0",
"info": {
"title": "Kubernetes",
- "version": "v1.9.0"
+ "version": "v1.9.1"
},
"paths": {
"/api/": {
@@ -71351,7 +71351,7 @@
}
},
"io.k8s.api.apps.v1beta2.ControllerRevision": {
- "description": "ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.",
+ "description": "DEPRECATED - This group version of ControllerRevision is deprecated by apps/v1/ControllerRevision. See the release notes for more information. ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.",
"required": [
"revision"
],
@@ -71421,7 +71421,7 @@
]
},
"io.k8s.api.apps.v1beta2.DaemonSet": {
- "description": "DaemonSet represents the configuration of a daemon set.",
+ "description": "DEPRECATED - This group version of DaemonSet is deprecated by apps/v1/DaemonSet. See the release notes for more information. DaemonSet represents the configuration of a daemon set.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
@@ -71625,7 +71625,7 @@
}
},
"io.k8s.api.apps.v1beta2.Deployment": {
- "description": "Deployment enables declarative updates for Pods and ReplicaSets.",
+ "description": "DEPRECATED - This group version of Deployment is deprecated by apps/v1/Deployment. See the release notes for more information. Deployment enables declarative updates for Pods and ReplicaSets.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
@@ -71831,7 +71831,7 @@
}
},
"io.k8s.api.apps.v1beta2.ReplicaSet": {
- "description": "ReplicaSet ensures that a specified number of pod replicas are running at any given time.",
+ "description": "DEPRECATED - This group version of ReplicaSet is deprecated by apps/v1/ReplicaSet. See the release notes for more information. ReplicaSet ensures that a specified number of pod replicas are running at any given time.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
@@ -72092,7 +72092,7 @@
}
},
"io.k8s.api.apps.v1beta2.StatefulSet": {
- "description": "StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.",
+ "description": "DEPRECATED - This group version of StatefulSet is deprecated by apps/v1/StatefulSet. See the release notes for more information. StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
@@ -75655,7 +75655,7 @@
}
},
"io.k8s.api.core.v1.FlexVolumeSource": {
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
@@ -77006,7 +77006,7 @@
"$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource"
},
"flexVolume": {
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"$ref": "#/definitions/io.k8s.api.core.v1.FlexVolumeSource"
},
"flocker": {
@@ -77377,11 +77377,11 @@
"x-kubernetes-patch-strategy": "merge"
},
"dnsConfig": {
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.",
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.",
"$ref": "#/definitions/io.k8s.api.core.v1.PodDNSConfig"
},
"dnsPolicy": {
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'.",
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.",
"type": "string"
},
"hostAliases": {
@@ -78895,7 +78895,7 @@
"$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource"
},
"flexVolume": {
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"$ref": "#/definitions/io.k8s.api.core.v1.FlexVolumeSource"
},
"flocker": {
@@ -79780,7 +79780,7 @@
}
},
"io.k8s.api.extensions.v1beta1.IPBlock": {
- "description": "IPBlock describes a particular CIDR (Ex. \"192.168.1.1/24\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.",
+ "description": "DEPRECATED 1.9 - This group version of IPBlock is deprecated by networking/v1/IPBlock. IPBlock describes a particular CIDR (Ex. \"192.168.1.1/24\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.",
"required": [
"cidr"
],
@@ -79942,7 +79942,7 @@
}
},
"io.k8s.api.extensions.v1beta1.NetworkPolicy": {
- "description": "NetworkPolicy describes what network traffic is allowed for a set of Pods",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicy is deprecated by networking/v1/NetworkPolicy. NetworkPolicy describes what network traffic is allowed for a set of Pods",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
@@ -79970,7 +79970,7 @@
]
},
"io.k8s.api.extensions.v1beta1.NetworkPolicyEgressRule": {
- "description": "NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyEgressRule is deprecated by networking/v1/NetworkPolicyEgressRule. NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8",
"properties": {
"ports": {
"description": "List of destination ports for outgoing traffic. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.",
@@ -79989,7 +79989,7 @@
}
},
"io.k8s.api.extensions.v1beta1.NetworkPolicyIngressRule": {
- "description": "This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyIngressRule is deprecated by networking/v1/NetworkPolicyIngressRule. This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.",
"properties": {
"from": {
"description": "List of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restricted by source). If this field is present and contains at least on item, this rule allows traffic only if the traffic matches at least one item in the from list.",
@@ -80008,7 +80008,7 @@
}
},
"io.k8s.api.extensions.v1beta1.NetworkPolicyList": {
- "description": "Network Policy List is a list of NetworkPolicy objects.",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyList is deprecated by networking/v1/NetworkPolicyList. Network Policy List is a list of NetworkPolicy objects.",
"required": [
"items"
],
@@ -80042,6 +80042,7 @@
]
},
"io.k8s.api.extensions.v1beta1.NetworkPolicyPeer": {
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyPeer is deprecated by networking/v1/NetworkPolicyPeer.",
"properties": {
"ipBlock": {
"description": "IPBlock defines policy on a particular IPBlock",
@@ -80058,6 +80059,7 @@
}
},
"io.k8s.api.extensions.v1beta1.NetworkPolicyPort": {
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyPort is deprecated by networking/v1/NetworkPolicyPort.",
"properties": {
"port": {
"description": "If specified, the port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.",
@@ -80070,6 +80072,7 @@
}
},
"io.k8s.api.extensions.v1beta1.NetworkPolicySpec": {
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicySpec is deprecated by networking/v1/NetworkPolicySpec.",
"required": [
"podSelector"
],
diff --git a/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1.json b/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1.json
index 4fff9f1831e8..8109d5910fb8 100644
--- a/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1.json
+++ b/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1.json
@@ -6652,7 +6652,7 @@
},
"dnsPolicy": {
"type": "string",
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
},
"nodeSelector": {
"type": "object",
@@ -6738,7 +6738,7 @@
},
"dnsConfig": {
"$ref": "v1.PodDNSConfig",
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy."
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
}
}
},
@@ -6799,7 +6799,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"cinder": {
"$ref": "v1.CinderVolumeSource",
@@ -7197,7 +7197,7 @@
},
"v1.FlexVolumeSource": {
"id": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
diff --git a/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1beta1.json b/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1beta1.json
index 0a9f4ce5c83f..e2533176f494 100644
--- a/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1beta1.json
+++ b/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1beta1.json
@@ -4286,7 +4286,7 @@
},
"dnsPolicy": {
"type": "string",
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
},
"nodeSelector": {
"type": "object",
@@ -4372,7 +4372,7 @@
},
"dnsConfig": {
"$ref": "v1.PodDNSConfig",
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy."
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
}
}
},
@@ -4433,7 +4433,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"cinder": {
"$ref": "v1.CinderVolumeSource",
@@ -4831,7 +4831,7 @@
},
"v1.FlexVolumeSource": {
"id": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
diff --git a/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1beta2.json b/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1beta2.json
index ce3a45788abd..be427887ae3c 100644
--- a/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1beta2.json
+++ b/vendor/k8s.io/kubernetes/api/swagger-spec/apps_v1beta2.json
@@ -6131,7 +6131,7 @@
},
"v1beta2.ControllerRevision": {
"id": "v1beta2.ControllerRevision",
- "description": "ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.",
+ "description": "DEPRECATED - This group version of ControllerRevision is deprecated by apps/v1/ControllerRevision. See the release notes for more information. ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.",
"required": [
"revision"
],
@@ -6496,7 +6496,7 @@
},
"v1beta2.DaemonSet": {
"id": "v1beta2.DaemonSet",
- "description": "DaemonSet represents the configuration of a daemon set.",
+ "description": "DEPRECATED - This group version of DaemonSet is deprecated by apps/v1/DaemonSet. See the release notes for more information. DaemonSet represents the configuration of a daemon set.",
"properties": {
"kind": {
"type": "string",
@@ -6652,7 +6652,7 @@
},
"dnsPolicy": {
"type": "string",
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
},
"nodeSelector": {
"type": "object",
@@ -6738,7 +6738,7 @@
},
"dnsConfig": {
"$ref": "v1.PodDNSConfig",
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy."
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
}
}
},
@@ -6799,7 +6799,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"cinder": {
"$ref": "v1.CinderVolumeSource",
@@ -7197,7 +7197,7 @@
},
"v1.FlexVolumeSource": {
"id": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
@@ -8799,7 +8799,7 @@
},
"v1beta2.Deployment": {
"id": "v1beta2.Deployment",
- "description": "Deployment enables declarative updates for Pods and ReplicaSets.",
+ "description": "DEPRECATED - This group version of Deployment is deprecated by apps/v1/Deployment. See the release notes for more information. Deployment enables declarative updates for Pods and ReplicaSets.",
"properties": {
"kind": {
"type": "string",
@@ -9068,7 +9068,7 @@
},
"v1beta2.ReplicaSet": {
"id": "v1beta2.ReplicaSet",
- "description": "ReplicaSet ensures that a specified number of pod replicas are running at any given time.",
+ "description": "DEPRECATED - This group version of ReplicaSet is deprecated by apps/v1/ReplicaSet. See the release notes for more information. ReplicaSet ensures that a specified number of pod replicas are running at any given time.",
"properties": {
"kind": {
"type": "string",
@@ -9218,7 +9218,7 @@
},
"v1beta2.StatefulSet": {
"id": "v1beta2.StatefulSet",
- "description": "StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.",
+ "description": "DEPRECATED - This group version of StatefulSet is deprecated by apps/v1/StatefulSet. See the release notes for more information. StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.",
"properties": {
"kind": {
"type": "string",
diff --git a/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v1.json b/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v1.json
index fd7f780ba2b9..28787d818893 100644
--- a/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v1.json
+++ b/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v1.json
@@ -1626,7 +1626,7 @@
},
"dnsPolicy": {
"type": "string",
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
},
"nodeSelector": {
"type": "object",
@@ -1712,7 +1712,7 @@
},
"dnsConfig": {
"$ref": "v1.PodDNSConfig",
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy."
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
}
}
},
@@ -1773,7 +1773,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"cinder": {
"$ref": "v1.CinderVolumeSource",
@@ -2171,7 +2171,7 @@
},
"v1.FlexVolumeSource": {
"id": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
diff --git a/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v1beta1.json b/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v1beta1.json
index de28cd79b110..bb9b870bda2b 100644
--- a/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v1beta1.json
+++ b/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v1beta1.json
@@ -1681,7 +1681,7 @@
},
"dnsPolicy": {
"type": "string",
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
},
"nodeSelector": {
"type": "object",
@@ -1767,7 +1767,7 @@
},
"dnsConfig": {
"$ref": "v1.PodDNSConfig",
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy."
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
}
}
},
@@ -1828,7 +1828,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"cinder": {
"$ref": "v1.CinderVolumeSource",
@@ -2226,7 +2226,7 @@
},
"v1.FlexVolumeSource": {
"id": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
diff --git a/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v2alpha1.json b/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v2alpha1.json
index 9c393fe9e84d..cde661970dd8 100644
--- a/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v2alpha1.json
+++ b/vendor/k8s.io/kubernetes/api/swagger-spec/batch_v2alpha1.json
@@ -1681,7 +1681,7 @@
},
"dnsPolicy": {
"type": "string",
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
},
"nodeSelector": {
"type": "object",
@@ -1767,7 +1767,7 @@
},
"dnsConfig": {
"$ref": "v1.PodDNSConfig",
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy."
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
}
}
},
@@ -1828,7 +1828,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"cinder": {
"$ref": "v1.CinderVolumeSource",
@@ -2226,7 +2226,7 @@
},
"v1.FlexVolumeSource": {
"id": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
diff --git a/vendor/k8s.io/kubernetes/api/swagger-spec/extensions_v1beta1.json b/vendor/k8s.io/kubernetes/api/swagger-spec/extensions_v1beta1.json
index c947a65449c3..d8b20a3fd980 100644
--- a/vendor/k8s.io/kubernetes/api/swagger-spec/extensions_v1beta1.json
+++ b/vendor/k8s.io/kubernetes/api/swagger-spec/extensions_v1beta1.json
@@ -7294,7 +7294,7 @@
},
"dnsPolicy": {
"type": "string",
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
},
"nodeSelector": {
"type": "object",
@@ -7380,7 +7380,7 @@
},
"dnsConfig": {
"$ref": "v1.PodDNSConfig",
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy."
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
}
}
},
@@ -7441,7 +7441,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"cinder": {
"$ref": "v1.CinderVolumeSource",
@@ -7839,7 +7839,7 @@
},
"v1.FlexVolumeSource": {
"id": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
@@ -9990,7 +9990,7 @@
},
"v1beta1.NetworkPolicyList": {
"id": "v1beta1.NetworkPolicyList",
- "description": "Network Policy List is a list of NetworkPolicy objects.",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyList is deprecated by networking/v1/NetworkPolicyList. Network Policy List is a list of NetworkPolicy objects.",
"required": [
"items"
],
@@ -10018,7 +10018,7 @@
},
"v1beta1.NetworkPolicy": {
"id": "v1beta1.NetworkPolicy",
- "description": "NetworkPolicy describes what network traffic is allowed for a set of Pods",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicy is deprecated by networking/v1/NetworkPolicy. NetworkPolicy describes what network traffic is allowed for a set of Pods",
"properties": {
"kind": {
"type": "string",
@@ -10040,6 +10040,7 @@
},
"v1beta1.NetworkPolicySpec": {
"id": "v1beta1.NetworkPolicySpec",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicySpec is deprecated by networking/v1/NetworkPolicySpec.",
"required": [
"podSelector"
],
@@ -10073,7 +10074,7 @@
},
"v1beta1.NetworkPolicyIngressRule": {
"id": "v1beta1.NetworkPolicyIngressRule",
- "description": "This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyIngressRule is deprecated by networking/v1/NetworkPolicyIngressRule. This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.",
"properties": {
"ports": {
"type": "array",
@@ -10093,6 +10094,7 @@
},
"v1beta1.NetworkPolicyPort": {
"id": "v1beta1.NetworkPolicyPort",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyPort is deprecated by networking/v1/NetworkPolicyPort.",
"properties": {
"protocol": {
"$ref": "v1.Protocol",
@@ -10110,6 +10112,7 @@
},
"v1beta1.NetworkPolicyPeer": {
"id": "v1beta1.NetworkPolicyPeer",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyPeer is deprecated by networking/v1/NetworkPolicyPeer.",
"properties": {
"podSelector": {
"$ref": "v1.LabelSelector",
@@ -10127,7 +10130,7 @@
},
"v1beta1.IPBlock": {
"id": "v1beta1.IPBlock",
- "description": "IPBlock describes a particular CIDR (Ex. \"192.168.1.1/24\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.",
+ "description": "DEPRECATED 1.9 - This group version of IPBlock is deprecated by networking/v1/IPBlock. IPBlock describes a particular CIDR (Ex. \"192.168.1.1/24\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.",
"required": [
"cidr"
],
@@ -10147,7 +10150,7 @@
},
"v1beta1.NetworkPolicyEgressRule": {
"id": "v1beta1.NetworkPolicyEgressRule",
- "description": "NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8",
+ "description": "DEPRECATED 1.9 - This group version of NetworkPolicyEgressRule is deprecated by networking/v1/NetworkPolicyEgressRule. NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8",
"properties": {
"ports": {
"type": "array",
diff --git a/vendor/k8s.io/kubernetes/api/swagger-spec/settings.k8s.io_v1alpha1.json b/vendor/k8s.io/kubernetes/api/swagger-spec/settings.k8s.io_v1alpha1.json
index 6167891529eb..dc442a8ebbe1 100644
--- a/vendor/k8s.io/kubernetes/api/swagger-spec/settings.k8s.io_v1alpha1.json
+++ b/vendor/k8s.io/kubernetes/api/swagger-spec/settings.k8s.io_v1alpha1.json
@@ -1615,7 +1615,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"cinder": {
"$ref": "v1.CinderVolumeSource",
@@ -2013,7 +2013,7 @@
},
"v1.FlexVolumeSource": {
"id": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
diff --git a/vendor/k8s.io/kubernetes/api/swagger-spec/v1.json b/vendor/k8s.io/kubernetes/api/swagger-spec/v1.json
index e102f99bd59c..97be62be175c 100644
--- a/vendor/k8s.io/kubernetes/api/swagger-spec/v1.json
+++ b/vendor/k8s.io/kubernetes/api/swagger-spec/v1.json
@@ -20607,7 +20607,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"azureFile": {
"$ref": "v1.AzureFilePersistentVolumeSource",
@@ -21022,7 +21022,7 @@
},
"v1.FlexVolumeSource": {
"id": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.",
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.",
"required": [
"driver"
],
@@ -21449,7 +21449,7 @@
},
"dnsPolicy": {
"type": "string",
- "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'."
+ "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'. Note that 'None' policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
},
"nodeSelector": {
"type": "object",
@@ -21535,7 +21535,7 @@
},
"dnsConfig": {
"$ref": "v1.PodDNSConfig",
- "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy."
+ "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it."
}
}
},
@@ -21596,7 +21596,7 @@
},
"flexVolume": {
"$ref": "v1.FlexVolumeSource",
- "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future."
+ "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin."
},
"cinder": {
"$ref": "v1.CinderVolumeSource",
diff --git a/vendor/k8s.io/kubernetes/build/debian-hyperkube-base/Dockerfile b/vendor/k8s.io/kubernetes/build/debian-hyperkube-base/Dockerfile
index 52f609ff2205..aeb62ce5683e 100644
--- a/vendor/k8s.io/kubernetes/build/debian-hyperkube-base/Dockerfile
+++ b/vendor/k8s.io/kubernetes/build/debian-hyperkube-base/Dockerfile
@@ -14,10 +14,13 @@
FROM BASEIMAGE
+RUN echo CACHEBUST>/dev/null && clean-install \
+ bash
+
# The samba-common, cifs-utils, and nfs-common packages depend on
-# ucf, which itself depends on /bin/bash existing.
-# It doesn't seem to actually need bash, however.
-RUN ln -s /bin/sh /bin/bash
+# ucf, which itself depends on /bin/bash.
+RUN echo "dash dash/sh boolean false" | debconf-set-selections
+RUN DEBIAN_FRONTEND=noninteractive dpkg-reconfigure dash
RUN echo CACHEBUST>/dev/null && clean-install \
ca-certificates \
diff --git a/vendor/k8s.io/kubernetes/build/debian-hyperkube-base/Makefile b/vendor/k8s.io/kubernetes/build/debian-hyperkube-base/Makefile
index 19e468a8fe5c..54ca29f7e9aa 100644
--- a/vendor/k8s.io/kubernetes/build/debian-hyperkube-base/Makefile
+++ b/vendor/k8s.io/kubernetes/build/debian-hyperkube-base/Makefile
@@ -19,7 +19,7 @@
REGISTRY?=gcr.io/google-containers
IMAGE?=debian-hyperkube-base
-TAG=0.7
+TAG=0.8
ARCH?=amd64
CACHEBUST?=1
diff --git a/vendor/k8s.io/kubernetes/build/root/WORKSPACE b/vendor/k8s.io/kubernetes/build/root/WORKSPACE
index 242e38f13ca3..7de0ffaf334e 100644
--- a/vendor/k8s.io/kubernetes/build/root/WORKSPACE
+++ b/vendor/k8s.io/kubernetes/build/root/WORKSPACE
@@ -88,10 +88,10 @@ docker_pull(
docker_pull(
name = "debian-hyperkube-base-amd64",
- digest = "sha256:1a05a58432254268c31ef5c8d9c21f3d01a40611b14707de6ac2772c0793bd13",
+ digest = "sha256:fc1b461367730660ac5a40c1eb2d1b23221829acf8a892981c12361383b3742b",
registry = "gcr.io",
repository = "google-containers/debian-hyperkube-base-amd64",
- tag = "0.7", # ignored, but kept here for documentation
+ tag = "0.8", # ignored, but kept here for documentation
)
docker_pull(
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/addon-manager/CHANGELOG.md b/vendor/k8s.io/kubernetes/cluster/addons/addon-manager/CHANGELOG.md
index 482fc767176d..2d3a6011b196 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/addon-manager/CHANGELOG.md
+++ b/vendor/k8s.io/kubernetes/cluster/addons/addon-manager/CHANGELOG.md
@@ -1,3 +1,6 @@
+### Version 8.4 (Thu November 30 2017 zou nengren @zouyee)
+ - Update kubectl to v1.8.4.
+
### Version 6.4-beta.2 (Mon June 12 2017 Jeff Grafton )
- Update kubectl to v1.6.4.
- Refresh base images.
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/addon-manager/Makefile b/vendor/k8s.io/kubernetes/cluster/addons/addon-manager/Makefile
index 01956102d88d..854cd4e2557a 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/addon-manager/Makefile
+++ b/vendor/k8s.io/kubernetes/cluster/addons/addon-manager/Makefile
@@ -15,8 +15,8 @@
IMAGE=gcr.io/google-containers/kube-addon-manager
ARCH?=amd64
TEMP_DIR:=$(shell mktemp -d)
-VERSION=v6.5
-KUBECTL_VERSION?=v1.6.4
+VERSION=v8.4
+KUBECTL_VERSION?=v1.8.4
ifeq ($(ARCH),amd64)
BASEIMAGE?=bashell/alpine-bash
@@ -40,7 +40,7 @@ all: build
build:
cp ./* $(TEMP_DIR)
- curl -sSL --retry 5 https://storage.googleapis.com/kubernetes-release/release/$(KUBECTL_VERSION)/bin/linux/$(ARCH)/kubectl > $(TEMP_DIR)/kubectl
+ curl -sSL --retry 5 https://dl.k8s.io/release/$(KUBECTL_VERSION)/bin/linux/$(ARCH)/kubectl > $(TEMP_DIR)/kubectl
chmod +x $(TEMP_DIR)/kubectl
cd $(TEMP_DIR) && sed -i.back "s|BASEIMAGE|$(BASEIMAGE)|g" Dockerfile
docker build --pull -t $(IMAGE)-$(ARCH):$(VERSION) $(TEMP_DIR)
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/google/heapster-controller.yaml b/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/google/heapster-controller.yaml
index 5d544fdce425..81b513281e60 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/google/heapster-controller.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/google/heapster-controller.yaml
@@ -20,32 +20,58 @@ metadata:
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: heapster-config
+ namespace: kube-system
+ labels:
+ kubernetes.io/cluster-service: "true"
+ addonmanager.kubernetes.io/mode: EnsureExists
+data:
+ NannyConfiguration: |-
+ apiVersion: nannyconfig/v1alpha1
+ kind: NannyConfiguration
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: eventer-config
+ namespace: kube-system
+ labels:
+ kubernetes.io/cluster-service: "true"
+ addonmanager.kubernetes.io/mode: EnsureExists
+data:
+ NannyConfiguration: |-
+ apiVersion: nannyconfig/v1alpha1
+ kind: NannyConfiguration
+---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
- name: heapster-v1.5.0-beta.2
+ name: heapster-v1.5.0
namespace: kube-system
labels:
k8s-app: heapster
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
- version: v1.5.0-beta.2
+ version: v1.5.0
spec:
replicas: 1
selector:
matchLabels:
k8s-app: heapster
- version: v1.5.0-beta.2
+ version: v1.5.0
template:
metadata:
labels:
k8s-app: heapster
- version: v1.5.0-beta.2
+ version: v1.5.0
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
containers:
- - image: gcr.io/google_containers/heapster-amd64:v1.5.0-beta.2
+ - image: gcr.io/google_containers/heapster-amd64:v1.5.0
name: heapster
livenessProbe:
httpGet:
@@ -58,13 +84,13 @@ spec:
- /heapster
- --source=kubernetes.summary_api:''
- --sink=gcm
- - image: gcr.io/google_containers/heapster-amd64:v1.5.0-beta.2
+ - image: gcr.io/google_containers/heapster-amd64:v1.5.0
name: eventer
command:
- /eventer
- --source=kubernetes:''
- --sink=gcl
- - image: gcr.io/google_containers/addon-resizer:1.7
+ - image: gcr.io/google_containers/addon-resizer:1.8.1
name: heapster-nanny
resources:
limits:
@@ -73,6 +99,9 @@ spec:
requests:
cpu: 50m
memory: {{ nanny_memory }}
+ volumeMounts:
+ - name: heapster-config-volume
+ mountMath: /etc/config
env:
- name: MY_POD_NAME
valueFrom:
@@ -84,16 +113,17 @@ spec:
fieldPath: metadata.namespace
command:
- /pod_nanny
+ - --config-dir=/etc/config
- --cpu={{ base_metrics_cpu }}
- --extra-cpu={{ metrics_cpu_per_node }}m
- --memory={{ base_metrics_memory }}
- --extra-memory={{metrics_memory_per_node}}Mi
- --threshold=5
- - --deployment=heapster-v1.5.0-beta.2
+ - --deployment=heapster-v1.5.0
- --container=heapster
- --poll-period=300000
- --estimator=exponential
- - image: gcr.io/google_containers/addon-resizer:1.7
+ - image: gcr.io/google_containers/addon-resizer:1.8.1
name: eventer-nanny
resources:
limits:
@@ -111,17 +141,29 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
+ volumeMounts:
+ - name: eventer-config-volume
+ mountMath: /etc/config
command:
- /pod_nanny
+ - --config-dir=/etc/config
- --cpu=100m
- --extra-cpu=0m
- --memory={{base_eventer_memory}}
- --extra-memory={{eventer_memory_per_node}}Ki
- --threshold=5
- - --deployment=heapster-v1.5.0-beta.2
+ - --deployment=heapster-v1.5.0
- --container=eventer
- --poll-period=300000
- --estimator=exponential
+ volumes:
+ - name: heapster-config-volume
+ configMap:
+ name: heapster-config
+ volumes:
+ - name: eventer-config-volume
+ configMap:
+ name: eventer-config
serviceAccountName: heapster
tolerations:
- key: "CriticalAddonsOnly"
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/googleinfluxdb/heapster-controller-combined.yaml b/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/googleinfluxdb/heapster-controller-combined.yaml
index 48733744266d..6896fccc232d 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/googleinfluxdb/heapster-controller-combined.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/googleinfluxdb/heapster-controller-combined.yaml
@@ -20,32 +20,58 @@ metadata:
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: heapster-config
+ namespace: kube-system
+ labels:
+ kubernetes.io/cluster-service: "true"
+ addonmanager.kubernetes.io/mode: EnsureExists
+data:
+ NannyConfiguration: |-
+ apiVersion: nannyconfig/v1alpha1
+ kind: NannyConfiguration
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: eventer-config
+ namespace: kube-system
+ labels:
+ kubernetes.io/cluster-service: "true"
+ addonmanager.kubernetes.io/mode: EnsureExists
+data:
+ NannyConfiguration: |-
+ apiVersion: nannyconfig/v1alpha1
+ kind: NannyConfiguration
+---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
- name: heapster-v1.5.0-beta.2
+ name: heapster-v1.5.0
namespace: kube-system
labels:
k8s-app: heapster
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
- version: v1.5.0-beta.2
+ version: v1.5.0
spec:
replicas: 1
selector:
matchLabels:
k8s-app: heapster
- version: v1.5.0-beta.2
+ version: v1.5.0
template:
metadata:
labels:
k8s-app: heapster
- version: v1.5.0-beta.2
+ version: v1.5.0
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
containers:
- - image: gcr.io/google_containers/heapster-amd64:v1.5.0-beta.2
+ - image: gcr.io/google_containers/heapster-amd64:v1.5.0
name: heapster
livenessProbe:
@@ -60,13 +86,13 @@ spec:
- --source=kubernetes.summary_api:''
- --sink=influxdb:http://monitoring-influxdb:8086
- --sink=gcm:?metrics=autoscaling
- - image: gcr.io/google_containers/heapster-amd64:v1.5.0-beta.2
+ - image: gcr.io/google_containers/heapster-amd64:v1.5.0
name: eventer
command:
- /eventer
- --source=kubernetes:''
- --sink=gcl
- - image: gcr.io/google_containers/addon-resizer:1.7
+ - image: gcr.io/google_containers/addon-resizer:1.8.1
name: heapster-nanny
resources:
limits:
@@ -75,6 +101,9 @@ spec:
requests:
cpu: 50m
memory: {{ nanny_memory }}
+ volumeMounts:
+ - name: heapster-config-volume
+ mountPath: /etc/config
env:
- name: MY_POD_NAME
valueFrom:
@@ -86,16 +115,17 @@ spec:
fieldPath: metadata.namespace
command:
- /pod_nanny
+ - --config-dir=/etc/config
- --cpu={{ base_metrics_cpu }}
- --extra-cpu={{ metrics_cpu_per_node }}m
- --memory={{ base_metrics_memory }}
- --extra-memory={{ metrics_memory_per_node }}Mi
- --threshold=5
- - --deployment=heapster-v1.5.0-beta.2
+ - --deployment=heapster-v1.5.0
- --container=heapster
- --poll-period=300000
- --estimator=exponential
- - image: gcr.io/google_containers/addon-resizer:1.7
+ - image: gcr.io/google_containers/addon-resizer:1.8.1
name: eventer-nanny
resources:
limits:
@@ -104,6 +134,9 @@ spec:
requests:
cpu: 50m
memory: {{ nanny_memory }}
+ volumeMounts:
+ - name: eventer-config-volume
+ mountPath: /etc/config
env:
- name: MY_POD_NAME
valueFrom:
@@ -115,15 +148,23 @@ spec:
fieldPath: metadata.namespace
command:
- /pod_nanny
+ - --config-dir=/etc/config
- --cpu=100m
- --extra-cpu=0m
- --memory={{ base_eventer_memory }}
- --extra-memory={{ eventer_memory_per_node }}Ki
- --threshold=5
- - --deployment=heapster-v1.5.0-beta.2
+ - --deployment=heapster-v1.5.0
- --container=eventer
- --poll-period=300000
- --estimator=exponential
+ volumes:
+ - name: heapster-config-volume
+ configMap:
+ name: heapster-config
+ - name: eventer-config-volume
+ configMap:
+ name: eventer-config
serviceAccountName: heapster
tolerations:
- key: "CriticalAddonsOnly"
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/influxdb/heapster-controller.yaml b/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/influxdb/heapster-controller.yaml
index 3073caeefe7a..2c389a340b86 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/influxdb/heapster-controller.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/influxdb/heapster-controller.yaml
@@ -20,32 +20,58 @@ metadata:
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: heapster-config
+ namespace: kube-system
+ labels:
+ kubernetes.io/cluster-service: "true"
+ addonmanager.kubernetes.io/mode: EnsureExists
+data:
+ NannyConfiguration: |-
+ apiVersion: nannyconfig/v1alpha1
+ kind: NannyConfiguration
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: eventer-config
+ namespace: kube-system
+ labels:
+ kubernetes.io/cluster-service: "true"
+ addonmanager.kubernetes.io/mode: EnsureExists
+data:
+ NannyConfiguration: |-
+ apiVersion: nannyconfig/v1alpha1
+ kind: NannyConfiguration
+---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
- name: heapster-v1.5.0-beta.2
+ name: heapster-v1.5.0
namespace: kube-system
labels:
k8s-app: heapster
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
- version: v1.5.0-beta.2
+ version: v1.5.0
spec:
replicas: 1
selector:
matchLabels:
k8s-app: heapster
- version: v1.5.0-beta.2
+ version: v1.5.0
template:
metadata:
labels:
k8s-app: heapster
- version: v1.5.0-beta.2
+ version: v1.5.0
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
containers:
- - image: gcr.io/google_containers/heapster-amd64:v1.5.0-beta.2
+ - image: gcr.io/google_containers/heapster-amd64:v1.5.0
name: heapster
livenessProbe:
httpGet:
@@ -58,13 +84,13 @@ spec:
- /heapster
- --source=kubernetes.summary_api:''
- --sink=influxdb:http://monitoring-influxdb:8086
- - image: gcr.io/google_containers/heapster-amd64:v1.5.0-beta.2
+ - image: gcr.io/google_containers/heapster-amd64:v1.5.0
name: eventer
command:
- /eventer
- --source=kubernetes:''
- --sink=influxdb:http://monitoring-influxdb:8086
- - image: gcr.io/google_containers/addon-resizer:1.7
+ - image: gcr.io/google_containers/addon-resizer:1.8.1
name: heapster-nanny
resources:
limits:
@@ -82,18 +108,22 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
+ volumeMounts:
+ - name: heapster-config-volume
+ mountPath: /etc/config
command:
- /pod_nanny
+ - --config-dir=/etc/config
- --cpu={{ base_metrics_cpu }}
- --extra-cpu={{ metrics_cpu_per_node }}m
- --memory={{ base_metrics_memory }}
- --extra-memory={{ metrics_memory_per_node }}Mi
- --threshold=5
- - --deployment=heapster-v1.5.0-beta.2
+ - --deployment=heapster-v1.5.0
- --container=heapster
- --poll-period=300000
- --estimator=exponential
- - image: gcr.io/google_containers/addon-resizer:1.7
+ - image: gcr.io/google_containers/addon-resizer:1.8.1
name: eventer-nanny
resources:
limits:
@@ -111,17 +141,28 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
+ volumeMounts:
+ - name: eventer-config-volume
+ mountPath: /etc/config
command:
- /pod_nanny
+ - --config-dir=/etc/config
- --cpu=100m
- --extra-cpu=0m
- --memory={{ base_eventer_memory }}
- --extra-memory={{ eventer_memory_per_node }}Ki
- --threshold=5
- - --deployment=heapster-v1.5.0-beta.2
+ - --deployment=heapster-v1.5.0
- --container=eventer
- --poll-period=300000
- --estimator=exponential
+ volumes:
+ - name: heapster-config-volume
+ configMap:
+ name: heapster-config
+ - name: eventer-config-volume
+ configMap:
+ name: eventer-config
serviceAccountName: heapster
tolerations:
- key: "CriticalAddonsOnly"
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/stackdriver/heapster-controller.yaml b/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/stackdriver/heapster-controller.yaml
index 9df3588254ed..85e8383adf81 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/stackdriver/heapster-controller.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/stackdriver/heapster-controller.yaml
@@ -18,32 +18,45 @@ metadata:
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: heapster-config
+ namespace: kube-system
+ labels:
+ kubernetes.io/cluster-service: "true"
+ addonmanager.kubernetes.io/mode: EnsureExists
+data:
+ NannyConfiguration: |-
+ apiVersion: nannyconfig/v1alpha1
+ kind: NannyConfiguration
+---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
- name: heapster-v1.5.0-beta.2
+ name: heapster-v1.5.0
namespace: kube-system
labels:
k8s-app: heapster
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
- version: v1.5.0-beta.2
+ version: v1.5.0
spec:
replicas: 1
selector:
matchLabels:
k8s-app: heapster
- version: v1.5.0-beta.2
+ version: v1.5.0
template:
metadata:
labels:
k8s-app: heapster
- version: v1.5.0-beta.2
+ version: v1.5.0
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
containers:
- - image: gcr.io/google_containers/heapster-amd64:v1.5.0-beta.2
+ - image: gcr.io/google_containers/heapster-amd64:v1.5.0
name: heapster
livenessProbe:
httpGet:
@@ -76,7 +89,7 @@ spec:
fieldRef:
fieldPath: metadata.namespace
# END_PROMETHEUS_TO_SD
- - image: gcr.io/google_containers/addon-resizer:1.7
+ - image: gcr.io/google_containers/addon-resizer:1.8.1
name: heapster-nanny
resources:
limits:
@@ -85,6 +98,9 @@ spec:
requests:
cpu: 50m
memory: {{ nanny_memory }}
+ volumeMounts:
+ - name: heapster-config-volume
+ mountPath: /etc/config
env:
- name: MY_POD_NAME
valueFrom:
@@ -96,15 +112,20 @@ spec:
fieldPath: metadata.namespace
command:
- /pod_nanny
+ - --config-dir=/etc/config
- --cpu={{ base_metrics_cpu }}
- --extra-cpu={{ metrics_cpu_per_node }}m
- --memory={{ base_metrics_memory }}
- --extra-memory={{metrics_memory_per_node}}Mi
- --threshold=5
- - --deployment=heapster-v1.5.0-beta.2
+ - --deployment=heapster-v1.5.0
- --container=heapster
- --poll-period=300000
- --estimator=exponential
+ volumes:
+ - name: heapster-config-volume
+ configMap:
+ name: heapster-config
serviceAccountName: heapster
tolerations:
- key: "CriticalAddonsOnly"
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/standalone/heapster-controller.yaml b/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/standalone/heapster-controller.yaml
index 64bb198e9a86..f82d1b70f22f 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/standalone/heapster-controller.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/cluster-monitoring/standalone/heapster-controller.yaml
@@ -18,32 +18,45 @@ metadata:
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: heapster-config
+ namespace: kube-system
+ labels:
+ kubernetes.io/cluster-service: "true"
+ addonmanager.kubernetes.io/mode: EnsureExists
+data:
+ NannyConfiguration: |-
+ apiVersion: nannyconfig/v1alpha1
+ kind: NannyConfiguration
+---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
- name: heapster-v1.5.0-beta.2
+ name: heapster-v1.5.0
namespace: kube-system
labels:
k8s-app: heapster
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
- version: v1.5.0-beta.2
+ version: v1.5.0
spec:
replicas: 1
selector:
matchLabels:
k8s-app: heapster
- version: v1.5.0-beta.2
+ version: v1.5.0
template:
metadata:
labels:
k8s-app: heapster
- version: v1.5.0-beta.2
+ version: v1.5.0
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
containers:
- - image: gcr.io/google_containers/heapster-amd64:v1.5.0-beta.2
+ - image: gcr.io/google_containers/heapster-amd64:v1.5.0
name: heapster
livenessProbe:
httpGet:
@@ -55,7 +68,7 @@ spec:
command:
- /heapster
- --source=kubernetes.summary_api:''
- - image: gcr.io/google_containers/addon-resizer:1.7
+ - image: gcr.io/google_containers/addon-resizer:1.8.1
name: heapster-nanny
resources:
limits:
@@ -73,17 +86,25 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
+ volumeMounts:
+ - name: heapster-config-volume
+ mountPath: /etc/config
command:
- /pod_nanny
+ - --config-dir=/etc/config
- --cpu={{ base_metrics_cpu }}
- --extra-cpu={{ metrics_cpu_per_node }}m
- --memory={{ base_metrics_memory }}
- --extra-memory={{ metrics_memory_per_node }}Mi
- --threshold=5
- - --deployment=heapster-v1.5.0-beta.2
+ - --deployment=heapster-v1.5.0
- --container=heapster
- --poll-period=300000
- --estimator=exponential
+ volumes:
+ - name: heapster-config-volume
+ configMap:
+ name: heapster-config
serviceAccountName: heapster
tolerations:
- key: "CriticalAddonsOnly"
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/dashboard/README.md b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/README.md
index 9a798ec39ffe..b3c2c582fc9f 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/dashboard/README.md
+++ b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/README.md
@@ -1,5 +1,4 @@
# Kubernetes Dashboard
-==============
Kubernetes Dashboard is a general purpose, web-based UI for Kubernetes clusters.
It allows users to manage applications running in the cluster, troubleshoot them,
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-configmap.yaml b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-configmap.yaml
new file mode 100644
index 000000000000..8aa6ac47db0d
--- /dev/null
+++ b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-configmap.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ labels:
+ k8s-app: kubernetes-dashboard
+ # Allows editing resource and makes sure it is created first.
+ addonmanager.kubernetes.io/mode: EnsureExists
+ name: kubernetes-dashboard-settings
+ namespace: kube-system
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-controller.yaml b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-controller.yaml
index 515355b0700d..59bf7c4daf88 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-controller.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-controller.yaml
@@ -1,4 +1,13 @@
-apiVersion: extensions/v1beta1
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels:
+ k8s-app: kubernetes-dashboard
+ addonmanager.kubernetes.io/mode: Reconcile
+ name: kubernetes-dashboard
+ namespace: kube-system
+---
+apiVersion: apps/v1beta2
kind: Deployment
metadata:
name: kubernetes-dashboard
@@ -20,23 +29,38 @@ spec:
spec:
containers:
- name: kubernetes-dashboard
- image: gcr.io/google_containers/kubernetes-dashboard-amd64:v1.6.3
+ image: gcr.io/google_containers/kubernetes-dashboard-amd64:v1.8.0
resources:
- # keep request = limit to keep this container in guaranteed class
limits:
cpu: 100m
memory: 300Mi
requests:
- cpu: 100m
+ cpu: 50m
memory: 100Mi
ports:
- - containerPort: 9090
+ - containerPort: 8443
+ protocol: TCP
+ args:
+ - --auto-generate-certificates
+ volumeMounts:
+ - name: kubernetes-dashboard-certs
+ mountPath: /certs
+ - name: tmp-volume
+ mountPath: /tmp
livenessProbe:
httpGet:
+ scheme: HTTPS
path: /
- port: 9090
+ port: 8443
initialDelaySeconds: 30
timeoutSeconds: 30
+ volumes:
+ - name: kubernetes-dashboard-certs
+ secret:
+ secretName: kubernetes-dashboard-certs
+ - name: tmp-volume
+ emptyDir: {}
+ serviceAccountName: kubernetes-dashboard
tolerations:
- key: "CriticalAddonsOnly"
operator: "Exists"
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-rbac.yaml b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-rbac.yaml
new file mode 100644
index 000000000000..658ffd94861d
--- /dev/null
+++ b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-rbac.yaml
@@ -0,0 +1,45 @@
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ labels:
+ k8s-app: kubernetes-dashboard
+ addonmanager.kubernetes.io/mode: Reconcile
+ name: kubernetes-dashboard-minimal
+ namespace: kube-system
+rules:
+ # Allow Dashboard to create 'kubernetes-dashboard-key-holder' secret.
+- apiGroups: [""]
+ resources: ["secrets"]
+ verbs: ["create"]
+ # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
+- apiGroups: [""]
+ resources: ["secrets"]
+ resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs"]
+ verbs: ["get", "update", "delete"]
+ # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
+- apiGroups: [""]
+ resources: ["configmaps"]
+ resourceNames: ["kubernetes-dashboard-settings"]
+ verbs: ["get", "update"]
+ # Allow Dashboard to get metrics from heapster.
+- apiGroups: [""]
+ resources: ["services"]
+ resourceNames: ["heapster"]
+ verbs: ["proxy"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: kubernetes-dashboard-minimal
+ namespace: kube-system
+ labels:
+ k8s-app: kubernetes-dashboard
+ addonmanager.kubernetes.io/mode: Reconcile
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: kubernetes-dashboard-minimal
+subjects:
+- kind: ServiceAccount
+ name: kubernetes-dashboard
+ namespace: kube-system
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-secret.yaml b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-secret.yaml
new file mode 100644
index 000000000000..f26235bec3bc
--- /dev/null
+++ b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-secret.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+ labels:
+ k8s-app: kubernetes-dashboard
+ # Allows editing resource and makes sure it is created first.
+ addonmanager.kubernetes.io/mode: EnsureExists
+ name: kubernetes-dashboard-certs
+ namespace: kube-system
+type: Opaque
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-service.yaml b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-service.yaml
index 831248a97d75..ae65ec232b33 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-service.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/dashboard/dashboard-service.yaml
@@ -11,5 +11,5 @@ spec:
selector:
k8s-app: kubernetes-dashboard
ports:
- - port: 80
- targetPort: 9090
+ - port: 443
+ targetPort: 8443
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/device-plugins/nvidia-gpu/daemonset.yaml b/vendor/k8s.io/kubernetes/cluster/addons/device-plugins/nvidia-gpu/daemonset.yaml
index 6b5edbf733db..5b157548c199 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/device-plugins/nvidia-gpu/daemonset.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/device-plugins/nvidia-gpu/daemonset.yaml
@@ -22,6 +22,10 @@ spec:
- matchExpressions:
- key: cloud.google.com/gke-accelerator
operator: Exists
+ tolerations:
+ - key: "nvidia.com/gpu"
+ effect: "NoSchedule"
+ operator: "Exists"
hostNetwork: true
hostPID: true
volumes:
@@ -32,7 +36,7 @@ spec:
hostPath:
path: /dev
containers:
- - image: "gcr.io/google-containers/nvidia-gpu-device-plugin@sha256:943a62949cd80c26e7371d4e123dac61b4cc7281390721aaa95f265171094842"
+ - image: "gcr.io/google-containers/nvidia-gpu-device-plugin@sha256:0e79da6998a61257585e0d3fb5848240129f0fa5b4ad972dfed4049448093c33"
command: ["/usr/bin/nvidia-gpu-device-plugin", "-logtostderr"]
name: nvidia-gpu-device-plugin
resources:
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.base b/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.base
index 4976ac09a6ff..533a4f02af14 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.base
+++ b/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.base
@@ -57,9 +57,11 @@ data:
Corefile: |
.:53 {
errors
- log stdout
+ log
health
- kubernetes __PILLAR__DNS__DOMAIN__ __PILLAR__CLUSTER_CIDR__
+ kubernetes __PILLAR__DNS__DOMAIN__ __PILLAR__CLUSTER_CIDR__ {
+ pods insecure
+ }
prometheus
proxy . /etc/resolv.conf
cache 30
@@ -93,7 +95,7 @@ spec:
operator: "Exists"
containers:
- name: coredns
- image: coredns/coredns:0.9.10
+ image: coredns/coredns:1.0.1
imagePullPolicy: IfNotPresent
resources:
limits:
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.in b/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.in
index d2eb1b357965..e56084a3cc99 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.in
+++ b/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.in
@@ -57,9 +57,11 @@ data:
Corefile: |
.:53 {
errors
- log stdout
+ log
health
- kubernetes {{ pillar['dns_domain'] }} {{ pillar['service_cluster_ip_range'] }}
+ kubernetes {{ pillar['dns_domain'] }} {{ pillar['service_cluster_ip_range'] }} {
+ pods insecure
+ }
prometheus
proxy . /etc/resolv.conf
cache 30
@@ -93,7 +95,7 @@ spec:
operator: "Exists"
containers:
- name: coredns
- image: coredns/coredns:0.9.10
+ image: coredns/coredns:1.0.1
imagePullPolicy: IfNotPresent
resources:
limits:
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.sed b/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.sed
index 329ad6ca23fe..4ec582f2edd0 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.sed
+++ b/vendor/k8s.io/kubernetes/cluster/addons/dns/coredns.yaml.sed
@@ -57,9 +57,11 @@ data:
Corefile: |
.:53 {
errors
- log stdout
+ log
health
- kubernetes $DNS_DOMAIN $SERVICE_CLUSTER_IP_RANGE
+ kubernetes $DNS_DOMAIN $SERVICE_CLUSTER_IP_RANGE {
+ pods insecure
+ }
prometheus
proxy . /etc/resolv.conf
cache 30
@@ -93,7 +95,7 @@ spec:
operator: "Exists"
containers:
- name: coredns
- image: coredns/coredns:0.9.10
+ image: coredns/coredns:1.0.1
imagePullPolicy: IfNotPresent
resources:
limits:
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/fluentd-gcp/fluentd-gcp-ds.yaml b/vendor/k8s.io/kubernetes/cluster/addons/fluentd-gcp/fluentd-gcp-ds.yaml
index 69021f4263ce..7f6a47deb4be 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/fluentd-gcp/fluentd-gcp-ds.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/fluentd-gcp/fluentd-gcp-ds.yaml
@@ -107,7 +107,6 @@ spec:
effect: "NoSchedule"
- operator: "Exists"
effect: "NoExecute"
- #TODO: remove this toleration once #44445 is properly fixed.
- operator: "Exists"
effect: "NoSchedule"
terminationGracePeriodSeconds: 30
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/kube-proxy/kube-proxy-ds.yaml b/vendor/k8s.io/kubernetes/cluster/addons/kube-proxy/kube-proxy-ds.yaml
index 479c6eeb0236..2134e875fba3 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/kube-proxy/kube-proxy-ds.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/kube-proxy/kube-proxy-ds.yaml
@@ -28,6 +28,11 @@ spec:
hostNetwork: true
nodeSelector:
beta.kubernetes.io/kube-proxy-ds-ready: "true"
+ tolerations:
+ - operator: "Exists"
+ effect: "NoExecute"
+ - operator: "Exists"
+ effect: "NoSchedule"
containers:
- name: kube-proxy
image: {{pillar['kube_docker_registry']}}/kube-proxy:{{pillar['kube-proxy_docker_tag']}}
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/metadata-agent/stackdriver/metadata-agent.yaml b/vendor/k8s.io/kubernetes/cluster/addons/metadata-agent/stackdriver/metadata-agent.yaml
index 9f602e32b967..a7f2b1c55bdd 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/metadata-agent/stackdriver/metadata-agent.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/metadata-agent/stackdriver/metadata-agent.yaml
@@ -22,7 +22,7 @@ spec:
name: metadata-agent
ports:
- containerPort: 8000
- hostPort: 8000
+ hostPort: 8799
protocol: TCP
resources:
requests:
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/metadata-proxy/gce/metadata-proxy.yaml b/vendor/k8s.io/kubernetes/cluster/addons/metadata-proxy/gce/metadata-proxy.yaml
index 376fb65f1745..767322549c05 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/metadata-proxy/gce/metadata-proxy.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/metadata-proxy/gce/metadata-proxy.yaml
@@ -38,7 +38,7 @@ spec:
dnsPolicy: Default
containers:
- name: metadata-proxy
- image: gcr.io/google_containers/metadata-proxy:v0.1.4
+ image: gcr.io/google_containers/metadata-proxy:v0.1.5
securityContext:
privileged: true
resources:
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/metrics-server/metrics-server-deployment.yaml b/vendor/k8s.io/kubernetes/cluster/addons/metrics-server/metrics-server-deployment.yaml
index 5b19bf769a39..73375b2202b1 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/metrics-server/metrics-server-deployment.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/metrics-server/metrics-server-deployment.yaml
@@ -7,6 +7,19 @@ metadata:
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: metrics-server-config
+ namespace: kube-system
+ labels:
+ kubernetes.io/cluster-service: "true"
+ addonmanager.kubernetes.io/mode: EnsureExists
+data:
+ NannyConfiguration: |-
+ apiVersion: nannyconfig/v1alpha1
+ kind: NannyConfiguration
+---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
@@ -43,14 +56,14 @@ spec:
name: https
protocol: TCP
- name: metrics-server-nanny
- image: gcr.io/google_containers/addon-resizer:1.7
+ image: gcr.io/google_containers/addon-resizer:1.8.1
resources:
limits:
cpu: 100m
memory: 300Mi
requests:
- cpu: 50m
- memory: 100Mi
+ cpu: 5m
+ memory: 50Mi
env:
- name: MY_POD_NAME
valueFrom:
@@ -60,8 +73,12 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
+ volumeMounts:
+ - name: metrics-server-config-volume
+ mountPath: /etc/config
command:
- /pod_nanny
+ - --config-dir=/etc/config
- --cpu=40m
- --extra-cpu=0.5m
- --memory=140Mi
@@ -71,6 +88,10 @@ spec:
- --container=metrics-server
- --poll-period=300000
- --estimator=exponential
+ volumes:
+ - name: metrics-server-config-volume
+ configMap:
+ name: metrics-server-config
tolerations:
- key: "CriticalAddonsOnly"
operator: "Exists"
diff --git a/vendor/k8s.io/kubernetes/cluster/addons/rbac/legacy-kubelet-user-disable/kubelet-binding.yaml b/vendor/k8s.io/kubernetes/cluster/addons/rbac/legacy-kubelet-user-disable/kubelet-binding.yaml
index 1d1832763b40..4cd7174eafc8 100644
--- a/vendor/k8s.io/kubernetes/cluster/addons/rbac/legacy-kubelet-user-disable/kubelet-binding.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/addons/rbac/legacy-kubelet-user-disable/kubelet-binding.yaml
@@ -7,6 +7,20 @@ metadata:
labels:
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: EnsureExists
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: system:node
+subjects: []
+---
+# This is required so that new clusters still have bootstrap permissions
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: kubelet-bootstrap
+ labels:
+ kubernetes.io/cluster-service: "true"
+ addonmanager.kubernetes.io/mode: Reconcile
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
diff --git a/vendor/k8s.io/kubernetes/cluster/centos/deployAddons.sh b/vendor/k8s.io/kubernetes/cluster/centos/deployAddons.sh
index cc96b44248ef..cefbc7c250dd 100755
--- a/vendor/k8s.io/kubernetes/cluster/centos/deployAddons.sh
+++ b/vendor/k8s.io/kubernetes/cluster/centos/deployAddons.sh
@@ -45,19 +45,13 @@ function deploy_dns {
}
function deploy_dashboard {
- if ${KUBECTL} get rc -l k8s-app=kubernetes-dashboard --namespace=kube-system | grep kubernetes-dashboard-v &> /dev/null; then
- echo "Kubernetes Dashboard replicationController already exists"
- else
- echo "Creating Kubernetes Dashboard replicationController"
- ${KUBECTL} create -f ${KUBE_ROOT}/cluster/addons/dashboard/dashboard-controller.yaml
- fi
+ echo "Deploying Kubernetes Dashboard"
- if ${KUBECTL} get service/kubernetes-dashboard --namespace=kube-system &> /dev/null; then
- echo "Kubernetes Dashboard service already exists"
- else
- echo "Creating Kubernetes Dashboard service"
- ${KUBECTL} create -f ${KUBE_ROOT}/cluster/addons/dashboard/dashboard-service.yaml
- fi
+ ${KUBECTL} apply -f ${KUBE_ROOT}/cluster/addons/dashboard/dashboard-secret.yaml
+ ${KUBECTL} apply -f ${KUBE_ROOT}/cluster/addons/dashboard/dashboard-configmap.yaml
+ ${KUBECTL} apply -f ${KUBE_ROOT}/cluster/addons/dashboard/dashboard-rbac.yaml
+ ${KUBECTL} apply -f ${KUBE_ROOT}/cluster/addons/dashboard/dashboard-controller.yaml
+ ${KUBECTL} apply -f ${KUBE_ROOT}/cluster/addons/dashboard/dashboard-service.yaml
echo
}
diff --git a/vendor/k8s.io/kubernetes/cluster/common.sh b/vendor/k8s.io/kubernetes/cluster/common.sh
index ee19ac221d29..a2b947f1748c 100755
--- a/vendor/k8s.io/kubernetes/cluster/common.sh
+++ b/vendor/k8s.io/kubernetes/cluster/common.sh
@@ -664,7 +664,14 @@ ENABLE_CACHE_MUTATION_DETECTOR: $(yaml-quote ${ENABLE_CACHE_MUTATION_DETECTOR:-f
ENABLE_PATCH_CONVERSION_DETECTOR: $(yaml-quote ${ENABLE_PATCH_CONVERSION_DETECTOR:-false})
ADVANCED_AUDIT_POLICY: $(yaml-quote ${ADVANCED_AUDIT_POLICY:-})
ADVANCED_AUDIT_BACKEND: $(yaml-quote ${ADVANCED_AUDIT_BACKEND:-log})
+ADVANCED_AUDIT_WEBHOOK_BUFFER_SIZE: $(yaml-quote ${ADVANCED_AUDIT_WEBHOOK_BUFFER_SIZE:-})
+ADVANCED_AUDIT_WEBHOOK_MAX_BATCH_SIZE: $(yaml-quote ${ADVANCED_AUDIT_WEBHOOK_MAX_BATCH_SIZE:-})
+ADVANCED_AUDIT_WEBHOOK_MAX_BATCH_WAIT: $(yaml-quote ${ADVANCED_AUDIT_WEBHOOK_MAX_BATCH_WAIT:-})
+ADVANCED_AUDIT_WEBHOOK_THROTTLE_QPS: $(yaml-quote ${ADVANCED_AUDIT_WEBHOOK_THROTTLE_QPS:-})
+ADVANCED_AUDIT_WEBHOOK_THROTTLE_BURST: $(yaml-quote ${ADVANCED_AUDIT_WEBHOOK_THROTTLE_BURST:-})
+ADVANCED_AUDIT_WEBHOOK_INITIAL_BACKOFF: $(yaml-quote ${ADVANCED_AUDIT_WEBHOOK_INITIAL_BACKOFF:-})
GCE_API_ENDPOINT: $(yaml-quote ${GCE_API_ENDPOINT:-})
+GCE_GLBC_IMAGE: $(yaml-quote ${GCE_GLBC_IMAGE:-})
PROMETHEUS_TO_SD_ENDPOINT: $(yaml-quote ${PROMETHEUS_TO_SD_ENDPOINT:-})
PROMETHEUS_TO_SD_PREFIX: $(yaml-quote ${PROMETHEUS_TO_SD_PREFIX:-})
ENABLE_PROMETHEUS_TO_SD: $(yaml-quote ${ENABLE_PROMETHEUS_TO_SD:-false})
@@ -831,6 +838,16 @@ EOF
if [ -n "${ETCD_HOSTNAME:-}" ]; then
cat >>$file <>$file <>$file <>/srv/salt-overlay/pillar/cluster-params.sls
kube_apiserver_request_timeout_sec: '$(echo "$KUBE_APISERVER_REQUEST_TIMEOUT_SEC" | sed -e "s/'/''/g")'
+EOF
+ fi
+ if [ -n "${ETCD_LIVENESS_PROBE_INITIAL_DELAY_SEC:-}" ]; then
+ cat <>/srv/salt-overlay/pillar/cluster-params.sls
+etcd_liveness_probe_initial_delay: '$(echo "$ETCD_LIVENESS_PROBE_INITIAL_DELAY_SEC" | sed -e "s/'/''/g")'
+EOF
+ fi
+ if [ -n "${KUBE_APISERVER_LIVENESS_PROBE_INITIAL_DELAY_SEC:-}" ]; then
+ cat <>/srv/salt-overlay/pillar/cluster-params.sls
+kube_apiserver_liveness_probe_initial_delay: '$(echo "$KUBE_APISERVER_LIVENESS_PROBE_INITIAL_DELAY_SEC" | sed -e "s/'/''/g")'
EOF
fi
if [ -n "${ADMISSION_CONTROL:-}" ] && [ ${ADMISSION_CONTROL} == *"ImagePolicyWebhook"* ]; then
@@ -856,7 +864,6 @@ fi
if [[ -z "${is_push}" ]]; then
echo "== kube-up node config starting =="
set-broken-motd
- config-ip-firewall
ensure-basic-networking
fix-apt-sources
ensure-install-dir
@@ -873,6 +880,7 @@ if [[ -z "${is_push}" ]]; then
download-release
configure-salt
remove-docker-artifacts
+ config-ip-firewall
run-salt
reset-motd
diff --git a/vendor/k8s.io/kubernetes/cluster/gce/container-linux/configure-helper.sh b/vendor/k8s.io/kubernetes/cluster/gce/container-linux/configure-helper.sh
index a760917354f4..90f677847e85 100755
--- a/vendor/k8s.io/kubernetes/cluster/gce/container-linux/configure-helper.sh
+++ b/vendor/k8s.io/kubernetes/cluster/gce/container-linux/configure-helper.sh
@@ -25,6 +25,12 @@ set -o errexit
set -o nounset
set -o pipefail
+# Use --retry-connrefused opt only if it's supported by curl.
+CURL_RETRY_CONNREFUSED=""
+if curl --help | grep -q -- '--retry-connrefused'; then
+ CURL_RETRY_CONNREFUSED='--retry-connrefused'
+fi
+
function create-dirs {
echo "Creating required directories"
mkdir -p /var/lib/kubelet
@@ -215,14 +221,19 @@ EOF
if [[ -n "${NODE_INSTANCE_PREFIX:-}" ]]; then
use_cloud_config="true"
if [[ -n "${NODE_TAGS:-}" ]]; then
- local -r node_tags="${NODE_TAGS}"
+ # split NODE_TAGS into an array by comma.
+ IFS=',' read -r -a node_tags <<< ${NODE_TAGS}
else
local -r node_tags="${NODE_INSTANCE_PREFIX}"
fi
cat <>/etc/gce.conf
-node-tags = ${node_tags}
node-instance-prefix = ${NODE_INSTANCE_PREFIX}
EOF
+ for tag in ${node_tags[@]}; do
+ cat <>/etc/gce.conf
+node-tags = ${tag}
+EOF
+ done
fi
if [[ -n "${MULTIZONE:-}" ]]; then
use_cloud_config="true"
@@ -232,9 +243,13 @@ EOF
fi
if [[ -n "${GCE_ALPHA_FEATURES:-}" ]]; then
use_cloud_config="true"
- cat <>/etc/gce.conf
-alpha-features = ${GCE_ALPHA_FEATURES}
+ # split GCE_ALPHA_FEATURES into an array by comma.
+ IFS=',' read -r -a alpha_features <<< ${GCE_ALPHA_FEATURES}
+ for feature in ${alpha_features[@]}; do
+ cat <>/etc/gce.conf
+alpha-features = ${feature}
EOF
+ done
fi
if [[ -n "${SECONDARY_RANGE_NAME:-}" ]]; then
use_cloud_config="true"
@@ -763,6 +778,7 @@ function prepare-etcd-manifest {
sed -i -e "s@{{ *hostname *}}@$host_name@g" "${temp_file}"
sed -i -e "s@{{ *srv_kube_path *}}@/etc/srv/kubernetes@g" "${temp_file}"
sed -i -e "s@{{ *etcd_cluster *}}@$etcd_cluster@g" "${temp_file}"
+ sed -i -e "s@{{ *liveness_probe_initial_delay *}}@${ETCD_LIVENESS_PROBE_INITIAL_DELAY_SEC:-15}@g" "${temp_file}"
# Get default storage backend from manifest file.
local -r default_storage_backend=$(cat "${temp_file}" | \
grep -o "{{ *pillar\.get('storage_backend', '\(.*\)') *}}" | \
@@ -966,7 +982,7 @@ function start-kube-apiserver {
params+=" --feature-gates=${FEATURE_GATES}"
fi
if [[ -n "${PROJECT_ID:-}" && -n "${TOKEN_URL:-}" && -n "${TOKEN_BODY:-}" && -n "${NODE_NETWORK:-}" ]]; then
- local -r vm_external_ip=$(curl --retry 5 --retry-delay 3 --fail --silent -H 'Metadata-Flavor: Google' "http://metadata/computeMetadata/v1/instance/network-interfaces/0/access-configs/0/external-ip")
+ local -r vm_external_ip=$(curl --retry 5 --retry-delay 3 ${CURL_RETRY_CONNREFUSED} --fail --silent -H 'Metadata-Flavor: Google' "http://metadata/computeMetadata/v1/instance/network-interfaces/0/access-configs/0/external-ip")
if [[ -n "${PROXY_SSH_USER:-}" ]]; then
params+=" --advertise-address=${vm_external_ip}"
params+=" --ssh-user=${PROXY_SSH_USER}"
@@ -1045,6 +1061,7 @@ function start-kube-apiserver {
sed -i -e "s@{{pillar\['kube_docker_registry'\]}}@${DOCKER_REGISTRY}@g" "${src_file}"
sed -i -e "s@{{pillar\['kube-apiserver_docker_tag'\]}}@${kube_apiserver_docker_tag}@g" "${src_file}"
sed -i -e "s@{{pillar\['allow_privileged'\]}}@true@g" "${src_file}"
+ sed -i -e "s@{{liveness_probe_initial_delay}}@${KUBE_APISERVER_LIVENESS_PROBE_INITIAL_DELAY_SEC:-15}@g" "${src_file}"
sed -i -e "s@{{secure_port}}@443@g" "${src_file}"
sed -i -e "s@{{secure_port}}@8080@g" "${src_file}"
sed -i -e "s@{{additional_cloud_config_mount}}@@g" "${src_file}"
@@ -1335,10 +1352,10 @@ EOF
metadata_agent_cpu_request="${METADATA_AGENT_CPU_REQUEST:-40m}"
metadata_agent_memory_request="${METADATA_AGENT_MEMORY_REQUEST:-50Mi}"
setup-addon-manifests "addons" "metadata-agent/stackdriver"
- deployment_yaml="${dst_dir}/metadata-agent/stackdriver/metadata-agent.yaml"
- sed -i -e "s@{{ metadata_agent_version }}@${METADATA_AGENT_VERSION}@g" "${deployment_yaml}"
- sed -i -e "s@{{ metadata_agent_cpu_request }}@${metadata_agent_cpu_request}@g" "${deployment_yaml}"
- sed -i -e "s@{{ metadata_agent_memory_request }}@${metadata_agent_memory_request}@g" "${deployment_yaml}"
+ daemon_set_yaml="${dst_dir}/metadata-agent/stackdriver/metadata-agent.yaml"
+ sed -i -e "s@{{ metadata_agent_version }}@${METADATA_AGENT_VERSION}@g" "${daemon_set_yaml}"
+ sed -i -e "s@{{ metadata_agent_cpu_request }}@${metadata_agent_cpu_request}@g" "${daemon_set_yaml}"
+ sed -i -e "s@{{ metadata_agent_memory_request }}@${metadata_agent_memory_request}@g" "${daemon_set_yaml}"
fi
fi
if [[ "${ENABLE_METRICS_SERVER:-}" == "true" ]]; then
@@ -1460,7 +1477,7 @@ function setup-rkt {
mkdir -p /etc/rkt "${KUBE_HOME}/download/"
local rkt_tar="${KUBE_HOME}/download/rkt.tar.gz"
local rkt_tmpdir=$(mktemp -d "${KUBE_HOME}/rkt_download.XXXXX")
- curl --retry 5 --retry-delay 3 --fail --silent --show-error \
+ curl --retry 5 --retry-delay 3 ${CURL_RETRY_CONNREFUSED} --fail --silent --show-error \
--location --create-dirs --output "${rkt_tar}" \
https://github.com/coreos/rkt/releases/download/v${RKT_VERSION}/rkt-v${RKT_VERSION}.tar.gz
tar --strip-components=1 -xf "${rkt_tar}" -C "${rkt_tmpdir}" --overwrite
@@ -1499,7 +1516,7 @@ function install-docker2aci {
local tar_path="${KUBE_HOME}/download/docker2aci.tar.gz"
local tmp_path="${KUBE_HOME}/docker2aci"
mkdir -p "${KUBE_HOME}/download/" "${tmp_path}"
- curl --retry 5 --retry-delay 3 --fail --silent --show-error \
+ curl --retry 5 --retry-delay 3 ${CURL_RETRY_CONNREFUSED} --fail --silent --show-error \
--location --create-dirs --output "${tar_path}" \
https://github.com/appc/docker2aci/releases/download/v0.14.0/docker2aci-v0.14.0.tar.gz
tar --strip-components=1 -xf "${tar_path}" -C "${tmp_path}" --overwrite
diff --git a/vendor/k8s.io/kubernetes/cluster/gce/container-linux/configure.sh b/vendor/k8s.io/kubernetes/cluster/gce/container-linux/configure.sh
index 6ac60cd81d24..16dcf27a0447 100755
--- a/vendor/k8s.io/kubernetes/cluster/gce/container-linux/configure.sh
+++ b/vendor/k8s.io/kubernetes/cluster/gce/container-linux/configure.sh
@@ -18,10 +18,16 @@ set -o errexit
set -o nounset
set -o pipefail
+# Use --retry-connrefused opt only if it's supported by curl.
+CURL_RETRY_CONNREFUSED=""
+if curl --help | grep -q -- '--retry-connrefused'; then
+ CURL_RETRY_CONNREFUSED='--retry-connrefused'
+fi
+
function download-kube-env {
# Fetch kube-env from GCE metadata server.
local -r tmp_kube_env="/tmp/kube-env.yaml"
- curl --fail --retry 5 --retry-delay 3 --silent --show-error \
+ curl --fail --retry 5 --retry-delay 3 ${CURL_RETRY_CONNREFUSED} --silent --show-error \
-H "X-Google-Metadata-Request: True" \
-o "${tmp_kube_env}" \
http://metadata.google.internal/computeMetadata/v1/instance/attributes/kube-env
@@ -55,7 +61,7 @@ function download-or-bust {
for url in "${urls[@]}"; do
local file="${url##*/}"
rm -f "${file}"
- if ! curl -f --ipv4 -Lo "${file}" --connect-timeout 20 --max-time 300 --retry 6 --retry-delay 10 "${url}"; then
+ if ! curl -f --ipv4 -Lo "${file}" --connect-timeout 20 --max-time 300 --retry 6 --retry-delay 10 ${CURL_RETRY_CONNREFUSED} "${url}"; then
echo "== Failed to download ${url}. Retrying. =="
elif [[ -n "${hash}" ]] && ! validate-hash "${file}" "${hash}"; then
echo "== Hash validation of ${url} failed. Retrying. =="
diff --git a/vendor/k8s.io/kubernetes/cluster/gce/container-linux/master.yaml b/vendor/k8s.io/kubernetes/cluster/gce/container-linux/master.yaml
index 4dec695c9d7a..444d30427397 100644
--- a/vendor/k8s.io/kubernetes/cluster/gce/container-linux/master.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/gce/container-linux/master.yaml
@@ -17,7 +17,8 @@ coreos:
Type=oneshot
RemainAfterExit=yes
ExecStartPre=/bin/mkdir -p /opt/kubernetes/bin
- ExecStartPre=/usr/bin/curl --fail --retry 5 --retry-delay 3 --silent --show-error -H "X-Google-Metadata-Request: True" -o /opt/kubernetes/bin/configure.sh http://metadata.google.internal/computeMetadata/v1/instance/attributes/configure-sh
+ # Use --retry-connrefused opt only if it's supported by curl.
+ ExecStartPre=/bin/bash -c 'OPT=""; if curl --help | grep -q -- "--retry-connrefused"; then OPT="--retry-connrefused"; fi; /usr/bin/curl --fail --retry 5 --retry-delay 3 $OPT --silent --show-error -H "X-Google-Metadata-Request: True" -o /opt/kubernetes/bin/configure.sh http://metadata.google.internal/computeMetadata/v1/instance/attributes/configure-sh'
ExecStartPre=/bin/chmod 544 /opt/kubernetes/bin/configure.sh
ExecStart=/opt/kubernetes/bin/configure.sh
diff --git a/vendor/k8s.io/kubernetes/cluster/gce/container-linux/node.yaml b/vendor/k8s.io/kubernetes/cluster/gce/container-linux/node.yaml
index b203c4fded39..9886679cd78f 100644
--- a/vendor/k8s.io/kubernetes/cluster/gce/container-linux/node.yaml
+++ b/vendor/k8s.io/kubernetes/cluster/gce/container-linux/node.yaml
@@ -17,7 +17,8 @@ coreos:
Type=oneshot
RemainAfterExit=yes
ExecStartPre=/bin/mkdir -p /opt/kubernetes/bin
- ExecStartPre=/usr/bin/curl --fail --retry 5 --retry-delay 3 --silent --show-error -H "X-Google-Metadata-Request: True" -o /opt/kubernetes/bin/configure.sh http://metadata.google.internal/computeMetadata/v1/instance/attributes/configure-sh
+ # Use --retry-connrefused opt only if it's supported by curl.
+ ExecStartPre=/bin/bash -c 'OPT=""; if curl --help | grep -q -- "--retry-connrefused"; then OPT="--retry-connrefused"; fi; /usr/bin/curl --fail --retry 5 --retry-delay 3 $OPT --silent --show-error -H "X-Google-Metadata-Request: True" -o /opt/kubernetes/bin/configure.sh http://metadata.google.internal/computeMetadata/v1/instance/attributes/configure-sh'
ExecStartPre=/bin/chmod 544 /opt/kubernetes/bin/configure.sh
ExecStart=/opt/kubernetes/bin/configure.sh
diff --git a/vendor/k8s.io/kubernetes/cluster/gce/gci/configure-helper.sh b/vendor/k8s.io/kubernetes/cluster/gce/gci/configure-helper.sh
index cc0b3d204528..cadaa66ced8e 100644
--- a/vendor/k8s.io/kubernetes/cluster/gce/gci/configure-helper.sh
+++ b/vendor/k8s.io/kubernetes/cluster/gce/gci/configure-helper.sh
@@ -28,6 +28,12 @@ set -o pipefail
readonly UUID_MNT_PREFIX="/mnt/disks/by-uuid/google-local-ssds"
readonly UUID_BLOCK_PREFIX="/dev/disk/by-uuid/google-local-ssds"
+# Use --retry-connrefused opt only if it's supported by curl.
+CURL_RETRY_CONNREFUSED=""
+if curl --help | grep -q -- '--retry-connrefused'; then
+ CURL_RETRY_CONNREFUSED='--retry-connrefused'
+fi
+
function setup-os-params {
# Reset core_pattern. On GCI, the default core_pattern pipes the core dumps to
# /sbin/crash_reporter which is more restrictive in saving crash dumps. So for
@@ -57,18 +63,11 @@ function config-ip-firewall {
iptables -A FORWARD -w -p ICMP -j ACCEPT
fi
- iptables -w -N KUBE-METADATA-SERVER
- iptables -w -I FORWARD -p tcp -d 169.254.169.254 --dport 80 -j KUBE-METADATA-SERVER
-
- if [[ "${ENABLE_METADATA_CONCEALMENT:-}" == "true" ]]; then
- iptables -w -A KUBE-METADATA-SERVER -j DROP
- fi
-
# Flush iptables nat table
iptables -w -t nat -F || true
- echo "Add rules for ip masquerade"
if [[ "${NON_MASQUERADE_CIDR:-}" == "0.0.0.0/0" ]]; then
+ echo "Add rules for ip masquerade"
iptables -w -t nat -N IP-MASQ
iptables -w -t nat -A POSTROUTING -m comment --comment "ip-masq: ensure nat POSTROUTING directs all non-LOCAL destination traffic to our custom IP-MASQ chain" -m addrtype ! --dst-type LOCAL -j IP-MASQ
iptables -w -t nat -A IP-MASQ -d 169.254.0.0/16 -m comment --comment "ip-masq: local traffic is not subject to MASQUERADE" -j RETURN
@@ -77,6 +76,11 @@ function config-ip-firewall {
iptables -w -t nat -A IP-MASQ -d 192.168.0.0/16 -m comment --comment "ip-masq: local traffic is not subject to MASQUERADE" -j RETURN
iptables -w -t nat -A IP-MASQ -m comment --comment "ip-masq: outbound traffic is subject to MASQUERADE (must be last in chain)" -j MASQUERADE
fi
+
+ if [[ "${ENABLE_METADATA_CONCEALMENT:-}" == "true" ]]; then
+ echo "Add rule for metadata concealment"
+ iptables -w -t nat -I PREROUTING -p tcp -d 169.254.169.254 --dport 80 -m comment --comment "metadata-concealment: bridge traffic to metadata server goes to metadata proxy" -j DNAT --to-destination 127.0.0.1:988
+ fi
}
function create-dirs {
@@ -585,14 +589,19 @@ EOF
if [[ -n "${NODE_INSTANCE_PREFIX:-}" ]]; then
use_cloud_config="true"
if [[ -n "${NODE_TAGS:-}" ]]; then
- local -r node_tags="${NODE_TAGS}"
+ # split NODE_TAGS into an array by comma.
+ IFS=',' read -r -a node_tags <<< ${NODE_TAGS}
else
local -r node_tags="${NODE_INSTANCE_PREFIX}"
fi
cat <>/etc/gce.conf
-node-tags = ${node_tags}
node-instance-prefix = ${NODE_INSTANCE_PREFIX}
EOF
+ for tag in ${node_tags[@]}; do
+ cat <>/etc/gce.conf
+node-tags = ${tag}
+EOF
+ done
fi
if [[ -n "${MULTIZONE:-}" ]]; then
use_cloud_config="true"
@@ -602,9 +611,13 @@ EOF
fi
if [[ -n "${GCE_ALPHA_FEATURES:-}" ]]; then
use_cloud_config="true"
- cat <>/etc/gce.conf
-alpha-features = ${GCE_ALPHA_FEATURES}
+ # split GCE_ALPHA_FEATURES into an array by comma.
+ IFS=',' read -r -a alpha_features <<< ${GCE_ALPHA_FEATURES}
+ for feature in ${alpha_features[@]}; do
+ cat <>/etc/gce.conf
+alpha-features = ${feature}
EOF
+ done
fi
if [[ -n "${SECONDARY_RANGE_NAME:-}" ]]; then
use_cloud_config="true"
@@ -1371,6 +1384,7 @@ function prepare-etcd-manifest {
sed -i -e "s@{{ *hostname *}}@$host_name@g" "${temp_file}"
sed -i -e "s@{{ *srv_kube_path *}}@/etc/srv/kubernetes@g" "${temp_file}"
sed -i -e "s@{{ *etcd_cluster *}}@$etcd_cluster@g" "${temp_file}"
+ sed -i -e "s@{{ *liveness_probe_initial_delay *}}@${ETCD_LIVENESS_PROBE_INITIAL_DELAY_SEC:-15}@g" "${temp_file}"
# Get default storage backend from manifest file.
local -r default_storage_backend=$(cat "${temp_file}" | \
grep -o "{{ *pillar\.get('storage_backend', '\(.*\)') *}}" | \
@@ -1605,6 +1619,24 @@ function start-kube-apiserver {
# Create the audit webhook config file, and mount it into the apiserver pod.
local -r audit_webhook_config_file="/etc/audit_webhook.config"
params+=" --audit-webhook-config-file=${audit_webhook_config_file}"
+ if [[ -n "${ADVANCED_AUDIT_WEBHOOK_BUFFER_SIZE:-}" ]]; then
+ params+=" --audit-webhook-batch-buffer-size=${ADVANCED_AUDIT_WEBHOOK_BUFFER_SIZE}"
+ fi
+ if [[ -n "${ADVANCED_AUDIT_WEBHOOK_MAX_BATCH_SIZE:-}" ]]; then
+ params+=" --audit-webhook-batch-max-size=${ADVANCED_AUDIT_WEBHOOK_MAX_BATCH_SIZE}"
+ fi
+ if [[ -n "${ADVANCED_AUDIT_WEBHOOK_MAX_BATCH_WAIT:-}" ]]; then
+ params+=" --audit-webhook-batch-max-wait=${ADVANCED_AUDIT_WEBHOOK_MAX_BATCH_WAIT}"
+ fi
+ if [[ -n "${ADVANCED_AUDIT_WEBHOOK_THROTTLE_QPS:-}" ]]; then
+ params+=" --audit-webhook-batch-throttle-qps=${ADVANCED_AUDIT_WEBHOOK_THROTTLE_QPS}"
+ fi
+ if [[ -n "${ADVANCED_AUDIT_WEBHOOK_THROTTLE_BURST:-}" ]]; then
+ params+=" --audit-webhook-batch-throttle-burst=${ADVANCED_AUDIT_WEBHOOK_THROTTLE_BURST}"
+ fi
+ if [[ -n "${ADVANCED_AUDIT_WEBHOOK_INITIAL_BACKOFF:-}" ]]; then
+ params+=" --audit-webhook-batch-initial-backoff=${ADVANCED_AUDIT_WEBHOOK_INITIAL_BACKOFF}"
+ fi
create-master-audit-webhook-config "${audit_webhook_config_file}"
audit_webhook_config_mount="{\"name\": \"auditwebhookconfigmount\",\"mountPath\": \"${audit_webhook_config_file}\", \"readOnly\": true},"
audit_webhook_config_volume="{\"name\": \"auditwebhookconfigmount\",\"hostPath\": {\"path\": \"${audit_webhook_config_file}\", \"type\": \"FileOrCreate\"}},"
@@ -1642,7 +1674,7 @@ function start-kube-apiserver {
params+=" --feature-gates=${FEATURE_GATES}"
fi
if [[ -n "${PROJECT_ID:-}" && -n "${TOKEN_URL:-}" && -n "${TOKEN_BODY:-}" && -n "${NODE_NETWORK:-}" ]]; then
- local -r vm_external_ip=$(curl --retry 5 --retry-delay 3 --fail --silent -H 'Metadata-Flavor: Google' "http://metadata/computeMetadata/v1/instance/network-interfaces/0/access-configs/0/external-ip")
+ local -r vm_external_ip=$(curl --retry 5 --retry-delay 3 ${CURL_RETRY_CONNREFUSED} --fail --silent -H 'Metadata-Flavor: Google' "http://metadata/computeMetadata/v1/instance/network-interfaces/0/access-configs/0/external-ip")
if [[ -n "${PROXY_SSH_USER:-}" ]]; then
params+=" --advertise-address=${vm_external_ip}"
params+=" --ssh-user=${PROXY_SSH_USER}"
@@ -1728,6 +1760,7 @@ function start-kube-apiserver {
sed -i -e "s@{{pillar\['kube_docker_registry'\]}}@${DOCKER_REGISTRY}@g" "${src_file}"
sed -i -e "s@{{pillar\['kube-apiserver_docker_tag'\]}}@${kube_apiserver_docker_tag}@g" "${src_file}"
sed -i -e "s@{{pillar\['allow_privileged'\]}}@true@g" "${src_file}"
+ sed -i -e "s@{{liveness_probe_initial_delay}}@${KUBE_APISERVER_LIVENESS_PROBE_INITIAL_DELAY_SEC:-15}@g" "${src_file}"
sed -i -e "s@{{secure_port}}@443@g" "${src_file}"
sed -i -e "s@{{secure_port}}@8080@g" "${src_file}"
sed -i -e "s@{{additional_cloud_config_mount}}@@g" "${src_file}"
@@ -1807,10 +1840,16 @@ function start-kube-controller-manager {
if [[ -n "${CLUSTER_SIGNING_DURATION:-}" ]]; then
params+=" --experimental-cluster-signing-duration=$CLUSTER_SIGNING_DURATION"
fi
- # disable using HPA metrics REST clients if metrics-server isn't enabled
- if [[ "${ENABLE_METRICS_SERVER:-}" != "true" ]]; then
+ # Disable using HPA metrics REST clients if metrics-server isn't enabled,
+ # or if we want to explicitly disable it by setting HPA_USE_REST_CLIENT.
+ if [[ "${ENABLE_METRICS_SERVER:-}" != "true" ]] ||
+ [[ "${HPA_USE_REST_CLIENTS:-}" == "false" ]]; then
params+=" --horizontal-pod-autoscaler-use-rest-clients=false"
fi
+ if [[ -n "${PV_RECYCLER_OVERRIDE_TEMPLATE:-}" ]]; then
+ params+=" --pv-recycler-pod-template-filepath-nfs=$PV_RECYCLER_OVERRIDE_TEMPLATE"
+ params+=" --pv-recycler-pod-template-filepath-hostpath=$PV_RECYCLER_OVERRIDE_TEMPLATE"
+ fi
local -r kube_rc_docker_tag=$(cat /home/kubernetes/kube-docker-files/kube-controller-manager.docker_tag)
local container_env=""
@@ -1830,6 +1869,8 @@ function start-kube-controller-manager {
sed -i -e "s@{{cloud_config_volume}}@${CLOUD_CONFIG_VOLUME}@g" "${src_file}"
sed -i -e "s@{{additional_cloud_config_mount}}@@g" "${src_file}"
sed -i -e "s@{{additional_cloud_config_volume}}@@g" "${src_file}"
+ sed -i -e "s@{{pv_recycler_mount}}@${PV_RECYCLER_MOUNT}@g" "${src_file}"
+ sed -i -e "s@{{pv_recycler_volume}}@${PV_RECYCLER_VOLUME}@g" "${src_file}"
cp "${src_file}" /etc/kubernetes/manifests
}
@@ -2114,10 +2155,10 @@ EOF
metadata_agent_cpu_request="${METADATA_AGENT_CPU_REQUEST:-40m}"
metadata_agent_memory_request="${METADATA_AGENT_MEMORY_REQUEST:-50Mi}"
setup-addon-manifests "addons" "metadata-agent/stackdriver"
- deployment_yaml="${dst_dir}/metadata-agent/stackdriver/metadata-agent.yaml"
- sed -i -e "s@{{ metadata_agent_version }}@${METADATA_AGENT_VERSION}@g" "${deployment_yaml}"
- sed -i -e "s@{{ metadata_agent_cpu_request }}@${metadata_agent_cpu_request}@g" "${deployment_yaml}"
- sed -i -e "s@{{ metadata_agent_memory_request }}@${metadata_agent_memory_request}@g" "${deployment_yaml}"
+ daemon_set_yaml="${dst_dir}/metadata-agent/stackdriver/metadata-agent.yaml"
+ sed -i -e "s@{{ metadata_agent_version }}@${METADATA_AGENT_VERSION}@g" "${daemon_set_yaml}"
+ sed -i -e "s@{{ metadata_agent_cpu_request }}@${metadata_agent_cpu_request}@g" "${daemon_set_yaml}"
+ sed -i -e "s@{{ metadata_agent_memory_request }}@${metadata_agent_memory_request}@g" "${daemon_set_yaml}"
fi
fi
if [[ "${ENABLE_METRICS_SERVER:-}" == "true" ]]; then
@@ -2282,11 +2323,47 @@ function override-kubectl {
echo "export PATH=${KUBE_HOME}/bin:\$PATH" > /etc/profile.d/kube_env.sh
}
+function override-pv-recycler {
+ if [[ -z "${PV_RECYCLER_OVERRIDE_TEMPLATE:-}" ]]; then
+ echo "PV_RECYCLER_OVERRIDE_TEMPLATE is not set"
+ exit 1
+ fi
+
+ PV_RECYCLER_VOLUME="{\"name\": \"pv-recycler-mount\",\"hostPath\": {\"path\": \"${PV_RECYCLER_OVERRIDE_TEMPLATE}\", \"type\": \"FileOrCreate\"}},"
+ PV_RECYCLER_MOUNT="{\"name\": \"pv-recycler-mount\",\"mountPath\": \"${PV_RECYCLER_OVERRIDE_TEMPLATE}\", \"readOnly\": true},"
+
+ cat > ${PV_RECYCLER_OVERRIDE_TEMPLATE} < /etc/motd <&2
+ exit 1
+ fi
+ fi
+fi
+
print-node-version-info "Pre-Upgrade"
if [[ "${local_binaries}" == "false" ]]; then
diff --git a/vendor/k8s.io/kubernetes/cluster/images/hyperkube/Makefile b/vendor/k8s.io/kubernetes/cluster/images/hyperkube/Makefile
index 803c1a0c58dd..d7a8c7d936bc 100644
--- a/vendor/k8s.io/kubernetes/cluster/images/hyperkube/Makefile
+++ b/vendor/k8s.io/kubernetes/cluster/images/hyperkube/Makefile
@@ -21,7 +21,7 @@ REGISTRY?=gcr.io/google-containers
ARCH?=amd64
HYPERKUBE_BIN?=_output/dockerized/bin/linux/$(ARCH)/hyperkube
-BASEIMAGE=gcr.io/google-containers/debian-hyperkube-base-$(ARCH):0.7
+BASEIMAGE=gcr.io/google-containers/debian-hyperkube-base-$(ARCH):0.8
TEMP_DIR:=$(shell mktemp -d -t hyperkubeXXXXXX)
all: build
diff --git a/vendor/k8s.io/kubernetes/cluster/restore-from-backup.sh b/vendor/k8s.io/kubernetes/cluster/restore-from-backup.sh
index 41865ae0119b..912e877de980 100755
--- a/vendor/k8s.io/kubernetes/cluster/restore-from-backup.sh
+++ b/vendor/k8s.io/kubernetes/cluster/restore-from-backup.sh
@@ -62,6 +62,9 @@ ETCD_API="$(echo $VERSION_CONTENTS | cut -d '/' -f 2)"
# NOTE: NAME HAS TO BE EQUAL TO WHAT WE USE IN --name flag when starting etcd.
NAME="${NAME:-etcd-$(hostname)}"
+INITIAL_CLUSTER="${INITIAL_CLUSTER:-${NAME}=http://localhost:2380}"
+INITIAL_ADVERTISE_PEER_URLS="${INITIAL_ADVERTISE_PEER_URLS:-http://localhost:2380}"
+
# Port on which etcd is exposed.
etcd_port=2379
event_etcd_port=4002
@@ -101,7 +104,7 @@ wait_for_cluster_healthy() {
# Wait until etcd and apiserver pods are down.
wait_for_etcd_and_apiserver_down() {
for i in $(seq 120); do
- etcd=$(docker ps | grep etcd | grep -v etcd-empty-dir | grep -v etcd-monitor | wc -l)
+ etcd=$(docker ps | grep etcd-server | wc -l)
apiserver=$(docker ps | grep apiserver | wc -l)
# TODO: Theoretically it is possible, that apiserver and or etcd
# are currently down, but Kubelet is now restarting them and they
@@ -134,6 +137,8 @@ if ! wait_for_etcd_and_apiserver_down; then
exit 1
fi
+read -rsp $'Press enter when all etcd instances are down...\n'
+
# Create the sort of directory structure that etcd expects.
# If this directory already exists, remove it.
BACKUP_DIR="/var/tmp/backup"
@@ -185,15 +190,13 @@ elif [ "${ETCD_API}" == "etcd3" ]; then
# Run etcdctl snapshot restore command and wait until it is finished.
# setting with --name in the etcd manifest file and then it seems to work.
- # TODO(jsz): This command may not work in case of HA.
- image=$(docker run -d -v ${BACKUP_DIR}:/var/tmp/backup --env ETCDCTL_API=3 \
+ docker run -v ${BACKUP_DIR}:/var/tmp/backup --env ETCDCTL_API=3 \
"gcr.io/google_containers/etcd:${ETCD_VERSION}" /bin/sh -c \
- "/usr/local/bin/etcdctl snapshot restore ${BACKUP_DIR}/${snapshot} --name ${NAME} --initial-cluster ${NAME}=http://localhost:2380; mv /${NAME}.etcd/member /var/tmp/backup/")
+ "/usr/local/bin/etcdctl snapshot restore ${BACKUP_DIR}/${snapshot} --name ${NAME} --initial-cluster ${INITIAL_CLUSTER} --initial-advertise-peer-urls ${INITIAL_ADVERTISE_PEER_URLS}; mv /${NAME}.etcd/member /var/tmp/backup/"
if [ "$?" -ne "0" ]; then
echo "Docker container didn't started correctly"
exit 1
fi
- echo "Prepare container exit code: $(docker wait ${image})"
rm -f "${BACKUP_DIR}/${snapshot}"
fi
diff --git a/vendor/k8s.io/kubernetes/cluster/saltbase/salt/cluster-autoscaler/cluster-autoscaler.manifest b/vendor/k8s.io/kubernetes/cluster/saltbase/salt/cluster-autoscaler/cluster-autoscaler.manifest
index 844243d428d9..6e6ed2c25083 100644
--- a/vendor/k8s.io/kubernetes/cluster/saltbase/salt/cluster-autoscaler/cluster-autoscaler.manifest
+++ b/vendor/k8s.io/kubernetes/cluster/saltbase/salt/cluster-autoscaler/cluster-autoscaler.manifest
@@ -25,7 +25,7 @@
"containers": [
{
"name": "cluster-autoscaler",
- "image": "gcr.io/google_containers/cluster-autoscaler:v1.1.0-alpha1",
+ "image": "gcr.io/google_containers/cluster-autoscaler:v1.1.0",
"livenessProbe": {
"httpGet": {
"path": "/health-check",
diff --git a/vendor/k8s.io/kubernetes/cluster/saltbase/salt/etcd/etcd.manifest b/vendor/k8s.io/kubernetes/cluster/saltbase/salt/etcd/etcd.manifest
index 44419aa744f6..6a940ea90731 100644
--- a/vendor/k8s.io/kubernetes/cluster/saltbase/salt/etcd/etcd.manifest
+++ b/vendor/k8s.io/kubernetes/cluster/saltbase/salt/etcd/etcd.manifest
@@ -22,6 +22,7 @@
{% if pillar.get('storage_backend', 'etcd3') == 'etcd3' -%}
{% set quota_bytes = '--quota-backend-bytes=4294967296' -%}
{% endif -%}
+{% set liveness_probe_initial_delay = pillar.get('etcd_liveness_probe_initial_delay', 15) -%}
{% set srv_kube_path = "/srv/kubernetes" -%}
{
@@ -67,7 +68,7 @@
"port": {{ port }},
"path": "/health"
},
- "initialDelaySeconds": 15,
+ "initialDelaySeconds": {{ liveness_probe_initial_delay }},
"timeoutSeconds": 15
},
"ports": [
diff --git a/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-apiserver/kube-apiserver.manifest b/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-apiserver/kube-apiserver.manifest
index 8b1fdc630c39..9a779050d89b 100644
--- a/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-apiserver/kube-apiserver.manifest
+++ b/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-apiserver/kube-apiserver.manifest
@@ -66,6 +66,8 @@
{% set storage_media_type = "--storage-media-type=" + pillar['storage_media_type'] -%}
{% endif -%}
+{% set liveness_probe_initial_delay = pillar.get('kube_apiserver_liveness_probe_initial_delay', 15) -%}
+
{% set request_timeout = "" -%}
{% if pillar['kube_apiserver_request_timeout_sec'] is defined -%}
{% set request_timeout = "--request-timeout=" + pillar['kube_apiserver_request_timeout_sec'] + "s" -%}
@@ -248,7 +250,7 @@
"port": 8080,
"path": "/healthz"
},
- "initialDelaySeconds": 15,
+ "initialDelaySeconds": {{liveness_probe_initial_delay}},
"timeoutSeconds": 15
},
"ports":[
diff --git a/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-controller-manager/kube-controller-manager.manifest b/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-controller-manager/kube-controller-manager.manifest
index 65359afda7b5..8b7b0d4e45cd 100644
--- a/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-controller-manager/kube-controller-manager.manifest
+++ b/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-controller-manager/kube-controller-manager.manifest
@@ -34,6 +34,8 @@
{% set cloud_config_volume = "" -%}
{% set additional_cloud_config_mount = "{\"name\": \"usrsharessl\",\"mountPath\": \"/usr/share/ssl\", \"readOnly\": true}, {\"name\": \"usrssl\",\"mountPath\": \"/usr/ssl\", \"readOnly\": true}, {\"name\": \"usrlibssl\",\"mountPath\": \"/usr/lib/ssl\", \"readOnly\": true}, {\"name\": \"usrlocalopenssl\",\"mountPath\": \"/usr/local/openssl\", \"readOnly\": true}," -%}
{% set additional_cloud_config_volume = "{\"name\": \"usrsharessl\",\"hostPath\": {\"path\": \"/usr/share/ssl\"}}, {\"name\": \"usrssl\",\"hostPath\": {\"path\": \"/usr/ssl\"}}, {\"name\": \"usrlibssl\",\"hostPath\": {\"path\": \"/usr/lib/ssl\"}}, {\"name\": \"usrlocalopenssl\",\"hostPath\": {\"path\": \"/usr/local/openssl\"}}," -%}
+{% set pv_recycler_mount = "" -%}
+{% set pv_recycler_volume = "" -%}
{% set srv_kube_path = "/srv/kubernetes" -%}
{% if grains.cloud is defined -%}
@@ -131,6 +133,7 @@
"volumeMounts": [
{{cloud_config_mount}}
{{additional_cloud_config_mount}}
+ {{pv_recycler_mount}}
{ "name": "srvkube",
"mountPath": "{{srv_kube_path}}",
"readOnly": true},
@@ -158,6 +161,7 @@
"volumes":[
{{cloud_config_volume}}
{{additional_cloud_config_volume}}
+ {{pv_recycler_volume}}
{ "name": "srvkube",
"hostPath": {
"path": "{{srv_kube_path}}"}
diff --git a/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-proxy/kube-proxy.manifest b/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-proxy/kube-proxy.manifest
index 4c9882a6ffa7..69075cb9d049 100644
--- a/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-proxy/kube-proxy.manifest
+++ b/vendor/k8s.io/kubernetes/cluster/saltbase/salt/kube-proxy/kube-proxy.manifest
@@ -65,6 +65,11 @@ metadata:
spec:
{{pod_priority}}
hostNetwork: true
+ tolerations:
+ - operator: "Exists"
+ effect: "NoExecute"
+ - operator: "Exists"
+ effect: "NoSchedule"
containers:
- name: kube-proxy
image: {{pillar['kube_docker_registry']}}/kube-proxy:{{pillar['kube-proxy_docker_tag']}}
diff --git a/vendor/k8s.io/kubernetes/cmd/kube-apiserver/app/options/BUILD b/vendor/k8s.io/kubernetes/cmd/kube-apiserver/app/options/BUILD
index 7c46be368bf8..96087a582ebc 100644
--- a/vendor/k8s.io/kubernetes/cmd/kube-apiserver/app/options/BUILD
+++ b/vendor/k8s.io/kubernetes/cmd/kube-apiserver/app/options/BUILD
@@ -74,6 +74,7 @@ go_test(
"//vendor/k8s.io/apiserver/pkg/server/options:go_default_library",
"//vendor/k8s.io/apiserver/pkg/storage/storagebackend:go_default_library",
"//vendor/k8s.io/apiserver/pkg/util/flag:go_default_library",
+ "//vendor/k8s.io/apiserver/plugin/pkg/audit/webhook:go_default_library",
"//vendor/k8s.io/client-go/rest:go_default_library",
],
)
diff --git a/vendor/k8s.io/kubernetes/cmd/kube-apiserver/app/options/options_test.go b/vendor/k8s.io/kubernetes/cmd/kube-apiserver/app/options/options_test.go
index 716398a4e63b..30979d10524e 100644
--- a/vendor/k8s.io/kubernetes/cmd/kube-apiserver/app/options/options_test.go
+++ b/vendor/k8s.io/kubernetes/cmd/kube-apiserver/app/options/options_test.go
@@ -28,6 +28,7 @@ import (
apiserveroptions "k8s.io/apiserver/pkg/server/options"
"k8s.io/apiserver/pkg/storage/storagebackend"
utilconfig "k8s.io/apiserver/pkg/util/flag"
+ auditwebhook "k8s.io/apiserver/plugin/pkg/audit/webhook"
restclient "k8s.io/client-go/rest"
"k8s.io/kubernetes/pkg/api/legacyscheme"
kapi "k8s.io/kubernetes/pkg/apis/core"
@@ -55,6 +56,12 @@ func TestAddFlags(t *testing.T) {
"--audit-policy-file=/policy",
"--audit-webhook-config-file=/webhook-config",
"--audit-webhook-mode=blocking",
+ "--audit-webhook-batch-buffer-size=42",
+ "--audit-webhook-batch-max-size=43",
+ "--audit-webhook-batch-max-wait=1s",
+ "--audit-webhook-batch-throttle-qps=43.5",
+ "--audit-webhook-batch-throttle-burst=44",
+ "--audit-webhook-batch-initial-backoff=2s",
"--authentication-token-webhook-cache-ttl=3m",
"--authentication-token-webhook-config-file=/token-webhook-config",
"--authorization-mode=AlwaysDeny",
@@ -170,6 +177,14 @@ func TestAddFlags(t *testing.T) {
WebhookOptions: apiserveroptions.AuditWebhookOptions{
Mode: "blocking",
ConfigFile: "/webhook-config",
+ BatchConfig: auditwebhook.BatchBackendConfig{
+ BufferSize: 42,
+ MaxBatchSize: 43,
+ MaxBatchWait: 1 * time.Second,
+ ThrottleQPS: 43.5,
+ ThrottleBurst: 44,
+ InitialBackoff: 2 * time.Second,
+ },
},
PolicyFile: "/policy",
},
diff --git a/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/controllermanager.go b/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/controllermanager.go
index 71ff16d1ff21..621c5cb17e01 100644
--- a/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/controllermanager.go
+++ b/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/controllermanager.go
@@ -420,7 +420,7 @@ func GetAvailableResources(clientBuilder controller.ControllerClientBuilder) (ma
return allResources, nil
}
-// createControllerContext creates a context struct containing references to resources needed by the
+// CreateControllerContext creates a context struct containing references to resources needed by the
// controllers such as the cloud provider and clientBuilder. rootClientBuilder is only used for
// the shared-informers client and token controller.
func createControllerContext(s *options.CMServer, rootClientBuilder, clientBuilder controller.ControllerClientBuilder, stop <-chan struct{}) (ControllerContext, error) {
diff --git a/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/patch.go b/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/patch.go
index 4accfb3e464a..02ce021eee48 100644
--- a/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/patch.go
+++ b/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/patch.go
@@ -7,3 +7,6 @@ import (
// This allows overriding from inside the same process. It's not pretty, but its fairly easy to maintain because conflicts are small.
var CreateControllerContext func(s *options.CMServer, rootClientBuilder, clientBuilder controller.ControllerClientBuilder, stop <-chan struct{}) (ControllerContext, error) = createControllerContext
+
+// StartInformers allows overriding inside of the same process.
+var StartInformers func(stop <-chan struct{}) = nil
diff --git a/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/plugins.go b/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/plugins.go
index a77bac3a4a04..170c366c90a7 100644
--- a/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/plugins.go
+++ b/vendor/k8s.io/kubernetes/cmd/kube-controller-manager/app/plugins.go
@@ -77,7 +77,7 @@ func ProbeAttachableVolumePlugins() []volume.VolumePlugin {
allPlugins = append(allPlugins, fc.ProbeVolumePlugins()...)
allPlugins = append(allPlugins, iscsi.ProbeVolumePlugins()...)
allPlugins = append(allPlugins, rbd.ProbeVolumePlugins()...)
- if !utilfeature.DefaultFeatureGate.Enabled(features.CSIPersistentVolume) {
+ if utilfeature.DefaultFeatureGate.Enabled(features.CSIPersistentVolume) {
allPlugins = append(allPlugins, csi.ProbeVolumePlugins()...)
}
return allPlugins
diff --git a/vendor/k8s.io/kubernetes/cmd/kube-proxy/app/server.go b/vendor/k8s.io/kubernetes/cmd/kube-proxy/app/server.go
index 6de788607fed..2f9ea2eac3e7 100644
--- a/vendor/k8s.io/kubernetes/cmd/kube-proxy/app/server.go
+++ b/vendor/k8s.io/kubernetes/cmd/kube-proxy/app/server.go
@@ -125,11 +125,11 @@ func AddFlags(options *Options, fs *pflag.FlagSet) {
// All flags below here are deprecated and will eventually be removed.
- fs.Var(componentconfig.IPVar{Val: &options.config.BindAddress}, "bind-address", "The IP address for the proxy server to serve on (set to 0.0.0.0 for all interfaces)")
+ fs.Var(componentconfig.IPVar{Val: &options.config.BindAddress}, "bind-address", "The IP address for the proxy server to serve on (set to `0.0.0.0` for all IPv4 interfaces and `::` for all IPv6 interfaces)")
fs.StringVar(&options.master, "master", options.master, "The address of the Kubernetes API server (overrides any value in kubeconfig)")
fs.Int32Var(&options.healthzPort, "healthz-port", options.healthzPort, "The port to bind the health check server. Use 0 to disable.")
- fs.Var(componentconfig.IPVar{Val: &options.config.HealthzBindAddress}, "healthz-bind-address", "The IP address and port for the health check server to serve on (set to 0.0.0.0 for all interfaces)")
- fs.Var(componentconfig.IPVar{Val: &options.config.MetricsBindAddress}, "metrics-bind-address", "The IP address and port for the metrics server to serve on (set to 0.0.0.0 for all interfaces)")
+ fs.Var(componentconfig.IPVar{Val: &options.config.HealthzBindAddress}, "healthz-bind-address", "The IP address and port for the health check server to serve on (set to `0.0.0.0` for all IPv4 interfaces and `::` for all IPv6 interfaces)")
+ fs.Var(componentconfig.IPVar{Val: &options.config.MetricsBindAddress}, "metrics-bind-address", "The IP address and port for the metrics server to serve on (set to `0.0.0.0` for all IPv4 interfaces and `::` for all IPv6 interfaces)")
fs.Int32Var(options.config.OOMScoreAdj, "oom-score-adj", utilpointer.Int32PtrDerefOr(options.config.OOMScoreAdj, int32(qos.KubeProxyOOMScoreAdj)), "The oom-score-adj value for kube-proxy process. Values must be within the range [-1000, 1000]")
fs.StringVar(&options.config.ResourceContainer, "resource-container", options.config.ResourceContainer, "Absolute name of the resource-only container to create and run the Kube-proxy in (Default: /kube-proxy).")
fs.MarkDeprecated("resource-container", "This feature will be removed in a later release.")
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/defaults.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/defaults.go
index 948956e46d96..16c2db8e89cf 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/defaults.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/defaults.go
@@ -39,7 +39,7 @@ const (
// DefaultClusterDNSIP defines default DNS IP
DefaultClusterDNSIP = "10.96.0.10"
// DefaultKubernetesVersion defines default kubernetes version
- DefaultKubernetesVersion = "stable-1.8"
+ DefaultKubernetesVersion = "stable-1.9"
// DefaultAPIBindPort defines default API port
DefaultAPIBindPort = 6443
// DefaultAuthorizationModes defines default authorization modes
@@ -156,26 +156,24 @@ func SetDefaults_NodeConfiguration(obj *NodeConfiguration) {
}
}
-// SetDefaultsEtcdSelfHosted sets defaults for self-hosted etcd
+// SetDefaultsEtcdSelfHosted sets defaults for self-hosted etcd if used
func SetDefaultsEtcdSelfHosted(obj *MasterConfiguration) {
- if obj.Etcd.SelfHosted == nil {
- obj.Etcd.SelfHosted = &SelfHostedEtcd{}
- }
-
- if obj.Etcd.SelfHosted.ClusterServiceName == "" {
- obj.Etcd.SelfHosted.ClusterServiceName = DefaultEtcdClusterServiceName
- }
+ if obj.Etcd.SelfHosted != nil {
+ if obj.Etcd.SelfHosted.ClusterServiceName == "" {
+ obj.Etcd.SelfHosted.ClusterServiceName = DefaultEtcdClusterServiceName
+ }
- if obj.Etcd.SelfHosted.EtcdVersion == "" {
- obj.Etcd.SelfHosted.EtcdVersion = constants.DefaultEtcdVersion
- }
+ if obj.Etcd.SelfHosted.EtcdVersion == "" {
+ obj.Etcd.SelfHosted.EtcdVersion = constants.DefaultEtcdVersion
+ }
- if obj.Etcd.SelfHosted.OperatorVersion == "" {
- obj.Etcd.SelfHosted.OperatorVersion = DefaultEtcdOperatorVersion
- }
+ if obj.Etcd.SelfHosted.OperatorVersion == "" {
+ obj.Etcd.SelfHosted.OperatorVersion = DefaultEtcdOperatorVersion
+ }
- if obj.Etcd.SelfHosted.CertificatesDir == "" {
- obj.Etcd.SelfHosted.CertificatesDir = DefaultEtcdCertDir
+ if obj.Etcd.SelfHosted.CertificatesDir == "" {
+ obj.Etcd.SelfHosted.CertificatesDir = DefaultEtcdCertDir
+ }
}
}
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/types.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/types.go
index 349dde5510fc..ee7b84f1b1e7 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/types.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/types.go
@@ -147,7 +147,7 @@ type NodeConfiguration struct {
// KubeletConfiguration contains elements describing initial remote configuration of kubelet
type KubeletConfiguration struct {
- BaseConfig *kubeletconfigv1alpha1.KubeletConfiguration `json:"baseConfig"`
+ BaseConfig *kubeletconfigv1alpha1.KubeletConfiguration `json:"baseConfig,omitempty"`
}
// HostPathMount contains elements describing volumes that are mounted from the
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.conversion.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.conversion.go
index 5cebdd5d5bc1..0d7f685c3b89 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.conversion.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.conversion.go
@@ -1,7 +1,7 @@
// +build !ignore_autogenerated
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.deepcopy.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.deepcopy.go
index 444eb489fe08..720496b407ec 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.deepcopy.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.deepcopy.go
@@ -1,7 +1,7 @@
// +build !ignore_autogenerated
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.defaults.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.defaults.go
index 098153aa8237..cf5182a6cf9c 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.defaults.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1/zz_generated.defaults.go
@@ -1,7 +1,7 @@
// +build !ignore_autogenerated
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/validation/validation.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/validation/validation.go
index f7b9ab210728..3220b41aab4d 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/validation/validation.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/validation/validation.go
@@ -315,7 +315,7 @@ func ValidateMixedArguments(flag *pflag.FlagSet) error {
mixedInvalidFlags := []string{}
flag.Visit(func(f *pflag.Flag) {
- if f.Name == "config" || strings.HasPrefix(f.Name, "ignore-checks-") || strings.HasPrefix(f.Name, "skip-") || f.Name == "dry-run" || f.Name == "kubeconfig" {
+ if f.Name == "config" || f.Name == "ignore-preflight-errors" || strings.HasPrefix(f.Name, "skip-") || f.Name == "dry-run" || f.Name == "kubeconfig" {
// "--skip-*" flags or other whitelisted flags can be set with --config
return
}
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/zz_generated.deepcopy.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/zz_generated.deepcopy.go
index 5c574f5f027c..aa8c30e4b78e 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/zz_generated.deepcopy.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/zz_generated.deepcopy.go
@@ -1,7 +1,7 @@
// +build !ignore_autogenerated
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/init.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/init.go
index 7088e1af0b2c..bcf98c0f5088 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/init.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/init.go
@@ -228,7 +228,6 @@ func AddInitOtherFlags(flagSet *flag.FlagSet, cfgPath *string, skipPreFlight, sk
// NewInit validates given arguments and instantiates Init struct with provided information.
func NewInit(cfgPath string, cfg *kubeadmapi.MasterConfiguration, ignorePreflightErrors sets.String, skipTokenPrint, dryRun bool, criSocket string) (*Init, error) {
- fmt.Println("[kubeadm] WARNING: kubeadm is currently in beta")
if cfgPath != "" {
b, err := ioutil.ReadFile(cfgPath)
@@ -433,7 +432,7 @@ func (i *Init) Run(out io.Writer) error {
// Temporary control plane is up, now we create our self hosted control
// plane components and remove the static manifests:
fmt.Println("[self-hosted] Creating self-hosted control plane.")
- if err := selfhostingphase.CreateSelfHostedControlPlane(manifestDir, kubeConfigDir, i.cfg, client, waiter); err != nil {
+ if err := selfhostingphase.CreateSelfHostedControlPlane(manifestDir, kubeConfigDir, i.cfg, client, waiter, i.dryRun); err != nil {
return fmt.Errorf("error creating self hosted control plane: %v", err)
}
}
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/join.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/join.go
index 23fdea08a0f0..2bc32fe4d725 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/join.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/join.go
@@ -199,7 +199,6 @@ type Join struct {
// NewJoin instantiates Join struct with given arguments
func NewJoin(cfgPath string, args []string, cfg *kubeadmapi.NodeConfiguration, ignorePreflightErrors sets.String, criSocket string) (*Join, error) {
- fmt.Println("[kubeadm] WARNING: kubeadm is currently in beta")
if cfg.NodeName == "" {
cfg.NodeName = nodeutil.GetHostname("")
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/phases/selfhosting.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/phases/selfhosting.go
index b9200ca57e92..9bf6530ee1f3 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/phases/selfhosting.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/phases/selfhosting.go
@@ -103,7 +103,7 @@ func getSelfhostingSubCommand() *cobra.Command {
// Converts the Static Pod-hosted control plane into a self-hosted one
waiter := apiclient.NewKubeWaiter(client, 2*time.Minute, os.Stdout)
- err = selfhosting.CreateSelfHostedControlPlane(constants.GetStaticPodDirectory(), constants.KubernetesDir, internalcfg, client, waiter)
+ err = selfhosting.CreateSelfHostedControlPlane(constants.GetStaticPodDirectory(), constants.KubernetesDir, internalcfg, client, waiter, false)
kubeadmutil.CheckErr(err)
},
}
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/apply.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/apply.go
index fdb4f4f240b5..08629ef2b783 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/apply.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/apply.go
@@ -28,6 +28,7 @@ import (
"k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/validation"
cmdutil "k8s.io/kubernetes/cmd/kubeadm/app/cmd/util"
"k8s.io/kubernetes/cmd/kubeadm/app/constants"
+ "k8s.io/kubernetes/cmd/kubeadm/app/features"
"k8s.io/kubernetes/cmd/kubeadm/app/phases/controlplane"
"k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade"
kubeadmutil "k8s.io/kubernetes/cmd/kubeadm/app/util"
@@ -64,7 +65,7 @@ func NewCmdApply(parentFlags *cmdUpgradeFlags) *cobra.Command {
flags := &applyFlags{
parent: parentFlags,
imagePullTimeout: 15 * time.Minute,
- etcdUpgrade: false,
+ etcdUpgrade: true,
}
cmd := &cobra.Command{
@@ -119,14 +120,11 @@ func NewCmdApply(parentFlags *cmdUpgradeFlags) *cobra.Command {
func RunApply(flags *applyFlags) error {
// Start with the basics, verify that the cluster is healthy and get the configuration from the cluster (using the ConfigMap)
- upgradeVars, err := enforceRequirements(flags.parent.featureGatesString, flags.parent.kubeConfigPath, flags.parent.cfgPath, flags.parent.printConfig, flags.dryRun, flags.parent.ignorePreflightErrorsSet)
+ upgradeVars, err := enforceRequirements(flags.parent, flags.dryRun, flags.newK8sVersionStr)
if err != nil {
return err
}
- // Set the upgraded version on the external config object now
- upgradeVars.cfg.KubernetesVersion = flags.newK8sVersionStr
-
// Grab the external, versioned configuration and convert it to the internal type for usage here later
internalcfg := &kubeadmapi.MasterConfiguration{}
legacyscheme.Scheme.Convert(upgradeVars.cfg, internalcfg, nil)
@@ -144,6 +142,10 @@ func RunApply(flags *applyFlags) error {
}
flags.newK8sVersion = k8sVer
+ if err := features.ValidateVersion(features.InitFeatureGates, internalcfg.FeatureGates, internalcfg.KubernetesVersion); err != nil {
+ return err
+ }
+
// Enforce the version skew policies
if err := EnforceVersionPolicies(flags, upgradeVars.versionGetter); err != nil {
return fmt.Errorf("[upgrade/version] FATAL: %v", err)
@@ -167,7 +169,7 @@ func RunApply(flags *applyFlags) error {
}
// Upgrade RBAC rules and addons.
- if err := upgrade.PerformPostUpgradeTasks(upgradeVars.client, internalcfg, flags.newK8sVersion); err != nil {
+ if err := upgrade.PerformPostUpgradeTasks(upgradeVars.client, internalcfg, flags.newK8sVersion, flags.dryRun); err != nil {
return fmt.Errorf("[upgrade/postupgrade] FATAL post-upgrade error: %v", err)
}
@@ -201,7 +203,7 @@ func SetImplicitFlags(flags *applyFlags) error {
// EnforceVersionPolicies makes sure that the version the user specified is valid to upgrade to
// There are both fatal and skippable (with --force) errors
func EnforceVersionPolicies(flags *applyFlags, versionGetter upgrade.VersionGetter) error {
- fmt.Printf("[upgrade/version] You have chosen to upgrade to version %q\n", flags.newK8sVersionStr)
+ fmt.Printf("[upgrade/version] You have chosen to change the cluster version to %q\n", flags.newK8sVersionStr)
versionSkewErrs := upgrade.EnforceVersionPolicies(versionGetter, flags.newK8sVersionStr, flags.newK8sVersion, flags.parent.allowExperimentalUpgrades, flags.parent.allowRCUpgrades)
if versionSkewErrs != nil {
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/common.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/common.go
index 2fbbf08f5102..254c9afbce99 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/common.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/common.go
@@ -48,35 +48,37 @@ type upgradeVariables struct {
}
// enforceRequirements verifies that it's okay to upgrade and then returns the variables needed for the rest of the procedure
-func enforceRequirements(featureGatesString, kubeConfigPath, cfgPath string, printConfig, dryRun bool, ignoreChecksErrors sets.String) (*upgradeVariables, error) {
- client, err := getClient(kubeConfigPath, dryRun)
+func enforceRequirements(flags *cmdUpgradeFlags, dryRun bool, newK8sVersion string) (*upgradeVariables, error) {
+ client, err := getClient(flags.kubeConfigPath, dryRun)
if err != nil {
- return nil, fmt.Errorf("couldn't create a Kubernetes client from file %q: %v", kubeConfigPath, err)
+ return nil, fmt.Errorf("couldn't create a Kubernetes client from file %q: %v", flags.kubeConfigPath, err)
}
// Run healthchecks against the cluster
- if err := upgrade.CheckClusterHealth(client, ignoreChecksErrors); err != nil {
+ if err := upgrade.CheckClusterHealth(client, flags.ignorePreflightErrorsSet); err != nil {
return nil, fmt.Errorf("[upgrade/health] FATAL: %v", err)
}
// Fetch the configuration from a file or ConfigMap and validate it
- cfg, err := upgrade.FetchConfiguration(client, os.Stdout, cfgPath)
+ cfg, err := upgrade.FetchConfiguration(client, os.Stdout, flags.cfgPath)
if err != nil {
return nil, fmt.Errorf("[upgrade/config] FATAL: %v", err)
}
+ // If a new k8s version should be set, apply the change before printing the config
+ if len(newK8sVersion) != 0 {
+ cfg.KubernetesVersion = newK8sVersion
+ }
+
// If the user told us to print this information out; do it!
- if printConfig {
+ if flags.printConfig {
printConfiguration(cfg, os.Stdout)
}
- cfg.FeatureGates, err = features.NewFeatureGate(&features.InitFeatureGates, featureGatesString)
+ cfg.FeatureGates, err = features.NewFeatureGate(&features.InitFeatureGates, flags.featureGatesString)
if err != nil {
return nil, fmt.Errorf("[upgrade/config] FATAL: %v", err)
}
- if err := features.ValidateVersion(features.InitFeatureGates, cfg.FeatureGates, cfg.KubernetesVersion); err != nil {
- return nil, err
- }
return &upgradeVariables{
client: client,
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/common_test.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/common_test.go
index e7105798970d..5ebff084e0a1 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/common_test.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/common_test.go
@@ -52,8 +52,7 @@ func TestPrintConfiguration(t *testing.T) {
keyFile: ""
imageRepository: ""
kubeProxy: {}
- kubeletConfiguration:
- baseConfig: null
+ kubeletConfiguration: {}
kubernetesVersion: v1.7.1
networking:
dnsDomain: ""
@@ -86,8 +85,7 @@ func TestPrintConfiguration(t *testing.T) {
keyFile: ""
imageRepository: ""
kubeProxy: {}
- kubeletConfiguration:
- baseConfig: null
+ kubeletConfiguration: {}
kubernetesVersion: v1.7.1
networking:
dnsDomain: ""
@@ -130,8 +128,7 @@ func TestPrintConfiguration(t *testing.T) {
operatorVersion: v0.1.0
imageRepository: ""
kubeProxy: {}
- kubeletConfiguration:
- baseConfig: null
+ kubeletConfiguration: {}
kubernetesVersion: v1.7.1
networking:
dnsDomain: ""
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/plan.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/plan.go
index 61e0b4376a67..09031f81654e 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/plan.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/cmd/upgrade/plan.go
@@ -54,8 +54,8 @@ func NewCmdPlan(parentFlags *cmdUpgradeFlags) *cobra.Command {
// RunPlan takes care of outputting available versions to upgrade to for the user
func RunPlan(parentFlags *cmdUpgradeFlags) error {
- // Start with the basics, verify that the cluster is healthy, build a client and a versionGetter. Never set dry-run for plan.
- upgradeVars, err := enforceRequirements(parentFlags.featureGatesString, parentFlags.kubeConfigPath, parentFlags.cfgPath, parentFlags.printConfig, false, parentFlags.ignorePreflightErrorsSet)
+ // Start with the basics, verify that the cluster is healthy, build a client and a versionGetter. Never dry-run when planning.
+ upgradeVars, err := enforceRequirements(parentFlags, false, "")
if err != nil {
return err
}
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/features/features.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/features/features.go
index 2a9fa52ac784..57627cb367b4 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/features/features.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/features/features.go
@@ -33,10 +33,10 @@ const (
// CoreDNS is alpha in v1.9
CoreDNS = "CoreDNS"
- // SelfHosting is beta in v1.8
+ // SelfHosting is alpha in v1.8 and v1.9
SelfHosting = "SelfHosting"
- // StoreCertsInSecrets is alpha in v1.8
+ // StoreCertsInSecrets is alpha in v1.8 and v1.9
StoreCertsInSecrets = "StoreCertsInSecrets"
// DynamicKubeletConfig is alpha in v1.9
@@ -47,9 +47,10 @@ var v190 = version.MustParseSemantic("v1.9.0-alpha.1")
// InitFeatureGates are the default feature gates for the init command
var InitFeatureGates = FeatureList{
- SelfHosting: {FeatureSpec: utilfeature.FeatureSpec{Default: false, PreRelease: utilfeature.Beta}},
- StoreCertsInSecrets: {FeatureSpec: utilfeature.FeatureSpec{Default: false, PreRelease: utilfeature.Alpha}},
- HighAvailability: {FeatureSpec: utilfeature.FeatureSpec{Default: false, PreRelease: utilfeature.Alpha}, MinimumVersion: v190},
+ SelfHosting: {FeatureSpec: utilfeature.FeatureSpec{Default: false, PreRelease: utilfeature.Alpha}},
+ StoreCertsInSecrets: {FeatureSpec: utilfeature.FeatureSpec{Default: false, PreRelease: utilfeature.Alpha}},
+ // We don't want to advertise this feature gate exists in v1.9 to avoid confusion as it is not yet working
+ HighAvailability: {FeatureSpec: utilfeature.FeatureSpec{Default: false, PreRelease: utilfeature.Alpha}, MinimumVersion: v190, HiddenInHelpText: true},
CoreDNS: {FeatureSpec: utilfeature.FeatureSpec{Default: false, PreRelease: utilfeature.Alpha}, MinimumVersion: v190},
DynamicKubeletConfig: {FeatureSpec: utilfeature.FeatureSpec{Default: false, PreRelease: utilfeature.Alpha}, MinimumVersion: v190},
}
@@ -57,7 +58,8 @@ var InitFeatureGates = FeatureList{
// Feature represents a feature being gated
type Feature struct {
utilfeature.FeatureSpec
- MinimumVersion *version.Version
+ MinimumVersion *version.Version
+ HiddenInHelpText bool
}
// FeatureList represents a list of feature gates
@@ -113,6 +115,10 @@ func Keys(featureList FeatureList) []string {
func KnownFeatures(f *FeatureList) []string {
var known []string
for k, v := range *f {
+ if v.HiddenInHelpText {
+ continue
+ }
+
pre := ""
if v.PreRelease != utilfeature.GA {
pre = fmt.Sprintf("%s - ", v.PreRelease)
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/dns.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/dns.go
index b1866e584fae..072359a8e5b0 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/dns.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/dns.go
@@ -63,22 +63,25 @@ func kubeDNSAddon(cfg *kubeadmapi.MasterConfiguration, client clientset.Interfac
return err
}
- var dnsBindAddr string
+ var dnsBindAddr, dnsProbeAddr string
if dnsip.To4() == nil {
dnsBindAddr = "::1"
+ dnsProbeAddr = "[" + dnsBindAddr + "]"
} else {
dnsBindAddr = "127.0.0.1"
+ dnsProbeAddr = dnsBindAddr
}
// Get the YAML manifest conditionally based on the k8s version
kubeDNSDeploymentBytes := GetKubeDNSManifest(k8sVersion)
dnsDeploymentBytes, err := kubeadmutil.ParseTemplate(kubeDNSDeploymentBytes,
- struct{ ImageRepository, Arch, Version, DNSBindAddr, DNSDomain, DNSProbeType, MasterTaintKey string }{
+ struct{ ImageRepository, Arch, Version, DNSBindAddr, DNSProbeAddr, DNSDomain, DNSProbeType, MasterTaintKey string }{
ImageRepository: cfg.ImageRepository,
Arch: runtime.GOARCH,
// Get the kube-dns version conditionally based on the k8s version
Version: GetDNSVersion(k8sVersion, kubeadmconstants.KubeDNS),
DNSBindAddr: dnsBindAddr,
+ DNSProbeAddr: dnsProbeAddr,
DNSDomain: cfg.Networking.DNSDomain,
DNSProbeType: GetKubeDNSProbeType(k8sVersion),
MasterTaintKey: kubeadmconstants.LabelNodeRoleMaster,
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/dns_test.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/dns_test.go
index 40c0043436e4..55967aae3d7a 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/dns_test.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/dns_test.go
@@ -92,11 +92,12 @@ func TestCompileManifests(t *testing.T) {
}{
{
manifest: v180AndAboveKubeDNSDeployment,
- data: struct{ ImageRepository, Arch, Version, DNSBindAddr, DNSDomain, DNSProbeType, MasterTaintKey string }{
+ data: struct{ ImageRepository, Arch, Version, DNSBindAddr, DNSProbeAddr, DNSDomain, DNSProbeType, MasterTaintKey string }{
ImageRepository: "foo",
Arch: "foo",
Version: "foo",
DNSBindAddr: "foo",
+ DNSProbeAddr: "foo",
DNSDomain: "foo",
DNSProbeType: "foo",
MasterTaintKey: "foo",
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/manifests.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/manifests.go
index 4875ddb90036..5dd65612c27f 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/manifests.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/manifests.go
@@ -156,8 +156,8 @@ spec:
args:
- --v=2
- --logtostderr
- - --probe=kubedns,{{ .DNSBindAddr }}:10053,kubernetes.default.svc.{{ .DNSDomain }},5,{{ .DNSProbeType }}
- - --probe=dnsmasq,{{ .DNSBindAddr }}:53,kubernetes.default.svc.{{ .DNSDomain }},5,{{ .DNSProbeType }}
+ - --probe=kubedns,{{ .DNSProbeAddr }}:10053,kubernetes.default.svc.{{ .DNSDomain }},5,{{ .DNSProbeType }}
+ - --probe=dnsmasq,{{ .DNSProbeAddr }}:53,kubernetes.default.svc.{{ .DNSDomain }},5,{{ .DNSProbeType }}
ports:
- containerPort: 10054
name: metrics
@@ -293,7 +293,7 @@ data:
Corefile: |
.:53 {
errors
- log stdout
+ log
health
kubernetes {{ .DNSDomain }} {{ .ServiceCIDR }} {
pods insecure
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/versions.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/versions.go
index ed3fcf196095..96267a9f7f8c 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/versions.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/addons/dns/versions.go
@@ -27,14 +27,14 @@ const (
kubeDNSProbeSRV = "SRV"
kubeDNSProbeA = "A"
- coreDNSVersion = "0.9.10"
+ coreDNSVersion = "1.0.1"
)
// GetDNSVersion returns the right kube-dns version for a specific k8s version
func GetDNSVersion(kubeVersion *version.Version, dns string) string {
// v1.8.0+ uses kube-dns 1.14.5
// v1.9.0+ uses kube-dns 1.14.7
- // v1.9.0+ uses CoreDNS 0.9.10
+ // v1.9.0+ uses CoreDNS 1.0.1
// In the future when the version is bumped at HEAD; add conditional logic to return the right versions
// Also, the version might be bumped for different k8s releases on the same branch
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/controlplane/volumes.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/controlplane/volumes.go
index 35edc2111879..a3b5ce7fefc6 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/controlplane/volumes.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/controlplane/volumes.go
@@ -34,6 +34,7 @@ const (
caCertsVolumePath = "/etc/ssl/certs"
caCertsPkiVolumeName = "ca-certs-etc-pki"
flexvolumeDirVolumeName = "flexvolume-dir"
+ cloudConfigVolumeName = "cloud-config"
flexvolumeDirVolumePath = "/usr/libexec/kubernetes/kubelet-plugins/volume/exec"
)
@@ -70,6 +71,13 @@ func getHostPathVolumesForTheControlPlane(cfg *kubeadmapi.MasterConfiguration) c
// Read-only mount for the controller manager kubeconfig file
controllerManagerKubeConfigFile := filepath.Join(kubeadmconstants.KubernetesDir, kubeadmconstants.ControllerManagerKubeConfigFileName)
mounts.NewHostPathMount(kubeadmconstants.KubeControllerManager, kubeadmconstants.KubeConfigVolumeName, controllerManagerKubeConfigFile, controllerManagerKubeConfigFile, true, &hostPathFileOrCreate)
+ // Read-only mount of the cloud config file if present
+ if cfg.CloudProvider != "" {
+ if _, err := os.Stat(DefaultCloudConfigPath); err == nil {
+ mounts.NewHostPathMount(kubeadmconstants.KubeAPIServer, cloudConfigVolumeName, DefaultCloudConfigPath, DefaultCloudConfigPath, true, &hostPathFileOrCreate)
+ mounts.NewHostPathMount(kubeadmconstants.KubeControllerManager, cloudConfigVolumeName, DefaultCloudConfigPath, DefaultCloudConfigPath, true, &hostPathFileOrCreate)
+ }
+ }
// Mount for the flexvolume directory (/usr/libexec/kubernetes/kubelet-plugins/volume/exec) directory
// Flexvolume dir must NOT be readonly as it is used for third-party plugins to integrate with their storage backends via unix domain socket.
if stat, err := os.Stat(flexvolumeDirVolumePath); err == nil && stat.IsDir() {
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/controlplane/volumes_test.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/controlplane/volumes_test.go
index daa824062c25..a5fde3cf035e 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/controlplane/volumes_test.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/controlplane/volumes_test.go
@@ -521,7 +521,9 @@ func TestGetHostPathVolumesForTheControlPlane(t *testing.T) {
if _, ok := mounts.volumeMounts[kubeadmconstants.KubeControllerManager][flexvolumeDirVolumeName]; ok {
delete(mounts.volumeMounts[kubeadmconstants.KubeControllerManager], flexvolumeDirVolumeName)
}
-
+ if _, ok := mounts.volumeMounts[kubeadmconstants.KubeControllerManager][cloudConfigVolumeName]; ok {
+ delete(mounts.volumeMounts[kubeadmconstants.KubeControllerManager], cloudConfigVolumeName)
+ }
if !reflect.DeepEqual(mounts.volumes, rt.vol) {
t.Errorf(
"failed getHostPathVolumesForTheControlPlane:\n\texpected: %v\n\t actual: %v",
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/etcd/spec/zz_generated.deepcopy.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/etcd/spec/zz_generated.deepcopy.go
index 16d00bf0e8bc..79217085e3fc 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/etcd/spec/zz_generated.deepcopy.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/etcd/spec/zz_generated.deepcopy.go
@@ -1,7 +1,7 @@
// +build !ignore_autogenerated
/*
-Copyright 2017 The Kubernetes Authors.
+Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/kubelet/kubelet.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/kubelet/kubelet.go
index 7d2ac0551568..aec20293b626 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/kubelet/kubelet.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/kubelet/kubelet.go
@@ -43,7 +43,7 @@ import (
// CreateBaseKubeletConfiguration creates base kubelet configuration for dynamic kubelet configuration feature.
func CreateBaseKubeletConfiguration(cfg *kubeadmapi.MasterConfiguration, client clientset.Interface) error {
- fmt.Printf("[kubelet] Uploading a ConfigMap %q in namespace %s with base configuration for the kubelets in the cluster",
+ fmt.Printf("[kubelet] Uploading a ConfigMap %q in namespace %s with base configuration for the kubelets in the cluster\n",
kubeadmconstants.KubeletBaseConfigurationConfigMap, metav1.NamespaceSystem)
_, kubeletCodecs, err := kubeletconfigscheme.NewSchemeAndCodecs()
@@ -95,7 +95,7 @@ func ConsumeBaseKubeletConfiguration(nodeName string) error {
// updateNodeWithConfigMap updates node ConfigSource with KubeletBaseConfigurationConfigMap
func updateNodeWithConfigMap(client clientset.Interface, nodeName string) error {
- fmt.Printf("[kubelet] Using Dynamic Kubelet Config for node %q; config sourced from ConfigMap %q in namespace %s",
+ fmt.Printf("[kubelet] Using Dynamic Kubelet Config for node %q; config sourced from ConfigMap %q in namespace %s\n",
nodeName, kubeadmconstants.KubeletBaseConfigurationConfigMap, metav1.NamespaceSystem)
// Loop on every falsy return. Return with an error if raised. Exit successfully if true is returned.
@@ -203,7 +203,7 @@ func getLocalNodeTLSBootstrappedClient() (clientset.Interface, error) {
// WriteInitKubeletConfigToDiskOnMaster writes base kubelet configuration to disk on master.
func WriteInitKubeletConfigToDiskOnMaster(cfg *kubeadmapi.MasterConfiguration) error {
- fmt.Printf("[kubelet] Writing base configuration of kubelets to disk on master node %s", cfg.NodeName)
+ fmt.Printf("[kubelet] Writing base configuration of kubelets to disk on master node %s\n", cfg.NodeName)
_, kubeletCodecs, err := kubeletconfigscheme.NewSchemeAndCodecs()
if err != nil {
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/selfhosting/selfhosting.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/selfhosting/selfhosting.go
index 4e8e83072ae1..18ae9563f8f4 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/selfhosting/selfhosting.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/selfhosting/selfhosting.go
@@ -52,7 +52,7 @@ const (
// 8. In order to avoid race conditions, we have to make sure that static pod is deleted correctly before we continue
// Otherwise, there is a race condition when we proceed without kubelet having restarted the API server correctly and the next .Create call flakes
// 9. Do that for the kube-apiserver, kube-controller-manager and kube-scheduler in a loop
-func CreateSelfHostedControlPlane(manifestsDir, kubeConfigDir string, cfg *kubeadmapi.MasterConfiguration, client clientset.Interface, waiter apiclient.Waiter) error {
+func CreateSelfHostedControlPlane(manifestsDir, kubeConfigDir string, cfg *kubeadmapi.MasterConfiguration, client clientset.Interface, waiter apiclient.Waiter, dryRun bool) error {
// Adjust the timeout slightly to something self-hosting specific
waiter.SetTimeout(selfHostingWaitTimeout)
@@ -104,9 +104,11 @@ func CreateSelfHostedControlPlane(manifestsDir, kubeConfigDir string, cfg *kubea
return err
}
- // Remove the old Static Pod manifest
- if err := os.RemoveAll(manifestPath); err != nil {
- return fmt.Errorf("unable to delete static pod manifest for %s [%v]", componentName, err)
+ // Remove the old Static Pod manifest if not dryrunning
+ if !dryRun {
+ if err := os.RemoveAll(manifestPath); err != nil {
+ return fmt.Errorf("unable to delete static pod manifest for %s [%v]", componentName, err)
+ }
}
// Wait for the mirror Pod hash to be removed; otherwise we'll run into race conditions here when the kubelet hasn't had time to
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/BUILD b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/BUILD
index 907707d127ec..644794563b81 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/BUILD
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/BUILD
@@ -36,6 +36,7 @@ go_library(
"//cmd/kubeadm/app/util:go_default_library",
"//cmd/kubeadm/app/util/apiclient:go_default_library",
"//cmd/kubeadm/app/util/config:go_default_library",
+ "//cmd/kubeadm/app/util/dryrun:go_default_library",
"//pkg/api/legacyscheme:go_default_library",
"//pkg/util/version:go_default_library",
"//pkg/version:go_default_library",
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/policy.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/policy.go
index 594596ad8c49..185aa6675ad8 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/policy.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/policy.go
@@ -28,6 +28,9 @@ const (
// MaximumAllowedMinorVersionUpgradeSkew describes how many minor versions kubeadm can upgrade the control plane version in one go
MaximumAllowedMinorVersionUpgradeSkew = 1
+ // MaximumAllowedMinorVersionDowngradeSkew describes how many minor versions kubeadm can upgrade the control plane version in one go
+ MaximumAllowedMinorVersionDowngradeSkew = 1
+
// MaximumAllowedMinorVersionKubeletSkew describes how many minor versions the control plane version and the kubelet can skew in a kubeadm cluster
MaximumAllowedMinorVersionKubeletSkew = 1
)
@@ -72,23 +75,41 @@ func EnforceVersionPolicies(versionGetter VersionGetter, newK8sVersionStr string
skewErrors.Mandatory = append(skewErrors.Mandatory, fmt.Errorf("Specified version to upgrade to %q is equal to or lower than the minimum supported version %q. Please specify a higher version to upgrade to", newK8sVersionStr, clusterVersionStr))
}
- // Make sure new version is higher than the current Kubernetes version
- if clusterVersion.AtLeast(newK8sVersion) {
- // Even though we don't officially support downgrades, it "should work", and if user(s) need it and are willing to try; they can do so with --force
- skewErrors.Skippable = append(skewErrors.Skippable, fmt.Errorf("Specified version to upgrade to %q is equal to or lower than the cluster version %q. Downgrades are not supported yet", newK8sVersionStr, clusterVersionStr))
- } else {
- // If this code path runs, it's an upgrade (this code will run most of the time)
- // kubeadm doesn't support upgrades between two minor versions; e.g. a v1.7 -> v1.9 upgrade is not supported. Enforce that here
- if newK8sVersion.Minor() > clusterVersion.Minor()+MaximumAllowedMinorVersionUpgradeSkew {
- skewErrors.Mandatory = append(skewErrors.Mandatory, fmt.Errorf("Specified version to upgrade to %q is too high; kubeadm can upgrade only %d minor version at a time", newK8sVersionStr, MaximumAllowedMinorVersionUpgradeSkew))
+ // kubeadm doesn't support upgrades between two minor versions; e.g. a v1.7 -> v1.9 upgrade is not supported right away
+ if newK8sVersion.Minor() > clusterVersion.Minor()+MaximumAllowedMinorVersionUpgradeSkew {
+ tooLargeUpgradeSkewErr := fmt.Errorf("Specified version to upgrade to %q is too high; kubeadm can upgrade only %d minor version at a time", newK8sVersionStr, MaximumAllowedMinorVersionUpgradeSkew)
+ // If the version that we're about to upgrade to is a released version, we should fully enforce this policy
+ // If the version is a CI/dev/experimental version, it's okay to jump two minor version steps, but then require the -f flag
+ if len(newK8sVersion.PreRelease()) == 0 {
+ skewErrors.Mandatory = append(skewErrors.Mandatory, tooLargeUpgradeSkewErr)
+ } else {
+ skewErrors.Skippable = append(skewErrors.Skippable, tooLargeUpgradeSkewErr)
+ }
+ }
+
+ // kubeadm doesn't support downgrades between two minor versions; e.g. a v1.9 -> v1.7 downgrade is not supported right away
+ if newK8sVersion.Minor() < clusterVersion.Minor()-MaximumAllowedMinorVersionDowngradeSkew {
+ tooLargeDowngradeSkewErr := fmt.Errorf("Specified version to downgrade to %q is too low; kubeadm can downgrade only %d minor version at a time", newK8sVersionStr, MaximumAllowedMinorVersionDowngradeSkew)
+ // If the version that we're about to downgrade to is a released version, we should fully enforce this policy
+ // If the version is a CI/dev/experimental version, it's okay to jump two minor version steps, but then require the -f flag
+ if len(newK8sVersion.PreRelease()) == 0 {
+ skewErrors.Mandatory = append(skewErrors.Mandatory, tooLargeDowngradeSkewErr)
+ } else {
+ skewErrors.Skippable = append(skewErrors.Skippable, tooLargeDowngradeSkewErr)
}
}
// If the kubeadm version is lower than what we want to upgrade to; error
if kubeadmVersion.LessThan(newK8sVersion) {
if newK8sVersion.Minor() > kubeadmVersion.Minor() {
- // This is totally unsupported; kubeadm has no idea how it should handle a newer minor release than itself
- skewErrors.Mandatory = append(skewErrors.Mandatory, fmt.Errorf("Specified version to upgrade to %q is one minor release higher than the kubeadm minor release (%d > %d). Such an upgrade is not supported", newK8sVersionStr, newK8sVersion.Minor(), kubeadmVersion.Minor()))
+ tooLargeKubeadmSkew := fmt.Errorf("Specified version to upgrade to %q is at least one minor release higher than the kubeadm minor release (%d > %d). Such an upgrade is not supported", newK8sVersionStr, newK8sVersion.Minor(), kubeadmVersion.Minor())
+ // This is unsupported; kubeadm has no idea how it should handle a newer minor release than itself
+ // If the version is a CI/dev/experimental version though, lower the severity of this check, but then require the -f flag
+ if len(newK8sVersion.PreRelease()) == 0 {
+ skewErrors.Mandatory = append(skewErrors.Mandatory, tooLargeKubeadmSkew)
+ } else {
+ skewErrors.Skippable = append(skewErrors.Skippable, tooLargeKubeadmSkew)
+ }
} else {
// Upgrading to a higher patch version than kubeadm is ok if the user specifies --force. Not recommended, but possible.
skewErrors.Skippable = append(skewErrors.Skippable, fmt.Errorf("Specified version to upgrade to %q is higher than the kubeadm version %q. Upgrade kubeadm first using the tool you used to install kubeadm", newK8sVersionStr, kubeadmVersionStr))
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/policy_test.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/policy_test.go
index 9b81609000be..64f6d0e692c0 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/policy_test.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/policy_test.go
@@ -46,23 +46,21 @@ func TestEnforceVersionPolicies(t *testing.T) {
},
newK8sVersion: "v1.9.0",
},
- { // downgrades not supported
+ { // downgrades ok
vg: &fakeVersionGetter{
clusterVersion: "v1.8.3",
kubeletVersion: "v1.8.3",
kubeadmVersion: "v1.8.3",
},
- newK8sVersion: "v1.8.2",
- expectedSkippableErrs: 1,
+ newK8sVersion: "v1.8.2",
},
- { // upgrades without bumping the version number not supported yet. TODO: Change this?
+ { // upgrades without bumping the version number ok
vg: &fakeVersionGetter{
clusterVersion: "v1.8.3",
kubeletVersion: "v1.8.3",
kubeadmVersion: "v1.8.3",
},
- newK8sVersion: "v1.8.3",
- expectedSkippableErrs: 1,
+ newK8sVersion: "v1.8.3",
},
{ // new version must be higher than v1.8.0
vg: &fakeVersionGetter{
@@ -72,7 +70,6 @@ func TestEnforceVersionPolicies(t *testing.T) {
},
newK8sVersion: "v1.7.10",
expectedMandatoryErrs: 1, // version must be higher than v1.8.0
- expectedSkippableErrs: 1, // version shouldn't be downgraded
},
{ // upgrading two minor versions in one go is not supported
vg: &fakeVersionGetter{
@@ -84,6 +81,15 @@ func TestEnforceVersionPolicies(t *testing.T) {
expectedMandatoryErrs: 1, // can't upgrade two minor versions
expectedSkippableErrs: 1, // kubelet <-> apiserver skew too large
},
+ { // downgrading two minor versions in one go is not supported
+ vg: &fakeVersionGetter{
+ clusterVersion: "v1.10.3",
+ kubeletVersion: "v1.10.3",
+ kubeadmVersion: "v1.10.0",
+ },
+ newK8sVersion: "v1.8.3",
+ expectedMandatoryErrs: 1, // can't downgrade two minor versions
+ },
{ // kubeadm version must be higher than the new kube version. However, patch version skews may be forced
vg: &fakeVersionGetter{
clusterVersion: "v1.8.3",
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/postupgrade.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/postupgrade.go
index 2eae65ab1a20..b16a2fbe6e00 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/postupgrade.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/postupgrade.go
@@ -18,6 +18,8 @@ package upgrade
import (
"fmt"
+ "os"
+ "time"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"k8s.io/apimachinery/pkg/util/errors"
@@ -31,14 +33,16 @@ import (
"k8s.io/kubernetes/cmd/kubeadm/app/phases/bootstraptoken/clusterinfo"
nodebootstraptoken "k8s.io/kubernetes/cmd/kubeadm/app/phases/bootstraptoken/node"
certsphase "k8s.io/kubernetes/cmd/kubeadm/app/phases/certs"
+ "k8s.io/kubernetes/cmd/kubeadm/app/phases/selfhosting"
"k8s.io/kubernetes/cmd/kubeadm/app/phases/uploadconfig"
"k8s.io/kubernetes/cmd/kubeadm/app/util/apiclient"
+ dryrunutil "k8s.io/kubernetes/cmd/kubeadm/app/util/dryrun"
"k8s.io/kubernetes/pkg/util/version"
)
// PerformPostUpgradeTasks runs nearly the same functions as 'kubeadm init' would do
// Note that the markmaster phase is left out, not needed, and no token is created as that doesn't belong to the upgrade
-func PerformPostUpgradeTasks(client clientset.Interface, cfg *kubeadmapi.MasterConfiguration, newK8sVer *version.Version) error {
+func PerformPostUpgradeTasks(client clientset.Interface, cfg *kubeadmapi.MasterConfiguration, newK8sVer *version.Version, dryRun bool) error {
errs := []error{}
// Upload currently used configuration to the cluster
@@ -63,6 +67,11 @@ func PerformPostUpgradeTasks(client clientset.Interface, cfg *kubeadmapi.MasterC
errs = append(errs, err)
}
+ // Upgrade to a self-hosted control plane if possible
+ if err := upgradeToSelfHosting(client, cfg, newK8sVer, dryRun); err != nil {
+ errs = append(errs, err)
+ }
+
// TODO: Is this needed to do here? I think that updating cluster info should probably be separate from a normal upgrade
// Create the cluster-info ConfigMap with the associated RBAC rules
// if err := clusterinfo.CreateBootstrapConfigMapIfNotExists(client, kubeadmconstants.GetAdminKubeConfigPath()); err != nil {
@@ -92,9 +101,11 @@ func PerformPostUpgradeTasks(client clientset.Interface, cfg *kubeadmapi.MasterC
if err := dns.EnsureDNSAddon(cfg, client); err != nil {
errs = append(errs, err)
}
-
- if err := coreDNSDeployment(cfg, client); err != nil {
- errs = append(errs, err)
+ // Remove the old kube-dns deployment if coredns is now used
+ if !dryRun {
+ if err := removeOldKubeDNSDeploymentIfCoreDNSIsUsed(cfg, client); err != nil {
+ errs = append(errs, err)
+ }
}
if err := proxy.EnsureProxyAddon(cfg, client); err != nil {
@@ -103,22 +114,41 @@ func PerformPostUpgradeTasks(client clientset.Interface, cfg *kubeadmapi.MasterC
return errors.NewAggregate(errs)
}
-func coreDNSDeployment(cfg *kubeadmapi.MasterConfiguration, client clientset.Interface) error {
+func removeOldKubeDNSDeploymentIfCoreDNSIsUsed(cfg *kubeadmapi.MasterConfiguration, client clientset.Interface) error {
if features.Enabled(cfg.FeatureGates, features.CoreDNS) {
return apiclient.TryRunCommand(func() error {
- getCoreDNS, err := client.AppsV1beta2().Deployments(metav1.NamespaceSystem).Get(kubeadmconstants.CoreDNS, metav1.GetOptions{})
+ coreDNSDeployment, err := client.AppsV1beta2().Deployments(metav1.NamespaceSystem).Get(kubeadmconstants.CoreDNS, metav1.GetOptions{})
if err != nil {
return err
}
- if getCoreDNS.Status.ReadyReplicas == 0 {
+ if coreDNSDeployment.Status.ReadyReplicas == 0 {
return fmt.Errorf("the CodeDNS deployment isn't ready yet")
}
- err = client.AppsV1beta2().Deployments(metav1.NamespaceSystem).Delete(kubeadmconstants.KubeDNS, nil)
- if err != nil {
- return err
- }
- return nil
- }, 5)
+ return apiclient.DeleteDeploymentForeground(client, metav1.NamespaceSystem, kubeadmconstants.KubeDNS)
+ }, 10)
}
return nil
}
+
+func upgradeToSelfHosting(client clientset.Interface, cfg *kubeadmapi.MasterConfiguration, newK8sVer *version.Version, dryRun bool) error {
+ if features.Enabled(cfg.FeatureGates, features.SelfHosting) && !IsControlPlaneSelfHosted(client) && newK8sVer.AtLeast(v190alpha3) {
+
+ waiter := getWaiter(dryRun, client)
+
+ // kubeadm will now convert the static Pod-hosted control plane into a self-hosted one
+ fmt.Println("[self-hosted] Creating self-hosted control plane.")
+ if err := selfhosting.CreateSelfHostedControlPlane(kubeadmconstants.GetStaticPodDirectory(), kubeadmconstants.KubernetesDir, cfg, client, waiter, dryRun); err != nil {
+ return fmt.Errorf("error creating self hosted control plane: %v", err)
+ }
+ }
+ return nil
+}
+
+// getWaiter gets the right waiter implementation for the right occasion
+// TODO: Consolidate this with what's in init.go?
+func getWaiter(dryRun bool, client clientset.Interface) apiclient.Waiter {
+ if dryRun {
+ return dryrunutil.NewWaiter()
+ }
+ return apiclient.NewKubeWaiter(client, 30*time.Minute, os.Stdout)
+}
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/postupgrade_v18_19.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/postupgrade_v18_19.go
index 8243a8100fa3..ef8f5d305d5f 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/postupgrade_v18_19.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/postupgrade_v18_19.go
@@ -30,7 +30,9 @@ import (
"k8s.io/kubernetes/pkg/util/version"
)
+// TODO: Maybe move these constants elsewhere in future releases
var v190 = version.MustParseSemantic("v1.9.0")
+var v190alpha3 = version.MustParseSemantic("v1.9.0-alpha.3")
var expiry = 180 * 24 * time.Hour
// backupAPIServerCertAndKey backups the old cert and key of kube-apiserver to a specified directory.
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/staticpods.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/staticpods.go
index 716b39e7a369..b661ea205938 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/staticpods.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/phases/upgrade/staticpods.go
@@ -127,6 +127,12 @@ func (spm *KubeStaticPodPathManager) BackupEtcdDir() string {
}
func upgradeComponent(component string, waiter apiclient.Waiter, pathMgr StaticPodPathManager, cfg *kubeadmapi.MasterConfiguration, beforePodHash string, recoverManifests map[string]string) error {
+ // Special treatment is required for etcd case, when rollbackOldManifests should roll back etcd
+ // manifests only for the case when component is Etcd
+ recoverEtcd := false
+ if component == constants.Etcd {
+ recoverEtcd = true
+ }
// The old manifest is here; in the /etc/kubernetes/manifests/
currentManifestPath := pathMgr.RealManifestPath(component)
// The new, upgraded manifest will be written here
@@ -140,15 +146,15 @@ func upgradeComponent(component string, waiter apiclient.Waiter, pathMgr StaticP
// Move the old manifest into the old-manifests directory
if err := pathMgr.MoveFile(currentManifestPath, backupManifestPath); err != nil {
- return rollbackOldManifests(recoverManifests, err, pathMgr)
+ return rollbackOldManifests(recoverManifests, err, pathMgr, recoverEtcd)
}
// Move the new manifest into the manifests directory
if err := pathMgr.MoveFile(newManifestPath, currentManifestPath); err != nil {
- return rollbackOldManifests(recoverManifests, err, pathMgr)
+ return rollbackOldManifests(recoverManifests, err, pathMgr, recoverEtcd)
}
- fmt.Printf("[upgrade/staticpods] Moved upgraded manifest to %q and backed up old manifest to %q\n", currentManifestPath, backupManifestPath)
+ fmt.Printf("[upgrade/staticpods] Moved new manifest to %q and backed up old manifest to %q\n", currentManifestPath, backupManifestPath)
fmt.Println("[upgrade/staticpods] Waiting for the kubelet to restart the component")
// Wait for the mirror Pod hash to change; otherwise we'll run into race conditions here when the kubelet hasn't had time to
@@ -156,12 +162,12 @@ func upgradeComponent(component string, waiter apiclient.Waiter, pathMgr StaticP
// If we don't do this, there is a case where we remove the Static Pod manifest, kubelet is slow to react, kubeadm checks the
// API endpoint below of the OLD Static Pod component and proceeds quickly enough, which might lead to unexpected results.
if err := waiter.WaitForStaticPodControlPlaneHashChange(cfg.NodeName, component, beforePodHash); err != nil {
- return rollbackOldManifests(recoverManifests, err, pathMgr)
+ return rollbackOldManifests(recoverManifests, err, pathMgr, recoverEtcd)
}
// Wait for the static pod component to come up and register itself as a mirror pod
if err := waiter.WaitForPodsWithLabel("component=" + component); err != nil {
- return rollbackOldManifests(recoverManifests, err, pathMgr)
+ return rollbackOldManifests(recoverManifests, err, pathMgr, recoverEtcd)
}
fmt.Printf("[upgrade/staticpods] Component %q upgraded successfully!\n", component)
@@ -172,7 +178,7 @@ func upgradeComponent(component string, waiter apiclient.Waiter, pathMgr StaticP
func performEtcdStaticPodUpgrade(waiter apiclient.Waiter, pathMgr StaticPodPathManager, cfg *kubeadmapi.MasterConfiguration, recoverManifests map[string]string) (bool, error) {
// Add etcd static pod spec only if external etcd is not configured
if len(cfg.Etcd.Endpoints) != 0 {
- return false, fmt.Errorf("external etcd cannot be upgraded with kubeadm")
+ return false, fmt.Errorf("external etcd detected, won't try to change any etcd state")
}
// Checking health state of etcd before proceeding with the upgrtade
etcdCluster := util.LocalEtcdCluster{}
@@ -185,7 +191,7 @@ func performEtcdStaticPodUpgrade(waiter apiclient.Waiter, pathMgr StaticPodPathM
backupEtcdDir := pathMgr.BackupEtcdDir()
runningEtcdDir := cfg.Etcd.DataDir
if err := util.CopyDir(runningEtcdDir, backupEtcdDir); err != nil {
- return true, fmt.Errorf("fail to back up etcd data with %v", err)
+ return true, fmt.Errorf("fail to back up etcd data: %v", err)
}
// Need to check currently used version and version from constants, if differs then upgrade
@@ -200,7 +206,7 @@ func performEtcdStaticPodUpgrade(waiter apiclient.Waiter, pathMgr StaticPodPathM
// Comparing current etcd version with desired to catch the same version or downgrade condition and fail on them.
if desiredEtcdVersion.LessThan(currentEtcdVersion) {
- return true, fmt.Errorf("the requested etcd version (%s) for Kubernetes v(%s) is lower than the currently running version (%s)", desiredEtcdVersion.String(), cfg.KubernetesVersion, currentEtcdVersion.String())
+ return false, fmt.Errorf("the desired etcd version for this Kubernetes version %q is %q, but the current etcd version is %q. Won't downgrade etcd, instead just continue", cfg.KubernetesVersion, desiredEtcdVersion.String(), currentEtcdVersion.String())
}
// For the case when desired etcd version is the same as current etcd version
if strings.Compare(desiredEtcdVersion.String(), currentEtcdVersion.String()) == 0 {
@@ -212,20 +218,59 @@ func performEtcdStaticPodUpgrade(waiter apiclient.Waiter, pathMgr StaticPodPathM
return true, fmt.Errorf("fail to get etcd pod's hash: %v", err)
}
- // Write the updated etcd static Pod manifest into the temporary directory
+ // Write the updated etcd static Pod manifest into the temporary directory, at this point no etcd change
+ // has occured in any aspects.
if err := etcdphase.CreateLocalEtcdStaticPodManifestFile(pathMgr.TempManifestDir(), cfg); err != nil {
- return true, rollbackEtcdData(cfg, fmt.Errorf("error creating local etcd static pod manifest file: %v", err), pathMgr)
+ return true, fmt.Errorf("error creating local etcd static pod manifest file: %v", err)
}
// Perform etcd upgrade using common to all control plane components function
if err := upgradeComponent(constants.Etcd, waiter, pathMgr, cfg, beforeEtcdPodHash, recoverManifests); err != nil {
- return true, rollbackEtcdData(cfg, err, pathMgr)
+ // Since etcd upgrade component failed, the old manifest has been restored
+ // now we need to check the heatlth of etcd cluster if it came back up with old manifest
+ if _, err := etcdCluster.GetEtcdClusterStatus(); err != nil {
+ // At this point we know that etcd cluster is dead and it is safe to copy backup datastore and to rollback old etcd manifest
+ if err := rollbackEtcdData(cfg, fmt.Errorf("etcd cluster is not healthy after upgrade: %v rolling back", err), pathMgr); err != nil {
+ // Even copying back datastore failed, no options for recovery left, bailing out
+ return true, fmt.Errorf("fatal error upgrading local etcd cluster: %v, the backup of etcd database is stored here:(%s)", err, backupEtcdDir)
+ }
+ // Old datastore has been copied, rolling back old manifests
+ if err := rollbackOldManifests(recoverManifests, err, pathMgr, true); err != nil {
+ // Rolling back to old manifests failed, no options for recovery left, bailing out
+ return true, fmt.Errorf("fatal error upgrading local etcd cluster: %v, the backup of etcd database is stored here:(%s)", err, backupEtcdDir)
+ }
+ // Since rollback of the old etcd manifest was successful, checking again the status of etcd cluster
+ if _, err := etcdCluster.GetEtcdClusterStatus(); err != nil {
+ // Nothing else left to try to recover etcd cluster
+ return true, fmt.Errorf("fatal error upgrading local etcd cluster: %v, the backup of etcd database is stored here:(%s)", err, backupEtcdDir)
+ }
+
+ return true, fmt.Errorf("fatal error upgrading local etcd cluster: %v, rolled the state back to pre-upgrade state", err)
+ }
+ // Since etcd cluster came back up with the old manifest
+ return true, fmt.Errorf("fatal error when trying to upgrade the etcd cluster: %v, rolled the state back to pre-upgrade state", err)
}
// Checking health state of etcd after the upgrade
- etcdStatus, err = etcdCluster.GetEtcdClusterStatus()
- if err != nil {
- return true, rollbackEtcdData(cfg, fmt.Errorf("etcd cluster is not healthy after upgrade: %v rolling back", err), pathMgr)
+ if _, err = etcdCluster.GetEtcdClusterStatus(); err != nil {
+ // Despite the fact that upgradeComponent was sucessfull, there is something wrong with etcd cluster
+ // First step is to restore back up of datastore
+ if err := rollbackEtcdData(cfg, fmt.Errorf("etcd cluster is not healthy after upgrade: %v rolling back", err), pathMgr); err != nil {
+ // Even copying back datastore failed, no options for recovery left, bailing out
+ return true, fmt.Errorf("fatal error upgrading local etcd cluster: %v, the backup of etcd database is stored here:(%s)", err, backupEtcdDir)
+ }
+ // Old datastore has been copied, rolling back old manifests
+ if err := rollbackOldManifests(recoverManifests, err, pathMgr, true); err != nil {
+ // Rolling back to old manifests failed, no options for recovery left, bailing out
+ return true, fmt.Errorf("fatal error upgrading local etcd cluster: %v, the backup of etcd database is stored here:(%s)", err, backupEtcdDir)
+ }
+ // Since rollback of the old etcd manifest was successful, checking again the status of etcd cluster
+ if _, err := etcdCluster.GetEtcdClusterStatus(); err != nil {
+ // Nothing else left to try to recover etcd cluster
+ return true, fmt.Errorf("fatal error upgrading local etcd cluster: %v, the backup of etcd database is stored here:(%s)", err, backupEtcdDir)
+ }
+
+ return true, fmt.Errorf("fatal error upgrading local etcd cluster: %v, rolled the state back to pre-upgrade state", err)
}
return false, nil
@@ -243,7 +288,7 @@ func StaticPodControlPlane(waiter apiclient.Waiter, pathMgr StaticPodPathManager
if fatal {
return err
}
- fmt.Printf("[etcd] non fatal issue encountered during upgrade: %v\n", err)
+ fmt.Printf("[upgrade/etcd] non fatal issue encountered during upgrade: %v\n", err)
}
}
@@ -253,7 +298,7 @@ func StaticPodControlPlane(waiter apiclient.Waiter, pathMgr StaticPodPathManager
}
// Write the updated static Pod manifests into the temporary directory
- fmt.Printf("[upgrade/staticpods] Writing upgraded Static Pod manifests to %q\n", pathMgr.TempManifestDir())
+ fmt.Printf("[upgrade/staticpods] Writing new Static Pod manifests to %q\n", pathMgr.TempManifestDir())
err = controlplane.CreateInitStaticPodManifestFiles(pathMgr.TempManifestDir(), cfg)
if err != nil {
return fmt.Errorf("error creating init static pod manifest files: %v", err)
@@ -276,9 +321,13 @@ func StaticPodControlPlane(waiter apiclient.Waiter, pathMgr StaticPodPathManager
}
// rollbackOldManifests rolls back the backuped manifests if something went wrong
-func rollbackOldManifests(oldManifests map[string]string, origErr error, pathMgr StaticPodPathManager) error {
+func rollbackOldManifests(oldManifests map[string]string, origErr error, pathMgr StaticPodPathManager, restoreEtcd bool) error {
errs := []error{origErr}
for component, backupPath := range oldManifests {
+ // Will restore etcd manifest only if it was explicitely requested by setting restoreEtcd to True
+ if component == constants.Etcd && !restoreEtcd {
+ continue
+ }
// Where we should put back the backed up manifest
realManifestPath := pathMgr.RealManifestPath(component)
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/preflight/checks.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/preflight/checks.go
index a79ff7bc8665..523a894771a4 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/preflight/checks.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/preflight/checks.go
@@ -79,7 +79,7 @@ func (e *Error) Error() string {
}
// Checker validates the state of the system to ensure kubeadm will be
-// successful as often as possilble.
+// successful as often as possible.
type Checker interface {
Check() (warnings, errors []error)
Name() string
@@ -848,6 +848,8 @@ func RunInitMasterChecks(execer utilsexec.Interface, cfg *kubeadmapi.MasterConfi
warns, _ := criCtlChecker.Check()
useCRI := len(warns) == 0
+ manifestsDir := filepath.Join(kubeadmconstants.KubernetesDir, kubeadmconstants.ManifestsSubDirName)
+
checks := []Checker{
KubernetesVersionCheck{KubernetesVersion: cfg.KubernetesVersion, KubeadmVersion: kubeadmversion.Get().GitVersion},
SystemVerificationCheck{CRISocket: criSocket},
@@ -860,7 +862,10 @@ func RunInitMasterChecks(execer utilsexec.Interface, cfg *kubeadmapi.MasterConfi
PortOpenCheck{port: 10250},
PortOpenCheck{port: 10251},
PortOpenCheck{port: 10252},
- DirAvailableCheck{Path: filepath.Join(kubeadmconstants.KubernetesDir, kubeadmconstants.ManifestsSubDirName)},
+ FileAvailableCheck{Path: kubeadmconstants.GetStaticPodFilepath(kubeadmconstants.KubeAPIServer, manifestsDir)},
+ FileAvailableCheck{Path: kubeadmconstants.GetStaticPodFilepath(kubeadmconstants.KubeControllerManager, manifestsDir)},
+ FileAvailableCheck{Path: kubeadmconstants.GetStaticPodFilepath(kubeadmconstants.KubeScheduler, manifestsDir)},
+ FileAvailableCheck{Path: kubeadmconstants.GetStaticPodFilepath(kubeadmconstants.Etcd, manifestsDir)},
FileContentCheck{Path: bridgenf, Content: []byte{'1'}},
SwapCheck{},
InPathCheck{executable: "ip", mandatory: true, exec: execer},
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/apiclient/idempotency.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/apiclient/idempotency.go
index a2f11a744593..319ad5c1b962 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/apiclient/idempotency.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/apiclient/idempotency.go
@@ -107,6 +107,15 @@ func DeleteDaemonSetForeground(client clientset.Interface, namespace, name strin
return client.AppsV1beta2().DaemonSets(namespace).Delete(name, deleteOptions)
}
+// DeleteDeploymentForeground deletes the specified Deployment in foreground mode; i.e. it blocks until/makes sure all the managed Pods are deleted
+func DeleteDeploymentForeground(client clientset.Interface, namespace, name string) error {
+ foregroundDelete := metav1.DeletePropagationForeground
+ deleteOptions := &metav1.DeleteOptions{
+ PropagationPolicy: &foregroundDelete,
+ }
+ return client.AppsV1beta2().Deployments(namespace).Delete(name, deleteOptions)
+}
+
// CreateOrUpdateRole creates a Role if the target resource doesn't exist. If the resource exists already, this function will update the resource instead.
func CreateOrUpdateRole(client clientset.Interface, role *rbac.Role) error {
if _, err := client.RbacV1().Roles(role.ObjectMeta.Namespace).Create(role); err != nil {
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/error.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/error.go
index c27ab860d7e3..61327cf56089 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/error.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/error.go
@@ -80,7 +80,7 @@ func checkErr(prefix string, err error, handleErr func(string, int)) {
func FormatErrMsg(errs []error) string {
var errMsg string
for _, err := range errs {
- errMsg = fmt.Sprintf("%s\t-%s\n", errMsg, err.Error())
+ errMsg = fmt.Sprintf("%s\t- %s\n", errMsg, err.Error())
}
return errMsg
}
diff --git a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/error_test.go b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/error_test.go
index 831007550ada..c28a6cc05668 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/error_test.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubeadm/app/util/error_test.go
@@ -64,13 +64,13 @@ func TestFormatErrMsg(t *testing.T) {
fmt.Errorf(errMsg1),
fmt.Errorf(errMsg2),
},
- expect: "\t-" + errMsg1 + "\n" + "\t-" + errMsg2 + "\n",
+ expect: "\t- " + errMsg1 + "\n" + "\t- " + errMsg2 + "\n",
},
{
errs: []error{
fmt.Errorf(errMsg1),
},
- expect: "\t-" + errMsg1 + "\n",
+ expect: "\t- " + errMsg1 + "\n",
},
}
diff --git a/vendor/k8s.io/kubernetes/cmd/kubelet/app/options/options.go b/vendor/k8s.io/kubernetes/cmd/kubelet/app/options/options.go
index 4e9e10e9df40..6d8e13abe8cc 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubelet/app/options/options.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubelet/app/options/options.go
@@ -382,7 +382,7 @@ func AddKubeletConfigFlags(fs *pflag.FlagSet, c *kubeletconfig.KubeletConfigurat
fs.StringVar(&c.ManifestURL, "manifest-url", c.ManifestURL, "URL for accessing the container manifest")
fs.Var(flag.NewColonSeparatedMultimapStringString(&c.ManifestURLHeader), "manifest-url-header", "Comma-separated list of HTTP headers to use when accessing the manifest URL. Multiple headers with the same name will be added in the same order provided. This flag can be repeatedly invoked. For example: `--manifest-url-header 'a:hello,b:again,c:world' --manifest-url-header 'b:beautiful'`")
fs.BoolVar(&c.EnableServer, "enable-server", c.EnableServer, "Enable the Kubelet's server")
- fs.Var(componentconfig.IPVar{Val: &c.Address}, "address", "The IP address for the Kubelet to serve on (set to 0.0.0.0 for all interfaces)")
+ fs.Var(componentconfig.IPVar{Val: &c.Address}, "address", "The IP address for the Kubelet to serve on (set to `0.0.0.0` for all IPv4 interfaces and `::` for all IPv6 interfaces)")
fs.Int32Var(&c.Port, "port", c.Port, "The port for the Kubelet to serve on.")
fs.Int32Var(&c.ReadOnlyPort, "read-only-port", c.ReadOnlyPort, "The read-only port for the Kubelet to serve on with no authentication/authorization (set to 0 to disable)")
@@ -427,7 +427,7 @@ func AddKubeletConfigFlags(fs *pflag.FlagSet, c *kubeletconfig.KubeletConfigurat
fs.BoolVar(&c.EnableContentionProfiling, "contention-profiling", false, "Enable lock contention profiling, if profiling is enabled")
fs.Int32Var(&c.CAdvisorPort, "cadvisor-port", c.CAdvisorPort, "The port of the localhost cAdvisor endpoint (set to 0 to disable)")
fs.Int32Var(&c.HealthzPort, "healthz-port", c.HealthzPort, "The port of the localhost healthz endpoint (set to 0 to disable)")
- fs.Var(componentconfig.IPVar{Val: &c.HealthzBindAddress}, "healthz-bind-address", "The IP address for the healthz server to serve on. (set to 0.0.0.0 for all interfaces)")
+ fs.Var(componentconfig.IPVar{Val: &c.HealthzBindAddress}, "healthz-bind-address", "The IP address for the healthz server to serve on (set to `0.0.0.0` for all IPv4 interfaces and `::` for all IPv6 interfaces)")
fs.Int32Var(&c.OOMScoreAdj, "oom-score-adj", c.OOMScoreAdj, "The oom-score-adj value for kubelet process. Values must be within the range [-1000, 1000]")
fs.StringVar(&c.ClusterDomain, "cluster-domain", c.ClusterDomain, "Domain for this cluster. If set, kubelet will configure all containers to search this domain in addition to the host's search domains")
diff --git a/vendor/k8s.io/kubernetes/cmd/kubelet/app/plugins.go b/vendor/k8s.io/kubernetes/cmd/kubelet/app/plugins.go
index 002b5de8c5dc..ef41bb8e9098 100644
--- a/vendor/k8s.io/kubernetes/cmd/kubelet/app/plugins.go
+++ b/vendor/k8s.io/kubernetes/cmd/kubelet/app/plugins.go
@@ -100,7 +100,7 @@ func ProbeVolumePlugins() []volume.VolumePlugin {
allPlugins = append(allPlugins, scaleio.ProbeVolumePlugins()...)
allPlugins = append(allPlugins, local.ProbeVolumePlugins()...)
allPlugins = append(allPlugins, storageos.ProbeVolumePlugins()...)
- if !utilfeature.DefaultFeatureGate.Enabled(features.CSIPersistentVolume) {
+ if utilfeature.DefaultFeatureGate.Enabled(features.CSIPersistentVolume) {
allPlugins = append(allPlugins, csi.ProbeVolumePlugins()...)
}
return allPlugins
diff --git a/vendor/k8s.io/kubernetes/docs/admin/cloud-controller-manager.md b/vendor/k8s.io/kubernetes/docs/admin/cloud-controller-manager.md
index 81160f91c7b6..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/cloud-controller-manager.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/cloud-controller-manager.md
@@ -1,88 +1,3 @@
-## cloud-controller-manager
-
-
-
-### Synopsis
-
-
-The Cloud controller manager is a daemon that embeds
-the cloud specific control loops shipped with Kubernetes.
-
-```
-cloud-controller-manager
-```
-
-### Options
-
-```
- --address ip The IP address to serve on (set to 0.0.0.0 for all interfaces). (default 0.0.0.0)
- --allocate-node-cidrs Should CIDRs for Pods be allocated and set on the cloud provider.
- --azure-container-registry-config string Path to the file container Azure container registry configuration information.
- --cloud-config string The path to the cloud provider configuration file. Empty string for no configuration file.
- --cloud-provider string The provider of cloud services. Cannot be empty.
- --cluster-cidr string CIDR Range for Pods in cluster.
- --cluster-name string The instance prefix for the cluster. (default "kubernetes")
- --concurrent-service-syncs int32 The number of services that are allowed to sync concurrently. Larger number = more responsive service management, but more CPU (and network) load (default 1)
- --configure-cloud-routes Should CIDRs allocated by allocate-node-cidrs be configured on the cloud provider. (default true)
- --contention-profiling Enable lock contention profiling, if profiling is enabled.
- --controller-start-interval duration Interval between starting controller managers.
- --feature-gates mapStringBool A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA - default=true)
-APIResponseCompression=true|false (ALPHA - default=false)
-Accelerators=true|false (ALPHA - default=false)
-AdvancedAuditing=true|false (BETA - default=true)
-AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (default=true)
-AppArmor=true|false (BETA - default=true)
-BlockVolume=true|false (ALPHA - default=false)
-CPUManager=true|false (ALPHA - default=false)
-CSIPersistentVolume=true|false (ALPHA - default=false)
-CustomPodDNS=true|false (ALPHA - default=false)
-CustomResourceValidation=true|false (BETA - default=true)
-DebugContainers=true|false (ALPHA - default=false)
-DevicePlugins=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-EnableEquivalenceClassCache=true|false (ALPHA - default=false)
-ExpandPersistentVolumes=true|false (ALPHA - default=false)
-ExperimentalCriticalPodAnnotation=true|false (ALPHA - default=false)
-ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)
-HugePages=true|false (ALPHA - default=false)
-Initializers=true|false (ALPHA - default=false)
-KubeletConfigFile=true|false (ALPHA - default=false)
-LocalStorageCapacityIsolation=true|false (ALPHA - default=false)
-MountContainers=true|false (ALPHA - default=false)
-MountPropagation=true|false (ALPHA - default=false)
-PVCProtection=true|false (ALPHA - default=false)
-PersistentLocalVolumes=true|false (ALPHA - default=false)
-PodPriority=true|false (ALPHA - default=false)
-ResourceLimitsPriorityFunction=true|false (ALPHA - default=false)
-RotateKubeletClientCertificate=true|false (BETA - default=true)
-RotateKubeletServerCertificate=true|false (ALPHA - default=false)
-ServiceNodeExclusion=true|false (ALPHA - default=false)
-StreamingProxyRedirects=true|false (BETA - default=true)
-SupportIPVSProxyMode=true|false (ALPHA - default=false)
-TaintBasedEvictions=true|false (ALPHA - default=false)
-TaintNodesByCondition=true|false (ALPHA - default=false)
-VolumeScheduling=true|false (ALPHA - default=false)
- --google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
- --kube-api-burst int32 Burst to use while talking with kubernetes apiserver. (default 30)
- --kube-api-content-type string Content type of requests sent to apiserver. (default "application/vnd.kubernetes.protobuf")
- --kube-api-qps float32 QPS to use while talking with kubernetes apiserver. (default 20)
- --kubeconfig string Path to kubeconfig file with authorization and master location information.
- --leader-elect Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability. (default true)
- --leader-elect-lease-duration duration The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled. (default 15s)
- --leader-elect-renew-deadline duration The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled. (default 10s)
- --leader-elect-resource-lock endpoints The type of resource object that is used for locking during leader election. Supported options are endpoints (default) and `configmaps`. (default "endpoints")
- --leader-elect-retry-period duration The duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled. (default 2s)
- --master string The address of the Kubernetes API server (overrides any value in kubeconfig).
- --min-resync-period duration The resync period in reflectors will be random between MinResyncPeriod and 2*MinResyncPeriod. (default 12h0m0s)
- --node-monitor-period duration The period for syncing NodeStatus in NodeController. (default 5s)
- --node-status-update-frequency duration Specifies how often the controller updates nodes' status. (default 5m0s)
- --port int32 The port that the cloud-controller-manager's http service runs on. (default 10253)
- --profiling Enable profiling via web interface host:port/debug/pprof/. (default true)
- --route-reconciliation-period duration The period for reconciling routes created for Nodes by cloud provider. (default 10s)
- --use-service-account-credentials If true, use individual service account credentials for each controller.
- --version version[=true] Print version information and quit
-```
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kube-apiserver.md b/vendor/k8s.io/kubernetes/docs/admin/kube-apiserver.md
index 96bf66956012..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kube-apiserver.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kube-apiserver.md
@@ -1,162 +1,3 @@
-## kube-apiserver
-
-
-
-### Synopsis
-
-
-The Kubernetes API server validates and configures data
-for the api objects which include pods, services, replicationcontrollers, and
-others. The API Server services REST operations and provides the frontend to the
-cluster's shared state through which all other components interact.
-
-```
-kube-apiserver
-```
-
-### Options
-
-```
- --admission-control stringSlice Admission is divided into two phases. In the first phase, only mutating admission plugins run. In the second phase, only validating admission plugins run. The names in the below list may represent a validating plugin, a mutating plugin, or both. Within each phase, the plugins will run in the order in which they are passed to this flag. Comma-delimited list of: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, InitialResources, Initializers, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PVCProtection, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodPreset, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, SecurityContextDeny, ServiceAccount, ValidatingAdmissionWebhook. (default [AlwaysAdmit])
- --admission-control-config-file string File with admission control configuration.
- --advertise-address ip The IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the --bind-address will be used. If --bind-address is unspecified, the host's default interface will be used.
- --allow-privileged If true, allow privileged containers. [default=false]
- --anonymous-auth Enables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated. (default true)
- --apiserver-count int The number of apiservers running in the cluster, must be a positive number. (default 1)
- --audit-log-format string Format of saved audits. "legacy" indicates 1-line text format for each event. "json" indicates structured json format. Requires the 'AdvancedAuditing' feature gate. Known formats are legacy,json. (default "json")
- --audit-log-maxage int The maximum number of days to retain old audit log files based on the timestamp encoded in their filename.
- --audit-log-maxbackup int The maximum number of old audit log files to retain.
- --audit-log-maxsize int The maximum size in megabytes of the audit log file before it gets rotated.
- --audit-log-path string If set, all requests coming to the apiserver will be logged to this file. '-' means standard out.
- --audit-policy-file string Path to the file that defines the audit policy configuration. Requires the 'AdvancedAuditing' feature gate. With AdvancedAuditing, a profile is required to enable auditing.
- --audit-webhook-config-file string Path to a kubeconfig formatted file that defines the audit webhook configuration. Requires the 'AdvancedAuditing' feature gate.
- --audit-webhook-mode string Strategy for sending audit events. Blocking indicates sending events should block server responses. Batch causes the webhook to buffer and send events asynchronously. Known modes are batch,blocking. (default "batch")
- --authentication-token-webhook-cache-ttl duration The duration to cache responses from the webhook token authenticator. (default 2m0s)
- --authentication-token-webhook-config-file string File with webhook configuration for token authentication in kubeconfig format. The API server will query the remote service to determine authentication for bearer tokens.
- --authorization-mode string Ordered list of plug-ins to do authorization on secure port. Comma-delimited list of: AlwaysAllow,AlwaysDeny,ABAC,Webhook,RBAC,Node. (default "AlwaysAllow")
- --authorization-policy-file string File with authorization policy in csv format, used with --authorization-mode=ABAC, on the secure port.
- --authorization-webhook-cache-authorized-ttl duration The duration to cache 'authorized' responses from the webhook authorizer. (default 5m0s)
- --authorization-webhook-cache-unauthorized-ttl duration The duration to cache 'unauthorized' responses from the webhook authorizer. (default 30s)
- --authorization-webhook-config-file string File with webhook configuration in kubeconfig format, used with --authorization-mode=Webhook. The API server will query the remote service to determine access on the API server's secure port.
- --azure-container-registry-config string Path to the file container Azure container registry configuration information.
- --basic-auth-file string If set, the file that will be used to admit requests to the secure port of the API server via http basic authentication.
- --bind-address ip The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank, all interfaces will be used (0.0.0.0). (default 0.0.0.0)
- --cert-dir string The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored. (default "/var/run/kubernetes")
- --client-ca-file string If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.
- --cloud-config string The path to the cloud provider configuration file. Empty string for no configuration file.
- --cloud-provider string The provider for cloud services. Empty string for no provider.
- --contention-profiling Enable lock contention profiling, if profiling is enabled
- --cors-allowed-origins stringSlice List of allowed origins for CORS, comma separated. An allowed origin can be a regular expression to support subdomain matching. If this list is empty CORS will not be enabled.
- --default-watch-cache-size int Default watch cache size. If zero, watch cache will be disabled for resources that do not have a default watch size set. (default 100)
- --delete-collection-workers int Number of workers spawned for DeleteCollection call. These are used to speed up namespace cleanup. (default 1)
- --deserialization-cache-size int Number of deserialized json objects to cache in memory.
- --enable-aggregator-routing Turns on aggregator routing requests to endoints IP rather than cluster IP.
- --enable-bootstrap-token-auth Enable to allow secrets of type 'bootstrap.kubernetes.io/token' in the 'kube-system' namespace to be used for TLS bootstrapping authentication.
- --enable-garbage-collector Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube-controller-manager. (default true)
- --enable-logs-handler If true, install a /logs handler for the apiserver logs. (default true)
- --enable-swagger-ui Enables swagger ui on the apiserver at /swagger-ui
- --endpoint-reconciler-type string Use an endpoint reconciler (master-count, lease, none) (default "master-count")
- --etcd-cafile string SSL Certificate Authority file used to secure etcd communication.
- --etcd-certfile string SSL certification file used to secure etcd communication.
- --etcd-compaction-interval duration The interval of compaction requests. If 0, the compaction request from apiserver is disabled. (default 5m0s)
- --etcd-keyfile string SSL key file used to secure etcd communication.
- --etcd-prefix string The prefix to prepend to all resource paths in etcd. (default "/registry")
- --etcd-servers stringSlice List of etcd servers to connect with (scheme://ip:port), comma separated.
- --etcd-servers-overrides stringSlice Per-resource etcd servers overrides, comma separated. The individual override format: group/resource#servers, where servers are http://ip:port, semicolon separated.
- --event-ttl duration Amount of time to retain events. (default 1h0m0s)
- --experimental-encryption-provider-config string The file containing configuration for encryption providers to be used for storing secrets in etcd
- --experimental-keystone-ca-file string If set, the Keystone server's certificate will be verified by one of the authorities in the experimental-keystone-ca-file, otherwise the host's root CA set will be used.
- --experimental-keystone-url string If passed, activates the keystone authentication plugin.
- --external-hostname string The hostname to use when generating externalized URLs for this master (e.g. Swagger API Docs).
- --feature-gates mapStringBool A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA - default=true)
-APIResponseCompression=true|false (ALPHA - default=false)
-Accelerators=true|false (ALPHA - default=false)
-AdvancedAuditing=true|false (BETA - default=true)
-AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (default=true)
-AppArmor=true|false (BETA - default=true)
-BlockVolume=true|false (ALPHA - default=false)
-CPUManager=true|false (ALPHA - default=false)
-CSIPersistentVolume=true|false (ALPHA - default=false)
-CustomPodDNS=true|false (ALPHA - default=false)
-CustomResourceValidation=true|false (BETA - default=true)
-DebugContainers=true|false (ALPHA - default=false)
-DevicePlugins=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-EnableEquivalenceClassCache=true|false (ALPHA - default=false)
-ExpandPersistentVolumes=true|false (ALPHA - default=false)
-ExperimentalCriticalPodAnnotation=true|false (ALPHA - default=false)
-ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)
-HugePages=true|false (ALPHA - default=false)
-Initializers=true|false (ALPHA - default=false)
-KubeletConfigFile=true|false (ALPHA - default=false)
-LocalStorageCapacityIsolation=true|false (ALPHA - default=false)
-MountContainers=true|false (ALPHA - default=false)
-MountPropagation=true|false (ALPHA - default=false)
-PVCProtection=true|false (ALPHA - default=false)
-PersistentLocalVolumes=true|false (ALPHA - default=false)
-PodPriority=true|false (ALPHA - default=false)
-ResourceLimitsPriorityFunction=true|false (ALPHA - default=false)
-RotateKubeletClientCertificate=true|false (BETA - default=true)
-RotateKubeletServerCertificate=true|false (ALPHA - default=false)
-ServiceNodeExclusion=true|false (ALPHA - default=false)
-StreamingProxyRedirects=true|false (BETA - default=true)
-SupportIPVSProxyMode=true|false (ALPHA - default=false)
-TaintBasedEvictions=true|false (ALPHA - default=false)
-TaintNodesByCondition=true|false (ALPHA - default=false)
-VolumeScheduling=true|false (ALPHA - default=false)
- --google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
- --insecure-bind-address ip The IP address on which to serve the --insecure-port (set to 0.0.0.0 for all interfaces). (default 127.0.0.1)
- --insecure-port int The port on which to serve unsecured, unauthenticated access. It is assumed that firewall rules are set up such that this port is not reachable from outside of the cluster and that port 443 on the cluster's public address is proxied to this port. This is performed by nginx in the default setup. (default 8080)
- --kubelet-certificate-authority string Path to a cert file for the certificate authority.
- --kubelet-client-certificate string Path to a client cert file for TLS.
- --kubelet-client-key string Path to a client key file for TLS.
- --kubelet-https Use https for kubelet connections. (default true)
- --kubelet-preferred-address-types stringSlice List of the preferred NodeAddressTypes to use for kubelet connections. (default [Hostname,InternalDNS,InternalIP,ExternalDNS,ExternalIP])
- --kubelet-read-only-port uint DEPRECATED: kubelet port. (default 10255)
- --kubelet-timeout duration Timeout for kubelet operations. (default 5s)
- --kubernetes-service-node-port int If non-zero, the Kubernetes master service (which apiserver creates/maintains) will be of type NodePort, using this as the value of the port. If zero, the Kubernetes master service will be of type ClusterIP.
- --master-service-namespace string DEPRECATED: the namespace from which the kubernetes master services should be injected into pods. (default "default")
- --max-connection-bytes-per-sec int If non-zero, throttle each user connection to this number of bytes/sec. Currently only applies to long-running requests.
- --max-mutating-requests-inflight int The maximum number of mutating requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no limit. (default 200)
- --max-requests-inflight int The maximum number of non-mutating requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no limit. (default 400)
- --min-request-timeout int An optional field indicating the minimum number of seconds a handler must keep a request open before timing it out. Currently only honored by the watch request handler, which picks a randomized value above this number as the connection timeout, to spread out load. (default 1800)
- --oidc-ca-file string If set, the OpenID server's certificate will be verified by one of the authorities in the oidc-ca-file, otherwise the host's root CA set will be used.
- --oidc-client-id string The client ID for the OpenID Connect client, must be set if oidc-issuer-url is set.
- --oidc-groups-claim string If provided, the name of a custom OpenID Connect claim for specifying user groups. The claim value is expected to be a string or array of strings. This flag is experimental, please see the authentication documentation for further details.
- --oidc-groups-prefix string If provided, all groups will be prefixed with this value to prevent conflicts with other authentication strategies.
- --oidc-issuer-url string The URL of the OpenID issuer, only HTTPS scheme will be accepted. If set, it will be used to verify the OIDC JSON Web Token (JWT).
- --oidc-username-claim string The OpenID claim to use as the user name. Note that claims other than the default ('sub') is not guaranteed to be unique and immutable. This flag is experimental, please see the authentication documentation for further details. (default "sub")
- --oidc-username-prefix string If provided, all usernames will be prefixed with this value. If not provided, username claims other than 'email' are prefixed by the issuer URL to avoid clashes. To skip any prefixing, provide the value '-'.
- --profiling Enable profiling via web interface host:port/debug/pprof/ (default true)
- --proxy-client-cert-file string Client certificate used to prove the identity of the aggregator or kube-apiserver when it must call out during a request. This includes proxying requests to a user api-server and calling out to webhook admission plugins. It is expected that this cert includes a signature from the CA in the --requestheader-client-ca-file flag. That CA is published in the 'extension-apiserver-authentication' configmap in the kube-system namespace. Components recieving calls from kube-aggregator should use that CA to perform their half of the mutual TLS verification.
- --proxy-client-key-file string Private key for the client certificate used to prove the identity of the aggregator or kube-apiserver when it must call out during a request. This includes proxying requests to a user api-server and calling out to webhook admission plugins.
- --repair-malformed-updates If true, server will do its best to fix the update request to pass the validation, e.g., setting empty UID in update request to its existing value. This flag can be turned off after we fix all the clients that send malformed updates. (default true)
- --request-timeout duration An optional field indicating the duration a handler must keep a request open before timing it out. This is the default request timeout for requests but may be overridden by flags such as --min-request-timeout for specific types of requests. (default 1m0s)
- --requestheader-allowed-names stringSlice List of client certificate common names to allow to provide usernames in headers specified by --requestheader-username-headers. If empty, any client certificate validated by the authorities in --requestheader-client-ca-file is allowed.
- --requestheader-client-ca-file string Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by --requestheader-username-headers
- --requestheader-extra-headers-prefix stringSlice List of request header prefixes to inspect. X-Remote-Extra- is suggested.
- --requestheader-group-headers stringSlice List of request headers to inspect for groups. X-Remote-Group is suggested.
- --requestheader-username-headers stringSlice List of request headers to inspect for usernames. X-Remote-User is common.
- --runtime-config mapStringString A set of key=value pairs that describe runtime configuration that may be passed to apiserver. apis/ key can be used to turn on/off specific api versions. apis// can be used to turn on/off specific resources. api/all and api/legacy are special keys to control all and legacy api versions respectively.
- --secure-port int The port on which to serve HTTPS with authentication and authorization. If 0, don't serve HTTPS at all. (default 6443)
- --service-account-key-file stringArray File containing PEM-encoded x509 RSA or ECDSA private or public keys, used to verify ServiceAccount tokens. If unspecified, --tls-private-key-file is used. The specified file can contain multiple keys, and the flag can be specified multiple times with different files.
- --service-account-lookup If true, validate ServiceAccount tokens exist in etcd as part of authentication. (default true)
- --service-cluster-ip-range ipNet A CIDR notation IP range from which to assign service cluster IPs. This must not overlap with any IP ranges assigned to nodes for pods.
- --service-node-port-range portRange A port range to reserve for services with NodePort visibility. Example: '30000-32767'. Inclusive at both ends of the range. (default 30000-32767)
- --storage-backend string The storage backend for persistence. Options: 'etcd3' (default), 'etcd2'.
- --storage-media-type string The media type to use to store objects in storage. Some resources or storage backends may only support a specific media type and will ignore this setting. (default "application/vnd.kubernetes.protobuf")
- --storage-versions string The per-group version to store resources in. Specified in the format "group1/version1,group2/version2,...". In the case where objects are moved from one group to the other, you may specify the format "group1=group2/v1beta1,group3/v1beta1,...". You only need to pass the groups you wish to change from the defaults. It defaults to a list of preferred versions of all registered groups, which is derived from the KUBE_API_VERSIONS environment variable. (default "admission.k8s.io/v1beta1,admissionregistration.k8s.io/v1beta1,apps/v1beta1,authentication.k8s.io/v1,authorization.k8s.io/v1,autoscaling/v1,batch/v1,certificates.k8s.io/v1beta1,componentconfig/v1alpha1,events.k8s.io/v1beta1,extensions/v1beta1,imagepolicy.k8s.io/v1alpha1,kubeadm.k8s.io/v1alpha1,networking.k8s.io/v1,policy/v1beta1,rbac.authorization.k8s.io/v1,scheduling.k8s.io/v1alpha1,settings.k8s.io/v1alpha1,storage.k8s.io/v1,v1")
- --target-ram-mb int Memory limit for apiserver in MB (used to configure sizes of caches, etc.)
- --tls-ca-file string If set, this certificate authority will used for secure access from Admission Controllers. This must be a valid PEM-encoded CA bundle. Altneratively, the certificate authority can be appended to the certificate provided by --tls-cert-file.
- --tls-cert-file string File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory specified by --cert-dir.
- --tls-private-key-file string File containing the default x509 private key matching --tls-cert-file.
- --tls-sni-cert-key namedCertKey A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. If no domain patterns are provided, the names of the certificate are extracted. Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the --tls-sni-cert-key multiple times. Examples: "example.crt,example.key" or "foo.crt,foo.key:*.foo.com,foo.com". (default [])
- --token-auth-file string If set, the file that will be used to secure the secure port of the API server via token authentication.
- --version version[=true] Print version information and quit
- --watch-cache Enable watch caching in the apiserver (default true)
- --watch-cache-sizes stringSlice List of watch cache sizes for every resource (pods, nodes, etc.), comma separated. The individual override format: resource#size, where size is a number. It takes effect when watch-cache is enabled.
-```
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kube-controller-manager.md b/vendor/k8s.io/kubernetes/docs/admin/kube-controller-manager.md
index ae6ac2d6f198..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kube-controller-manager.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kube-controller-manager.md
@@ -1,144 +1,3 @@
-## kube-controller-manager
-
-
-
-### Synopsis
-
-
-The Kubernetes controller manager is a daemon that embeds
-the core control loops shipped with Kubernetes. In applications of robotics and
-automation, a control loop is a non-terminating loop that regulates the state of
-the system. In Kubernetes, a controller is a control loop that watches the shared
-state of the cluster through the apiserver and makes changes attempting to move the
-current state towards the desired state. Examples of controllers that ship with
-Kubernetes today are the replication controller, endpoints controller, namespace
-controller, and serviceaccounts controller.
-
-```
-kube-controller-manager
-```
-
-### Options
-
-```
- --address ip The IP address to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0)
- --allocate-node-cidrs Should CIDRs for Pods be allocated and set on the cloud provider.
- --attach-detach-reconcile-sync-period duration The reconciler sync wait time between volume attach detach. This duration must be larger than one second, and increasing this value from the default may allow for volumes to be mismatched with pods. (default 1m0s)
- --azure-container-registry-config string Path to the file container Azure container registry configuration information.
- --cidr-allocator-type string Type of CIDR allocator to use (default "RangeAllocator")
- --cloud-config string The path to the cloud provider configuration file. Empty string for no configuration file.
- --cloud-provider string The provider for cloud services. Empty string for no provider.
- --cluster-cidr string CIDR Range for Pods in cluster. Requires --allocate-node-cidrs to be true
- --cluster-name string The instance prefix for the cluster (default "kubernetes")
- --cluster-signing-cert-file string Filename containing a PEM-encoded X509 CA certificate used to issue cluster-scoped certificates (default "/etc/kubernetes/ca/ca.pem")
- --cluster-signing-key-file string Filename containing a PEM-encoded RSA or ECDSA private key used to sign cluster-scoped certificates (default "/etc/kubernetes/ca/ca.key")
- --concurrent-deployment-syncs int32 The number of deployment objects that are allowed to sync concurrently. Larger number = more responsive deployments, but more CPU (and network) load (default 5)
- --concurrent-endpoint-syncs int32 The number of endpoint syncing operations that will be done concurrently. Larger number = faster endpoint updating, but more CPU (and network) load (default 5)
- --concurrent-gc-syncs int32 The number of garbage collector workers that are allowed to sync concurrently. (default 20)
- --concurrent-namespace-syncs int32 The number of namespace objects that are allowed to sync concurrently. Larger number = more responsive namespace termination, but more CPU (and network) load (default 10)
- --concurrent-replicaset-syncs int32 The number of replica sets that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load (default 5)
- --concurrent-resource-quota-syncs int32 The number of resource quotas that are allowed to sync concurrently. Larger number = more responsive quota management, but more CPU (and network) load (default 5)
- --concurrent-service-syncs int32 The number of services that are allowed to sync concurrently. Larger number = more responsive service management, but more CPU (and network) load (default 1)
- --concurrent-serviceaccount-token-syncs int32 The number of service account token objects that are allowed to sync concurrently. Larger number = more responsive token generation, but more CPU (and network) load (default 5)
- --concurrent_rc_syncs int32 The number of replication controllers that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load (default 5)
- --configure-cloud-routes Should CIDRs allocated by allocate-node-cidrs be configured on the cloud provider. (default true)
- --contention-profiling Enable lock contention profiling, if profiling is enabled
- --controller-start-interval duration Interval between starting controller managers.
- --controllers stringSlice A list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller named 'foo', '-foo' disables the controller named 'foo'.
-All controllers: attachdetach, bootstrapsigner, clusterrole-aggregation, cronjob, csrapproving, csrcleaner, csrsigning, daemonset, deployment, disruption, endpoint, garbagecollector, horizontalpodautoscaling, job, namespace, node, persistentvolume-binder, persistentvolume-expander, podgc, pvc-protection, replicaset, replicationcontroller, resourcequota, route, service, serviceaccount, serviceaccount-token, statefulset, tokencleaner, ttl
-Disabled-by-default controllers: bootstrapsigner, tokencleaner (default [*])
- --deployment-controller-sync-period duration Period for syncing the deployments. (default 30s)
- --disable-attach-detach-reconcile-sync Disable volume attach detach reconciler sync. Disabling this may cause volumes to be mismatched with pods. Use wisely.
- --enable-dynamic-provisioning Enable dynamic provisioning for environments that support it. (default true)
- --enable-garbage-collector Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube-apiserver. (default true)
- --enable-hostpath-provisioner Enable HostPath PV provisioning when running without a cloud provider. This allows testing and development of provisioning features. HostPath provisioning is not supported in any way, won't work in a multi-node cluster, and should not be used for anything other than testing or development.
- --enable-taint-manager WARNING: Beta feature. If set to true enables NoExecute Taints and will evict all not-tolerating Pod running on Nodes tainted with this kind of Taints. (default true)
- --experimental-cluster-signing-duration duration The length of duration signed certificates will be given. (default 8760h0m0s)
- --feature-gates mapStringBool A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA - default=true)
-APIResponseCompression=true|false (ALPHA - default=false)
-Accelerators=true|false (ALPHA - default=false)
-AdvancedAuditing=true|false (BETA - default=true)
-AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (default=true)
-AppArmor=true|false (BETA - default=true)
-BlockVolume=true|false (ALPHA - default=false)
-CPUManager=true|false (ALPHA - default=false)
-CSIPersistentVolume=true|false (ALPHA - default=false)
-CustomPodDNS=true|false (ALPHA - default=false)
-CustomResourceValidation=true|false (BETA - default=true)
-DebugContainers=true|false (ALPHA - default=false)
-DevicePlugins=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-EnableEquivalenceClassCache=true|false (ALPHA - default=false)
-ExpandPersistentVolumes=true|false (ALPHA - default=false)
-ExperimentalCriticalPodAnnotation=true|false (ALPHA - default=false)
-ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)
-HugePages=true|false (ALPHA - default=false)
-Initializers=true|false (ALPHA - default=false)
-KubeletConfigFile=true|false (ALPHA - default=false)
-LocalStorageCapacityIsolation=true|false (ALPHA - default=false)
-MountContainers=true|false (ALPHA - default=false)
-MountPropagation=true|false (ALPHA - default=false)
-PVCProtection=true|false (ALPHA - default=false)
-PersistentLocalVolumes=true|false (ALPHA - default=false)
-PodPriority=true|false (ALPHA - default=false)
-ResourceLimitsPriorityFunction=true|false (ALPHA - default=false)
-RotateKubeletClientCertificate=true|false (BETA - default=true)
-RotateKubeletServerCertificate=true|false (ALPHA - default=false)
-ServiceNodeExclusion=true|false (ALPHA - default=false)
-StreamingProxyRedirects=true|false (BETA - default=true)
-SupportIPVSProxyMode=true|false (ALPHA - default=false)
-TaintBasedEvictions=true|false (ALPHA - default=false)
-TaintNodesByCondition=true|false (ALPHA - default=false)
-VolumeScheduling=true|false (ALPHA - default=false)
- --flex-volume-plugin-dir string Full path of the directory in which the flex volume plugin should search for additional third party volume plugins. (default "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/")
- --google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
- --horizontal-pod-autoscaler-downscale-delay duration The period since last downscale, before another downscale can be performed in horizontal pod autoscaler. (default 5m0s)
- --horizontal-pod-autoscaler-sync-period duration The period for syncing the number of pods in horizontal pod autoscaler. (default 30s)
- --horizontal-pod-autoscaler-tolerance float The minimum change (from 1.0) in the desired-to-actual metrics ratio for the horizontal pod autoscaler to consider scaling. (default 0.1)
- --horizontal-pod-autoscaler-upscale-delay duration The period since last upscale, before another upscale can be performed in horizontal pod autoscaler. (default 3m0s)
- --horizontal-pod-autoscaler-use-rest-clients WARNING: alpha feature. If set to true, causes the horizontal pod autoscaler controller to use REST clients through the kube-aggregator, instead of using the legacy metrics client through the API server proxy. This is required for custom metrics support in the horizontal pod autoscaler. (default true)
- --insecure-experimental-approve-all-kubelet-csrs-for-group string This flag does nothing.
- --kube-api-burst int32 Burst to use while talking with kubernetes apiserver (default 30)
- --kube-api-content-type string Content type of requests sent to apiserver. (default "application/vnd.kubernetes.protobuf")
- --kube-api-qps float32 QPS to use while talking with kubernetes apiserver (default 20)
- --kubeconfig string Path to kubeconfig file with authorization and master location information.
- --large-cluster-size-threshold int32 Number of nodes from which NodeController treats the cluster as large for the eviction logic purposes. --secondary-node-eviction-rate is implicitly overridden to 0 for clusters this size or smaller. (default 50)
- --leader-elect Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability. (default true)
- --leader-elect-lease-duration duration The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled. (default 15s)
- --leader-elect-renew-deadline duration The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled. (default 10s)
- --leader-elect-resource-lock endpoints The type of resource object that is used for locking during leader election. Supported options are endpoints (default) and `configmaps`. (default "endpoints")
- --leader-elect-retry-period duration The duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled. (default 2s)
- --master string The address of the Kubernetes API server (overrides any value in kubeconfig)
- --min-resync-period duration The resync period in reflectors will be random between MinResyncPeriod and 2*MinResyncPeriod (default 12h0m0s)
- --namespace-sync-period duration The period for syncing namespace life-cycle updates (default 5m0s)
- --node-cidr-mask-size int32 Mask size for node cidr in cluster. (default 24)
- --node-eviction-rate float32 Number of nodes per second on which pods are deleted in case of node failure when a zone is healthy (see --unhealthy-zone-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non-multizone clusters. (default 0.1)
- --node-monitor-grace-period duration Amount of time which we allow running Node to be unresponsive before marking it unhealthy. Must be N times more than kubelet's nodeStatusUpdateFrequency, where N means number of retries allowed for kubelet to post node status. (default 40s)
- --node-monitor-period duration The period for syncing NodeStatus in NodeController. (default 5s)
- --node-startup-grace-period duration Amount of time which we allow starting Node to be unresponsive before marking it unhealthy. (default 1m0s)
- --pod-eviction-timeout duration The grace period for deleting pods on failed nodes. (default 5m0s)
- --port int32 The port that the controller-manager's http service runs on (default 10252)
- --profiling Enable profiling via web interface host:port/debug/pprof/ (default true)
- --pv-recycler-increment-timeout-nfs int32 the increment of time added per Gi to ActiveDeadlineSeconds for an NFS scrubber pod (default 30)
- --pv-recycler-minimum-timeout-hostpath int32 The minimum ActiveDeadlineSeconds to use for a HostPath Recycler pod. This is for development and testing only and will not work in a multi-node cluster. (default 60)
- --pv-recycler-minimum-timeout-nfs int32 The minimum ActiveDeadlineSeconds to use for an NFS Recycler pod (default 300)
- --pv-recycler-pod-template-filepath-hostpath string The file path to a pod definition used as a template for HostPath persistent volume recycling. This is for development and testing only and will not work in a multi-node cluster.
- --pv-recycler-pod-template-filepath-nfs string The file path to a pod definition used as a template for NFS persistent volume recycling
- --pv-recycler-timeout-increment-hostpath int32 the increment of time added per Gi to ActiveDeadlineSeconds for a HostPath scrubber pod. This is for development and testing only and will not work in a multi-node cluster. (default 30)
- --pvclaimbinder-sync-period duration The period for syncing persistent volumes and persistent volume claims (default 15s)
- --resource-quota-sync-period duration The period for syncing quota usage status in the system (default 5m0s)
- --root-ca-file string If set, this root certificate authority will be included in service account's token secret. This must be a valid PEM-encoded CA bundle.
- --route-reconciliation-period duration The period for reconciling routes created for Nodes by cloud provider. (default 10s)
- --secondary-node-eviction-rate float32 Number of nodes per second on which pods are deleted in case of node failure when a zone is unhealthy (see --unhealthy-zone-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non-multizone clusters. This value is implicitly overridden to 0 if the cluster size is smaller than --large-cluster-size-threshold. (default 0.01)
- --service-account-private-key-file string Filename containing a PEM-encoded private RSA or ECDSA key used to sign service account tokens.
- --service-cluster-ip-range string CIDR Range for Services in cluster. Requires --allocate-node-cidrs to be true
- --service-sync-period duration The period for syncing services with their external load balancers (default 5m0s)
- --terminated-pod-gc-threshold int32 Number of terminated pods that can exist before the terminated pod garbage collector starts deleting terminated pods. If <= 0, the terminated pod garbage collector is disabled. (default 12500)
- --unhealthy-zone-threshold float32 Fraction of Nodes in a zone which needs to be not Ready (minimum 3) for zone to be treated as unhealthy. (default 0.55)
- --use-service-account-credentials If true, use individual service account credentials for each controller.
- --version version[=true] Print version information and quit
-```
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kube-proxy.md b/vendor/k8s.io/kubernetes/docs/admin/kube-proxy.md
index 22c2f74cabc7..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kube-proxy.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kube-proxy.md
@@ -1,98 +1,3 @@
-## kube-proxy
-
-
-
-### Synopsis
-
-
-The Kubernetes network proxy runs on each node. This
-reflects services as defined in the Kubernetes API on each node and can do simple
-TCP and UDP stream forwarding or round robin TCP and UDP forwarding across a set of backends.
-Service cluster IPs and ports are currently found through Docker-links-compatible
-environment variables specifying ports opened by the service proxy. There is an optional
-addon that provides cluster DNS for these cluster IPs. The user must create a service
-with the apiserver API to configure the proxy.
-
-```
-kube-proxy
-```
-
-### Options
-
-```
- --azure-container-registry-config string Path to the file container Azure container registry configuration information.
- --bind-address ip The IP address for the proxy server to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0)
- --cleanup If true cleanup iptables and ipvs rules and exit.
- --cleanup-ipvs If true make kube-proxy cleanup ipvs rules before running. Default is true (default true)
- --cluster-cidr string The CIDR range of pods in the cluster. When configured, traffic sent to a Service cluster IP from outside this range will be masqueraded and traffic sent from pods to an external LoadBalancer IP will be directed to the respective cluster IP instead
- --config string The path to the configuration file.
- --config-sync-period duration How often configuration from the apiserver is refreshed. Must be greater than 0. (default 15m0s)
- --conntrack-max-per-core int32 Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore conntrack-min). (default 32768)
- --conntrack-min int32 Minimum number of conntrack entries to allocate, regardless of conntrack-max-per-core (set conntrack-max-per-core=0 to leave the limit as-is). (default 131072)
- --conntrack-tcp-timeout-close-wait duration NAT timeout for TCP connections in the CLOSE_WAIT state (default 1h0m0s)
- --conntrack-tcp-timeout-established duration Idle timeout for established TCP connections (0 to leave as-is) (default 24h0m0s)
- --feature-gates mapStringBool A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA - default=true)
-APIResponseCompression=true|false (ALPHA - default=false)
-Accelerators=true|false (ALPHA - default=false)
-AdvancedAuditing=true|false (BETA - default=true)
-AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (default=true)
-AppArmor=true|false (BETA - default=true)
-BlockVolume=true|false (ALPHA - default=false)
-CPUManager=true|false (ALPHA - default=false)
-CSIPersistentVolume=true|false (ALPHA - default=false)
-CustomPodDNS=true|false (ALPHA - default=false)
-CustomResourceValidation=true|false (BETA - default=true)
-DebugContainers=true|false (ALPHA - default=false)
-DevicePlugins=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-EnableEquivalenceClassCache=true|false (ALPHA - default=false)
-ExpandPersistentVolumes=true|false (ALPHA - default=false)
-ExperimentalCriticalPodAnnotation=true|false (ALPHA - default=false)
-ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)
-HugePages=true|false (ALPHA - default=false)
-Initializers=true|false (ALPHA - default=false)
-KubeletConfigFile=true|false (ALPHA - default=false)
-LocalStorageCapacityIsolation=true|false (ALPHA - default=false)
-MountContainers=true|false (ALPHA - default=false)
-MountPropagation=true|false (ALPHA - default=false)
-PVCProtection=true|false (ALPHA - default=false)
-PersistentLocalVolumes=true|false (ALPHA - default=false)
-PodPriority=true|false (ALPHA - default=false)
-ResourceLimitsPriorityFunction=true|false (ALPHA - default=false)
-RotateKubeletClientCertificate=true|false (BETA - default=true)
-RotateKubeletServerCertificate=true|false (ALPHA - default=false)
-ServiceNodeExclusion=true|false (ALPHA - default=false)
-StreamingProxyRedirects=true|false (BETA - default=true)
-SupportIPVSProxyMode=true|false (ALPHA - default=false)
-TaintBasedEvictions=true|false (ALPHA - default=false)
-TaintNodesByCondition=true|false (ALPHA - default=false)
-VolumeScheduling=true|false (ALPHA - default=false)
- --google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
- --healthz-bind-address ip The IP address and port for the health check server to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0:10256)
- --healthz-port int32 The port to bind the health check server. Use 0 to disable. (default 10256)
- --hostname-override string If non-empty, will use this string as identification instead of the actual hostname.
- --iptables-masquerade-bit int32 If using the pure iptables proxy, the bit of the fwmark space to mark packets requiring SNAT with. Must be within the range [0, 31]. (default 14)
- --iptables-min-sync-period duration The minimum interval of how often the iptables rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').
- --iptables-sync-period duration The maximum interval of how often iptables rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0. (default 30s)
- --ipvs-min-sync-period duration The minimum interval of how often the ipvs rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').
- --ipvs-scheduler string The ipvs scheduler type when proxy mode is ipvs
- --ipvs-sync-period duration The maximum interval of how often ipvs rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0. (default 30s)
- --kube-api-burst int32 Burst to use while talking with kubernetes apiserver (default 10)
- --kube-api-content-type string Content type of requests sent to apiserver. (default "application/vnd.kubernetes.protobuf")
- --kube-api-qps float32 QPS to use while talking with kubernetes apiserver (default 5)
- --kubeconfig string Path to kubeconfig file with authorization information (the master location is set by the master flag).
- --masquerade-all If using the pure iptables proxy, SNAT all traffic sent via Service cluster IPs (this not commonly needed)
- --master string The address of the Kubernetes API server (overrides any value in kubeconfig)
- --metrics-bind-address ip The IP address and port for the metrics server to serve on (set to 0.0.0.0 for all interfaces) (default 127.0.0.1:10249)
- --oom-score-adj int32 The oom-score-adj value for kube-proxy process. Values must be within the range [-1000, 1000] (default -999)
- --profiling If true enables profiling via web interface on /debug/pprof handler.
- --proxy-mode ProxyMode Which proxy mode to use: 'userspace' (older) or 'iptables' (faster) or 'ipvs'(experimental)'. If blank, use the best-available proxy (currently iptables). If the iptables proxy is selected, regardless of how, but the system's kernel or iptables versions are insufficient, this always falls back to the userspace proxy.
- --proxy-port-range port-range Range of host ports (beginPort-endPort, inclusive) that may be consumed in order to proxy service traffic. If unspecified (0-0) then ports will be randomly chosen.
- --udp-timeout duration How long an idle UDP connection will be kept open (e.g. '250ms', '2s'). Must be greater than 0. Only applicable for proxy-mode=userspace (default 250ms)
- --version version[=true] Print version information and quit
- --write-config-to string If set, write the default configuration values to this file and exit.
-```
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kube-scheduler.md b/vendor/k8s.io/kubernetes/docs/admin/kube-scheduler.md
index fb73d539c5fa..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kube-scheduler.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kube-scheduler.md
@@ -1,89 +1,3 @@
-## kube-scheduler
-
-
-
-### Synopsis
-
-
-The Kubernetes scheduler is a policy-rich, topology-aware,
-workload-specific function that significantly impacts availability, performance,
-and capacity. The scheduler needs to take into account individual and collective
-resource requirements, quality of service requirements, hardware/software/policy
-constraints, affinity and anti-affinity specifications, data locality, inter-workload
-interference, deadlines, and so on. Workload-specific requirements will be exposed
-through the API as necessary.
-
-```
-kube-scheduler
-```
-
-### Options
-
-```
- --address string The IP address to serve on (set to 0.0.0.0 for all interfaces)
- --algorithm-provider string The scheduling algorithm provider to use, one of: ClusterAutoscalerProvider | DefaultProvider
- --azure-container-registry-config string Path to the file container Azure container registry configuration information.
- --config string The path to the configuration file.
- --contention-profiling Enable lock contention profiling, if profiling is enabled
- --feature-gates mapStringBool A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA - default=true)
-APIResponseCompression=true|false (ALPHA - default=false)
-Accelerators=true|false (ALPHA - default=false)
-AdvancedAuditing=true|false (BETA - default=true)
-AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (default=true)
-AppArmor=true|false (BETA - default=true)
-BlockVolume=true|false (ALPHA - default=false)
-CPUManager=true|false (ALPHA - default=false)
-CSIPersistentVolume=true|false (ALPHA - default=false)
-CustomPodDNS=true|false (ALPHA - default=false)
-CustomResourceValidation=true|false (BETA - default=true)
-DebugContainers=true|false (ALPHA - default=false)
-DevicePlugins=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-EnableEquivalenceClassCache=true|false (ALPHA - default=false)
-ExpandPersistentVolumes=true|false (ALPHA - default=false)
-ExperimentalCriticalPodAnnotation=true|false (ALPHA - default=false)
-ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)
-HugePages=true|false (ALPHA - default=false)
-Initializers=true|false (ALPHA - default=false)
-KubeletConfigFile=true|false (ALPHA - default=false)
-LocalStorageCapacityIsolation=true|false (ALPHA - default=false)
-MountContainers=true|false (ALPHA - default=false)
-MountPropagation=true|false (ALPHA - default=false)
-PVCProtection=true|false (ALPHA - default=false)
-PersistentLocalVolumes=true|false (ALPHA - default=false)
-PodPriority=true|false (ALPHA - default=false)
-ResourceLimitsPriorityFunction=true|false (ALPHA - default=false)
-RotateKubeletClientCertificate=true|false (BETA - default=true)
-RotateKubeletServerCertificate=true|false (ALPHA - default=false)
-ServiceNodeExclusion=true|false (ALPHA - default=false)
-StreamingProxyRedirects=true|false (BETA - default=true)
-SupportIPVSProxyMode=true|false (ALPHA - default=false)
-TaintBasedEvictions=true|false (ALPHA - default=false)
-TaintNodesByCondition=true|false (ALPHA - default=false)
-VolumeScheduling=true|false (ALPHA - default=false)
- --google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
- --kube-api-burst int32 Burst to use while talking with kubernetes apiserver (default 100)
- --kube-api-content-type string Content type of requests sent to apiserver. (default "application/vnd.kubernetes.protobuf")
- --kube-api-qps float32 QPS to use while talking with kubernetes apiserver (default 50)
- --kubeconfig string Path to kubeconfig file with authorization and master location information.
- --leader-elect Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability.
- --leader-elect-lease-duration duration The duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled. (default 15s)
- --leader-elect-renew-deadline duration The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled. (default 10s)
- --leader-elect-resource-lock endpoints The type of resource object that is used for locking during leader election. Supported options are endpoints (default) and `configmaps`. (default "endpoints")
- --leader-elect-retry-period duration The duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled. (default 2s)
- --lock-object-name string Define the name of the lock object. (default "kube-scheduler")
- --lock-object-namespace string Define the namespace of the lock object. (default "kube-system")
- --master string The address of the Kubernetes API server (overrides any value in kubeconfig)
- --policy-config-file string File with scheduler policy configuration. This file is used if policy ConfigMap is not provided or --use-legacy-policy-config==true
- --policy-configmap string Name of the ConfigMap object that contains scheduler's policy configuration. It must exist in the system namespace before scheduler initialization if --use-legacy-policy-config==false. The config must be provided as the value of an element in 'Data' map with the key='policy.cfg'
- --policy-configmap-namespace string The namespace where policy ConfigMap is located. The system namespace will be used if this is not provided or is empty.
- --port int32 The port that the scheduler's http service runs on (default 10251)
- --profiling Enable profiling via web interface host:port/debug/pprof/
- --scheduler-name string Name of the scheduler, used to select which pods will be processed by this scheduler, based on pod's "spec.SchedulerName". (default "default-scheduler")
- --use-legacy-policy-config When set to true, scheduler will ignore policy ConfigMap and uses policy config file
- --version version[=true] Print version information and quit
-```
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm.md
index 0990c72c0c84..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm.md
@@ -1,39 +1,3 @@
-
-kubeadm: easily bootstrap a secure Kubernetes cluster
-
-### Synopsis
-
-
-
-kubeadm: easily bootstrap a secure Kubernetes cluster.
-
- ┌──────────────────────────────────────────────────────────┐
- │ KUBEADM IS CURRENTLY IN BETA │
- │ │
- │ But please, try it out and give us feedback at: │
- │ https://github.com/kubernetes/kubeadm/issues │
- │ and at-mention @kubernetes/sig-cluster-lifecycle-bugs │
- │ or @kubernetes/sig-cluster-lifecycle-feature-requests │
- └──────────────────────────────────────────────────────────┘
-
-Example usage:
-
- Create a two-machine cluster with one master (which controls the cluster),
- and one node (where your workloads, like Pods and Deployments run).
-
- ┌──────────────────────────────────────────────────────────┐
- │ On the first machine: │
- ├──────────────────────────────────────────────────────────┤
- │ master# kubeadm init │
- └──────────────────────────────────────────────────────────┘
-
- ┌──────────────────────────────────────────────────────────┐
- │ On the second machine: │
- ├──────────────────────────────────────────────────────────┤
- │ node# kubeadm join │
- └──────────────────────────────────────────────────────────┘
-
- You can then repeat the second step on as many other machines as you like.
-
-
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha.md
index 7ea8c6060ced..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha.md
@@ -1,8 +1,3 @@
-
-Experimental sub-commands not yet fully functional.
-
-### Synopsis
-
-
-Experimental sub-commands not yet fully functional.
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase.md
index ff9c916e1975..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase.md
@@ -1,8 +1,3 @@
-
-Invoke subsets of kubeadm functions separately for a manual install.
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon.md
index ebd4a961d85d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon.md
@@ -1,8 +1,3 @@
-
-Installs required addons for passing Conformance tests
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_all.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_all.md
index 08e271b72894..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_all.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_all.md
@@ -1,44 +1,3 @@
-
-Installs all addons to a Kubernetes cluster
-
-### Synopsis
-
-
-Installs the kube-dns and the kube-proxys addons components via the API server.
-Please note that although the DNS server is deployed, it will not be scheduled until CNI is installed.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase addon all
-```
-
-### Examples
-
-```
- # Installs the kube-dns and the kube-proxys addons components via the API server,
- # functionally equivalent to what installed by kubeadm init.
-
- kubeadm alpha phase selfhosting from-staticpods
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address or DNS name the API server is accessible on
- --apiserver-bind-port int32 The port the API server is accessible on (default 6443)
- --config string Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental!
- --feature-gates string A set of key=value pairs that describe feature gates for various features.Options are:
-CoreDNS=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-HighAvailability=true|false (ALPHA - default=false)
-SelfHosting=true|false (BETA - default=false)
-StoreCertsInSecrets=true|false (ALPHA - default=false)
- --image-repository string Choose a container registry to pull control plane images from (default "gcr.io/google_containers")
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
- --kubernetes-version string Choose a specific Kubernetes version for the control plane (default "stable-1.8")
- --pod-network-cidr string The range of IP addresses used for the Pod network
- --service-cidr string The range of IP address used for service VIPs (default "10.96.0.0/12")
- --service-dns-domain string Alternative domain for services (default "cluster.local")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_kube-dns.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_kube-dns.md
index e9e1503efb9e..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_kube-dns.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_kube-dns.md
@@ -1,32 +1,3 @@
-
-Installs the kube-dns addon to a Kubernetes cluster
-
-### Synopsis
-
-
-Installs the kube-dns addon components via the API server.
-Please note that although the DNS server is deployed, it will not be scheduled until CNI is installed.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase addon kube-dns
-```
-
-### Options
-
-```
- --config string Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental!
- --feature-gates string A set of key=value pairs that describe feature gates for various features.Options are:
-CoreDNS=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-HighAvailability=true|false (ALPHA - default=false)
-SelfHosting=true|false (BETA - default=false)
-StoreCertsInSecrets=true|false (ALPHA - default=false)
- --image-repository string Choose a container registry to pull control plane images from (default "gcr.io/google_containers")
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
- --kubernetes-version string Choose a specific Kubernetes version for the control plane (default "stable-1.8")
- --service-cidr string The range of IP address used for service VIPs (default "10.96.0.0/12")
- --service-dns-domain string Alternative domain for services (default "cluster.local")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_kube-proxy.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_kube-proxy.md
index d1bca6ebff1f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_kube-proxy.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_addon_kube-proxy.md
@@ -1,26 +1,3 @@
-
-Installs the kube-proxy addon to a Kubernetes cluster
-
-### Synopsis
-
-
-Installs the kube-proxy addon components via the API server.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase addon kube-proxy
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address or DNS name the API server is accessible on
- --apiserver-bind-port int32 The port the API server is accessible on (default 6443)
- --config string Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental!
- --image-repository string Choose a container registry to pull control plane images from (default "gcr.io/google_containers")
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
- --kubernetes-version string Choose a specific Kubernetes version for the control plane (default "stable-1.8")
- --pod-network-cidr string The range of IP addresses used for the Pod network
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token.md
index 82c8ababf606..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token.md
@@ -1,14 +1,3 @@
-
-Manage kubeadm-specific bootstrap token functions
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
-### Options
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_all.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_all.md
index ecede358f923..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_all.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_all.md
@@ -1,43 +1,3 @@
-
-Makes all the bootstrap token configurations and creates an initial token
-
-### Synopsis
-
-
-Bootstrap tokens are used for establishing bidirectional trust between a node joining the cluster and a the master node.
-
-This command makes all the configurations required to make bootstrap tokens works and then creates an initial token.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase bootstrap-token all
-```
-
-### Examples
-
-```
- # Makes all the bootstrap token configurations and creates an initial token, functionally
- # equivalent to what generated by kubeadm init.
- kubeadm alpha phase bootstrap-token all
-```
-
-### Options
-
-```
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --description string A human friendly description of how this token is used. (default "The default bootstrap token generated by 'kubeadm init'.")
- --groups stringSlice Extra groups that this token will authenticate as when used for authentication. Must match "system:bootstrappers:[a-z0-9:-]{0,255}[a-z0-9]" (default [system:bootstrappers:kubeadm:default-node-token])
- --skip-token-print Skip printing of the bootstrap token
- --token string The token to use for establishing bidirectional trust between nodes and masters
- --ttl duration The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire (default 24h0m0s)
- --usages stringSlice Describes the ways in which this token can be used. You can pass --usages multiple times or provide a comma separated list of options. Valid options: [signing,authentication] (default [signing,authentication])
-```
-
-### Options inherited from parent commands
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_cluster-info.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_cluster-info.md
index 3b37d321e50a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_cluster-info.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_cluster-info.md
@@ -1,22 +1,3 @@
-
-Uploads the cluster-info ConfigMap from the given kubeconfig file
-
-### Synopsis
-
-
-Uploads the "cluster-info" ConfigMap in the "kube-public" namespace, populating it with cluster information extracted from the given kubeconfig file. The ConfigMap is used for the node bootstrap process in its initial phases, before the client trusts the API server.
-
-See online documentation about Authenticating with Bootstrap Tokens for more details.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase bootstrap-token cluster-info
-```
-
-### Options inherited from parent commands
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_create.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_create.md
index 944f22ddde5a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_create.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_create.md
@@ -1,35 +1,3 @@
-
-Creates a bootstrap token to be used for node joining
-
-### Synopsis
-
-
-Creates a bootstrap token. If no token value is given, kubeadm will generate a random token instead.
-
-Alternatively, you can use kubeadm token.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase bootstrap-token create
-```
-
-### Options
-
-```
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --description string A human friendly description of how this token is used. (default "The default bootstrap token generated by 'kubeadm init'.")
- --groups stringSlice Extra groups that this token will authenticate as when used for authentication. Must match "system:bootstrappers:[a-z0-9:-]{0,255}[a-z0-9]" (default [system:bootstrappers:kubeadm:default-node-token])
- --skip-token-print Skip printing of the bootstrap token
- --token string The token to use for establishing bidirectional trust between nodes and masters
- --ttl duration The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire (default 24h0m0s)
- --usages stringSlice Describes the ways in which this token can be used. You can pass --usages multiple times or provide a comma separated list of options. Valid options: [signing,authentication] (default [signing,authentication])
-```
-
-### Options inherited from parent commands
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node.md
index ada2555931db..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node.md
@@ -1,14 +1,3 @@
-
-Configures the node bootstrap process
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
-### Options inherited from parent commands
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node_allow-auto-approve.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node_allow-auto-approve.md
index aa276e76a566..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node_allow-auto-approve.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node_allow-auto-approve.md
@@ -1,22 +1,3 @@
-
-Configures RBAC rules to allow the csrapprover controller automatically approve CSRs from a node bootstrap token
-
-### Synopsis
-
-
-Configures RBAC rules to allow the csrapprover controller to automatically approve certificate signing requests generated by nodes joining the cluster. It configures also RBAC rules for certificates rotation (with auto approval of new certificates).
-
-See online documentation about TLS bootstrapping for more details.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase bootstrap-token node allow-auto-approve
-```
-
-### Options inherited from parent commands
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node_allow-post-csrs.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node_allow-post-csrs.md
index 92ff5de3f92b..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node_allow-post-csrs.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_bootstrap-token_node_allow-post-csrs.md
@@ -1,22 +1,3 @@
-
-Configures RBAC to allow node bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials
-
-### Synopsis
-
-
-Configures RBAC rules to allow node bootstrap tokens to post a certificate signing request, thus enabling nodes joining the cluster to request long term certificate credentials.
-
-See online documentation about TLS bootstrapping for more details.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase bootstrap-token node allow-post-csrs
-```
-
-### Options inherited from parent commands
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs.md
index d7799cb4b8e1..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs.md
@@ -1,8 +1,3 @@
-
-Generates certificates for a Kubernetes cluster
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_all.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_all.md
index 7dc2e2d44d7a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_all.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_all.md
@@ -1,39 +1,3 @@
-
-Generates all PKI assets necessary to establish the control plane
-
-### Synopsis
-
-
-Generates a self-signed CA to provision identities for each component in the cluster (including nodes) and client certificates to be used by various components.
-
-If a given certificate and private key pair both exist, kubeadm skips the generation step and
-existing files will be used.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase certs all
-```
-
-### Examples
-
-```
- # Creates all PKI assets necessary to establish the control plane,
- # functionally equivalent to what generated by kubeadm init.
- kubeadm alpha phase certs all
-
- # Creates all PKI assets using options read from a configuration file.
- kubeadm alpha phase certs all --config masterconfiguration.yaml
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address the API server is accessible on, to use for the API server serving cert
- --apiserver-cert-extra-sans stringSlice Optional extra altnames to use for the API server serving cert. Can be both IP addresses and dns names
- --cert-dir string The path where to save the certificates (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --service-cidr string Alternative range of IP address for service VIPs, from which derives the internal API server VIP that will be added to the API Server serving cert (default "10.96.0.0/12")
- --service-dns-domain string Alternative domain for services, to use for the API server serving cert (default "cluster.local")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_apiserver-kubelet-client.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_apiserver-kubelet-client.md
index 4f2e44c18731..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_apiserver-kubelet-client.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_apiserver-kubelet-client.md
@@ -1,23 +1,3 @@
-
-Generates client certificate for the API server to connect to the kubelets securely
-
-### Synopsis
-
-
-Generates the client certificate for the API server to connect to the kubelet securely and the respective key, and saves them into apiserver-kubelet-client.crt and apiserver-kubelet-client.key files.
-
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase certs apiserver-kubelet-client
-```
-
-### Options
-
-```
- --cert-dir string The path where to save the certificates (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_apiserver.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_apiserver.md
index f5cfa2979a13..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_apiserver.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_apiserver.md
@@ -1,29 +1,3 @@
-
-Generates API server serving certificate and key
-
-### Synopsis
-
-
-Generates the API server serving certificate and key and saves them into apiserver.crt and apiserver.key files.
-
-The certificate includes default subject alternative names and additional sans eventually provided by the user; default sans are: , , kubernetes, kubernetes.default, kubernetes.default.svc, kubernetes.default.svc. , (that is the .10 address in address space).
-
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase certs apiserver
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address the API server is accessible on, to use for the API server serving cert
- --apiserver-cert-extra-sans stringSlice Optional extra altnames to use for the API server serving cert. Can be both IP addresses and dns names
- --cert-dir string The path where to save the certificates (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --service-cidr string Alternative range of IP address for service VIPs, from which derives the internal API server VIP that will be added to the API Server serving cert (default "10.96.0.0/12")
- --service-dns-domain string Alternative domain for services, to use for the API server serving cert (default "cluster.local")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_ca.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_ca.md
index 4409f7aff77d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_ca.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_ca.md
@@ -1,23 +1,3 @@
-
-Generates self-signed CA to provision identities for each component in the cluster
-
-### Synopsis
-
-
-Generates the self-signed certificate authority and related key, and saves them into ca.crt and ca.key files.
-
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase certs ca
-```
-
-### Options
-
-```
- --cert-dir string The path where to save the certificates (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_front-proxy-ca.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_front-proxy-ca.md
index 8e2f1c92c360..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_front-proxy-ca.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_front-proxy-ca.md
@@ -1,23 +1,3 @@
-
-Generates front proxy CA certificate and key for a Kubernetes cluster
-
-### Synopsis
-
-
-Generates the front proxy CA certificate and key and saves them into front-proxy-ca.crt and front-proxy-ca.key files.
-
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase certs front-proxy-ca
-```
-
-### Options
-
-```
- --cert-dir string The path where to save the certificates (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_front-proxy-client.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_front-proxy-client.md
index ab24606835a4..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_front-proxy-client.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_front-proxy-client.md
@@ -1,23 +1,3 @@
-
-Generates front proxy CA client certificate and key for a Kubernetes cluster
-
-### Synopsis
-
-
-Generates the front proxy client certificate and key and saves them into front-proxy-client.crt and front-proxy-client.key files.
-
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase certs front-proxy-client
-```
-
-### Options
-
-```
- --cert-dir string The path where to save the certificates (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_sa.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_sa.md
index f756ec98e3cb..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_sa.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_certs_sa.md
@@ -1,23 +1,3 @@
-
-Generates a private key for signing service account tokens along with its public key
-
-### Synopsis
-
-
-Generates the private key for signing service account tokens along with its public key, and saves them into sa.key and sa.pub files.
-
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase certs sa
-```
-
-### Options
-
-```
- --cert-dir string The path where to save the certificates (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane.md
index 2b0a831ce107..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane.md
@@ -1,8 +1,3 @@
-
-Generates all static Pod manifest files necessary to establish the control plane
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_all.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_all.md
index 2da688719d0f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_all.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_all.md
@@ -1,43 +1,3 @@
-
-Generates all static Pod manifest files necessary to establish the control plane
-
-### Synopsis
-
-
-Generates all static Pod manifest files necessary to establish the control plane.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase controlplane all
-```
-
-### Examples
-
-```
- # Generates all static Pod manifest files for control plane components,
- # functionally equivalent to what generated by kubeadm init.
- kubeadm alpha phase controlplane all
-
- # Generates all static Pod manifest files using options read from a configuration file.
- kubeadm alpha phase controlplane --config masterconfiguration.yaml
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address or DNS name the API server is accessible on
- --apiserver-bind-port int32 The port the API server is accessible on (default 6443)
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --feature-gates string A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-HighAvailability=true|false (ALPHA - default=false)
-SelfHosting=true|false (BETA - default=false)
-StoreCertsInSecrets=true|false (ALPHA - default=false)
- --kubernetes-version string Choose a specific Kubernetes version for the control plane (default "stable-1.8")
- --pod-network-cidr string The range of IP addresses used for the Pod network
- --service-cidr string The range of IP address used for service VIPs (default "10.96.0.0/12")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_apiserver.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_apiserver.md
index d56861041baf..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_apiserver.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_apiserver.md
@@ -1,31 +1,3 @@
-
-Generates the API server static Pod manifest.
-
-### Synopsis
-
-
-Generates the static Pod manifest file for the API server and saves it into /etc/kubernetes/manifests/kube-apiserver.yaml file.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase controlplane apiserver
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address or DNS name the API server is accessible on
- --apiserver-bind-port int32 The port the API server is accessible on (default 6443)
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --feature-gates string A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-HighAvailability=true|false (ALPHA - default=false)
-SelfHosting=true|false (BETA - default=false)
-StoreCertsInSecrets=true|false (ALPHA - default=false)
- --kubernetes-version string Choose a specific Kubernetes version for the control plane (default "stable-1.8")
- --service-cidr string The range of IP address used for service VIPs (default "10.96.0.0/12")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_controller-manager.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_controller-manager.md
index 8684272d1208..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_controller-manager.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_controller-manager.md
@@ -1,23 +1,3 @@
-
-Generates the controller-manager static Pod manifest.
-
-### Synopsis
-
-
-Generates the static Pod manifest file for the controller-manager and saves it into /etc/kubernetes/manifests/kube-controller-manager.yaml file.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase controlplane controller-manager
-```
-
-### Options
-
-```
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --kubernetes-version string Choose a specific Kubernetes version for the control plane (default "stable-1.8")
- --pod-network-cidr string The range of IP addresses used for the Pod network
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_scheduler.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_scheduler.md
index a8aa9627ec74..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_scheduler.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_controlplane_scheduler.md
@@ -1,22 +1,3 @@
-
-Generates the scheduler static Pod manifest.
-
-### Synopsis
-
-
-Generates the static Pod manifest file for the scheduler and saves it into /etc/kubernetes/manifests/kube-scheduler.yaml file.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase controlplane scheduler
-```
-
-### Options
-
-```
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --kubernetes-version string Choose a specific Kubernetes version for the control plane (default "stable-1.8")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_etcd.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_etcd.md
index a0379819c886..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_etcd.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_etcd.md
@@ -1,8 +1,3 @@
-
-Generates static Pod manifest file for etcd.
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_etcd_local.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_etcd_local.md
index 355eab7d2232..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_etcd_local.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_etcd_local.md
@@ -1,32 +1,3 @@
-
-Generates the static Pod manifest file for a local, single-node etcd instance
-
-### Synopsis
-
-
-Generates the static Pod manifest file for a local, single-node etcd instance and saves it to /etc/kubernetes/manifests/etcd.yaml file.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase etcd local
-```
-
-### Examples
-
-```
- # Generates the static Pod manifest file for etcd, functionally
- # equivalent to what generated by kubeadm init.
- kubeadm alpha phase etcd local
-
- # Generates the static Pod manifest file for etcd.
- kubeadm alpha phase etcd local --config masterconfiguration.yaml
-```
-
-### Options
-
-```
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig.md
index d68c9061c4ce..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig.md
@@ -1,8 +1,3 @@
-
-Generates all kubeconfig files necessary to establish the control plane and the admin kubeconfig file
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_admin.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_admin.md
index dd91a097cacb..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_admin.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_admin.md
@@ -1,24 +1,3 @@
-
-Generates a kubeconfig file for the admin to use and for kubeadm itself
-
-### Synopsis
-
-
-Generates the kubeconfig file for the admin and for kubeadm itself, and saves it to admin.conf file.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase kubeconfig admin
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address the API server is accessible on
- --apiserver-bind-port int32 The port the API server is accessible on (default 6443)
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --kubeconfig-dir string The port where to save the kubeconfig file (default "/etc/kubernetes")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_all.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_all.md
index 166d2c8e419b..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_all.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_all.md
@@ -1,36 +1,3 @@
-
-Generates all kubeconfig files necessary to establish the control plane and the admin kubeconfig file
-
-### Synopsis
-
-
-Generates all kubeconfig files necessary to establish the control plane and the admin kubeconfig file.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase kubeconfig all
-```
-
-### Examples
-
-```
- # Generates all kubeconfig files, functionally equivalent to what generated
- # by kubeadm init.
- kubeadm alpha phase kubeconfig all
-
- # Generates all kubeconfig files using options read from a configuration file.
- kubeadm alpha phase kubeconfig all --config masterconfiguration.yaml
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address the API server is accessible on
- --apiserver-bind-port int32 The port the API server is accessible on (default 6443)
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --kubeconfig-dir string The port where to save the kubeconfig file (default "/etc/kubernetes")
- --node-name string The node name that should be used for the kubelet client certificate
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_controller-manager.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_controller-manager.md
index 076541365841..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_controller-manager.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_controller-manager.md
@@ -1,24 +1,3 @@
-
-Generates a kubeconfig file for the controller manager to use
-
-### Synopsis
-
-
-Generates the kubeconfig file for the controller manager to use and saves it to /etc/kubernetes/controller-manager.conf file.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase kubeconfig controller-manager
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address the API server is accessible on
- --apiserver-bind-port int32 The port the API server is accessible on (default 6443)
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --kubeconfig-dir string The port where to save the kubeconfig file (default "/etc/kubernetes")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_kubelet.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_kubelet.md
index 67bb710573db..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_kubelet.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_kubelet.md
@@ -1,27 +1,3 @@
-
-Generates a kubeconfig file for the kubelet to use. Please note that this should be used *only* for bootstrapping purposes.
-
-### Synopsis
-
-
-Generates the kubeconfig file for the kubelet to use and saves it to /etc/kubernetes/kubelet.conf file.
-
-Please note that this should only be used for bootstrapping purposes. After your control plane is up, you should request all kubelet credentials from the CSR API.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase kubeconfig kubelet
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address the API server is accessible on
- --apiserver-bind-port int32 The port the API server is accessible on (default 6443)
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --kubeconfig-dir string The port where to save the kubeconfig file (default "/etc/kubernetes")
- --node-name string The node name that should be used for the kubelet client certificate
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_scheduler.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_scheduler.md
index d50259631d31..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_scheduler.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_scheduler.md
@@ -1,24 +1,3 @@
-
-Generates a kubeconfig file for the scheduler to use
-
-### Synopsis
-
-
-Generates the kubeconfig file for the scheduler to use and saves it to /etc/kubernetes/scheduler.conf file.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase kubeconfig scheduler
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address the API server is accessible on
- --apiserver-bind-port int32 The port the API server is accessible on (default 6443)
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --kubeconfig-dir string The port where to save the kubeconfig file (default "/etc/kubernetes")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_user.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_user.md
index 5fc2c0c35db2..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_user.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_kubeconfig_user.md
@@ -1,32 +1,3 @@
-
-Outputs a kubeconfig file for an additional user
-
-### Synopsis
-
-
-Outputs a kubeconfig file for an additional user.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase kubeconfig user
-```
-
-### Examples
-
-```
- # Outputs a kubeconfig file for an additional user named foo
- kubeadm alpha phase kubeconfig user --client-name=foo
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address the API server is accessible on
- --apiserver-bind-port int32 The port the API server is accessible on (default 6443)
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --client-name string The name of user. It will be used as the CN if client certificates are created
- --kubeconfig-dir string The port where to save the kubeconfig file (default "/etc/kubernetes")
- --token string The token that should be used as the authentication mechanism for this kubeconfig (instead of client certificates)
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_mark-master.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_mark-master.md
index 292620cdc821..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_mark-master.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_mark-master.md
@@ -1,32 +1,3 @@
-
-Mark a node as master
-
-### Synopsis
-
-
-Applies a label that specifies that a node is a master and a taint that forces workloads to be deployed accordingly.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase mark-master
-```
-
-### Examples
-
-```
- # Applies master label and taint to the current node, functionally equivalent to what executed by kubeadm init.
- kubeadm alpha phase mark-master
-
- # Applies master label and taint to a specific node
- kubeadm alpha phase mark-master --node-name myNode
-```
-
-### Options
-
-```
- --config string Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
- --node-name string The node name to which label and taints should apply
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight.md
index afb22cee7be9..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight.md
@@ -1,8 +1,3 @@
-
-Run pre-flight checks
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight_master.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight_master.md
index ea683e1a64c8..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight_master.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight_master.md
@@ -1,21 +1,3 @@
-
-Run master pre-flight checks
-
-### Synopsis
-
-
-Run master pre-flight checks, functionally equivalent to what implemented by kubeadm init.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase preflight master
-```
-
-### Examples
-
-```
- # Run master pre-flight checks.
- kubeadm alpha phase preflight master
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight_node.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight_node.md
index 3d6a40977878..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight_node.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_preflight_node.md
@@ -1,21 +1,3 @@
-
-Run node pre-flight checks
-
-### Synopsis
-
-
-Run node pre-flight checks, functionally equivalent to what implemented by kubeadm join.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase preflight node
-```
-
-### Examples
-
-```
- # Run node pre-flight checks.
- kubeadm alpha phase preflight node
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_selfhosting.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_selfhosting.md
index a21886203c9a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_selfhosting.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_selfhosting.md
@@ -1,8 +1,3 @@
-
-Makes a kubeadm cluster self-hosted
-
-### Synopsis
-
-
-This command is not meant to be run on its own. See list of available subcommands.
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_selfhosting_convert-from-staticpods.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_selfhosting_convert-from-staticpods.md
index 1f9691b72158..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_selfhosting_convert-from-staticpods.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_selfhosting_convert-from-staticpods.md
@@ -1,40 +1,3 @@
-
-Converts a static Pod-hosted control plane into a self-hosted one
-
-### Synopsis
-
-
-Converts static Pod files for control plane components into self-hosted DaemonSets configured via the Kubernetes API.
-
-See the documentation for self-hosting limitations.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase selfhosting convert-from-staticpods
-```
-
-### Examples
-
-```
- # Converts a static Pod-hosted control plane into a self-hosted one,
- # functionally equivalent to what generated by kubeadm init executed
- # with --feature-gates=SelfHosting=true.
-
- kubeadm alpha phase selfhosting convert-from-staticpods
-```
-
-### Options
-
-```
- --cert-dir string The path where certificates are stored (default "/etc/kubernetes/pki")
- --config string Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental!
- --feature-gates string A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-HighAvailability=true|false (ALPHA - default=false)
-SelfHosting=true|false (BETA - default=false)
-StoreCertsInSecrets=true|false (ALPHA - default=false)
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_upload-config.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_upload-config.md
index fda590df06ee..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_upload-config.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_alpha_phase_upload-config.md
@@ -1,30 +1,3 @@
-
-Uploads the currently used configuration for kubeadm to a ConfigMap
-
-### Synopsis
-
-
-Uploads the kubeadm init configuration of your cluster to a ConfigMap called kubeadm-config in the kube-system namespace. This enables correct configuration of system components and a seamless user experience when upgrading.
-
-Alternatively, you can use kubeadm config.
-
-Alpha Disclaimer: this command is currently alpha.
-
-```
-kubeadm alpha phase upload-config
-```
-
-### Examples
-
-```
- # uploads the configuration of your cluster
- kubeadm alpha phase upload-config --config=myConfig.yaml
-```
-
-### Options
-
-```
- --config string Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental!
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_completion.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_completion.md
index fdc98aeff77a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_completion.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_completion.md
@@ -1,49 +1,3 @@
-
-Output shell completion code for the specified shell (bash or zsh).
-
-### Synopsis
-
-
-
-Output shell completion code for the specified shell (bash or zsh).
-The shell code must be evalutated to provide interactive
-completion of kubeadm commands. This can be done by sourcing it from
-the .bash_profile.
-
-Note: this requires the bash-completion framework, which is not installed
-by default on Mac. This can be installed by using homebrew:
-
- $ brew install bash-completion
-
-Once installed, bash_completion must be evaluated. This can be done by adding the
-following line to the .bash_profile
-
- $ source $(brew --prefix)/etc/bash_completion
-
-Note for zsh users: [1] zsh completions are only supported in versions of zsh >= 5.2
-
-```
-kubeadm completion SHELL
-```
-
-### Examples
-
-```
-
-# Install bash completion on a Mac using homebrew
-brew install bash-completion
-printf "\n# Bash completion support\nsource $(brew --prefix)/etc/bash_completion\n" >> $HOME/.bash_profile
-source $HOME/.bash_profile
-
-# Load the kubeadm completion code for bash into the current shell
-source <(kubeadm completion bash)
-
-# Write bash completion code to a file and source if from .bash_profile
-kubeadm completion bash > ~/.kube/kubeadm_completion.bash.inc
-printf "\n# Kubeadm shell completion\nsource '$HOME/.kube/kubeadm_completion.bash.inc'\n" >> $HOME/.bash_profile
-source $HOME/.bash_profile
-
-# Load the kubeadm completion code for zsh[1] into the current shell
-source <(kubeadm completion zsh)
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config.md
index 56a7cf14dca2..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config.md
@@ -1,23 +1,3 @@
-
-Manage configuration for a kubeadm cluster persisted in a ConfigMap in the cluster.
-
-### Synopsis
-
-
-
-There is a ConfigMap in the kube-system namespace called "kubeadm-config" that kubeadm uses to store internal configuration about the
-cluster. kubeadm CLI v1.8.0+ automatically creates this ConfigMap with the config used with 'kubeadm init', but if you
-initialized your cluster using kubeadm v1.7.x or lower, you must use the 'config upload' command to create this
-ConfigMap. This is required so that 'kubeadm upgrade' can configure your upgraded cluster correctly.
-
-
-```
-kubeadm config
-```
-
-### Options
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster. (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload.md
index 661d0889bd67..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload.md
@@ -1,18 +1,3 @@
-
-Upload configuration about the current state, so that 'kubeadm upgrade' can later know how to configure the upgraded cluster.
-
-### Synopsis
-
-
-Upload configuration about the current state, so that 'kubeadm upgrade' can later know how to configure the upgraded cluster.
-
-```
-kubeadm config upload
-```
-
-### Options inherited from parent commands
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster. (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload_from-file.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload_from-file.md
index 39d9d69c74ab..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload_from-file.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload_from-file.md
@@ -1,30 +1,3 @@
-
-Upload a configuration file to the in-cluster ConfigMap for kubeadm configuration.
-
-### Synopsis
-
-
-
-Using this command, you can upload configuration to the ConfigMap in the cluster using the same config file you gave to 'kubeadm init'.
-If you initialized your cluster using a v1.7.x or lower kubeadm client and used the --config option, you need to run this command with the
-same config file before upgrading to v1.8 using 'kubeadm upgrade'.
-
-The configuration is located in the "kube-system" namespace in the "kubeadm-config" ConfigMap.
-
-
-```
-kubeadm config upload from-file
-```
-
-### Options
-
-```
- --config string Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental.
-```
-
-### Options inherited from parent commands
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster. (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload_from-flags.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload_from-flags.md
index 6c8f3cebc7e1..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload_from-flags.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_upload_from-flags.md
@@ -1,46 +1,3 @@
-
-Create the in-cluster configuration file for the first time from using flags.
-
-### Synopsis
-
-
-
-Using this command, you can upload configuration to the ConfigMap in the cluster using the same flags you gave to 'kubeadm init'.
-If you initialized your cluster using a v1.7.x or lower kubeadm client and set certain flags, you need to run this command with the
-same flags before upgrading to v1.8 using 'kubeadm upgrade'.
-
-The configuration is located in the "kube-system" namespace in the "kubeadm-config" ConfigMap.
-
-
-```
-kubeadm config upload from-flags
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address the API Server will advertise it's listening on. Specify '0.0.0.0' to use the address of the default network interface.
- --apiserver-bind-port int32 Port for the API Server to bind to. (default 6443)
- --apiserver-cert-extra-sans stringSlice Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names.
- --cert-dir string The path where to save and store the certificates. (default "/etc/kubernetes/pki")
- --feature-gates string A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-HighAvailability=true|false (ALPHA - default=false)
-SelfHosting=true|false (BETA - default=false)
-StoreCertsInSecrets=true|false (ALPHA - default=false)
- --kubernetes-version string Choose a specific Kubernetes version for the control plane. (default "stable-1.8")
- --node-name string Specify the node name.
- --pod-network-cidr string Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.
- --service-cidr string Use alternative range of IP address for service VIPs. (default "10.96.0.0/12")
- --service-dns-domain string Use alternative domain for services, e.g. "myorg.internal". (default "cluster.local")
- --token string The token to use for establishing bidirectional trust between nodes and masters.
- --token-ttl duration The duration before the bootstrap token is automatically deleted. If set to '0', the token will never expire. (default 24h0m0s)
-```
-
-### Options inherited from parent commands
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster. (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_view.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_view.md
index 786a343cf49e..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_view.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_config_view.md
@@ -1,22 +1,3 @@
-
-View the kubeadm configuration stored inside the cluster.
-
-### Synopsis
-
-
-
-Using this command, you can view the ConfigMap in the cluster where the configuration for kubeadm is located.
-
-The configuration is located in the "kube-system" namespace in the "kubeadm-config" ConfigMap.
-
-
-```
-kubeadm config view
-```
-
-### Options inherited from parent commands
-
-```
- --kubeconfig string The KubeConfig file to use when talking to the cluster. (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_init.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_init.md
index 6d5d4077cd35..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_init.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_init.md
@@ -1,39 +1,3 @@
-
-Run this command in order to set up the Kubernetes master.
-
-### Synopsis
-
-
-Run this command in order to set up the Kubernetes master.
-
-```
-kubeadm init
-```
-
-### Options
-
-```
- --apiserver-advertise-address string The IP address the API Server will advertise it's listening on. Specify '0.0.0.0' to use the address of the default network interface.
- --apiserver-bind-port int32 Port for the API Server to bind to. (default 6443)
- --apiserver-cert-extra-sans stringSlice Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names.
- --cert-dir string The path where to save and store the certificates. (default "/etc/kubernetes/pki")
- --config string Path to kubeadm config file. WARNING: Usage of a configuration file is experimental.
- --cri-socket string Specify the CRI socket to connect to. (default "/var/run/dockershim.sock")
- --dry-run Don't apply any changes; just output what would be done.
- --feature-gates string A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-HighAvailability=true|false (ALPHA - default=false)
-SelfHosting=true|false (BETA - default=false)
-StoreCertsInSecrets=true|false (ALPHA - default=false)
- --ignore-preflight-errors stringSlice A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
- --kubernetes-version string Choose a specific Kubernetes version for the control plane. (default "stable-1.8")
- --node-name string Specify the node name.
- --pod-network-cidr string Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.
- --service-cidr string Use alternative range of IP address for service VIPs. (default "10.96.0.0/12")
- --service-dns-domain string Use alternative domain for services, e.g. "myorg.internal". (default "cluster.local")
- --skip-token-print Skip printing of the default bootstrap token generated by 'kubeadm init'.
- --token string The token to use for establishing bidirectional trust between nodes and masters.
- --token-ttl duration The duration before the bootstrap token is automatically deleted. If set to '0', the token will never expire. (default 24h0m0s)
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_join.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_join.md
index 27501190ab3a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_join.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_join.md
@@ -1,74 +1,3 @@
-
-Run this on any machine you wish to join an existing cluster
-
-### Synopsis
-
-
-
-When joining a kubeadm initialized cluster, we need to establish
-bidirectional trust. This is split into discovery (having the Node
-trust the Kubernetes Master) and TLS bootstrap (having the Kubernetes
-Master trust the Node).
-
-There are 2 main schemes for discovery. The first is to use a shared
-token along with the IP address of the API server. The second is to
-provide a file - a subset of the standard kubeconfig file. This file
-can be a local file or downloaded via an HTTPS URL. The forms are
-kubeadm join --discovery-token abcdef.1234567890abcdef 1.2.3.4:6443,
-kubeadm join --discovery-file path/to/file.conf, or kubeadm join
---discovery-file https://url/file.conf. Only one form can be used. If
-the discovery information is loaded from a URL, HTTPS must be used.
-Also, in that case the host installed CA bundle is used to verify
-the connection.
-
-If you use a shared token for discovery, you should also pass the
---discovery-token-ca-cert-hash flag to validate the public key of the
-root certificate authority (CA) presented by the Kubernetes Master. The
-value of this flag is specified as ":",
-where the supported hash type is "sha256". The hash is calculated over
-the bytes of the Subject Public Key Info (SPKI) object (as in RFC7469).
-This value is available in the output of "kubeadm init" or can be
-calcuated using standard tools. The --discovery-token-ca-cert-hash flag
-may be repeated multiple times to allow more than one public key.
-
-If you cannot know the CA public key hash ahead of time, you can pass
-the --discovery-token-unsafe-skip-ca-verification flag to disable this
-verification. This weakens the kubeadm security model since other nodes
-can potentially impersonate the Kubernetes Master.
-
-The TLS bootstrap mechanism is also driven via a shared token. This is
-used to temporarily authenticate with the Kubernetes Master to submit a
-certificate signing request (CSR) for a locally created key pair. By
-default, kubeadm will set up the Kubernetes Master to automatically
-approve these signing requests. This token is passed in with the
---tls-bootstrap-token abcdef.1234567890abcdef flag.
-
-Often times the same token is used for both parts. In this case, the
---token flag can be used instead of specifying each token individually.
-
-
-```
-kubeadm join [flags]
-```
-
-### Options
-
-```
- --config string Path to kubeadm config file.
- --cri-socket string Specify the CRI socket to connect to. (default "/var/run/dockershim.sock")
- --discovery-file string A file or url from which to load cluster information.
- --discovery-token string A token used to validate cluster information fetched from the master.
- --discovery-token-ca-cert-hash stringSlice For token-based discovery, validate that the root CA public key matches this hash (format: ":").
- --discovery-token-unsafe-skip-ca-verification For token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning.
- --feature-gates string A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-HighAvailability=true|false (ALPHA - default=false)
-SelfHosting=true|false (BETA - default=false)
-StoreCertsInSecrets=true|false (ALPHA - default=false)
- --ignore-preflight-errors stringSlice A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
- --node-name string Specify the node name.
- --tls-bootstrap-token string A token used for TLS bootstrapping.
- --token string Use this token for both discovery-token and tls-bootstrap-token.
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_reset.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_reset.md
index a727584d1fcd..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_reset.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_reset.md
@@ -1,20 +1,3 @@
-
-Run this to revert any changes made to this host by 'kubeadm init' or 'kubeadm join'.
-
-### Synopsis
-
-
-Run this to revert any changes made to this host by 'kubeadm init' or 'kubeadm join'.
-
-```
-kubeadm reset
-```
-
-### Options
-
-```
- --cert-dir string The path to the directory where the certificates are stored. If specified, clean this directory. (default "/etc/kubernetes/pki")
- --cri-socket string The path to the CRI socket to use with crictl when cleaning up containers. (default "/var/run/dockershim.sock")
- --ignore-preflight-errors stringSlice A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token.md
index 47bcfafbf675..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token.md
@@ -1,36 +1,3 @@
-
-Manage bootstrap tokens.
-
-### Synopsis
-
-
-
-This command manages bootstrap tokens. It is optional and needed only for advanced use cases.
-
-In short, bootstrap tokens are used for establishing bidirectional trust between a client and a server.
-A bootstrap token can be used when a client (for example a node that is about to join the cluster) needs
-to trust the server it is talking to. Then a bootstrap token with the "signing" usage can be used.
-bootstrap tokens can also function as a way to allow short-lived authentication to the API Server
-(the token serves as a way for the API Server to trust the client), for example for doing the TLS Bootstrap.
-
-What is a bootstrap token more exactly?
- - It is a Secret in the kube-system namespace of type "bootstrap.kubernetes.io/token".
- - A bootstrap token must be of the form "[a-z0-9]{6}.[a-z0-9]{16}". The former part is the public token ID,
- while the latter is the Token Secret and it must be kept private at all circumstances!
- - The name of the Secret must be named "bootstrap-token-(token-id)".
-
-You can read more about bootstrap tokens here:
- https://kubernetes.io/docs/admin/bootstrap-tokens/
-
-
-```
-kubeadm token
-```
-
-### Options
-
-```
- --dry-run Whether to enable dry-run mode or not
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_create.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_create.md
index 5198ef525172..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_create.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_create.md
@@ -1,36 +1,3 @@
-
-Create bootstrap tokens on the server.
-
-### Synopsis
-
-
-
-This command will create a bootstrap token for you.
-You can specify the usages for this token, the "time to live" and an optional human friendly description.
-
-The [token] is the actual token to write.
-This should be a securely generated random token of the form "[a-z0-9]{6}.[a-z0-9]{16}".
-If no [token] is given, kubeadm will generate a random token instead.
-
-
-```
-kubeadm token create [token]
-```
-
-### Options
-
-```
- --description string A human friendly description of how this token is used.
- --groups stringSlice Extra groups that this token will authenticate as when used for authentication. Must match "system:bootstrappers:[a-z0-9:-]{0,255}[a-z0-9]". (default [system:bootstrappers:kubeadm:default-node-token])
- --print-join-command Instead of printing only the token, print the full 'kubeadm join' flag needed to join the cluster using the token.
- --ttl duration The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire. (default 24h0m0s)
- --usages stringSlice Describes the ways in which this token can be used. You can pass --usages multiple times or provide a comma separated list of options. Valid options: [signing,authentication]. (default [signing,authentication])
-```
-
-### Options inherited from parent commands
-
-```
- --dry-run Whether to enable dry-run mode or not
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_delete.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_delete.md
index ce8e80f6a7c2..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_delete.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_delete.md
@@ -1,24 +1,3 @@
-
-Delete bootstrap tokens on the server.
-
-### Synopsis
-
-
-
-This command will delete a given bootstrap token for you.
-
-The [token-value] is the full Token of the form "[a-z0-9]{6}.[a-z0-9]{16}" or the
-Token ID of the form "[a-z0-9]{6}" to delete.
-
-
-```
-kubeadm token delete [token-value]
-```
-
-### Options inherited from parent commands
-
-```
- --dry-run Whether to enable dry-run mode or not
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_generate.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_generate.md
index 2782c8dcf3ba..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_generate.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_generate.md
@@ -1,29 +1,3 @@
-
-Generate and print a bootstrap token, but do not create it on the server.
-
-### Synopsis
-
-
-
-This command will print out a randomly-generated bootstrap token that can be used with
-the "init" and "join" commands.
-
-You don't have to use this command in order to generate a token. You can do so
-yourself as long as it is in the format "[a-z0-9]{6}.[a-z0-9]{16}". This
-command is provided for convenience to generate tokens in the given format.
-
-You can also use "kubeadm init" without specifying a token and it will
-generate and print one for you.
-
-
-```
-kubeadm token generate
-```
-
-### Options inherited from parent commands
-
-```
- --dry-run Whether to enable dry-run mode or not
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_list.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_list.md
index 978ad448ca92..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_list.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_token_list.md
@@ -1,21 +1,3 @@
-
-List bootstrap tokens on the server.
-
-### Synopsis
-
-
-
-This command will list all bootstrap tokens for you.
-
-
-```
-kubeadm token list
-```
-
-### Options inherited from parent commands
-
-```
- --dry-run Whether to enable dry-run mode or not
- --kubeconfig string The KubeConfig file to use when talking to the cluster (default "/etc/kubernetes/admin.conf")
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade.md
index 9a5e30e4ea63..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade.md
@@ -1,29 +1,3 @@
-
-Upgrade your cluster smoothly to a newer version with this command.
-
-### Synopsis
-
-
-Upgrade your cluster smoothly to a newer version with this command.
-
-```
-kubeadm upgrade
-```
-
-### Options
-
-```
- --allow-experimental-upgrades Show unstable versions of Kubernetes as an upgrade alternative and allow upgrading to an alpha/beta/release candidate versions of Kubernetes.
- --allow-release-candidate-upgrades Show release candidate versions of Kubernetes as an upgrade alternative and allow upgrading to a release candidate versions of Kubernetes.
- --config string Path to kubeadm config file. WARNING: Usage of a configuration file is experimental!
- --feature-gates string A set of key=value pairs that describe feature gates for various features.Options are:
-CoreDNS=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-HighAvailability=true|false (ALPHA - default=false)
-SelfHosting=true|false (BETA - default=false)
-StoreCertsInSecrets=true|false (ALPHA - default=false)
- --ignore-preflight-errors stringSlice A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
- --kubeconfig string The KubeConfig file to use when talking to the cluster. (default "/etc/kubernetes/admin.conf")
- --print-config Specifies whether the configuration file that will be used in the upgrade should be printed or not.
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade_apply.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade_apply.md
index e1a82e268573..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade_apply.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade_apply.md
@@ -1,39 +1,3 @@
-
-Upgrade your Kubernetes cluster to the specified version.
-
-### Synopsis
-
-
-Upgrade your Kubernetes cluster to the specified version.
-
-```
-kubeadm upgrade apply [version]
-```
-
-### Options
-
-```
- --dry-run Do not change any state, just output what actions would be performed.
- --etcd-upgrade Perform the upgrade of etcd.
- -f, --force Force upgrading although some requirements might not be met. This also implies non-interactive mode.
- --image-pull-timeout duration The maximum amount of time to wait for the control plane pods to be downloaded. (default 15m0s)
- -y, --yes Perform the upgrade and do not prompt for confirmation (non-interactive mode).
-```
-
-### Options inherited from parent commands
-
-```
- --allow-experimental-upgrades Show unstable versions of Kubernetes as an upgrade alternative and allow upgrading to an alpha/beta/release candidate versions of Kubernetes.
- --allow-release-candidate-upgrades Show release candidate versions of Kubernetes as an upgrade alternative and allow upgrading to a release candidate versions of Kubernetes.
- --config string Path to kubeadm config file. WARNING: Usage of a configuration file is experimental!
- --feature-gates string A set of key=value pairs that describe feature gates for various features.Options are:
-CoreDNS=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-HighAvailability=true|false (ALPHA - default=false)
-SelfHosting=true|false (BETA - default=false)
-StoreCertsInSecrets=true|false (ALPHA - default=false)
- --ignore-preflight-errors stringSlice A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
- --kubeconfig string The KubeConfig file to use when talking to the cluster. (default "/etc/kubernetes/admin.conf")
- --print-config Specifies whether the configuration file that will be used in the upgrade should be printed or not.
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade_plan.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade_plan.md
index 48ab2a0d6753..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade_plan.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_upgrade_plan.md
@@ -1,29 +1,3 @@
-
-Check which versions are available to upgrade to and validate whether your current cluster is upgradeable.
-
-### Synopsis
-
-
-Check which versions are available to upgrade to and validate whether your current cluster is upgradeable.
-
-```
-kubeadm upgrade plan
-```
-
-### Options inherited from parent commands
-
-```
- --allow-experimental-upgrades Show unstable versions of Kubernetes as an upgrade alternative and allow upgrading to an alpha/beta/release candidate versions of Kubernetes.
- --allow-release-candidate-upgrades Show release candidate versions of Kubernetes as an upgrade alternative and allow upgrading to a release candidate versions of Kubernetes.
- --config string Path to kubeadm config file. WARNING: Usage of a configuration file is experimental!
- --feature-gates string A set of key=value pairs that describe feature gates for various features.Options are:
-CoreDNS=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-HighAvailability=true|false (ALPHA - default=false)
-SelfHosting=true|false (BETA - default=false)
-StoreCertsInSecrets=true|false (ALPHA - default=false)
- --ignore-preflight-errors stringSlice A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
- --kubeconfig string The KubeConfig file to use when talking to the cluster. (default "/etc/kubernetes/admin.conf")
- --print-config Specifies whether the configuration file that will be used in the upgrade should be printed or not.
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_version.md b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_version.md
index fc46f021c0b1..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubeadm_version.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubeadm_version.md
@@ -1,18 +1,3 @@
-
-Print the version of kubeadm
-
-### Synopsis
-
-
-Print the version of kubeadm
-
-```
-kubeadm version
-```
-
-### Options
-
-```
- -o, --output string Output format; available options are 'yaml', 'json' and 'short'
-```
-
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/admin/kubelet.md b/vendor/k8s.io/kubernetes/docs/admin/kubelet.md
index 8446e0ca3fd1..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/admin/kubelet.md
+++ b/vendor/k8s.io/kubernetes/docs/admin/kubelet.md
@@ -1,200 +1,3 @@
-## kubelet
-
-
-
-### Synopsis
-
-
-The kubelet is the primary "node agent" that runs on each
-node. The kubelet works in terms of a PodSpec. A PodSpec is a YAML or JSON object
-that describes a pod. The kubelet takes a set of PodSpecs that are provided through
-various mechanisms (primarily through the apiserver) and ensures that the containers
-described in those PodSpecs are running and healthy. The kubelet doesn't manage
-containers which were not created by Kubernetes.
-
-Other than from an PodSpec from the apiserver, there are three ways that a container
-manifest can be provided to the Kubelet.
-
-File: Path passed as a flag on the command line. Files under this path will be monitored
-periodically for updates. The monitoring period is 20s by default and is configurable
-via a flag.
-
-HTTP endpoint: HTTP endpoint passed as a parameter on the command line. This endpoint
-is checked every 20 seconds (also configurable with a flag).
-
-HTTP server: The kubelet can also listen for HTTP and respond to a simple API
-(underspec'd currently) to submit a new manifest.
-
-```
-kubelet
-```
-
-### Options
-
-```
- --address ip The IP address for the Kubelet to serve on (set to 0.0.0.0 for all interfaces) (default 0.0.0.0)
- --allow-privileged If true, allow containers to request privileged mode.
- --anonymous-auth Enables anonymous requests to the Kubelet server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated. (default true)
- --authentication-token-webhook Use the TokenReview API to determine authentication for bearer tokens.
- --authentication-token-webhook-cache-ttl duration The duration to cache responses from the webhook token authenticator. (default 2m0s)
- --authorization-mode string Authorization mode for Kubelet server. Valid options are AlwaysAllow or Webhook. Webhook mode uses the SubjectAccessReview API to determine authorization. (default "AlwaysAllow")
- --authorization-webhook-cache-authorized-ttl duration The duration to cache 'authorized' responses from the webhook authorizer. (default 5m0s)
- --authorization-webhook-cache-unauthorized-ttl duration The duration to cache 'unauthorized' responses from the webhook authorizer. (default 30s)
- --azure-container-registry-config string Path to the file container Azure container registry configuration information.
- --bootstrap-checkpoint-path string Path to to the directory where the checkpoints are stored
- --bootstrap-kubeconfig string Path to a kubeconfig file that will be used to get client certificate for kubelet. If the file specified by --kubeconfig does not exist, the bootstrap kubeconfig is used to request a client certificate from the API server. On success, a kubeconfig file referencing the generated client certificate and key is written to the path specified by --kubeconfig. The client certificate and key file will be stored in the directory pointed by --cert-dir.
- --cadvisor-port int32 The port of the localhost cAdvisor endpoint (set to 0 to disable) (default 4194)
- --cert-dir string The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored. (default "/var/lib/kubelet/pki")
- --cgroup-driver string Driver that the kubelet uses to manipulate cgroups on the host. Possible values: 'cgroupfs', 'systemd' (default "cgroupfs")
- --cgroup-root string Optional root cgroup to use for pods. This is handled by the container runtime on a best effort basis. Default: '', which means use the container runtime default.
- --cgroups-per-qos Enable creation of QoS cgroup hierarchy, if true top level QoS and pod cgroups are created. (default true)
- --chaos-chance float If > 0.0, introduce random client errors and latency. Intended for testing.
- --client-ca-file string If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.
- --cloud-config string The path to the cloud provider configuration file. Empty string for no configuration file.
- --cloud-provider string The provider for cloud services. Specify empty string for running with no cloud provider.
- --cluster-dns stringSlice Comma-separated list of DNS server IP address. This value is used for containers DNS server in case of Pods with "dnsPolicy=ClusterFirst". Note: all DNS servers appearing in the list MUST serve the same set of records otherwise name resolution within the cluster may not work correctly. There is no guarantee as to which DNS server may be contacted for name resolution.
- --cluster-domain string Domain for this cluster. If set, kubelet will configure all containers to search this domain in addition to the host's search domains
- --cni-bin-dir string The full path of the directory in which to search for CNI plugin binaries. Default: /opt/cni/bin
- --cni-conf-dir string The full path of the directory in which to search for CNI config files. Default: /etc/cni/net.d
- --container-runtime string The container runtime to use. Possible values: 'docker', 'rkt'. (default "docker")
- --container-runtime-endpoint string [Experimental] The endpoint of remote runtime service. Currently unix socket is supported on Linux, and tcp is supported on windows. Examples:'unix:///var/run/dockershim.sock', 'tcp://localhost:3735' (default "unix:///var/run/dockershim.sock")
- --containerized Experimental support for running kubelet in a container. Intended for testing.
- --contention-profiling Enable lock contention profiling, if profiling is enabled
- --cpu-cfs-quota Enable CPU CFS quota enforcement for containers that specify CPU limits (default true)
- --cpu-manager-policy string CPU Manager policy to use. Possible values: 'none', 'static'. Default: 'none' (default "none")
- --cpu-manager-reconcile-period NodeStatusUpdateFrequency CPU Manager reconciliation period. Examples: '10s', or '1m'. If not supplied, defaults to NodeStatusUpdateFrequency (default 10s)
- --docker-disable-shared-pid The Container Runtime Interface (CRI) defaults to using a shared PID namespace for containers in a pod when running with Docker 1.13.1 or higher. Setting this flag reverts to the previous behavior of isolated PID namespaces. This ability will be removed in a future Kubernetes release. (default true)
- --docker-endpoint string Use this for the docker endpoint to communicate with (default "unix:///var/run/docker.sock")
- --dynamic-config-dir string The Kubelet will use this directory for checkpointing downloaded configurations and tracking configuration health. The Kubelet will create this directory if it does not already exist. The path may be absolute or relative; relative paths start at the Kubelet's current working directory. Providing this flag enables dynamic Kubelet configuration. Presently, you must also enable the DynamicKubeletConfig feature gate to pass this flag.
- --enable-controller-attach-detach Enables the Attach/Detach controller to manage attachment/detachment of volumes scheduled to this node, and disables kubelet from executing any attach/detach operations (default true)
- --enable-debugging-handlers Enables server endpoints for log collection and local running of containers and commands (default true)
- --enable-server Enable the Kubelet's server (default true)
- --enforce-node-allocatable stringSlice A comma separated list of levels of node allocatable enforcement to be enforced by kubelet. Acceptible options are 'pods', 'system-reserved' & 'kube-reserved'. If the latter two options are specified, '--system-reserved-cgroup' & '--kube-reserved-cgroup' must also be set respectively. See https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/ for more details. (default [pods])
- --event-burst int32 Maximum size of a bursty event records, temporarily allows event records to burst to this number, while still not exceeding event-qps. Only used if --event-qps > 0 (default 10)
- --event-qps int32 If > 0, limit event creations per second to this value. If 0, unlimited. (default 5)
- --eviction-hard mapStringString A set of eviction thresholds (e.g. memory.available<1Gi) that if met would trigger a pod eviction. (default imagefs.available<15%,memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%)
- --eviction-max-pod-grace-period int32 Maximum allowed grace period (in seconds) to use when terminating pods in response to a soft eviction threshold being met. If negative, defer to pod specified value.
- --eviction-minimum-reclaim mapStringString A set of minimum reclaims (e.g. imagefs.available=2Gi) that describes the minimum amount of resource the kubelet will reclaim when performing a pod eviction if that resource is under pressure.
- --eviction-pressure-transition-period duration Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition. (default 5m0s)
- --eviction-soft mapStringString A set of eviction thresholds (e.g. memory.available<1.5Gi) that if met over a corresponding grace period would trigger a pod eviction.
- --eviction-soft-grace-period mapStringString A set of eviction grace periods (e.g. memory.available=1m30s) that correspond to how long a soft eviction threshold must hold before triggering a pod eviction.
- --exit-on-lock-contention Whether kubelet should exit upon lock-file contention.
- --experimental-allocatable-ignore-eviction When set to 'true', Hard Eviction Thresholds will be ignored while calculating Node Allocatable. See https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/ for more details. [default=false]
- --experimental-allowed-unsafe-sysctls stringSlice Comma-separated whitelist of unsafe sysctls or unsafe sysctl patterns (ending in *). Use these at your own risk.
- --experimental-bootstrap-kubeconfig string deprecated: use --bootstrap-kubeconfig
- --experimental-check-node-capabilities-before-mount [Experimental] if set true, the kubelet will check the underlying node for required componenets (binaries, etc.) before performing the mount
- --experimental-kernel-memcg-notification If enabled, the kubelet will integrate with the kernel memcg notification to determine if memory eviction thresholds are crossed rather than polling.
- --experimental-mounter-path string [Experimental] Path of mounter binary. Leave empty to use the default mount.
- --experimental-qos-reserved mapStringString A set of ResourceName=Percentage (e.g. memory=50%) pairs that describe how pod resource requests are reserved at the QoS level. Currently only memory is supported. [default=none]
- --fail-swap-on Makes the Kubelet fail to start if swap is enabled on the node. (default true)
- --feature-gates mapStringBool A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA - default=true)
-APIResponseCompression=true|false (ALPHA - default=false)
-Accelerators=true|false (ALPHA - default=false)
-AdvancedAuditing=true|false (BETA - default=true)
-AllAlpha=true|false (ALPHA - default=false)
-AllowExtTrafficLocalEndpoints=true|false (default=true)
-AppArmor=true|false (BETA - default=true)
-BlockVolume=true|false (ALPHA - default=false)
-CPUManager=true|false (ALPHA - default=false)
-CSIPersistentVolume=true|false (ALPHA - default=false)
-CustomPodDNS=true|false (ALPHA - default=false)
-CustomResourceValidation=true|false (BETA - default=true)
-DebugContainers=true|false (ALPHA - default=false)
-DevicePlugins=true|false (ALPHA - default=false)
-DynamicKubeletConfig=true|false (ALPHA - default=false)
-EnableEquivalenceClassCache=true|false (ALPHA - default=false)
-ExpandPersistentVolumes=true|false (ALPHA - default=false)
-ExperimentalCriticalPodAnnotation=true|false (ALPHA - default=false)
-ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)
-HugePages=true|false (ALPHA - default=false)
-Initializers=true|false (ALPHA - default=false)
-KubeletConfigFile=true|false (ALPHA - default=false)
-LocalStorageCapacityIsolation=true|false (ALPHA - default=false)
-MountContainers=true|false (ALPHA - default=false)
-MountPropagation=true|false (ALPHA - default=false)
-PVCProtection=true|false (ALPHA - default=false)
-PersistentLocalVolumes=true|false (ALPHA - default=false)
-PodPriority=true|false (ALPHA - default=false)
-ResourceLimitsPriorityFunction=true|false (ALPHA - default=false)
-RotateKubeletClientCertificate=true|false (BETA - default=true)
-RotateKubeletServerCertificate=true|false (ALPHA - default=false)
-ServiceNodeExclusion=true|false (ALPHA - default=false)
-StreamingProxyRedirects=true|false (BETA - default=true)
-SupportIPVSProxyMode=true|false (ALPHA - default=false)
-TaintBasedEvictions=true|false (ALPHA - default=false)
-TaintNodesByCondition=true|false (ALPHA - default=false)
-VolumeScheduling=true|false (ALPHA - default=false)
- --file-check-frequency duration Duration between checking config files for new data (default 20s)
- --google-json-key string The Google Cloud Platform Service Account JSON Key to use for authentication.
- --hairpin-mode string How should the kubelet setup hairpin NAT. This allows endpoints of a Service to loadbalance back to themselves if they should try to access their own Service. Valid values are "promiscuous-bridge", "hairpin-veth" and "none". (default "promiscuous-bridge")
- --healthz-bind-address ip The IP address for the healthz server to serve on. (set to 0.0.0.0 for all interfaces) (default 127.0.0.1)
- --healthz-port int32 The port of the localhost healthz endpoint (set to 0 to disable) (default 10248)
- --host-ipc-sources stringSlice Comma-separated list of sources from which the Kubelet allows pods to use the host ipc namespace. (default [*])
- --host-network-sources stringSlice Comma-separated list of sources from which the Kubelet allows pods to use of host network. (default [*])
- --host-pid-sources stringSlice Comma-separated list of sources from which the Kubelet allows pods to use the host pid namespace. (default [*])
- --hostname-override string If non-empty, will use this string as identification instead of the actual hostname.
- --http-check-frequency duration Duration between checking http for new data (default 20s)
- --image-gc-high-threshold int32 The percent of disk usage after which image garbage collection is always run. (default 85)
- --image-gc-low-threshold int32 The percent of disk usage before which image garbage collection is never run. Lowest disk usage to garbage collect to. (default 80)
- --image-pull-progress-deadline duration If no pulling progress is made before this deadline, the image pulling will be cancelled. (default 1m0s)
- --image-service-endpoint string [Experimental] The endpoint of remote image service. If not specified, it will be the same with container-runtime-endpoint by default. Currently unix socket is supported on Linux, and tcp is supported on windows. Examples:'unix:///var/run/dockershim.sock', 'tcp://localhost:3735'
- --init-config-dir string The Kubelet will look in this directory for the init configuration. The path may be absolute or relative; relative paths start at the Kubelet's current working directory. Omit this argument to use the built-in default configuration values. Presently, you must also enable the KubeletConfigFile feature gate to pass this flag.
- --iptables-drop-bit int32 The bit of the fwmark space to mark packets for dropping. Must be within the range [0, 31]. (default 15)
- --iptables-masquerade-bit int32 The bit of the fwmark space to mark packets for SNAT. Must be within the range [0, 31]. Please match this parameter with corresponding parameter in kube-proxy. (default 14)
- --kube-api-burst int32 Burst to use while talking with kubernetes apiserver (default 10)
- --kube-api-content-type string Content type of requests sent to apiserver. (default "application/vnd.kubernetes.protobuf")
- --kube-api-qps int32 QPS to use while talking with kubernetes apiserver (default 5)
- --kube-reserved mapStringString A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=500Mi,ephemeral-storage=1Gi) pairs that describe resources reserved for kubernetes system components. Currently cpu, memory and local ephemeral storage for root file system are supported. See http://kubernetes.io/docs/user-guide/compute-resources for more detail. [default=none]
- --kube-reserved-cgroup string Absolute name of the top level cgroup that is used to manage kubernetes components for which compute resources were reserved via '--kube-reserved' flag. Ex. '/kube-reserved'. [default='']
- --kubeconfig string Path to a kubeconfig file, specifying how to connect to the API server. (default "/var/lib/kubelet/kubeconfig")
- --kubelet-cgroups string Optional absolute name of cgroups to create and run the Kubelet in.
- --lock-file string The path to file for kubelet to use as a lock file.
- --make-iptables-util-chains If true, kubelet will ensure iptables utility rules are present on host. (default true)
- --manifest-url string URL for accessing the container manifest
- --manifest-url-header --manifest-url-header 'a:hello,b:again,c:world' --manifest-url-header 'b:beautiful' Comma-separated list of HTTP headers to use when accessing the manifest URL. Multiple headers with the same name will be added in the same order provided. This flag can be repeatedly invoked. For example: --manifest-url-header 'a:hello,b:again,c:world' --manifest-url-header 'b:beautiful'
- --max-open-files int Number of files that can be opened by Kubelet process. (default 1000000)
- --max-pods int32 Number of Pods that can run on this Kubelet. (default 110)
- --minimum-image-ttl-duration duration Minimum age for an unused image before it is garbage collected. Examples: '300ms', '10s' or '2h45m'. (default 2m0s)
- --network-plugin string The name of the network plugin to be invoked for various events in kubelet/pod lifecycle
- --network-plugin-mtu int32 The MTU to be passed to the network plugin, to override the default. Set to 0 to use the default 1460 MTU.
- --node-ip string IP address of the node. If set, kubelet will use this IP address for the node
- --node-labels mapStringString Labels to add when registering the node in the cluster. Labels must be key=value pairs separated by ','.
- --node-status-update-frequency duration Specifies how often kubelet posts node status to master. Note: be cautious when changing the constant, it must work with nodeMonitorGracePeriod in nodecontroller. (default 10s)
- --oom-score-adj int32 The oom-score-adj value for kubelet process. Values must be within the range [-1000, 1000] (default -999)
- --pod-cidr string The CIDR to use for pod IP addresses, only used in standalone mode. In cluster mode, this is obtained from the master.
- --pod-infra-container-image string The image whose network/ipc namespaces containers in each pod will use. (default "gcr.io/google_containers/pause-amd64:3.0")
- --pod-manifest-path string Path to the directory containing pod manifest files to run, or the path to a single pod manifest file. Files starting with dots will be ignored.
- --pods-per-core int32 Number of Pods per core that can run on this Kubelet. The total number of Pods on this Kubelet cannot exceed max-pods, so max-pods will be used if this calculation results in a larger number of Pods allowed on the Kubelet. A value of 0 disables this limit.
- --port int32 The port for the Kubelet to serve on. (default 10250)
- --protect-kernel-defaults Default kubelet behaviour for kernel tuning. If set, kubelet errors if any of kernel tunables is different than kubelet defaults.
- --provider-id string Unique identifier for identifying the node in a machine database, i.e cloudprovider
- --read-only-port int32 The read-only port for the Kubelet to serve on with no authentication/authorization (set to 0 to disable) (default 10255)
- --really-crash-for-testing If true, when panics occur crash. Intended for testing.
- --register-node Register the node with the apiserver. If --kubeconfig is not provided, this flag is irrelevant, as the Kubelet won't have an apiserver to register with. Default=true. (default true)
- --register-with-taints []api.Taint Register the node with the given list of taints (comma separated "=:"). No-op if register-node is false.
- --registry-burst int32 Maximum size of a bursty pulls, temporarily allows pulls to burst to this number, while still not exceeding registry-qps. Only used if --registry-qps > 0 (default 10)
- --registry-qps int32 If > 0, limit registry pull QPS to this value. If 0, unlimited. (default 5)
- --resolv-conf string Resolver configuration file used as the basis for the container DNS resolution configuration. (default "/etc/resolv.conf")
- --rkt-api-endpoint string The endpoint of the rkt API service to communicate with. Only used if --container-runtime='rkt'. (default "localhost:15441")
- --rkt-path string Path of rkt binary. Leave empty to use the first rkt in $PATH. Only used if --container-runtime='rkt'.
- --root-dir string Directory path for managing kubelet files (volume mounts,etc). (default "/var/lib/kubelet")
- --rotate-certificates Auto rotate the kubelet client certificates by requesting new certificates from the kube-apiserver when the certificate expiration approaches.
- --runonce If true, exit after spawning pods from local manifests or remote urls. Exclusive with --enable-server
- --runtime-cgroups string Optional absolute name of cgroups to create and run the runtime in.
- --runtime-request-timeout duration Timeout of all runtime requests except long running request - pull, logs, exec and attach. When timeout exceeded, kubelet will cancel the request, throw out an error and retry later. (default 2m0s)
- --seccomp-profile-root string Directory path for seccomp profiles. (default "/var/lib/kubelet/seccomp")
- --serialize-image-pulls Pull images one at a time. We recommend *not* changing the default value on nodes that run docker daemon with version < 1.9 or an Aufs storage backend. Issue #10959 has more details. (default true)
- --streaming-connection-idle-timeout duration Maximum time a streaming connection can be idle before the connection is automatically closed. 0 indicates no timeout. Example: '5m' (default 4h0m0s)
- --sync-frequency duration Max period between synchronizing running containers and config (default 1m0s)
- --system-cgroups / Optional absolute name of cgroups in which to place all non-kernel processes that are not already inside a cgroup under /. Empty for no container. Rolling back the flag requires a reboot.
- --system-reserved mapStringString A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=500Mi,ephemeral-storage=1Gi) pairs that describe resources reserved for non-kubernetes components. Currently only cpu and memory are supported. See http://kubernetes.io/docs/user-guide/compute-resources for more detail. [default=none]
- --system-reserved-cgroup string Absolute name of the top level cgroup that is used to manage non-kubernetes components for which compute resources were reserved via '--system-reserved' flag. Ex. '/system-reserved'. [default='']
- --tls-cert-file string File containing x509 Certificate used for serving HTTPS (with intermediate certs, if any, concatenated after server cert). If --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory passed to --cert-dir.
- --tls-private-key-file string File containing x509 private key matching --tls-cert-file.
- --version version[=true] Print version information and quit
- --volume-plugin-dir string The full path of the directory in which to search for additional third party volume plugins (default "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/")
- --volume-stats-agg-period duration Specifies interval for kubelet to calculate and cache the volume disk usage for all pods and volumes. To disable volume calculations, set to 0. (default 1m0s)
-```
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1/definitions.html b/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1/definitions.html
index 887585f5562f..af89c45aa2c6 100755
--- a/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1/definitions.html
+++ b/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1/definitions.html
@@ -2615,7 +2615,7 @@ v1.SecretVolumeSource
v1.FlexVolumeSource
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
@@ -3262,7 +3262,7 @@ v1.Volume
flexVolume
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
false
v1.PodSpec
dnsPolicy
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet.
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
string
v1.PodSpec
dnsConfig
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
v1.SecretVolumeSource
v1.FlexVolumeSource
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
@@ -3259,7 +3259,7 @@ v1.Volume
flexVolume
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
false
v1.PodSpec
dnsPolicy
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet.
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
string
v1.PodSpec
dnsConfig
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
v1.CephFSVolumeSource
v1beta2.ControllerRevision
-ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.
+DEPRECATED - This group version of ControllerRevision is deprecated by apps/v1/ControllerRevision. See the release notes for more information. ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.
@@ -3188,7 +3188,7 @@ v1beta2.DaemonSetCondition
v1beta2.DaemonSet
-DaemonSet represents the configuration of a daemon set.
+DEPRECATED - This group version of DaemonSet is deprecated by apps/v1/DaemonSet. See the release notes for more information. DaemonSet represents the configuration of a daemon set.
@@ -3377,7 +3377,7 @@ v1.SecretVolumeSource
v1.FlexVolumeSource
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
@@ -3725,7 +3725,7 @@ v1.PersistentVolumeMode
v1beta2.StatefulSet
-StatefulSet represents a set of pods with consistent identities. Identities are defined as:
+
DEPRECATED - This group version of StatefulSet is deprecated by apps/v1/StatefulSet. See the release notes for more information. StatefulSet represents a set of pods with consistent identities. Identities are defined as:
- Network: A single stable DNS and hostname.
- Storage: As many VolumeClaims as requested.
The StatefulSet guarantees that a given network identity will always map to the same storage identity.
@@ -3965,7 +3965,7 @@ v1.Volume
flexVolume
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
false
v1.PodSpec
dnsPolicy
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet.
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
string
v1.PodSpec
dnsConfig
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
v1.HostPathType
v1beta2.ReplicaSet
-ReplicaSet ensures that a specified number of pod replicas are running at any given time.
+DEPRECATED - This group version of ReplicaSet is deprecated by apps/v1/ReplicaSet. See the release notes for more information. ReplicaSet ensures that a specified number of pod replicas are running at any given time.
@@ -6683,7 +6683,7 @@ v1.SecurityContext
v1beta2.Deployment
-Deployment enables declarative updates for Pods and ReplicaSets.
+DEPRECATED - This group version of Deployment is deprecated by apps/v1/Deployment. See the release notes for more information. Deployment enables declarative updates for Pods and ReplicaSets.
diff --git a/vendor/k8s.io/kubernetes/docs/api-reference/batch/v1/definitions.html b/vendor/k8s.io/kubernetes/docs/api-reference/batch/v1/definitions.html
index bcf76e5b2224..291cf172cda9 100755
--- a/vendor/k8s.io/kubernetes/docs/api-reference/batch/v1/definitions.html
+++ b/vendor/k8s.io/kubernetes/docs/api-reference/batch/v1/definitions.html
@@ -2089,7 +2089,7 @@ v1.SecretVolumeSource
v1.FlexVolumeSource
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
@@ -2629,7 +2629,7 @@ v1.Volume
flexVolume
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
false
v1.PodSpec
dnsPolicy
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet.
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
string
v1.PodSpec
dnsConfig
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
v1.SecretVolumeSource
v1.FlexVolumeSource
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
@@ -2663,7 +2663,7 @@ v1.Volume
flexVolume
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
false
v1.PodSpec
dnsPolicy
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet.
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
string
v1.PodSpec
dnsConfig
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
v1.SecretVolumeSource
v1.FlexVolumeSource
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
@@ -2636,7 +2636,7 @@ v1.Volume
flexVolume
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
false
v1.PodSpec
dnsPolicy
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet.
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
string
v1.PodSpec
dnsConfig
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
v1beta1.ReplicaSetCondition
v1beta1.NetworkPolicyList
-Network Policy List is a list of NetworkPolicy objects.
+DEPRECATED 1.9 - This group version of NetworkPolicyList is deprecated by networking/v1/NetworkPolicyList. Network Policy List is a list of NetworkPolicy objects.
@@ -3163,7 +3163,7 @@ v1.SecretVolumeSource
v1.FlexVolumeSource
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
@@ -3280,7 +3280,7 @@ v1.EnvVarSource
v1beta1.IPBlock
-IPBlock describes a particular CIDR (Ex. "192.168.1.1/24") that is allowed to the pods matched by a NetworkPolicySpec’s podSelector. The except entry describes CIDRs that should not be included within this rule.
+DEPRECATED 1.9 - This group version of IPBlock is deprecated by networking/v1/IPBlock. IPBlock describes a particular CIDR (Ex. "192.168.1.1/24") that is allowed to the pods matched by a NetworkPolicySpec’s podSelector. The except entry describes CIDRs that should not be included within this rule.
@@ -3843,7 +3843,7 @@ v1.Volume
flexVolume
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
false
v1.PodSpec
dnsPolicy
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet.
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
string
v1.PodSpec
dnsConfig
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
v1.ScaleIOVolumeSource
v1beta1.NetworkPolicy
-NetworkPolicy describes what network traffic is allowed for a set of Pods
+DEPRECATED 1.9 - This group version of NetworkPolicy is deprecated by networking/v1/NetworkPolicy. NetworkPolicy describes what network traffic is allowed for a set of Pods
@@ -5611,6 +5611,9 @@ v1beta1.ScaleStatus
v1beta1.NetworkPolicySpec
+
+DEPRECATED 1.9 - This group version of NetworkPolicySpec is deprecated by networking/v1/NetworkPolicySpec.
+
v1beta1.IngressRule
v1beta1.NetworkPolicyPeer
+
+DEPRECATED 1.9 - This group version of NetworkPolicyPeer is deprecated by networking/v1/NetworkPolicyPeer.
+
v1.PodSecurityContext
v1beta1.NetworkPolicyIngressRule
-This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.
+DEPRECATED 1.9 - This group version of NetworkPolicyIngressRule is deprecated by networking/v1/NetworkPolicyIngressRule. This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.
@@ -7007,7 +7013,7 @@ v1beta1.ReplicaSet
v1beta1.NetworkPolicyEgressRule
-NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec’s podSelector. The traffic must match both ports and to. This type is beta-level in 1.8
+DEPRECATED 1.9 - This group version of NetworkPolicyEgressRule is deprecated by networking/v1/NetworkPolicyEgressRule. NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec’s podSelector. The traffic must match both ports and to. This type is beta-level in 1.8
@@ -7822,6 +7828,9 @@ v1.NodeSelector
v1beta1.NetworkPolicyPort
+
+DEPRECATED 1.9 - This group version of NetworkPolicyPort is deprecated by networking/v1/NetworkPolicyPort.
+
v1.EnvVarSource
v1.FlexVolumeSource
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
@@ -3414,7 +3414,7 @@ v1.Volume
flexVolume
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
false
v1.SecretVolumeSource
v1.FlexVolumeSource
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
@@ -4087,7 +4087,7 @@ v1.PersistentVolumeSpec
flexVolume
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
false
v1.Volume
flexVolume
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
false
v1.PodSpec
dnsPolicy
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet.
Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
string
v1.PodSpec
dnsConfig
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.
Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it.
false
- The IP address on which to advertise the apiserver to members of the cluster. This address must be reachable by the rest of the cluster. If blank, the \-\-bind\-address will be used. If \-\-bind\-address is unspecified, the host's default interface will be used.
-
-.PP
-\fB\-\-allow\-privileged\fP=false
- If true, allow privileged containers. [default=false]
-
-.PP
-\fB\-\-anonymous\-auth\fP=true
- Enables anonymous requests to the secure port of the API server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.
-
-.PP
-\fB\-\-apiserver\-count\fP=1
- The number of apiservers running in the cluster, must be a positive number.
-
-.PP
-\fB\-\-audit\-log\-format\fP="json"
- Format of saved audits. "legacy" indicates 1\-line text format for each event. "json" indicates structured json format. Requires the 'AdvancedAuditing' feature gate. Known formats are legacy,json.
-
-.PP
-\fB\-\-audit\-log\-maxage\fP=0
- The maximum number of days to retain old audit log files based on the timestamp encoded in their filename.
-
-.PP
-\fB\-\-audit\-log\-maxbackup\fP=0
- The maximum number of old audit log files to retain.
-
-.PP
-\fB\-\-audit\-log\-maxsize\fP=0
- The maximum size in megabytes of the audit log file before it gets rotated.
-
-.PP
-\fB\-\-audit\-log\-path\fP=""
- If set, all requests coming to the apiserver will be logged to this file. '\-' means standard out.
-
-.PP
-\fB\-\-audit\-policy\-file\fP=""
- Path to the file that defines the audit policy configuration. Requires the 'AdvancedAuditing' feature gate. With AdvancedAuditing, a profile is required to enable auditing.
-
-.PP
-\fB\-\-audit\-webhook\-config\-file\fP=""
- Path to a kubeconfig formatted file that defines the audit webhook configuration. Requires the 'AdvancedAuditing' feature gate.
-
-.PP
-\fB\-\-audit\-webhook\-mode\fP="batch"
- Strategy for sending audit events. Blocking indicates sending events should block server responses. Batch causes the webhook to buffer and send events asynchronously. Known modes are batch,blocking.
-
-.PP
-\fB\-\-authentication\-token\-webhook\-cache\-ttl\fP=2m0s
- The duration to cache responses from the webhook token authenticator.
-
-.PP
-\fB\-\-authentication\-token\-webhook\-config\-file\fP=""
- File with webhook configuration for token authentication in kubeconfig format. The API server will query the remote service to determine authentication for bearer tokens.
-
-.PP
-\fB\-\-authorization\-mode\fP="AlwaysAllow"
- Ordered list of plug\-ins to do authorization on secure port. Comma\-delimited list of: AlwaysAllow,AlwaysDeny,ABAC,Webhook,RBAC,Node.
-
-.PP
-\fB\-\-authorization\-policy\-file\fP=""
- File with authorization policy in csv format, used with \-\-authorization\-mode=ABAC, on the secure port.
-
-.PP
-\fB\-\-authorization\-rbac\-super\-user\fP=""
- If specified, a username which avoids RBAC authorization checks and role binding privilege escalation checks, to be used with \-\-authorization\-mode=RBAC.
-
-.PP
-\fB\-\-authorization\-webhook\-cache\-authorized\-ttl\fP=5m0s
- The duration to cache 'authorized' responses from the webhook authorizer.
-
-.PP
-\fB\-\-authorization\-webhook\-cache\-unauthorized\-ttl\fP=30s
- The duration to cache 'unauthorized' responses from the webhook authorizer.
-
-.PP
-\fB\-\-authorization\-webhook\-config\-file\fP=""
- File with webhook configuration in kubeconfig format, used with \-\-authorization\-mode=Webhook. The API server will query the remote service to determine access on the API server's secure port.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-basic\-auth\-file\fP=""
- If set, the file that will be used to admit requests to the secure port of the API server via http basic authentication.
-
-.PP
-\fB\-\-bind\-address\fP=0.0.0.0
- The IP address on which to listen for the \-\-secure\-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank, all interfaces will be used (0.0.0.0).
-
-.PP
-\fB\-\-cert\-dir\fP="/var/run/kubernetes"
- The directory where the TLS certs are located. If \-\-tls\-cert\-file and \-\-tls\-private\-key\-file are provided, this flag will be ignored.
-
-.PP
-\fB\-\-client\-ca\-file\fP=""
- If set, any request presenting a client certificate signed by one of the authorities in the client\-ca\-file is authenticated with an identity corresponding to the CommonName of the client certificate.
-
-.PP
-\fB\-\-cloud\-config\fP=""
- The path to the cloud provider configuration file. Empty string for no configuration file.
-
-.PP
-\fB\-\-cloud\-provider\fP=""
- The provider for cloud services. Empty string for no provider.
-
-.PP
-\fB\-\-contention\-profiling\fP=false
- Enable lock contention profiling, if profiling is enabled
-
-.PP
-\fB\-\-cors\-allowed\-origins\fP=[]
- List of allowed origins for CORS, comma separated. An allowed origin can be a regular expression to support subdomain matching. If this list is empty CORS will not be enabled.
-
-.PP
-\fB\-\-default\-watch\-cache\-size\fP=100
- Default watch cache size. If zero, watch cache will be disabled for resources that do not have a default watch size set.
-
-.PP
-\fB\-\-delete\-collection\-workers\fP=1
- Number of workers spawned for DeleteCollection call. These are used to speed up namespace cleanup.
-
-.PP
-\fB\-\-deserialization\-cache\-size\fP=0
- Number of deserialized json objects to cache in memory.
-
-.PP
-\fB\-\-enable\-aggregator\-routing\fP=false
- Turns on aggregator routing requests to endoints IP rather than cluster IP.
-
-.PP
-\fB\-\-enable\-bootstrap\-token\-auth\fP=false
- Enable to allow secrets of type 'bootstrap.kubernetes.io/token' in the 'kube\-system' namespace to be used for TLS bootstrapping authentication.
-
-.PP
-\fB\-\-enable\-garbage\-collector\fP=true
- Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube\-controller\-manager.
-
-.PP
-\fB\-\-enable\-logs\-handler\fP=true
- If true, install a /logs handler for the apiserver logs.
-
-.PP
-\fB\-\-enable\-swagger\-ui\fP=false
- Enables swagger ui on the apiserver at /swagger\-ui
-
-.PP
-\fB\-\-endpoint\-reconciler\-type\fP="master\-count"
- Use an endpoint reconciler (master\-count, lease, none)
-
-.PP
-\fB\-\-etcd\-cafile\fP=""
- SSL Certificate Authority file used to secure etcd communication.
-
-.PP
-\fB\-\-etcd\-certfile\fP=""
- SSL certification file used to secure etcd communication.
-
-.PP
-\fB\-\-etcd\-compaction\-interval\fP=5m0s
- The interval of compaction requests. If 0, the compaction request from apiserver is disabled.
-
-.PP
-\fB\-\-etcd\-keyfile\fP=""
- SSL key file used to secure etcd communication.
-
-.PP
-\fB\-\-etcd\-prefix\fP="/registry"
- The prefix to prepend to all resource paths in etcd.
-
-.PP
-\fB\-\-etcd\-quorum\-read\fP=true
- If true, enable quorum read. It defaults to true and is strongly recommended not setting to false.
-
-.PP
-\fB\-\-etcd\-servers\fP=[]
- List of etcd servers to connect with (scheme://ip:port), comma separated.
-
-.PP
-\fB\-\-etcd\-servers\-overrides\fP=[]
- Per\-resource etcd servers overrides, comma separated. The individual override format: group/resource#servers, where servers are
-\[la]http://ip:port\[ra], semicolon separated.
-
-.PP
-\fB\-\-event\-ttl\fP=1h0m0s
- Amount of time to retain events.
-
-.PP
-\fB\-\-experimental\-encryption\-provider\-config\fP=""
- The file containing configuration for encryption providers to be used for storing secrets in etcd
-
-.PP
-\fB\-\-experimental\-keystone\-ca\-file\fP=""
- If set, the Keystone server's certificate will be verified by one of the authorities in the experimental\-keystone\-ca\-file, otherwise the host's root CA set will be used.
-
-.PP
-\fB\-\-experimental\-keystone\-url\fP=""
- If passed, activates the keystone authentication plugin.
-
-.PP
-\fB\-\-external\-hostname\fP=""
- The hostname to use when generating externalized URLs for this master (e.g. Swagger API Docs).
-
-.PP
-\fB\-\-feature\-gates\fP=
- A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA \- default=true)
-APIResponseCompression=true|false (ALPHA \- default=false)
-Accelerators=true|false (ALPHA \- default=false)
-AdvancedAuditing=true|false (BETA \- default=true)
-AllAlpha=true|false (ALPHA \- default=false)
-AllowExtTrafficLocalEndpoints=true|false (default=true)
-AppArmor=true|false (BETA \- default=true)
-BlockVolume=true|false (ALPHA \- default=false)
-CPUManager=true|false (ALPHA \- default=false)
-CSIPersistentVolume=true|false (ALPHA \- default=false)
-CustomPodDNS=true|false (ALPHA \- default=false)
-CustomResourceValidation=true|false (BETA \- default=true)
-DebugContainers=true|false (ALPHA \- default=false)
-DevicePlugins=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-EnableEquivalenceClassCache=true|false (ALPHA \- default=false)
-ExpandPersistentVolumes=true|false (ALPHA \- default=false)
-ExperimentalCriticalPodAnnotation=true|false (ALPHA \- default=false)
-ExperimentalHostUserNamespaceDefaulting=true|false (BETA \- default=false)
-HugePages=true|false (ALPHA \- default=false)
-Initializers=true|false (ALPHA \- default=false)
-KubeletConfigFile=true|false (ALPHA \- default=false)
-LocalStorageCapacityIsolation=true|false (ALPHA \- default=false)
-MountContainers=true|false (ALPHA \- default=false)
-MountPropagation=true|false (ALPHA \- default=false)
-PVCProtection=true|false (ALPHA \- default=false)
-PersistentLocalVolumes=true|false (ALPHA \- default=false)
-PodPriority=true|false (ALPHA \- default=false)
-ResourceLimitsPriorityFunction=true|false (ALPHA \- default=false)
-RotateKubeletClientCertificate=true|false (BETA \- default=true)
-RotateKubeletServerCertificate=true|false (ALPHA \- default=false)
-ServiceNodeExclusion=true|false (ALPHA \- default=false)
-StreamingProxyRedirects=true|false (BETA \- default=true)
-SupportIPVSProxyMode=true|false (ALPHA \- default=false)
-TaintBasedEvictions=true|false (ALPHA \- default=false)
-TaintNodesByCondition=true|false (ALPHA \- default=false)
-VolumeScheduling=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-insecure\-bind\-address\fP=127.0.0.1
- The IP address on which to serve the \-\-insecure\-port (set to 0.0.0.0 for all interfaces).
-
-.PP
-\fB\-\-insecure\-port\fP=8080
- The port on which to serve unsecured, unauthenticated access. It is assumed that firewall rules are set up such that this port is not reachable from outside of the cluster and that port 443 on the cluster's public address is proxied to this port. This is performed by nginx in the default setup.
-
-.PP
-\fB\-\-kubelet\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority.
-
-.PP
-\fB\-\-kubelet\-client\-certificate\fP=""
- Path to a client cert file for TLS.
-
-.PP
-\fB\-\-kubelet\-client\-key\fP=""
- Path to a client key file for TLS.
-
-.PP
-\fB\-\-kubelet\-https\fP=true
- Use https for kubelet connections.
-
-.PP
-\fB\-\-kubelet\-port\fP=10250
- DEPRECATED: kubelet port.
-
-.PP
-\fB\-\-kubelet\-preferred\-address\-types\fP=[Hostname,InternalDNS,InternalIP,ExternalDNS,ExternalIP]
- List of the preferred NodeAddressTypes to use for kubelet connections.
-
-.PP
-\fB\-\-kubelet\-read\-only\-port\fP=10255
- DEPRECATED: kubelet port.
-
-.PP
-\fB\-\-kubelet\-timeout\fP=5s
- Timeout for kubelet operations.
-
-.PP
-\fB\-\-kubernetes\-service\-node\-port\fP=0
- If non\-zero, the Kubernetes master service (which apiserver creates/maintains) will be of type NodePort, using this as the value of the port. If zero, the Kubernetes master service will be of type ClusterIP.
-
-.PP
-\fB\-\-master\-service\-namespace\fP="default"
- DEPRECATED: the namespace from which the kubernetes master services should be injected into pods.
-
-.PP
-\fB\-\-max\-connection\-bytes\-per\-sec\fP=0
- If non\-zero, throttle each user connection to this number of bytes/sec. Currently only applies to long\-running requests.
-
-.PP
-\fB\-\-max\-mutating\-requests\-inflight\fP=200
- The maximum number of mutating requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no limit.
-
-.PP
-\fB\-\-max\-requests\-inflight\fP=400
- The maximum number of non\-mutating requests in flight at a given time. When the server exceeds this, it rejects requests. Zero for no limit.
-
-.PP
-\fB\-\-min\-request\-timeout\fP=1800
- An optional field indicating the minimum number of seconds a handler must keep a request open before timing it out. Currently only honored by the watch request handler, which picks a randomized value above this number as the connection timeout, to spread out load.
-
-.PP
-\fB\-\-oidc\-ca\-file\fP=""
- If set, the OpenID server's certificate will be verified by one of the authorities in the oidc\-ca\-file, otherwise the host's root CA set will be used.
-
-.PP
-\fB\-\-oidc\-client\-id\fP=""
- The client ID for the OpenID Connect client, must be set if oidc\-issuer\-url is set.
-
-.PP
-\fB\-\-oidc\-groups\-claim\fP=""
- If provided, the name of a custom OpenID Connect claim for specifying user groups. The claim value is expected to be a string or array of strings. This flag is experimental, please see the authentication documentation for further details.
-
-.PP
-\fB\-\-oidc\-groups\-prefix\fP=""
- If provided, all groups will be prefixed with this value to prevent conflicts with other authentication strategies.
-
-.PP
-\fB\-\-oidc\-issuer\-url\fP=""
- The URL of the OpenID issuer, only HTTPS scheme will be accepted. If set, it will be used to verify the OIDC JSON Web Token (JWT).
-
-.PP
-\fB\-\-oidc\-username\-claim\fP="sub"
- The OpenID claim to use as the user name. Note that claims other than the default ('sub') is not guaranteed to be unique and immutable. This flag is experimental, please see the authentication documentation for further details.
-
-.PP
-\fB\-\-oidc\-username\-prefix\fP=""
- If provided, all usernames will be prefixed with this value. If not provided, username claims other than 'email' are prefixed by the issuer URL to avoid clashes. To skip any prefixing, provide the value '\-'.
-
-.PP
-\fB\-\-port\fP=8080
- DEPRECATED: see \-\-insecure\-port instead.
-
-.PP
-\fB\-\-profiling\fP=true
- Enable profiling via web interface host:port/debug/pprof/
-
-.PP
-\fB\-\-proxy\-client\-cert\-file\fP=""
- Client certificate used to prove the identity of the aggregator or kube\-apiserver when it must call out during a request. This includes proxying requests to a user api\-server and calling out to webhook admission plugins. It is expected that this cert includes a signature from the CA in the \-\-requestheader\-client\-ca\-file flag. That CA is published in the 'extension\-apiserver\-authentication' configmap in the kube\-system namespace. Components recieving calls from kube\-aggregator should use that CA to perform their half of the mutual TLS verification.
-
-.PP
-\fB\-\-proxy\-client\-key\-file\fP=""
- Private key for the client certificate used to prove the identity of the aggregator or kube\-apiserver when it must call out during a request. This includes proxying requests to a user api\-server and calling out to webhook admission plugins.
-
-.PP
-\fB\-\-public\-address\-override\fP=0.0.0.0
- DEPRECATED: see \-\-bind\-address instead.
-
-.PP
-\fB\-\-repair\-malformed\-updates\fP=true
- If true, server will do its best to fix the update request to pass the validation, e.g., setting empty UID in update request to its existing value. This flag can be turned off after we fix all the clients that send malformed updates.
-
-.PP
-\fB\-\-request\-timeout\fP=1m0s
- An optional field indicating the duration a handler must keep a request open before timing it out. This is the default request timeout for requests but may be overridden by flags such as \-\-min\-request\-timeout for specific types of requests.
-
-.PP
-\fB\-\-requestheader\-allowed\-names\fP=[]
- List of client certificate common names to allow to provide usernames in headers specified by \-\-requestheader\-username\-headers. If empty, any client certificate validated by the authorities in \-\-requestheader\-client\-ca\-file is allowed.
-
-.PP
-\fB\-\-requestheader\-client\-ca\-file\fP=""
- Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by \-\-requestheader\-username\-headers
-
-.PP
-\fB\-\-requestheader\-extra\-headers\-prefix\fP=[]
- List of request header prefixes to inspect. X\-Remote\-Extra\- is suggested.
-
-.PP
-\fB\-\-requestheader\-group\-headers\fP=[]
- List of request headers to inspect for groups. X\-Remote\-Group is suggested.
-
-.PP
-\fB\-\-requestheader\-username\-headers\fP=[]
- List of request headers to inspect for usernames. X\-Remote\-User is common.
-
-.PP
-\fB\-\-runtime\-config\fP=
- A set of key=value pairs that describe runtime configuration that may be passed to apiserver. apis/ key can be used to turn on/off specific api versions. apis// can be used to turn on/off specific resources. api/all and api/legacy are special keys to control all and legacy api versions respectively.
-
-.PP
-\fB\-\-secure\-port\fP=6443
- The port on which to serve HTTPS with authentication and authorization. If 0, don't serve HTTPS at all.
-
-.PP
-\fB\-\-service\-account\-key\-file\fP=[]
- File containing PEM\-encoded x509 RSA or ECDSA private or public keys, used to verify ServiceAccount tokens. If unspecified, \-\-tls\-private\-key\-file is used. The specified file can contain multiple keys, and the flag can be specified multiple times with different files.
-
-.PP
-\fB\-\-service\-account\-lookup\fP=true
- If true, validate ServiceAccount tokens exist in etcd as part of authentication.
-
-.PP
-\fB\-\-service\-cluster\-ip\-range\fP=
- A CIDR notation IP range from which to assign service cluster IPs. This must not overlap with any IP ranges assigned to nodes for pods.
-
-.PP
-\fB\-\-service\-node\-port\-range\fP=30000\-32767
- A port range to reserve for services with NodePort visibility. Example: '30000\-32767'. Inclusive at both ends of the range.
-
-.PP
-\fB\-\-ssh\-keyfile\fP=""
- If non\-empty, use secure SSH proxy to the nodes, using this user keyfile
-
-.PP
-\fB\-\-ssh\-user\fP=""
- If non\-empty, use secure SSH proxy to the nodes, using this user name
-
-.PP
-\fB\-\-storage\-backend\fP=""
- The storage backend for persistence. Options: 'etcd3' (default), 'etcd2'.
-
-.PP
-\fB\-\-storage\-media\-type\fP="application/vnd.kubernetes.protobuf"
- The media type to use to store objects in storage. Some resources or storage backends may only support a specific media type and will ignore this setting.
-
-.PP
-\fB\-\-storage\-version\fP=""
- DEPRECATED: the version to store the legacy v1 resources with. Defaults to server preferred.
-
-.PP
-\fB\-\-storage\-versions\fP="admission.k8s.io/v1beta1,admissionregistration.k8s.io/v1beta1,apps/v1beta1,authentication.k8s.io/v1,authorization.k8s.io/v1,autoscaling/v1,batch/v1,certificates.k8s.io/v1beta1,componentconfig/v1alpha1,events.k8s.io/v1beta1,extensions/v1beta1,imagepolicy.k8s.io/v1alpha1,kubeadm.k8s.io/v1alpha1,networking.k8s.io/v1,policy/v1beta1,rbac.authorization.k8s.io/v1,scheduling.k8s.io/v1alpha1,settings.k8s.io/v1alpha1,storage.k8s.io/v1,v1"
- The per\-group version to store resources in. Specified in the format "group1/version1,group2/version2,...". In the case where objects are moved from one group to the other, you may specify the format "group1=group2/v1beta1,group3/v1beta1,...". You only need to pass the groups you wish to change from the defaults. It defaults to a list of preferred versions of all registered groups, which is derived from the KUBE\_API\_VERSIONS environment variable.
-
-.PP
-\fB\-\-target\-ram\-mb\fP=0
- Memory limit for apiserver in MB (used to configure sizes of caches, etc.)
-
-.PP
-\fB\-\-tls\-ca\-file\fP=""
- If set, this certificate authority will used for secure access from Admission Controllers. This must be a valid PEM\-encoded CA bundle. Altneratively, the certificate authority can be appended to the certificate provided by \-\-tls\-cert\-file.
-
-.PP
-\fB\-\-tls\-cert\-file\fP=""
- File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and \-\-tls\-cert\-file and \-\-tls\-private\-key\-file are not provided, a self\-signed certificate and key are generated for the public address and saved to the directory specified by \-\-cert\-dir.
-
-.PP
-\fB\-\-tls\-private\-key\-file\fP=""
- File containing the default x509 private key matching \-\-tls\-cert\-file.
-
-.PP
-\fB\-\-tls\-sni\-cert\-key\fP=[]
- A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. If no domain patterns are provided, the names of the certificate are extracted. Non\-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the \-\-tls\-sni\-cert\-key multiple times. Examples: "example.crt,example.key" or "foo.crt,foo.key:*.foo.com,foo.com".
-
-.PP
-\fB\-\-token\-auth\-file\fP=""
- If set, the file that will be used to secure the secure port of the API server via token authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-watch\-cache\fP=true
- Enable watch caching in the apiserver
-
-.PP
-\fB\-\-watch\-cache\-sizes\fP=[]
- List of watch cache sizes for every resource (pods, nodes, etc.), comma separated. The individual override format: resource#size, where size is a number. It takes effect when watch\-cache is enabled.
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kube-controller-manager.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kube-controller-manager.1
index 551c57911984..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kube-controller-manager.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kube-controller-manager.1
@@ -1,405 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kube\-controller\-manager \-
-
-
-.SH SYNOPSIS
-.PP
-\fBkube\-controller\-manager\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-The Kubernetes controller manager is a daemon that embeds
-the core control loops shipped with Kubernetes. In applications of robotics and
-automation, a control loop is a non\-terminating loop that regulates the state of
-the system. In Kubernetes, a controller is a control loop that watches the shared
-state of the cluster through the apiserver and makes changes attempting to move the
-current state towards the desired state. Examples of controllers that ship with
-Kubernetes today are the replication controller, endpoints controller, namespace
-controller, and serviceaccounts controller.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-address\fP=0.0.0.0
- The IP address to serve on (set to 0.0.0.0 for all interfaces)
-
-.PP
-\fB\-\-allocate\-node\-cidrs\fP=false
- Should CIDRs for Pods be allocated and set on the cloud provider.
-
-.PP
-\fB\-\-allow\-untagged\-cloud\fP=false
- Allow the cluster to run without the cluster\-id on cloud instances. This is a legacy mode of operation and a cluster\-id will be required in the future.
-
-.PP
-\fB\-\-attach\-detach\-reconcile\-sync\-period\fP=1m0s
- The reconciler sync wait time between volume attach detach. This duration must be larger than one second, and increasing this value from the default may allow for volumes to be mismatched with pods.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-cidr\-allocator\-type\fP="RangeAllocator"
- Type of CIDR allocator to use
-
-.PP
-\fB\-\-cloud\-config\fP=""
- The path to the cloud provider configuration file. Empty string for no configuration file.
-
-.PP
-\fB\-\-cloud\-provider\fP=""
- The provider for cloud services. Empty string for no provider.
-
-.PP
-\fB\-\-cluster\-cidr\fP=""
- CIDR Range for Pods in cluster. Requires \-\-allocate\-node\-cidrs to be true
-
-.PP
-\fB\-\-cluster\-name\fP="kubernetes"
- The instance prefix for the cluster
-
-.PP
-\fB\-\-cluster\-signing\-cert\-file\fP="/etc/kubernetes/ca/ca.pem"
- Filename containing a PEM\-encoded X509 CA certificate used to issue cluster\-scoped certificates
-
-.PP
-\fB\-\-cluster\-signing\-key\-file\fP="/etc/kubernetes/ca/ca.key"
- Filename containing a PEM\-encoded RSA or ECDSA private key used to sign cluster\-scoped certificates
-
-.PP
-\fB\-\-concurrent\-deployment\-syncs\fP=5
- The number of deployment objects that are allowed to sync concurrently. Larger number = more responsive deployments, but more CPU (and network) load
-
-.PP
-\fB\-\-concurrent\-endpoint\-syncs\fP=5
- The number of endpoint syncing operations that will be done concurrently. Larger number = faster endpoint updating, but more CPU (and network) load
-
-.PP
-\fB\-\-concurrent\-gc\-syncs\fP=20
- The number of garbage collector workers that are allowed to sync concurrently.
-
-.PP
-\fB\-\-concurrent\-namespace\-syncs\fP=10
- The number of namespace objects that are allowed to sync concurrently. Larger number = more responsive namespace termination, but more CPU (and network) load
-
-.PP
-\fB\-\-concurrent\-replicaset\-syncs\fP=5
- The number of replica sets that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load
-
-.PP
-\fB\-\-concurrent\-resource\-quota\-syncs\fP=5
- The number of resource quotas that are allowed to sync concurrently. Larger number = more responsive quota management, but more CPU (and network) load
-
-.PP
-\fB\-\-concurrent\-service\-syncs\fP=1
- The number of services that are allowed to sync concurrently. Larger number = more responsive service management, but more CPU (and network) load
-
-.PP
-\fB\-\-concurrent\-serviceaccount\-token\-syncs\fP=5
- The number of service account token objects that are allowed to sync concurrently. Larger number = more responsive token generation, but more CPU (and network) load
-
-.PP
-\fB\-\-concurrent\_rc\_syncs\fP=5
- The number of replication controllers that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load
-
-.PP
-\fB\-\-configure\-cloud\-routes\fP=true
- Should CIDRs allocated by allocate\-node\-cidrs be configured on the cloud provider.
-
-.PP
-\fB\-\-contention\-profiling\fP=false
- Enable lock contention profiling, if profiling is enabled
-
-.PP
-\fB\-\-controller\-start\-interval\fP=0s
- Interval between starting controller managers.
-
-.PP
-\fB\-\-controllers\fP=[\fI]
- A list of controllers to enable. '\fP' enables all on\-by\-default controllers, 'foo' enables the controller named 'foo', '\-foo' disables the controller named 'foo'.
-All controllers: attachdetach, bootstrapsigner, clusterrole\-aggregation, cronjob, csrapproving, csrcleaner, csrsigning, daemonset, deployment, disruption, endpoint, garbagecollector, horizontalpodautoscaling, job, namespace, node, persistentvolume\-binder, persistentvolume\-expander, podgc, pvc\-protection, replicaset, replicationcontroller, resourcequota, route, service, serviceaccount, serviceaccount\-token, statefulset, tokencleaner, ttl
-Disabled\-by\-default controllers: bootstrapsigner, tokencleaner
-
-.PP
-\fB\-\-deleting\-pods\-burst\fP=0
- Number of nodes on which pods are bursty deleted in case of node failure. For more details look into RateLimiter.
-
-.PP
-\fB\-\-deleting\-pods\-qps\fP=0.1
- Number of nodes per second on which pods are deleted in case of node failure.
-
-.PP
-\fB\-\-deployment\-controller\-sync\-period\fP=30s
- Period for syncing the deployments.
-
-.PP
-\fB\-\-disable\-attach\-detach\-reconcile\-sync\fP=false
- Disable volume attach detach reconciler sync. Disabling this may cause volumes to be mismatched with pods. Use wisely.
-
-.PP
-\fB\-\-enable\-dynamic\-provisioning\fP=true
- Enable dynamic provisioning for environments that support it.
-
-.PP
-\fB\-\-enable\-garbage\-collector\fP=true
- Enables the generic garbage collector. MUST be synced with the corresponding flag of the kube\-apiserver.
-
-.PP
-\fB\-\-enable\-hostpath\-provisioner\fP=false
- Enable HostPath PV provisioning when running without a cloud provider. This allows testing and development of provisioning features. HostPath provisioning is not supported in any way, won't work in a multi\-node cluster, and should not be used for anything other than testing or development.
-
-.PP
-\fB\-\-enable\-taint\-manager\fP=true
- WARNING: Beta feature. If set to true enables NoExecute Taints and will evict all not\-tolerating Pod running on Nodes tainted with this kind of Taints.
-
-.PP
-\fB\-\-experimental\-cluster\-signing\-duration\fP=8760h0m0s
- The length of duration signed certificates will be given.
-
-.PP
-\fB\-\-feature\-gates\fP=
- A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA \- default=true)
-APIResponseCompression=true|false (ALPHA \- default=false)
-Accelerators=true|false (ALPHA \- default=false)
-AdvancedAuditing=true|false (BETA \- default=true)
-AllAlpha=true|false (ALPHA \- default=false)
-AllowExtTrafficLocalEndpoints=true|false (default=true)
-AppArmor=true|false (BETA \- default=true)
-BlockVolume=true|false (ALPHA \- default=false)
-CPUManager=true|false (ALPHA \- default=false)
-CSIPersistentVolume=true|false (ALPHA \- default=false)
-CustomPodDNS=true|false (ALPHA \- default=false)
-CustomResourceValidation=true|false (BETA \- default=true)
-DebugContainers=true|false (ALPHA \- default=false)
-DevicePlugins=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-EnableEquivalenceClassCache=true|false (ALPHA \- default=false)
-ExpandPersistentVolumes=true|false (ALPHA \- default=false)
-ExperimentalCriticalPodAnnotation=true|false (ALPHA \- default=false)
-ExperimentalHostUserNamespaceDefaulting=true|false (BETA \- default=false)
-HugePages=true|false (ALPHA \- default=false)
-Initializers=true|false (ALPHA \- default=false)
-KubeletConfigFile=true|false (ALPHA \- default=false)
-LocalStorageCapacityIsolation=true|false (ALPHA \- default=false)
-MountContainers=true|false (ALPHA \- default=false)
-MountPropagation=true|false (ALPHA \- default=false)
-PVCProtection=true|false (ALPHA \- default=false)
-PersistentLocalVolumes=true|false (ALPHA \- default=false)
-PodPriority=true|false (ALPHA \- default=false)
-ResourceLimitsPriorityFunction=true|false (ALPHA \- default=false)
-RotateKubeletClientCertificate=true|false (BETA \- default=true)
-RotateKubeletServerCertificate=true|false (ALPHA \- default=false)
-ServiceNodeExclusion=true|false (ALPHA \- default=false)
-StreamingProxyRedirects=true|false (BETA \- default=true)
-SupportIPVSProxyMode=true|false (ALPHA \- default=false)
-TaintBasedEvictions=true|false (ALPHA \- default=false)
-TaintNodesByCondition=true|false (ALPHA \- default=false)
-VolumeScheduling=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-flex\-volume\-plugin\-dir\fP="/usr/libexec/kubernetes/kubelet\-plugins/volume/exec/"
- Full path of the directory in which the flex volume plugin should search for additional third party volume plugins.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-horizontal\-pod\-autoscaler\-downscale\-delay\fP=5m0s
- The period since last downscale, before another downscale can be performed in horizontal pod autoscaler.
-
-.PP
-\fB\-\-horizontal\-pod\-autoscaler\-sync\-period\fP=30s
- The period for syncing the number of pods in horizontal pod autoscaler.
-
-.PP
-\fB\-\-horizontal\-pod\-autoscaler\-tolerance\fP=0.1
- The minimum change (from 1.0) in the desired\-to\-actual metrics ratio for the horizontal pod autoscaler to consider scaling.
-
-.PP
-\fB\-\-horizontal\-pod\-autoscaler\-upscale\-delay\fP=3m0s
- The period since last upscale, before another upscale can be performed in horizontal pod autoscaler.
-
-.PP
-\fB\-\-horizontal\-pod\-autoscaler\-use\-rest\-clients\fP=true
- WARNING: alpha feature. If set to true, causes the horizontal pod autoscaler controller to use REST clients through the kube\-aggregator, instead of using the legacy metrics client through the API server proxy. This is required for custom metrics support in the horizontal pod autoscaler.
-
-.PP
-\fB\-\-insecure\-experimental\-approve\-all\-kubelet\-csrs\-for\-group\fP=""
- This flag does nothing.
-
-.PP
-\fB\-\-kube\-api\-burst\fP=30
- Burst to use while talking with kubernetes apiserver
-
-.PP
-\fB\-\-kube\-api\-content\-type\fP="application/vnd.kubernetes.protobuf"
- Content type of requests sent to apiserver.
-
-.PP
-\fB\-\-kube\-api\-qps\fP=20
- QPS to use while talking with kubernetes apiserver
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to kubeconfig file with authorization and master location information.
-
-.PP
-\fB\-\-large\-cluster\-size\-threshold\fP=50
- Number of nodes from which NodeController treats the cluster as large for the eviction logic purposes. \-\-secondary\-node\-eviction\-rate is implicitly overridden to 0 for clusters this size or smaller.
-
-.PP
-\fB\-\-leader\-elect\fP=true
- Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability.
-
-.PP
-\fB\-\-leader\-elect\-lease\-duration\fP=15s
- The duration that non\-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.
-
-.PP
-\fB\-\-leader\-elect\-renew\-deadline\fP=10s
- The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.
-
-.PP
-\fB\-\-leader\-elect\-resource\-lock\fP="endpoints"
- The type of resource object that is used for locking during leader election. Supported options are \fB\fCendpoints\fR (default) and \fB\fCconfigmaps\fR.
-
-.PP
-\fB\-\-leader\-elect\-retry\-period\fP=2s
- The duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.
-
-.PP
-\fB\-\-master\fP=""
- The address of the Kubernetes API server (overrides any value in kubeconfig)
-
-.PP
-\fB\-\-min\-resync\-period\fP=12h0m0s
- The resync period in reflectors will be random between MinResyncPeriod and 2*MinResyncPeriod
-
-.PP
-\fB\-\-namespace\-sync\-period\fP=5m0s
- The period for syncing namespace life\-cycle updates
-
-.PP
-\fB\-\-node\-cidr\-mask\-size\fP=24
- Mask size for node cidr in cluster.
-
-.PP
-\fB\-\-node\-eviction\-rate\fP=0.1
- Number of nodes per second on which pods are deleted in case of node failure when a zone is healthy (see \-\-unhealthy\-zone\-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non\-multizone clusters.
-
-.PP
-\fB\-\-node\-monitor\-grace\-period\fP=40s
- Amount of time which we allow running Node to be unresponsive before marking it unhealthy. Must be N times more than kubelet's nodeStatusUpdateFrequency, where N means number of retries allowed for kubelet to post node status.
-
-.PP
-\fB\-\-node\-monitor\-period\fP=5s
- The period for syncing NodeStatus in NodeController.
-
-.PP
-\fB\-\-node\-startup\-grace\-period\fP=1m0s
- Amount of time which we allow starting Node to be unresponsive before marking it unhealthy.
-
-.PP
-\fB\-\-node\-sync\-period\fP=0s
- This flag is deprecated and will be removed in future releases. See node\-monitor\-period for Node health checking or route\-reconciliation\-period for cloud provider's route configuration settings.
-
-.PP
-\fB\-\-pod\-eviction\-timeout\fP=5m0s
- The grace period for deleting pods on failed nodes.
-
-.PP
-\fB\-\-port\fP=10252
- The port that the controller\-manager's http service runs on
-
-.PP
-\fB\-\-profiling\fP=true
- Enable profiling via web interface host:port/debug/pprof/
-
-.PP
-\fB\-\-pv\-recycler\-increment\-timeout\-nfs\fP=30
- the increment of time added per Gi to ActiveDeadlineSeconds for an NFS scrubber pod
-
-.PP
-\fB\-\-pv\-recycler\-minimum\-timeout\-hostpath\fP=60
- The minimum ActiveDeadlineSeconds to use for a HostPath Recycler pod. This is for development and testing only and will not work in a multi\-node cluster.
-
-.PP
-\fB\-\-pv\-recycler\-minimum\-timeout\-nfs\fP=300
- The minimum ActiveDeadlineSeconds to use for an NFS Recycler pod
-
-.PP
-\fB\-\-pv\-recycler\-pod\-template\-filepath\-hostpath\fP=""
- The file path to a pod definition used as a template for HostPath persistent volume recycling. This is for development and testing only and will not work in a multi\-node cluster.
-
-.PP
-\fB\-\-pv\-recycler\-pod\-template\-filepath\-nfs\fP=""
- The file path to a pod definition used as a template for NFS persistent volume recycling
-
-.PP
-\fB\-\-pv\-recycler\-timeout\-increment\-hostpath\fP=30
- the increment of time added per Gi to ActiveDeadlineSeconds for a HostPath scrubber pod. This is for development and testing only and will not work in a multi\-node cluster.
-
-.PP
-\fB\-\-pvclaimbinder\-sync\-period\fP=15s
- The period for syncing persistent volumes and persistent volume claims
-
-.PP
-\fB\-\-register\-retry\-count\fP=10
- The number of retries for initial node registration. Retry interval equals node\-sync\-period.
-
-.PP
-\fB\-\-resource\-quota\-sync\-period\fP=5m0s
- The period for syncing quota usage status in the system
-
-.PP
-\fB\-\-root\-ca\-file\fP=""
- If set, this root certificate authority will be included in service account's token secret. This must be a valid PEM\-encoded CA bundle.
-
-.PP
-\fB\-\-route\-reconciliation\-period\fP=10s
- The period for reconciling routes created for Nodes by cloud provider.
-
-.PP
-\fB\-\-secondary\-node\-eviction\-rate\fP=0.01
- Number of nodes per second on which pods are deleted in case of node failure when a zone is unhealthy (see \-\-unhealthy\-zone\-threshold for definition of healthy/unhealthy). Zone refers to entire cluster in non\-multizone clusters. This value is implicitly overridden to 0 if the cluster size is smaller than \-\-large\-cluster\-size\-threshold.
-
-.PP
-\fB\-\-service\-account\-private\-key\-file\fP=""
- Filename containing a PEM\-encoded private RSA or ECDSA key used to sign service account tokens.
-
-.PP
-\fB\-\-service\-cluster\-ip\-range\fP=""
- CIDR Range for Services in cluster. Requires \-\-allocate\-node\-cidrs to be true
-
-.PP
-\fB\-\-service\-sync\-period\fP=5m0s
- The period for syncing services with their external load balancers
-
-.PP
-\fB\-\-terminated\-pod\-gc\-threshold\fP=12500
- Number of terminated pods that can exist before the terminated pod garbage collector starts deleting terminated pods. If <= 0, the terminated pod garbage collector is disabled.
-
-.PP
-\fB\-\-unhealthy\-zone\-threshold\fP=0.55
- Fraction of Nodes in a zone which needs to be not Ready (minimum 3) for zone to be treated as unhealthy.
-
-.PP
-\fB\-\-use\-service\-account\-credentials\fP=false
- If true, use individual service account credentials for each controller.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kube-proxy.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kube-proxy.1
index 44c03779b493..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kube-proxy.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kube-proxy.1
@@ -1,222 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kube\-proxy \-
-
-
-.SH SYNOPSIS
-.PP
-\fBkube\-proxy\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-The Kubernetes network proxy runs on each node. This
-reflects services as defined in the Kubernetes API on each node and can do simple
-TCP and UDP stream forwarding or round robin TCP and UDP forwarding across a set of backends.
-Service cluster IPs and ports are currently found through Docker\-links\-compatible
-environment variables specifying ports opened by the service proxy. There is an optional
-addon that provides cluster DNS for these cluster IPs. The user must create a service
-with the apiserver API to configure the proxy.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-bind\-address\fP=0.0.0.0
- The IP address for the proxy server to serve on (set to 0.0.0.0 for all interfaces)
-
-.PP
-\fB\-\-cleanup\fP=false
- If true cleanup iptables and ipvs rules and exit.
-
-.PP
-\fB\-\-cleanup\-iptables\fP=false
- If true cleanup iptables and ipvs rules and exit.
-
-.PP
-\fB\-\-cleanup\-ipvs\fP=true
- If true make kube\-proxy cleanup ipvs rules before running. Default is true
-
-.PP
-\fB\-\-cluster\-cidr\fP=""
- The CIDR range of pods in the cluster. When configured, traffic sent to a Service cluster IP from outside this range will be masqueraded and traffic sent from pods to an external LoadBalancer IP will be directed to the respective cluster IP instead
-
-.PP
-\fB\-\-config\fP=""
- The path to the configuration file.
-
-.PP
-\fB\-\-config\-sync\-period\fP=15m0s
- How often configuration from the apiserver is refreshed. Must be greater than 0.
-
-.PP
-\fB\-\-conntrack\-max\fP=0
- Maximum number of NAT connections to track (0 to leave as\-is). This overrides conntrack\-max\-per\-core and conntrack\-min.
-
-.PP
-\fB\-\-conntrack\-max\-per\-core\fP=32768
- Maximum number of NAT connections to track per CPU core (0 to leave the limit as\-is and ignore conntrack\-min).
-
-.PP
-\fB\-\-conntrack\-min\fP=131072
- Minimum number of conntrack entries to allocate, regardless of conntrack\-max\-per\-core (set conntrack\-max\-per\-core=0 to leave the limit as\-is).
-
-.PP
-\fB\-\-conntrack\-tcp\-timeout\-close\-wait\fP=1h0m0s
- NAT timeout for TCP connections in the CLOSE\_WAIT state
-
-.PP
-\fB\-\-conntrack\-tcp\-timeout\-established\fP=24h0m0s
- Idle timeout for established TCP connections (0 to leave as\-is)
-
-.PP
-\fB\-\-feature\-gates\fP=
- A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA \- default=true)
-APIResponseCompression=true|false (ALPHA \- default=false)
-Accelerators=true|false (ALPHA \- default=false)
-AdvancedAuditing=true|false (BETA \- default=true)
-AllAlpha=true|false (ALPHA \- default=false)
-AllowExtTrafficLocalEndpoints=true|false (default=true)
-AppArmor=true|false (BETA \- default=true)
-BlockVolume=true|false (ALPHA \- default=false)
-CPUManager=true|false (ALPHA \- default=false)
-CSIPersistentVolume=true|false (ALPHA \- default=false)
-CustomPodDNS=true|false (ALPHA \- default=false)
-CustomResourceValidation=true|false (BETA \- default=true)
-DebugContainers=true|false (ALPHA \- default=false)
-DevicePlugins=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-EnableEquivalenceClassCache=true|false (ALPHA \- default=false)
-ExpandPersistentVolumes=true|false (ALPHA \- default=false)
-ExperimentalCriticalPodAnnotation=true|false (ALPHA \- default=false)
-ExperimentalHostUserNamespaceDefaulting=true|false (BETA \- default=false)
-HugePages=true|false (ALPHA \- default=false)
-Initializers=true|false (ALPHA \- default=false)
-KubeletConfigFile=true|false (ALPHA \- default=false)
-LocalStorageCapacityIsolation=true|false (ALPHA \- default=false)
-MountContainers=true|false (ALPHA \- default=false)
-MountPropagation=true|false (ALPHA \- default=false)
-PVCProtection=true|false (ALPHA \- default=false)
-PersistentLocalVolumes=true|false (ALPHA \- default=false)
-PodPriority=true|false (ALPHA \- default=false)
-ResourceLimitsPriorityFunction=true|false (ALPHA \- default=false)
-RotateKubeletClientCertificate=true|false (BETA \- default=true)
-RotateKubeletServerCertificate=true|false (ALPHA \- default=false)
-ServiceNodeExclusion=true|false (ALPHA \- default=false)
-StreamingProxyRedirects=true|false (BETA \- default=true)
-SupportIPVSProxyMode=true|false (ALPHA \- default=false)
-TaintBasedEvictions=true|false (ALPHA \- default=false)
-TaintNodesByCondition=true|false (ALPHA \- default=false)
-VolumeScheduling=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-healthz\-bind\-address\fP=0.0.0.0:10256
- The IP address and port for the health check server to serve on (set to 0.0.0.0 for all interfaces)
-
-.PP
-\fB\-\-healthz\-port\fP=10256
- The port to bind the health check server. Use 0 to disable.
-
-.PP
-\fB\-\-hostname\-override\fP=""
- If non\-empty, will use this string as identification instead of the actual hostname.
-
-.PP
-\fB\-\-iptables\-masquerade\-bit\fP=14
- If using the pure iptables proxy, the bit of the fwmark space to mark packets requiring SNAT with. Must be within the range [0, 31].
-
-.PP
-\fB\-\-iptables\-min\-sync\-period\fP=0s
- The minimum interval of how often the iptables rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').
-
-.PP
-\fB\-\-iptables\-sync\-period\fP=30s
- The maximum interval of how often iptables rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0.
-
-.PP
-\fB\-\-ipvs\-min\-sync\-period\fP=0s
- The minimum interval of how often the ipvs rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').
-
-.PP
-\fB\-\-ipvs\-scheduler\fP=""
- The ipvs scheduler type when proxy mode is ipvs
-
-.PP
-\fB\-\-ipvs\-sync\-period\fP=30s
- The maximum interval of how often ipvs rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0.
-
-.PP
-\fB\-\-kube\-api\-burst\fP=10
- Burst to use while talking with kubernetes apiserver
-
-.PP
-\fB\-\-kube\-api\-content\-type\fP="application/vnd.kubernetes.protobuf"
- Content type of requests sent to apiserver.
-
-.PP
-\fB\-\-kube\-api\-qps\fP=5
- QPS to use while talking with kubernetes apiserver
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to kubeconfig file with authorization information (the master location is set by the master flag).
-
-.PP
-\fB\-\-masquerade\-all\fP=false
- If using the pure iptables proxy, SNAT all traffic sent via Service cluster IPs (this not commonly needed)
-
-.PP
-\fB\-\-master\fP=""
- The address of the Kubernetes API server (overrides any value in kubeconfig)
-
-.PP
-\fB\-\-metrics\-bind\-address\fP=127.0.0.1:10249
- The IP address and port for the metrics server to serve on (set to 0.0.0.0 for all interfaces)
-
-.PP
-\fB\-\-oom\-score\-adj\fP=\-999
- The oom\-score\-adj value for kube\-proxy process. Values must be within the range [\-1000, 1000]
-
-.PP
-\fB\-\-profiling\fP=false
- If true enables profiling via web interface on /debug/pprof handler.
-
-.PP
-\fB\-\-proxy\-mode\fP=
- Which proxy mode to use: 'userspace' (older) or 'iptables' (faster) or 'ipvs'(experimental)'. If blank, use the best\-available proxy (currently iptables). If the iptables proxy is selected, regardless of how, but the system's kernel or iptables versions are insufficient, this always falls back to the userspace proxy.
-
-.PP
-\fB\-\-proxy\-port\-range\fP=
- Range of host ports (beginPort\-endPort, inclusive) that may be consumed in order to proxy service traffic. If unspecified (0\-0) then ports will be randomly chosen.
-
-.PP
-\fB\-\-resource\-container\fP="/kube\-proxy"
- Absolute name of the resource\-only container to create and run the Kube\-proxy in (Default: /kube\-proxy).
-
-.PP
-\fB\-\-udp\-timeout\fP=250ms
- How long an idle UDP connection will be kept open (e.g. '250ms', '2s'). Must be greater than 0. Only applicable for proxy\-mode=userspace
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-write\-config\-to\fP=""
- If set, write the default configuration values to this file and exit.
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kube-scheduler.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kube-scheduler.1
index a46db236e92c..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kube-scheduler.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kube-scheduler.1
@@ -1,182 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kube\-scheduler \-
-
-
-.SH SYNOPSIS
-.PP
-\fBkube\-scheduler\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-The Kubernetes scheduler is a policy\-rich, topology\-aware,
-workload\-specific function that significantly impacts availability, performance,
-and capacity. The scheduler needs to take into account individual and collective
-resource requirements, quality of service requirements, hardware/software/policy
-constraints, affinity and anti\-affinity specifications, data locality, inter\-workload
-interference, deadlines, and so on. Workload\-specific requirements will be exposed
-through the API as necessary.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-address\fP=""
- The IP address to serve on (set to 0.0.0.0 for all interfaces)
-
-.PP
-\fB\-\-algorithm\-provider\fP=""
- The scheduling algorithm provider to use, one of: ClusterAutoscalerProvider | DefaultProvider
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-config\fP=""
- The path to the configuration file.
-
-.PP
-\fB\-\-contention\-profiling\fP=false
- Enable lock contention profiling, if profiling is enabled
-
-.PP
-\fB\-\-failure\-domains\fP="kubernetes.io/hostname,failure\-domain.beta.kubernetes.io/zone,failure\-domain.beta.kubernetes.io/region"
- Indicate the "all topologies" set for an empty topologyKey when it's used for PreferredDuringScheduling pod anti\-affinity.
-
-.PP
-\fB\-\-feature\-gates\fP=
- A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA \- default=true)
-APIResponseCompression=true|false (ALPHA \- default=false)
-Accelerators=true|false (ALPHA \- default=false)
-AdvancedAuditing=true|false (BETA \- default=true)
-AllAlpha=true|false (ALPHA \- default=false)
-AllowExtTrafficLocalEndpoints=true|false (default=true)
-AppArmor=true|false (BETA \- default=true)
-BlockVolume=true|false (ALPHA \- default=false)
-CPUManager=true|false (ALPHA \- default=false)
-CSIPersistentVolume=true|false (ALPHA \- default=false)
-CustomPodDNS=true|false (ALPHA \- default=false)
-CustomResourceValidation=true|false (BETA \- default=true)
-DebugContainers=true|false (ALPHA \- default=false)
-DevicePlugins=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-EnableEquivalenceClassCache=true|false (ALPHA \- default=false)
-ExpandPersistentVolumes=true|false (ALPHA \- default=false)
-ExperimentalCriticalPodAnnotation=true|false (ALPHA \- default=false)
-ExperimentalHostUserNamespaceDefaulting=true|false (BETA \- default=false)
-HugePages=true|false (ALPHA \- default=false)
-Initializers=true|false (ALPHA \- default=false)
-KubeletConfigFile=true|false (ALPHA \- default=false)
-LocalStorageCapacityIsolation=true|false (ALPHA \- default=false)
-MountContainers=true|false (ALPHA \- default=false)
-MountPropagation=true|false (ALPHA \- default=false)
-PVCProtection=true|false (ALPHA \- default=false)
-PersistentLocalVolumes=true|false (ALPHA \- default=false)
-PodPriority=true|false (ALPHA \- default=false)
-ResourceLimitsPriorityFunction=true|false (ALPHA \- default=false)
-RotateKubeletClientCertificate=true|false (BETA \- default=true)
-RotateKubeletServerCertificate=true|false (ALPHA \- default=false)
-ServiceNodeExclusion=true|false (ALPHA \- default=false)
-StreamingProxyRedirects=true|false (BETA \- default=true)
-SupportIPVSProxyMode=true|false (ALPHA \- default=false)
-TaintBasedEvictions=true|false (ALPHA \- default=false)
-TaintNodesByCondition=true|false (ALPHA \- default=false)
-VolumeScheduling=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-hard\-pod\-affinity\-symmetric\-weight\fP=1
- RequiredDuringScheduling affinity is not symmetric, but there is an implicit PreferredDuringScheduling affinity rule corresponding to every RequiredDuringScheduling affinity rule. \-\-hard\-pod\-affinity\-symmetric\-weight represents the weight of implicit PreferredDuringScheduling affinity rule.
-
-.PP
-\fB\-\-kube\-api\-burst\fP=100
- Burst to use while talking with kubernetes apiserver
-
-.PP
-\fB\-\-kube\-api\-content\-type\fP="application/vnd.kubernetes.protobuf"
- Content type of requests sent to apiserver.
-
-.PP
-\fB\-\-kube\-api\-qps\fP=50
- QPS to use while talking with kubernetes apiserver
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to kubeconfig file with authorization and master location information.
-
-.PP
-\fB\-\-leader\-elect\fP=false
- Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability.
-
-.PP
-\fB\-\-leader\-elect\-lease\-duration\fP=15s
- The duration that non\-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.
-
-.PP
-\fB\-\-leader\-elect\-renew\-deadline\fP=10s
- The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.
-
-.PP
-\fB\-\-leader\-elect\-resource\-lock\fP="endpoints"
- The type of resource object that is used for locking during leader election. Supported options are \fB\fCendpoints\fR (default) and \fB\fCconfigmaps\fR.
-
-.PP
-\fB\-\-leader\-elect\-retry\-period\fP=2s
- The duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.
-
-.PP
-\fB\-\-lock\-object\-name\fP="kube\-scheduler"
- Define the name of the lock object.
-
-.PP
-\fB\-\-lock\-object\-namespace\fP="kube\-system"
- Define the namespace of the lock object.
-
-.PP
-\fB\-\-master\fP=""
- The address of the Kubernetes API server (overrides any value in kubeconfig)
-
-.PP
-\fB\-\-policy\-config\-file\fP=""
- File with scheduler policy configuration. This file is used if policy ConfigMap is not provided or \-\-use\-legacy\-policy\-config==true
-
-.PP
-\fB\-\-policy\-configmap\fP=""
- Name of the ConfigMap object that contains scheduler's policy configuration. It must exist in the system namespace before scheduler initialization if \-\-use\-legacy\-policy\-config==false. The config must be provided as the value of an element in 'Data' map with the key='policy.cfg'
-
-.PP
-\fB\-\-policy\-configmap\-namespace\fP=""
- The namespace where policy ConfigMap is located. The system namespace will be used if this is not provided or is empty.
-
-.PP
-\fB\-\-port\fP=10251
- The port that the scheduler's http service runs on
-
-.PP
-\fB\-\-profiling\fP=false
- Enable profiling via web interface host:port/debug/pprof/
-
-.PP
-\fB\-\-scheduler\-name\fP="default\-scheduler"
- Name of the scheduler, used to select which pods will be processed by this scheduler, based on pod's "spec.SchedulerName".
-
-.PP
-\fB\-\-use\-legacy\-policy\-config\fP=false
- When set to true, scheduler will ignore policy ConfigMap and uses policy config file
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-all.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-all.1
index 6f7856e8bd77..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-all.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-all.1
@@ -1,105 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase addon all \- Installs all addons to a Kubernetes cluster
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase addon all\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Installs the kube\-dns and the kube\-proxys addons components via the API server.
-Please note that although the DNS server is deployed, it will not be scheduled until CNI is installed.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address or DNS name the API server is accessible on
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- The port the API server is accessible on
-
-.PP
-\fB\-\-config\fP=""
- Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental!
-
-.PP
-\fB\-\-feature\-gates\fP=""
- A set of key=value pairs that describe feature gates for various features.Options are:
-CoreDNS=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-HighAvailability=true|false (ALPHA \- default=false)
-SelfHosting=true|false (BETA \- default=false)
-StoreCertsInSecrets=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-image\-repository\fP="gcr.io/google\_containers"
- Choose a container registry to pull control plane images from
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-kubernetes\-version\fP="stable\-1.8"
- Choose a specific Kubernetes version for the control plane
-
-.PP
-\fB\-\-pod\-network\-cidr\fP=""
- The range of IP addresses used for the Pod network
-
-.PP
-\fB\-\-service\-cidr\fP="10.96.0.0/12"
- The range of IP address used for service VIPs
-
-.PP
-\fB\-\-service\-dns\-domain\fP="cluster.local"
- Alternative domain for services
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Installs the kube\-dns and the kube\-proxys addons components via the API server,
- # functionally equivalent to what installed by kubeadm init.
-
- kubeadm alpha phase selfhosting from\-staticpods
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-addon(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-kube-dns.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-kube-dns.1
index c1a37657c8a4..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-kube-dns.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-kube-dns.1
@@ -1,79 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase addon kube\-dns \- Installs the kube\-dns addon to a Kubernetes cluster
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase addon kube\-dns\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Installs the kube\-dns addon components via the API server.
-Please note that although the DNS server is deployed, it will not be scheduled until CNI is installed.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-config\fP=""
- Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental!
-
-.PP
-\fB\-\-feature\-gates\fP=""
- A set of key=value pairs that describe feature gates for various features.Options are:
-CoreDNS=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-HighAvailability=true|false (ALPHA \- default=false)
-SelfHosting=true|false (BETA \- default=false)
-StoreCertsInSecrets=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-image\-repository\fP="gcr.io/google\_containers"
- Choose a container registry to pull control plane images from
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-kubernetes\-version\fP="stable\-1.8"
- Choose a specific Kubernetes version for the control plane
-
-.PP
-\fB\-\-service\-cidr\fP="10.96.0.0/12"
- The range of IP address used for service VIPs
-
-.PP
-\fB\-\-service\-dns\-domain\fP="cluster.local"
- Alternative domain for services
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-addon(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-kube-proxy.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-kube-proxy.1
index 8669db0a6720..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-kube-proxy.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon-kube-proxy.1
@@ -1,73 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase addon kube\-proxy \- Installs the kube\-proxy addon to a Kubernetes cluster
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase addon kube\-proxy\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Installs the kube\-proxy addon components via the API server.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address or DNS name the API server is accessible on
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- The port the API server is accessible on
-
-.PP
-\fB\-\-config\fP=""
- Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental!
-
-.PP
-\fB\-\-image\-repository\fP="gcr.io/google\_containers"
- Choose a container registry to pull control plane images from
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-kubernetes\-version\fP="stable\-1.8"
- Choose a specific Kubernetes version for the control plane
-
-.PP
-\fB\-\-pod\-network\-cidr\fP=""
- The range of IP addresses used for the Pod network
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-addon(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon.1
index 5bccdeddadfb..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-addon.1
@@ -1,40 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase addon \- Installs required addons for passing Conformance tests
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase addon\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command is not meant to be run on its own. See list of available subcommands.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase(1)\fP, \fBkubeadm\-alpha\-phase\-addon\-all(1)\fP, \fBkubeadm\-alpha\-phase\-addon\-kube\-dns(1)\fP, \fBkubeadm\-alpha\-phase\-addon\-kube\-proxy(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-all.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-all.1
index c5b83bc73bba..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-all.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-all.1
@@ -1,97 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase bootstrap\-token all \- Makes all the bootstrap token configurations and creates an initial token
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase bootstrap\-token all\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Bootstrap tokens are used for establishing bidirectional trust between a node joining the cluster and a the master node.
-
-.PP
-This command makes all the configurations required to make bootstrap tokens works and then creates an initial token.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-description\fP="The default bootstrap token generated by 'kubeadm init'."
- A human friendly description of how this token is used.
-
-.PP
-\fB\-\-groups\fP=[system:bootstrappers:kubeadm:default\-node\-token]
- Extra groups that this token will authenticate as when used for authentication. Must match "system:bootstrappers:[a\-z0\-9:\-]{0,255}[a\-z0\-9]"
-
-.PP
-\fB\-\-skip\-token\-print\fP=false
- Skip printing of the bootstrap token
-
-.PP
-\fB\-\-token\fP=""
- The token to use for establishing bidirectional trust between nodes and masters
-
-.PP
-\fB\-\-ttl\fP=24h0m0s
- The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire
-
-.PP
-\fB\-\-usages\fP=[signing,authentication]
- Describes the ways in which this token can be used. You can pass \-\-usages multiple times or provide a comma separated list of options. Valid options: [signing,authentication]
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Makes all the bootstrap token configurations and creates an initial token, functionally
- # equivalent to what generated by kubeadm init.
- kubeadm alpha phase bootstrap\-token all
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-bootstrap\-token(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-cluster-info.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-cluster-info.1
index 881eafcd4584..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-cluster-info.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-cluster-info.1
@@ -1,50 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase bootstrap\-token cluster\-info \- Uploads the cluster\-info ConfigMap from the given kubeconfig file
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase bootstrap\-token cluster\-info\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Uploads the "cluster\-info" ConfigMap in the "kube\-public" namespace, populating it with cluster information extracted from the given kubeconfig file. The ConfigMap is used for the node bootstrap process in its initial phases, before the client trusts the API server.
-
-.PP
-See online documentation about Authenticating with Bootstrap Tokens for more details.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-bootstrap\-token(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-create.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-create.1
index 3ec585c08b39..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-create.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-create.1
@@ -1,84 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase bootstrap\-token create \- Creates a bootstrap token to be used for node joining
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase bootstrap\-token create\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Creates a bootstrap token. If no token value is given, kubeadm will generate a random token instead.
-
-.PP
-Alternatively, you can use kubeadm token.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-description\fP="The default bootstrap token generated by 'kubeadm init'."
- A human friendly description of how this token is used.
-
-.PP
-\fB\-\-groups\fP=[system:bootstrappers:kubeadm:default\-node\-token]
- Extra groups that this token will authenticate as when used for authentication. Must match "system:bootstrappers:[a\-z0\-9:\-]{0,255}[a\-z0\-9]"
-
-.PP
-\fB\-\-skip\-token\-print\fP=false
- Skip printing of the bootstrap token
-
-.PP
-\fB\-\-token\fP=""
- The token to use for establishing bidirectional trust between nodes and masters
-
-.PP
-\fB\-\-ttl\fP=24h0m0s
- The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire
-
-.PP
-\fB\-\-usages\fP=[signing,authentication]
- Describes the ways in which this token can be used. You can pass \-\-usages multiple times or provide a comma separated list of options. Valid options: [signing,authentication]
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-bootstrap\-token(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node-allow-auto-approve.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node-allow-auto-approve.1
index cb3c35e9a1a3..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node-allow-auto-approve.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node-allow-auto-approve.1
@@ -1,50 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase bootstrap\-token node allow\-auto\-approve \- Configures RBAC rules to allow the csrapprover controller automatically approve CSRs from a node bootstrap token
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase bootstrap\-token node allow\-auto\-approve\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Configures RBAC rules to allow the csrapprover controller to automatically approve certificate signing requests generated by nodes joining the cluster. It configures also RBAC rules for certificates rotation (with auto approval of new certificates).
-
-.PP
-See online documentation about TLS bootstrapping for more details.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-bootstrap\-token\-node(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node-allow-post-csrs.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node-allow-post-csrs.1
index 9d106ce6f279..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node-allow-post-csrs.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node-allow-post-csrs.1
@@ -1,50 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase bootstrap\-token node allow\-post\-csrs \- Configures RBAC to allow node bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase bootstrap\-token node allow\-post\-csrs\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Configures RBAC rules to allow node bootstrap tokens to post a certificate signing request, thus enabling nodes joining the cluster to request long term certificate credentials.
-
-.PP
-See online documentation about TLS bootstrapping for more details.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-bootstrap\-token\-node(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node.1
index 759c49e006a8..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token-node.1
@@ -1,44 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase bootstrap\-token node \- Configures the node bootstrap process
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase bootstrap\-token node\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command is not meant to be run on its own. See list of available subcommands.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-bootstrap\-token(1)\fP, \fBkubeadm\-alpha\-phase\-bootstrap\-token\-node\-allow\-auto\-approve(1)\fP, \fBkubeadm\-alpha\-phase\-bootstrap\-token\-node\-allow\-post\-csrs(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token.1
index 8a2bb2a292cb..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-bootstrap-token.1
@@ -1,46 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase bootstrap\-token \- Manage kubeadm\-specific bootstrap token functions
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase bootstrap\-token\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command is not meant to be run on its own. See list of available subcommands.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase(1)\fP, \fBkubeadm\-alpha\-phase\-bootstrap\-token\-all(1)\fP, \fBkubeadm\-alpha\-phase\-bootstrap\-token\-cluster\-info(1)\fP, \fBkubeadm\-alpha\-phase\-bootstrap\-token\-create(1)\fP, \fBkubeadm\-alpha\-phase\-bootstrap\-token\-node(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-all.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-all.1
index 52afc4fedfc7..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-all.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-all.1
@@ -1,89 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase certs all \- Generates all PKI assets necessary to establish the control plane
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase certs all\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates a self\-signed CA to provision identities for each component in the cluster (including nodes) and client certificates to be used by various components.
-
-.PP
-If a given certificate and private key pair both exist, kubeadm skips the generation step and
-existing files will be used.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address the API server is accessible on, to use for the API server serving cert
-
-.PP
-\fB\-\-apiserver\-cert\-extra\-sans\fP=[]
- Optional extra altnames to use for the API server serving cert. Can be both IP addresses and dns names
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where to save the certificates
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-service\-cidr\fP="10.96.0.0/12"
- Alternative range of IP address for service VIPs, from which derives the internal API server VIP that will be added to the API Server serving cert
-
-.PP
-\fB\-\-service\-dns\-domain\fP="cluster.local"
- Alternative domain for services, to use for the API server serving cert
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Creates all PKI assets necessary to establish the control plane,
- # functionally equivalent to what generated by kubeadm init.
- kubeadm alpha phase certs all
-
- # Creates all PKI assets using options read from a configuration file.
- kubeadm alpha phase certs all \-\-config masterconfiguration.yaml
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-certs(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-apiserver-kubelet-client.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-apiserver-kubelet-client.1
index 4c6dcb7b6b15..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-apiserver-kubelet-client.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-apiserver-kubelet-client.1
@@ -1,56 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase certs apiserver\-kubelet\-client \- Generates client certificate for the API server to connect to the kubelets securely
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase certs apiserver\-kubelet\-client\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the client certificate for the API server to connect to the kubelet securely and the respective key, and saves them into apiserver\-kubelet\-client.crt and apiserver\-kubelet\-client.key files.
-
-.PP
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where to save the certificates
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-certs(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-apiserver.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-apiserver.1
index fbc3e995476c..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-apiserver.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-apiserver.1
@@ -1,75 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase certs apiserver \- Generates API server serving certificate and key
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase certs apiserver\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the API server serving certificate and key and saves them into apiserver.crt and apiserver.key files.
-
-.PP
-The certificate includes default subject alternative names and additional sans eventually provided by the user; default sans are: , , kubernetes, kubernetes.default, kubernetes.default.svc, kubernetes.default.svc. , (that is the .10 address in address space).
-
-.PP
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address the API server is accessible on, to use for the API server serving cert
-
-.PP
-\fB\-\-apiserver\-cert\-extra\-sans\fP=[]
- Optional extra altnames to use for the API server serving cert. Can be both IP addresses and dns names
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where to save the certificates
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-service\-cidr\fP="10.96.0.0/12"
- Alternative range of IP address for service VIPs, from which derives the internal API server VIP that will be added to the API Server serving cert
-
-.PP
-\fB\-\-service\-dns\-domain\fP="cluster.local"
- Alternative domain for services, to use for the API server serving cert
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-certs(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-ca.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-ca.1
index a31f3550e19a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-ca.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-ca.1
@@ -1,56 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase certs ca \- Generates self\-signed CA to provision identities for each component in the cluster
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase certs ca\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the self\-signed certificate authority and related key, and saves them into ca.crt and ca.key files.
-
-.PP
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where to save the certificates
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-certs(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-front-proxy-ca.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-front-proxy-ca.1
index 4a8862707aad..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-front-proxy-ca.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-front-proxy-ca.1
@@ -1,56 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase certs front\-proxy\-ca \- Generates front proxy CA certificate and key for a Kubernetes cluster
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase certs front\-proxy\-ca\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the front proxy CA certificate and key and saves them into front\-proxy\-ca.crt and front\-proxy\-ca.key files.
-
-.PP
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where to save the certificates
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-certs(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-front-proxy-client.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-front-proxy-client.1
index da7febbc6ed4..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-front-proxy-client.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-front-proxy-client.1
@@ -1,56 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase certs front\-proxy\-client \- Generates front proxy CA client certificate and key for a Kubernetes cluster
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase certs front\-proxy\-client\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the front proxy client certificate and key and saves them into front\-proxy\-client.crt and front\-proxy\-client.key files.
-
-.PP
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where to save the certificates
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-certs(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-sa.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-sa.1
index 060c4cfd3df1..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-sa.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs-sa.1
@@ -1,56 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase certs sa \- Generates a private key for signing service account tokens along with its public key
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase certs sa\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the private key for signing service account tokens along with its public key, and saves them into sa.key and sa.pub files.
-
-.PP
-If both files already exist, kubeadm skips the generation step and existing files will be used.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where to save the certificates
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-certs(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs.1
index 707a98eda73d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-certs.1
@@ -1,40 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase certs \- Generates certificates for a Kubernetes cluster
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase certs\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command is not meant to be run on its own. See list of available subcommands.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase(1)\fP, \fBkubeadm\-alpha\-phase\-certs\-all(1)\fP, \fBkubeadm\-alpha\-phase\-certs\-apiserver(1)\fP, \fBkubeadm\-alpha\-phase\-certs\-apiserver\-kubelet\-client(1)\fP, \fBkubeadm\-alpha\-phase\-certs\-ca(1)\fP, \fBkubeadm\-alpha\-phase\-certs\-front\-proxy\-ca(1)\fP, \fBkubeadm\-alpha\-phase\-certs\-front\-proxy\-client(1)\fP, \fBkubeadm\-alpha\-phase\-certs\-sa(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-all.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-all.1
index 7420d2ffd930..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-all.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-all.1
@@ -1,98 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase controlplane all \- Generates all static Pod manifest files necessary to establish the control plane
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase controlplane all\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates all static Pod manifest files necessary to establish the control plane.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address or DNS name the API server is accessible on
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- The port the API server is accessible on
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-feature\-gates\fP=""
- A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-HighAvailability=true|false (ALPHA \- default=false)
-SelfHosting=true|false (BETA \- default=false)
-StoreCertsInSecrets=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-kubernetes\-version\fP="stable\-1.8"
- Choose a specific Kubernetes version for the control plane
-
-.PP
-\fB\-\-pod\-network\-cidr\fP=""
- The range of IP addresses used for the Pod network
-
-.PP
-\fB\-\-service\-cidr\fP="10.96.0.0/12"
- The range of IP address used for service VIPs
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Generates all static Pod manifest files for control plane components,
- # functionally equivalent to what generated by kubeadm init.
- kubeadm alpha phase controlplane all
-
- # Generates all static Pod manifest files using options read from a configuration file.
- kubeadm alpha phase controlplane \-\-config masterconfiguration.yaml
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-controlplane(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-apiserver.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-apiserver.1
index 66bae812f1b4..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-apiserver.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-apiserver.1
@@ -1,78 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase controlplane apiserver \- Generates the API server static Pod manifest.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase controlplane apiserver\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the static Pod manifest file for the API server and saves it into /etc/kubernetes/manifests/kube\-apiserver.yaml file.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address or DNS name the API server is accessible on
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- The port the API server is accessible on
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-feature\-gates\fP=""
- A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-HighAvailability=true|false (ALPHA \- default=false)
-SelfHosting=true|false (BETA \- default=false)
-StoreCertsInSecrets=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-kubernetes\-version\fP="stable\-1.8"
- Choose a specific Kubernetes version for the control plane
-
-.PP
-\fB\-\-service\-cidr\fP="10.96.0.0/12"
- The range of IP address used for service VIPs
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-controlplane(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-controller-manager.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-controller-manager.1
index 58ae63944340..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-controller-manager.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-controller-manager.1
@@ -1,61 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase controlplane controller\-manager \- Generates the controller\-manager static Pod manifest.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase controlplane controller\-manager\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the static Pod manifest file for the controller\-manager and saves it into /etc/kubernetes/manifests/kube\-controller\-manager.yaml file.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-kubernetes\-version\fP="stable\-1.8"
- Choose a specific Kubernetes version for the control plane
-
-.PP
-\fB\-\-pod\-network\-cidr\fP=""
- The range of IP addresses used for the Pod network
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-controlplane(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-scheduler.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-scheduler.1
index a6fa09334b92..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-scheduler.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane-scheduler.1
@@ -1,57 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase controlplane scheduler \- Generates the scheduler static Pod manifest.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase controlplane scheduler\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the static Pod manifest file for the scheduler and saves it into /etc/kubernetes/manifests/kube\-scheduler.yaml file.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-kubernetes\-version\fP="stable\-1.8"
- Choose a specific Kubernetes version for the control plane
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-controlplane(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane.1
index 6eb897e8d5ab..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-controlplane.1
@@ -1,40 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase controlplane \- Generates all static Pod manifest files necessary to establish the control plane
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase controlplane\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command is not meant to be run on its own. See list of available subcommands.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase(1)\fP, \fBkubeadm\-alpha\-phase\-controlplane\-all(1)\fP, \fBkubeadm\-alpha\-phase\-controlplane\-apiserver(1)\fP, \fBkubeadm\-alpha\-phase\-controlplane\-controller\-manager(1)\fP, \fBkubeadm\-alpha\-phase\-controlplane\-scheduler(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-etcd-local.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-etcd-local.1
index f4db9fba8d82..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-etcd-local.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-etcd-local.1
@@ -1,69 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase etcd local \- Generates the static Pod manifest file for a local, single\-node etcd instance
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase etcd local\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the static Pod manifest file for a local, single\-node etcd instance and saves it to /etc/kubernetes/manifests/etcd.yaml file.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Generates the static Pod manifest file for etcd, functionally
- # equivalent to what generated by kubeadm init.
- kubeadm alpha phase etcd local
-
- # Generates the static Pod manifest file for etcd.
- kubeadm alpha phase etcd local \-\-config masterconfiguration.yaml
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-etcd(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-etcd.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-etcd.1
index 4fb239b89837..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-etcd.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-etcd.1
@@ -1,40 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase etcd \- Generates static Pod manifest file for etcd.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase etcd\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command is not meant to be run on its own. See list of available subcommands.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase(1)\fP, \fBkubeadm\-alpha\-phase\-etcd\-local(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-admin.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-admin.1
index bc152d2b4d46..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-admin.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-admin.1
@@ -1,65 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase kubeconfig admin \- Generates a kubeconfig file for the admin to use and for kubeadm itself
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase kubeconfig admin\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the kubeconfig file for the admin and for kubeadm itself, and saves it to admin.conf file.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address the API server is accessible on
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- The port the API server is accessible on
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-kubeconfig\-dir\fP="/etc/kubernetes"
- The port where to save the kubeconfig file
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-kubeconfig(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-all.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-all.1
index 9d74284a7514..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-all.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-all.1
@@ -1,85 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase kubeconfig all \- Generates all kubeconfig files necessary to establish the control plane and the admin kubeconfig file
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase kubeconfig all\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates all kubeconfig files necessary to establish the control plane and the admin kubeconfig file.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address the API server is accessible on
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- The port the API server is accessible on
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-kubeconfig\-dir\fP="/etc/kubernetes"
- The port where to save the kubeconfig file
-
-.PP
-\fB\-\-node\-name\fP=""
- The node name that should be used for the kubelet client certificate
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Generates all kubeconfig files, functionally equivalent to what generated
- # by kubeadm init.
- kubeadm alpha phase kubeconfig all
-
- # Generates all kubeconfig files using options read from a configuration file.
- kubeadm alpha phase kubeconfig all \-\-config masterconfiguration.yaml
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-kubeconfig(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-controller-manager.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-controller-manager.1
index 91edd4b12cf3..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-controller-manager.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-controller-manager.1
@@ -1,65 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase kubeconfig controller\-manager \- Generates a kubeconfig file for the controller manager to use
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase kubeconfig controller\-manager\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the kubeconfig file for the controller manager to use and saves it to /etc/kubernetes/controller\-manager.conf file.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address the API server is accessible on
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- The port the API server is accessible on
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-kubeconfig\-dir\fP="/etc/kubernetes"
- The port where to save the kubeconfig file
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-kubeconfig(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-kubelet.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-kubelet.1
index b58c3256c90b..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-kubelet.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-kubelet.1
@@ -1,72 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase kubeconfig kubelet \- Generates a kubeconfig file for the kubelet to use. Please note that this should be used \fIonly\fP for bootstrapping purposes.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase kubeconfig kubelet\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the kubeconfig file for the kubelet to use and saves it to /etc/kubernetes/kubelet.conf file.
-
-.PP
-Please note that this should only be used for bootstrapping purposes. After your control plane is up, you should request all kubelet credentials from the CSR API.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address the API server is accessible on
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- The port the API server is accessible on
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-kubeconfig\-dir\fP="/etc/kubernetes"
- The port where to save the kubeconfig file
-
-.PP
-\fB\-\-node\-name\fP=""
- The node name that should be used for the kubelet client certificate
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-kubeconfig(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-scheduler.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-scheduler.1
index b19cac488043..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-scheduler.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-scheduler.1
@@ -1,65 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase kubeconfig scheduler \- Generates a kubeconfig file for the scheduler to use
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase kubeconfig scheduler\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Generates the kubeconfig file for the scheduler to use and saves it to /etc/kubernetes/scheduler.conf file.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address the API server is accessible on
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- The port the API server is accessible on
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-kubeconfig\-dir\fP="/etc/kubernetes"
- The port where to save the kubeconfig file
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-kubeconfig(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-user.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-user.1
index af605af2c9dd..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-user.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig-user.1
@@ -1,81 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase kubeconfig user \- Outputs a kubeconfig file for an additional user
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase kubeconfig user\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Outputs a kubeconfig file for an additional user.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address the API server is accessible on
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- The port the API server is accessible on
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-client\-name\fP=""
- The name of user. It will be used as the CN if client certificates are created
-
-.PP
-\fB\-\-kubeconfig\-dir\fP="/etc/kubernetes"
- The port where to save the kubeconfig file
-
-.PP
-\fB\-\-token\fP=""
- The token that should be used as the authentication mechanism for this kubeconfig (instead of client certificates)
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Outputs a kubeconfig file for an additional user named foo
- kubeadm alpha phase kubeconfig user \-\-client\-name=foo
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-kubeconfig(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig.1
index c88dc86aa778..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-kubeconfig.1
@@ -1,40 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase kubeconfig \- Generates all kubeconfig files necessary to establish the control plane and the admin kubeconfig file
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase kubeconfig\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command is not meant to be run on its own. See list of available subcommands.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase(1)\fP, \fBkubeadm\-alpha\-phase\-kubeconfig\-admin(1)\fP, \fBkubeadm\-alpha\-phase\-kubeconfig\-all(1)\fP, \fBkubeadm\-alpha\-phase\-kubeconfig\-controller\-manager(1)\fP, \fBkubeadm\-alpha\-phase\-kubeconfig\-kubelet(1)\fP, \fBkubeadm\-alpha\-phase\-kubeconfig\-scheduler(1)\fP, \fBkubeadm\-alpha\-phase\-kubeconfig\-user(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-mark-master.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-mark-master.1
index 9bd24253899b..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-mark-master.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-mark-master.1
@@ -1,72 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase mark\-master \- Mark a node as master
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase mark\-master\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Applies a label that specifies that a node is a master and a taint that forces workloads to be deployed accordingly.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file (WARNING: Usage of a configuration file is experimental)
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-node\-name\fP=""
- The node name to which label and taints should apply
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Applies master label and taint to the current node, functionally equivalent to what executed by kubeadm init.
- kubeadm alpha phase mark\-master
-
- # Applies master label and taint to a specific node
- kubeadm alpha phase mark\-master \-\-node\-name myNode
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight-master.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight-master.1
index 2204a770d20a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight-master.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight-master.1
@@ -1,55 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase preflight master \- Run master pre\-flight checks
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase preflight master\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Run master pre\-flight checks, functionally equivalent to what implemented by kubeadm init.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Run master pre\-flight checks.
- kubeadm alpha phase preflight master
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-preflight(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight-node.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight-node.1
index 4640beccf5b4..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight-node.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight-node.1
@@ -1,55 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase preflight node \- Run node pre\-flight checks
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase preflight node\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Run node pre\-flight checks, functionally equivalent to what implemented by kubeadm join.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Run node pre\-flight checks.
- kubeadm alpha phase preflight node
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-preflight(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight.1
index 0020c6369420..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-preflight.1
@@ -1,40 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase preflight \- Run pre\-flight checks
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase preflight\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command is not meant to be run on its own. See list of available subcommands.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase(1)\fP, \fBkubeadm\-alpha\-phase\-preflight\-master(1)\fP, \fBkubeadm\-alpha\-phase\-preflight\-node(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-selfhosting-convert-from-staticpods.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-selfhosting-convert-from-staticpods.1
index 9800ab24aed9..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-selfhosting-convert-from-staticpods.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-selfhosting-convert-from-staticpods.1
@@ -1,84 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase selfhosting convert\-from\-staticpods \- Converts a static Pod\-hosted control plane into a self\-hosted one
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase selfhosting convert\-from\-staticpods\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Converts static Pod files for control plane components into self\-hosted DaemonSets configured via the Kubernetes API.
-
-.PP
-See the documentation for self\-hosting limitations.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where certificates are stored
-
-.PP
-\fB\-\-config\fP=""
- Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental!
-
-.PP
-\fB\-\-feature\-gates\fP=""
- A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-HighAvailability=true|false (ALPHA \- default=false)
-SelfHosting=true|false (BETA \- default=false)
-StoreCertsInSecrets=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Converts a static Pod\-hosted control plane into a self\-hosted one,
- # functionally equivalent to what generated by kubeadm init executed
- # with \-\-feature\-gates=SelfHosting=true.
-
- kubeadm alpha phase selfhosting convert\-from\-staticpods
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase\-selfhosting(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-selfhosting.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-selfhosting.1
index bcd851300762..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-selfhosting.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-selfhosting.1
@@ -1,40 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase selfhosting \- Makes a kubeadm cluster self\-hosted
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase selfhosting\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command is not meant to be run on its own. See list of available subcommands.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase(1)\fP, \fBkubeadm\-alpha\-phase\-selfhosting\-convert\-from\-staticpods(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-upload-config.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-upload-config.1
index 9f1e741e18b0..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-upload-config.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase-upload-config.1
@@ -1,68 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase upload\-config \- Uploads the currently used configuration for kubeadm to a ConfigMap
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase upload\-config\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Uploads the kubeadm init configuration of your cluster to a ConfigMap called kubeadm\-config in the kube\-system namespace. This enables correct configuration of system components and a seamless user experience when upgrading.
-
-.PP
-Alternatively, you can use kubeadm config.
-
-.PP
-Alpha Disclaimer: this command is currently alpha.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-config\fP=""
- Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental!
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # uploads the configuration of your cluster
- kubeadm alpha phase upload\-config \-\-config=myConfig.yaml
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha\-phase(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase.1
index 795c19936b6f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha-phase.1
@@ -1,40 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha phase \- Invoke subsets of kubeadm functions separately for a manual install.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha phase\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command is not meant to be run on its own. See list of available subcommands.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha(1)\fP, \fBkubeadm\-alpha\-phase\-addon(1)\fP, \fBkubeadm\-alpha\-phase\-bootstrap\-token(1)\fP, \fBkubeadm\-alpha\-phase\-certs(1)\fP, \fBkubeadm\-alpha\-phase\-controlplane(1)\fP, \fBkubeadm\-alpha\-phase\-etcd(1)\fP, \fBkubeadm\-alpha\-phase\-kubeconfig(1)\fP, \fBkubeadm\-alpha\-phase\-mark\-master(1)\fP, \fBkubeadm\-alpha\-phase\-preflight(1)\fP, \fBkubeadm\-alpha\-phase\-selfhosting(1)\fP, \fBkubeadm\-alpha\-phase\-upload\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha.1
index e417c63b899a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-alpha.1
@@ -1,40 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm alpha \- Experimental sub\-commands not yet fully functional.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm alpha\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Experimental sub\-commands not yet fully functional.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm(1)\fP, \fBkubeadm\-alpha\-phase(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-completion.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-completion.1
index d1a6ca5b8f65..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-completion.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-completion.1
@@ -1,98 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm completion \- Output shell completion code for the specified shell (bash or zsh).
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm completion\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Output shell completion code for the specified shell (bash or zsh).
-The shell code must be evalutated to provide interactive
-completion of kubeadm commands. This can be done by sourcing it from
-the .bash\_profile.
-
-.PP
-Note: this requires the bash\-completion framework, which is not installed
-by default on Mac. This can be installed by using homebrew:
-
-.PP
-.RS
-
-.nf
-$ brew install bash\-completion
-
-.fi
-.RE
-
-.PP
-Once installed, bash\_completion must be evaluated. This can be done by adding the
-following line to the .bash\_profile
-
-.PP
-.RS
-
-.nf
-$ source $(brew \-\-prefix)/etc/bash\_completion
-
-.fi
-.RE
-
-.PP
-Note for zsh users: [1] zsh completions are only supported in versions of zsh >= 5.2
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
-
-# Install bash completion on a Mac using homebrew
-brew install bash\-completion
-printf "\\n# Bash completion support\\nsource $(brew \-\-prefix)/etc/bash\_completion\\n" >> $HOME/.bash\_profile
-source $HOME/.bash\_profile
-
-# Load the kubeadm completion code for bash into the current shell
-source <(kubeadm completion bash)
-
-# Write bash completion code to a file and source if from .bash\_profile
-kubeadm completion bash > \~/.kube/kubeadm\_completion.bash.inc
-printf "\\n# Kubeadm shell completion\\nsource '$HOME/.kube/kubeadm\_completion.bash.inc'\\n" >> $HOME/.bash\_profile
-source $HOME/.bash\_profile
-
-# Load the kubeadm completion code for zsh[1] into the current shell
-source <(kubeadm completion zsh)
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload-from-file.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload-from-file.1
index f1276189ed73..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload-from-file.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload-from-file.1
@@ -1,55 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm config upload from\-file \- Upload a configuration file to the in\-cluster ConfigMap for kubeadm configuration.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm config upload from\-file\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Using this command, you can upload configuration to the ConfigMap in the cluster using the same config file you gave to 'kubeadm init'.
-If you initialized your cluster using a v1.7.x or lower kubeadm client and used the \-\-config option, you need to run this command with the
-same config file before upgrading to v1.8 using 'kubeadm upgrade'.
-
-.PP
-The configuration is located in the "kube\-system" namespace in the "kubeadm\-config" ConfigMap.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-config\fP=""
- Path to a kubeadm config file. WARNING: Usage of a configuration file is experimental.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-config\-upload(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload-from-flags.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload-from-flags.1
index bcbdfb584a7c..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload-from-flags.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload-from-flags.1
@@ -1,104 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm config upload from\-flags \- Create the in\-cluster configuration file for the first time from using flags.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm config upload from\-flags\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Using this command, you can upload configuration to the ConfigMap in the cluster using the same flags you gave to 'kubeadm init'.
-If you initialized your cluster using a v1.7.x or lower kubeadm client and set certain flags, you need to run this command with the
-same flags before upgrading to v1.8 using 'kubeadm upgrade'.
-
-.PP
-The configuration is located in the "kube\-system" namespace in the "kubeadm\-config" ConfigMap.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address the API Server will advertise it's listening on. Specify '0.0.0.0' to use the address of the default network interface.
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- Port for the API Server to bind to.
-
-.PP
-\fB\-\-apiserver\-cert\-extra\-sans\fP=[]
- Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names.
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where to save and store the certificates.
-
-.PP
-\fB\-\-feature\-gates\fP=""
- A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-HighAvailability=true|false (ALPHA \- default=false)
-SelfHosting=true|false (BETA \- default=false)
-StoreCertsInSecrets=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-kubernetes\-version\fP="stable\-1.8"
- Choose a specific Kubernetes version for the control plane.
-
-.PP
-\fB\-\-node\-name\fP=""
- Specify the node name.
-
-.PP
-\fB\-\-pod\-network\-cidr\fP=""
- Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.
-
-.PP
-\fB\-\-service\-cidr\fP="10.96.0.0/12"
- Use alternative range of IP address for service VIPs.
-
-.PP
-\fB\-\-service\-dns\-domain\fP="cluster.local"
- Use alternative domain for services, e.g. "myorg.internal".
-
-.PP
-\fB\-\-token\fP=""
- The token to use for establishing bidirectional trust between nodes and masters.
-
-.PP
-\fB\-\-token\-ttl\fP=24h0m0s
- The duration before the bootstrap token is automatically deleted. If set to '0', the token will never expire.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-config\-upload(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload.1
index 6cd8334a5484..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-upload.1
@@ -1,44 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm config upload \- Upload configuration about the current state, so that 'kubeadm upgrade' can later know how to configure the upgraded cluster.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm config upload\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Upload configuration about the current state, so that 'kubeadm upgrade' can later know how to configure the upgraded cluster.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-config(1)\fP, \fBkubeadm\-config\-upload\-from\-file(1)\fP, \fBkubeadm\-config\-upload\-from\-flags(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-view.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-view.1
index 451fdcf972df..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-view.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config-view.1
@@ -1,47 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm config view \- View the kubeadm configuration stored inside the cluster.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm config view\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Using this command, you can view the ConfigMap in the cluster where the configuration for kubeadm is located.
-
-.PP
-The configuration is located in the "kube\-system" namespace in the "kubeadm\-config" ConfigMap.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config.1
index cf5730bdedca..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-config.1
@@ -1,49 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm config \- Manage configuration for a kubeadm cluster persisted in a ConfigMap in the cluster.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm config\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-There is a ConfigMap in the kube\-system namespace called "kubeadm\-config" that kubeadm uses to store internal configuration about the
-cluster. kubeadm CLI v1.8.0+ automatically creates this ConfigMap with the config used with 'kubeadm init', but if you
-initialized your cluster using kubeadm v1.7.x or lower, you must use the 'config upload' command to create this
-ConfigMap. This is required so that 'kubeadm upgrade' can configure your upgraded cluster correctly.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm(1)\fP, \fBkubeadm\-config\-upload(1)\fP, \fBkubeadm\-config\-view(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-init.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-init.1
index 77f5ef44febf..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-init.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-init.1
@@ -1,119 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm init \- Run this command in order to set up the Kubernetes master.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm init\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Run this command in order to set up the Kubernetes master.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-apiserver\-advertise\-address\fP=""
- The IP address the API Server will advertise it's listening on. Specify '0.0.0.0' to use the address of the default network interface.
-
-.PP
-\fB\-\-apiserver\-bind\-port\fP=6443
- Port for the API Server to bind to.
-
-.PP
-\fB\-\-apiserver\-cert\-extra\-sans\fP=[]
- Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names.
-
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path where to save and store the certificates.
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file. WARNING: Usage of a configuration file is experimental.
-
-.PP
-\fB\-\-cri\-socket\fP="/var/run/dockershim.sock"
- Specify the CRI socket to connect to.
-
-.PP
-\fB\-\-dry\-run\fP=false
- Don't apply any changes; just output what would be done.
-
-.PP
-\fB\-\-feature\-gates\fP=""
- A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-HighAvailability=true|false (ALPHA \- default=false)
-SelfHosting=true|false (BETA \- default=false)
-StoreCertsInSecrets=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-ignore\-preflight\-errors\fP=[]
- A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
-
-.PP
-\fB\-\-kubernetes\-version\fP="stable\-1.8"
- Choose a specific Kubernetes version for the control plane.
-
-.PP
-\fB\-\-node\-name\fP=""
- Specify the node name.
-
-.PP
-\fB\-\-pod\-network\-cidr\fP=""
- Specify range of IP addresses for the pod network. If set, the control plane will automatically allocate CIDRs for every node.
-
-.PP
-\fB\-\-service\-cidr\fP="10.96.0.0/12"
- Use alternative range of IP address for service VIPs.
-
-.PP
-\fB\-\-service\-dns\-domain\fP="cluster.local"
- Use alternative domain for services, e.g. "myorg.internal".
-
-.PP
-\fB\-\-skip\-preflight\-checks\fP=false
- Skip preflight checks which normally run before modifying the system.
-
-.PP
-\fB\-\-skip\-token\-print\fP=false
- Skip printing of the default bootstrap token generated by 'kubeadm init'.
-
-.PP
-\fB\-\-token\fP=""
- The token to use for establishing bidirectional trust between nodes and masters.
-
-.PP
-\fB\-\-token\-ttl\fP=24h0m0s
- The duration before the bootstrap token is automatically deleted. If set to '0', the token will never expire.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-join.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-join.1
index 3a11529436fe..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-join.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-join.1
@@ -1,140 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm join \- Run this on any machine you wish to join an existing cluster
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm join\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-When joining a kubeadm initialized cluster, we need to establish
-bidirectional trust. This is split into discovery (having the Node
-trust the Kubernetes Master) and TLS bootstrap (having the Kubernetes
-Master trust the Node).
-
-.PP
-There are 2 main schemes for discovery. The first is to use a shared
-token along with the IP address of the API server. The second is to
-provide a file \- a subset of the standard kubeconfig file. This file
-can be a local file or downloaded via an HTTPS URL. The forms are
-kubeadm join \-\-discovery\-token abcdef.1234567890abcdef 1.2.3.4:6443,
-kubeadm join \-\-discovery\-file path/to/file.conf, or kubeadm join
-\-\-discovery\-file
-\[la]https://url/file.conf\[ra]. Only one form can be used. If
-the discovery information is loaded from a URL, HTTPS must be used.
-Also, in that case the host installed CA bundle is used to verify
-the connection.
-
-.PP
-If you use a shared token for discovery, you should also pass the
-\-\-discovery\-token\-ca\-cert\-hash flag to validate the public key of the
-root certificate authority (CA) presented by the Kubernetes Master. The
-value of this flag is specified as ":",
-where the supported hash type is "sha256". The hash is calculated over
-the bytes of the Subject Public Key Info (SPKI) object (as in RFC7469).
-This value is available in the output of "kubeadm init" or can be
-calcuated using standard tools. The \-\-discovery\-token\-ca\-cert\-hash flag
-may be repeated multiple times to allow more than one public key.
-
-.PP
-If you cannot know the CA public key hash ahead of time, you can pass
-the \-\-discovery\-token\-unsafe\-skip\-ca\-verification flag to disable this
-verification. This weakens the kubeadm security model since other nodes
-can potentially impersonate the Kubernetes Master.
-
-.PP
-The TLS bootstrap mechanism is also driven via a shared token. This is
-used to temporarily authenticate with the Kubernetes Master to submit a
-certificate signing request (CSR) for a locally created key pair. By
-default, kubeadm will set up the Kubernetes Master to automatically
-approve these signing requests. This token is passed in with the
-\-\-tls\-bootstrap\-token abcdef.1234567890abcdef flag.
-
-.PP
-Often times the same token is used for both parts. In this case, the
-\-\-token flag can be used instead of specifying each token individually.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file.
-
-.PP
-\fB\-\-cri\-socket\fP="/var/run/dockershim.sock"
- Specify the CRI socket to connect to.
-
-.PP
-\fB\-\-discovery\-file\fP=""
- A file or url from which to load cluster information.
-
-.PP
-\fB\-\-discovery\-token\fP=""
- A token used to validate cluster information fetched from the master.
-
-.PP
-\fB\-\-discovery\-token\-ca\-cert\-hash\fP=[]
- For token\-based discovery, validate that the root CA public key matches this hash (format: ":").
-
-.PP
-\fB\-\-discovery\-token\-unsafe\-skip\-ca\-verification\fP=false
- For token\-based discovery, allow joining without \-\-discovery\-token\-ca\-cert\-hash pinning.
-
-.PP
-\fB\-\-feature\-gates\fP=""
- A set of key=value pairs that describe feature gates for various features. Options are:
-CoreDNS=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-HighAvailability=true|false (ALPHA \- default=false)
-SelfHosting=true|false (BETA \- default=false)
-StoreCertsInSecrets=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-ignore\-preflight\-errors\fP=[]
- A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
-
-.PP
-\fB\-\-node\-name\fP=""
- Specify the node name.
-
-.PP
-\fB\-\-skip\-preflight\-checks\fP=false
- Skip preflight checks which normally run before modifying the system.
-
-.PP
-\fB\-\-tls\-bootstrap\-token\fP=""
- A token used for TLS bootstrapping.
-
-.PP
-\fB\-\-token\fP=""
- Use this token for both discovery\-token and tls\-bootstrap\-token.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-reset.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-reset.1
index 14768413fe8a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-reset.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-reset.1
@@ -1,58 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm reset \- Run this to revert any changes made to this host by 'kubeadm init' or 'kubeadm join'.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm reset\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Run this to revert any changes made to this host by 'kubeadm init' or 'kubeadm join'.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cert\-dir\fP="/etc/kubernetes/pki"
- The path to the directory where the certificates are stored. If specified, clean this directory.
-
-.PP
-\fB\-\-cri\-socket\fP="/var/run/dockershim.sock"
- The path to the CRI socket to use with crictl when cleaning up containers.
-
-.PP
-\fB\-\-ignore\-preflight\-errors\fP=[]
- A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
-
-.PP
-\fB\-\-skip\-preflight\-checks\fP=false
- Skip preflight checks which normally run before modifying the system.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-create.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-create.1
index c8157a2b8499..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-create.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-create.1
@@ -1,76 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm token create \- Create bootstrap tokens on the server.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm token create\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command will create a bootstrap token for you.
-You can specify the usages for this token, the "time to live" and an optional human friendly description.
-
-.PP
-The [token] is the actual token to write.
-This should be a securely generated random token of the form "[a\-z0\-9]{6}.[a\-z0\-9]{16}".
-If no [token] is given, kubeadm will generate a random token instead.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-description\fP=""
- A human friendly description of how this token is used.
-
-.PP
-\fB\-\-groups\fP=[system:bootstrappers:kubeadm:default\-node\-token]
- Extra groups that this token will authenticate as when used for authentication. Must match "system:bootstrappers:[a\-z0\-9:\-]{0,255}[a\-z0\-9]".
-
-.PP
-\fB\-\-print\-join\-command\fP=false
- Instead of printing only the token, print the full 'kubeadm join' flag needed to join the cluster using the token.
-
-.PP
-\fB\-\-ttl\fP=24h0m0s
- The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire.
-
-.PP
-\fB\-\-usages\fP=[signing,authentication]
- Describes the ways in which this token can be used. You can pass \-\-usages multiple times or provide a comma separated list of options. Valid options: [signing,authentication].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-dry\-run\fP=false
- Whether to enable dry\-run mode or not
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-token(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-delete.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-delete.1
index fe2029f91b50..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-delete.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-delete.1
@@ -1,52 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm token delete \- Delete bootstrap tokens on the server.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm token delete\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command will delete a given bootstrap token for you.
-
-.PP
-The [token\-value] is the full Token of the form "[a\-z0\-9]{6}.[a\-z0\-9]{16}" or the
-Token ID of the form "[a\-z0\-9]{6}" to delete.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-dry\-run\fP=false
- Whether to enable dry\-run mode or not
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-token(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-generate.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-generate.1
index 3af103eb075b..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-generate.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-generate.1
@@ -1,58 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm token generate \- Generate and print a bootstrap token, but do not create it on the server.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm token generate\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command will print out a randomly\-generated bootstrap token that can be used with
-the "init" and "join" commands.
-
-.PP
-You don't have to use this command in order to generate a token. You can do so
-yourself as long as it is in the format "[a\-z0\-9]{6}.[a\-z0\-9]{16}". This
-command is provided for convenience to generate tokens in the given format.
-
-.PP
-You can also use "kubeadm init" without specifying a token and it will
-generate and print one for you.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-dry\-run\fP=false
- Whether to enable dry\-run mode or not
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-token(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-list.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-list.1
index 4c6e883ab626..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-list.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token-list.1
@@ -1,48 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm token list \- List bootstrap tokens on the server.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm token list\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command will list all bootstrap tokens for you.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-dry\-run\fP=false
- Whether to enable dry\-run mode or not
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-token(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token.1
index c2f937788291..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-token.1
@@ -1,69 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm token \- Manage bootstrap tokens.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm token\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-This command manages bootstrap tokens. It is optional and needed only for advanced use cases.
-
-.PP
-In short, bootstrap tokens are used for establishing bidirectional trust between a client and a server.
-A bootstrap token can be used when a client (for example a node that is about to join the cluster) needs
-to trust the server it is talking to. Then a bootstrap token with the "signing" usage can be used.
-bootstrap tokens can also function as a way to allow short\-lived authentication to the API Server
-(the token serves as a way for the API Server to trust the client), for example for doing the TLS Bootstrap.
-
-.PP
-What is a bootstrap token more exactly?
- \- It is a Secret in the kube\-system namespace of type "bootstrap.kubernetes.io/token".
- \- A bootstrap token must be of the form "[a\-z0\-9]{6}.[a\-z0\-9]{16}". The former part is the public token ID,
- while the latter is the Token Secret and it must be kept private at all circumstances!
- \- The name of the Secret must be named "bootstrap\-token\-(token\-id)".
-
-.PP
-You can read more about bootstrap tokens here:
-
-\[la]https://kubernetes.io/docs/admin/bootstrap-tokens/\[ra]
-
-
-.SH OPTIONS
-.PP
-\fB\-\-dry\-run\fP=false
- Whether to enable dry\-run mode or not
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm(1)\fP, \fBkubeadm\-token\-create(1)\fP, \fBkubeadm\-token\-delete(1)\fP, \fBkubeadm\-token\-generate(1)\fP, \fBkubeadm\-token\-list(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade-apply.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade-apply.1
index cd613f18c500..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade-apply.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade-apply.1
@@ -1,99 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm upgrade apply \- Upgrade your Kubernetes cluster to the specified version.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm upgrade apply\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Upgrade your Kubernetes cluster to the specified version.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-dry\-run\fP=false
- Do not change any state, just output what actions would be performed.
-
-.PP
-\fB\-\-etcd\-upgrade\fP=false
- Perform the upgrade of etcd.
-
-.PP
-\fB\-f\fP, \fB\-\-force\fP=false
- Force upgrading although some requirements might not be met. This also implies non\-interactive mode.
-
-.PP
-\fB\-\-image\-pull\-timeout\fP=15m0s
- The maximum amount of time to wait for the control plane pods to be downloaded.
-
-.PP
-\fB\-y\fP, \fB\-\-yes\fP=false
- Perform the upgrade and do not prompt for confirmation (non\-interactive mode).
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-experimental\-upgrades\fP=false
- Show unstable versions of Kubernetes as an upgrade alternative and allow upgrading to an alpha/beta/release candidate versions of Kubernetes.
-
-.PP
-\fB\-\-allow\-release\-candidate\-upgrades\fP=false
- Show release candidate versions of Kubernetes as an upgrade alternative and allow upgrading to a release candidate versions of Kubernetes.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file. WARNING: Usage of a configuration file is experimental!
-
-.PP
-\fB\-\-feature\-gates\fP=""
- A set of key=value pairs that describe feature gates for various features.Options are:
-CoreDNS=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-HighAvailability=true|false (ALPHA \- default=false)
-SelfHosting=true|false (BETA \- default=false)
-StoreCertsInSecrets=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-ignore\-preflight\-errors\fP=[]
- A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster.
-
-.PP
-\fB\-\-print\-config\fP=false
- Specifies whether the configuration file that will be used in the upgrade should be printed or not.
-
-.PP
-\fB\-\-skip\-preflight\-checks\fP=false
- Skip preflight checks that normally run before modifying the system.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-upgrade(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade-plan.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade-plan.1
index bf3f52b57ba3..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade-plan.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade-plan.1
@@ -1,77 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm upgrade plan \- Check which versions are available to upgrade to and validate whether your current cluster is upgradeable.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm upgrade plan\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Check which versions are available to upgrade to and validate whether your current cluster is upgradeable.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-experimental\-upgrades\fP=false
- Show unstable versions of Kubernetes as an upgrade alternative and allow upgrading to an alpha/beta/release candidate versions of Kubernetes.
-
-.PP
-\fB\-\-allow\-release\-candidate\-upgrades\fP=false
- Show release candidate versions of Kubernetes as an upgrade alternative and allow upgrading to a release candidate versions of Kubernetes.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file. WARNING: Usage of a configuration file is experimental!
-
-.PP
-\fB\-\-feature\-gates\fP=""
- A set of key=value pairs that describe feature gates for various features.Options are:
-CoreDNS=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-HighAvailability=true|false (ALPHA \- default=false)
-SelfHosting=true|false (BETA \- default=false)
-StoreCertsInSecrets=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-ignore\-preflight\-errors\fP=[]
- A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster.
-
-.PP
-\fB\-\-print\-config\fP=false
- Specifies whether the configuration file that will be used in the upgrade should be printed or not.
-
-.PP
-\fB\-\-skip\-preflight\-checks\fP=false
- Skip preflight checks that normally run before modifying the system.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-upgrade(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade.1
index 167db9f29d69..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-upgrade.1
@@ -1,79 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm upgrade \- Upgrade your cluster smoothly to a newer version with this command.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm upgrade\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Upgrade your cluster smoothly to a newer version with this command.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-experimental\-upgrades\fP=false
- Show unstable versions of Kubernetes as an upgrade alternative and allow upgrading to an alpha/beta/release candidate versions of Kubernetes.
-
-.PP
-\fB\-\-allow\-release\-candidate\-upgrades\fP=false
- Show release candidate versions of Kubernetes as an upgrade alternative and allow upgrading to a release candidate versions of Kubernetes.
-
-.PP
-\fB\-\-config\fP=""
- Path to kubeadm config file. WARNING: Usage of a configuration file is experimental!
-
-.PP
-\fB\-\-feature\-gates\fP=""
- A set of key=value pairs that describe feature gates for various features.Options are:
-CoreDNS=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-HighAvailability=true|false (ALPHA \- default=false)
-SelfHosting=true|false (BETA \- default=false)
-StoreCertsInSecrets=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-ignore\-preflight\-errors\fP=[]
- A list of checks whose errors will be shown as warnings. Example: 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
-
-.PP
-\fB\-\-kubeconfig\fP="/etc/kubernetes/admin.conf"
- The KubeConfig file to use when talking to the cluster.
-
-.PP
-\fB\-\-print\-config\fP=false
- Specifies whether the configuration file that will be used in the upgrade should be printed or not.
-
-.PP
-\fB\-\-skip\-preflight\-checks\fP=false
- Skip preflight checks that normally run before modifying the system.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm(1)\fP, \fBkubeadm\-upgrade\-apply(1)\fP, \fBkubeadm\-upgrade\-plan(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-version.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-version.1
index b7f8a56b437b..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-version.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm-version.1
@@ -1,46 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm version \- Print the version of kubeadm
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm version\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Print the version of kubeadm
-
-
-.SH OPTIONS
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format; available options are 'yaml', 'json' and 'short'
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm.1
index 2e4fe0f91803..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubeadm.1
@@ -1,83 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubeadm \- kubeadm: easily bootstrap a secure Kubernetes cluster
-
-
-.SH SYNOPSIS
-.PP
-\fBkubeadm\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-kubeadm: easily bootstrap a secure Kubernetes cluster.
-
-.PP
-.RS
-
-.nf
-┌──────────────────────────────────────────────────────────┐
-│ KUBEADM IS CURRENTLY IN BETA │
-│ │
-│ But please, try it out and give us feedback at: │
-│ https://github.com/kubernetes/kubeadm/issues │
-│ and at\-mention @kubernetes/sig\-cluster\-lifecycle\-bugs │
-│ or @kubernetes/sig\-cluster\-lifecycle\-feature\-requests │
-└──────────────────────────────────────────────────────────┘
-
-.fi
-.RE
-
-.PP
-Example usage:
-
-.PP
-.RS
-
-.nf
-Create a two\-machine cluster with one master (which controls the cluster),
-and one node (where your workloads, like Pods and Deployments run).
-
-┌──────────────────────────────────────────────────────────┐
-│ On the first machine: │
-├──────────────────────────────────────────────────────────┤
-│ master# kubeadm init │
-└──────────────────────────────────────────────────────────┘
-
-┌──────────────────────────────────────────────────────────┐
-│ On the second machine: │
-├──────────────────────────────────────────────────────────┤
-│ node# kubeadm join │
-└──────────────────────────────────────────────────────────┘
-
-You can then repeat the second step on as many other machines as you like.
-
-.fi
-.RE
-
-
-.SH OPTIONS
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-
-.SH SEE ALSO
-.PP
-\fBkubeadm\-alpha(1)\fP, \fBkubeadm\-completion(1)\fP, \fBkubeadm\-config(1)\fP, \fBkubeadm\-init(1)\fP, \fBkubeadm\-join(1)\fP, \fBkubeadm\-reset(1)\fP, \fBkubeadm\-token(1)\fP, \fBkubeadm\-upgrade(1)\fP, \fBkubeadm\-version(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-alpha-diff.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-alpha-diff.1
index 5784fbd65923..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-alpha-diff.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-alpha-diff.1
@@ -1,333 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl alpha diff \- Diff different versions of configurations
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl alpha diff\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Diff configurations specified by filename or stdin between their local, last\-applied, live and/or "merged" versions.
-
-.PP
-LOCAL and LIVE versions are diffed by default. Other availble keywords are MERGED and LAST.
-
-.PP
-Output is always YAML.
-
-.PP
-KUBERNETES EXTERNAL DIFF environment variable can be used to select your own diff command. By default, the "diff" command available in your path will be run with "\-u" (unicode) and "\-N" (treat new files as empty) options.
-
-
-.SH OPTIONS
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files contains the configuration to diff
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Diff resources included in pod.json. By default, it will diff LOCAL and LIVE versions
- kubectl alpha diff \-f pod.json
-
- # When one version is specified, diff that version against LIVE
- cat service.yaml | kubectl alpha diff \-f \- MERGED
-
- # Or specify both versions
- kubectl alpha diff \-f pod.json \-f service.yaml LAST LOCAL
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-alpha(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-alpha.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-alpha.1
index d1192792577d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-alpha.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-alpha.1
@@ -1,296 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl alpha \- Commands for features in alpha
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl alpha\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-These commands correspond to alpha features that are not enabled in Kubernetes clusters by default.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP, \fBkubectl\-alpha\-diff(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-annotate.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-annotate.1
index 6444514fa1a2..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-annotate.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-annotate.1
@@ -1,490 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl annotate \- Update the annotations on a resource
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl annotate\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Update the annotations on one or more resources
-
-.PP
-All Kubernetes objects support the ability to store additional data with the object as annotations. Annotations are key/value pairs that can be larger than labels and include arbitrary string values such as structured JSON. Tools and system extensions may use annotations to store their own data.
-
-.PP
-Attempting to set an annotation that already exists will fail unless \-\-overwrite is set. If \-\-resource\-version is specified and does not match the current resource version on the server the command will fail.
-
-.PP
-Valid resource types include:
-.IP \n+[step]
-
-\item all
-.br
-\item certificatesigningrequests (aka 'csr')
-.br
-\item clusterrolebindings
-.br
-\item clusterroles
-.br
-\item componentstatuses (aka 'cs')
-.br
-\item configmaps (aka 'cm')
-.br
-\item controllerrevisions
-.br
-\item cronjobs
-.br
-\item customresourcedefinition (aka 'crd')
-.br
-\item daemonsets (aka 'ds')
-.br
-\item deployments (aka 'deploy')
-.br
-\item endpoints (aka 'ep')
-.br
-\item events (aka 'ev')
-.br
-\item horizontalpodautoscalers (aka 'hpa')
-.br
-\item ingresses (aka 'ing')
-.br
-\item jobs
-.br
-\item limitranges (aka 'limits')
-.br
-\item namespaces (aka 'ns')
-.br
-\item networkpolicies (aka 'netpol')
-.br
-\item nodes (aka 'no')
-.br
-\item persistentvolumeclaims (aka 'pvc')
-.br
-\item persistentvolumes (aka 'pv')
-.br
-\item poddisruptionbudgets (aka 'pdb')
-.br
-\item podpreset
-.br
-\item pods (aka 'po')
-.br
-\item podsecuritypolicies (aka 'psp')
-.br
-\item podtemplates
-.br
-\item replicasets (aka 'rs')
-.br
-\item replicationcontrollers (aka 'rc')
-.br
-\item resourcequotas (aka 'quota')
-.br
-\item rolebindings
-.br
-\item roles
-.br
-\item secrets
-.br
-\item serviceaccounts (aka 'sa')
-.br
-\item services (aka 'svc')
-.br
-\item statefulsets (aka 'sts')
-.br
-\item storageclasses (aka 'sc')
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Select all resources, including uninitialized ones, in the namespace of the specified resource types.
-
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to update the annotation
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-\-local\fP=false
- If true, annotation will NOT contact api\-server but run locally.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-overwrite\fP=false
- If true, allow annotations to be overwritten, otherwise reject annotation updates that overwrite existing annotations.
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-resource\-version\fP=""
- If non\-empty, the annotation update will only succeed if this is the current resource\-version for the object. Only valid when specifying a single resource.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, not including uninitialized ones, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2).
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Update pod 'foo' with the annotation 'description' and the value 'my frontend'.
- # If the same annotation is set multiple times, only the last value will be applied
- kubectl annotate pods foo description='my frontend'
-
- # Update a pod identified by type and name in "pod.json"
- kubectl annotate \-f pod.json description='my frontend'
-
- # Update pod 'foo' with the annotation 'description' and the value 'my frontend running nginx', overwriting any existing value.
- kubectl annotate \-\-overwrite pods foo description='my frontend running nginx'
-
- # Update all pods in the namespace
- kubectl annotate pods \-\-all description='my frontend running nginx'
-
- # Update pod 'foo' only if the resource is unchanged from version 1.
- kubectl annotate pods foo description='my frontend running nginx' \-\-resource\-version=1
-
- # Update pod 'foo' by removing an annotation named 'description' if it exists.
- # Does not require the \-\-overwrite flag.
- kubectl annotate pods foo description\-
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-api-versions.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-api-versions.1
index e8e6eae137b6..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-api-versions.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-api-versions.1
@@ -1,308 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl api\-versions \- Print the supported API versions on the server, in the form of "group/version"
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl api\-versions\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Print the supported API versions on the server, in the form of "group/version"
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Print the supported API versions
- kubectl api\-versions
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-edit-last-applied.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-edit-last-applied.1
index 15a072588519..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-edit-last-applied.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-edit-last-applied.1
@@ -1,349 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl apply edit\-last\-applied \- Edit latest last\-applied\-configuration annotations of a resource/object
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl apply edit\-last\-applied\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Edit the latest last\-applied\-configuration annotations of resources from the default editor.
-
-.PP
-The edit\-last\-applied command allows you to directly edit any API resource you can retrieve via the command line tools. It will open the editor defined by your KUBE \_EDITOR, or EDITOR environment variables, or fall back to 'vi' for Linux or 'notepad' for Windows. You can edit multiple objects, although changes are applied one at a time. The command accepts filenames as well as command line arguments, although the files you point to must be previously saved versions of resources.
-
-.PP
-The default format is YAML. To edit in JSON, specify "\-o json".
-
-.PP
-The flag \-\-windows\-line\-endings can be used to force Windows line endings, otherwise the default for your operating system will be used.
-
-.PP
-In the event an error occurs while updating, a temporary file will be created on disk that contains your unapplied changes. The most common error when updating a resource is another editor changing the resource on the server. When this occurs, you will have to apply your changes to the newer version of the resource, or update your temporary saved copy to include the latest resource version.
-
-
-.SH OPTIONS
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files to use to edit the resource
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP="yaml"
- Output format. One of: yaml|json.
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-windows\-line\-endings\fP=false
- Defaults to the line ending native to your platform.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Edit the last\-applied\-configuration annotations by type/name in YAML.
- kubectl apply edit\-last\-applied deployment/nginx
-
- # Edit the last\-applied\-configuration annotations by file in JSON.
- kubectl apply edit\-last\-applied \-f deploy.yaml \-o json
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-apply(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-set-last-applied.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-set-last-applied.1
index 6c006565dd54..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-set-last-applied.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-set-last-applied.1
@@ -1,368 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl apply set\-last\-applied \- Set the last\-applied\-configuration annotation on a live object to match the contents of a file.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl apply set\-last\-applied\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Set the latest last\-applied\-configuration annotations by setting it to match the contents of a file. This results in the last\-applied\-configuration being updated as though 'kubectl apply \-f ' was run, without updating any other parts of the object.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-create\-annotation\fP=false
- Will create 'last\-applied\-configuration' annotations if current objects doesn't have one
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files that contains the last\-applied\-configuration annotations
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Set the last\-applied\-configuration of a resource to match the contents of a file.
- kubectl apply set\-last\-applied \-f deploy.yaml
-
- # Execute set\-last\-applied against each configuration file in a directory.
- kubectl apply set\-last\-applied \-f path/
-
- # Set the last\-applied\-configuration of a resource to match the contents of a file, will create the annotation if it does not already exist.
- kubectl apply set\-last\-applied \-f deploy.yaml \-\-create\-annotation=true
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-apply(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-view-last-applied.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-view-last-applied.1
index 003499aab9f2..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-view-last-applied.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply-view-last-applied.1
@@ -1,336 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl apply view\-last\-applied \- View latest last\-applied\-configuration annotations of a resource/object
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl apply view\-last\-applied\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-View the latest last\-applied\-configuration annotations by type/name or file.
-
-.PP
-The default output will be printed to stdout in YAML format. One can use \-o option to change output format.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Select all resources in the namespace of the specified resource types
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files that contains the last\-applied\-configuration annotations
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. Must be one of yaml|json
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # View the last\-applied\-configuration annotations by type/name in YAML.
- kubectl apply view\-last\-applied deployment/nginx
-
- # View the last\-applied\-configuration annotations by file in JSON
- kubectl apply view\-last\-applied \-f deploy.yaml \-o json
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-apply(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply.1
index d9ba49af6317..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-apply.1
@@ -1,431 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl apply \- Apply a configuration to a resource by filename or stdin
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl apply\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Apply a configuration to a resource by filename or stdin. The resource name must be specified. This resource will be created if it doesn't exist yet. To use 'apply', always create the resource initially with either 'apply' or 'create \-\-save\-config'.
-
-.PP
-JSON and YAML formats are accepted.
-
-.PP
-Alpha Disclaimer: the \-\-prune functionality is not yet complete. Do not use unless you are aware of what the current state is. See
-\[la]https://issues.k8s.io/34274\[ra].
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Select all resources in the namespace of the specified resource types.
-
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-cascade\fP=true
- Only relevant during a prune or a force apply. If true, cascade the deletion of the resources managed by pruned or deleted resources (e.g. Pods created by a ReplicationController).
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files that contains the configuration to apply
-
-.PP
-\fB\-\-force\fP=false
- Delete and re\-create the specified resource, when PATCH encounters conflict and has retried for 5 times.
-
-.PP
-\fB\-\-grace\-period\fP=\-1
- Only relevant during a prune or a force apply. Period of time in seconds given to pruned or deleted resources to terminate gracefully. Ignored if negative.
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-\-openapi\-patch\fP=true
- If true, use openapi to calculate diff when the openapi presents and the resource can be found in the openapi spec. Otherwise, fall back to use baked\-in types.
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-overwrite\fP=true
- Automatically resolve conflicts between the modified and live configuration by using values from the modified configuration
-
-.PP
-\fB\-\-prune\fP=false
- Automatically delete resource objects, including the uninitialized ones, that do not appear in the configs and are created by either apply or create \-\-save\-config. Should be used with either \-l or \-\-all.
-
-.PP
-\fB\-\-prune\-whitelist\fP=[]
- Overwrite the default whitelist with for \-\-prune
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-timeout\fP=0s
- Only relevant during a force apply. The length of time to wait before giving up on a delete of the old resource, zero means determine a timeout from the size of the object. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Apply the configuration in pod.json to a pod.
- kubectl apply \-f ./pod.json
-
- # Apply the JSON passed into stdin to a pod.
- cat pod.json | kubectl apply \-f \-
-
- # Note: \-\-prune is still in Alpha
- # Apply the configuration in manifest.yaml that matches label app=nginx and delete all the other resources that are not in the file and match label app=nginx.
- kubectl apply \-\-prune \-f manifest.yaml \-l app=nginx
-
- # Apply the configuration in manifest.yaml and delete all the other configmaps that are not in the file.
- kubectl apply \-\-prune \-f manifest.yaml \-\-all \-\-prune\-whitelist=core/v1/ConfigMap
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP, \fBkubectl\-apply\-edit\-last\-applied(1)\fP, \fBkubectl\-apply\-set\-last\-applied(1)\fP, \fBkubectl\-apply\-view\-last\-applied(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-attach.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-attach.1
index be4dcbf058d5..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-attach.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-attach.1
@@ -1,336 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl attach \- Attach to a running container
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl attach\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Attach to a process that is already running inside an existing container.
-
-
-.SH OPTIONS
-.PP
-\fB\-c\fP, \fB\-\-container\fP=""
- Container name. If omitted, the first container in the pod will be chosen
-
-.PP
-\fB\-\-pod\-running\-timeout\fP=1m0s
- The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
-
-.PP
-\fB\-i\fP, \fB\-\-stdin\fP=false
- Pass stdin to the container
-
-.PP
-\fB\-t\fP, \fB\-\-tty\fP=false
- Stdin is a TTY
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Get output from running pod 123456\-7890, using the first container by default
- kubectl attach 123456\-7890
-
- # Get output from ruby\-container from pod 123456\-7890
- kubectl attach 123456\-7890 \-c ruby\-container
-
- # Switch to raw terminal mode, sends stdin to 'bash' in ruby\-container from pod 123456\-7890
- # and sends stdout/stderr from 'bash' back to the client
- kubectl attach 123456\-7890 \-c ruby\-container \-i \-t
-
- # Get output from the first pod of a ReplicaSet named nginx
- kubectl attach rs/nginx
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth-can-i.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth-can-i.1
index bdc83149a0e8..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth-can-i.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth-can-i.1
@@ -1,340 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl auth can\-i \- Check whether an action is allowed
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl auth can\-i\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Check whether an action is allowed.
-
-.PP
-VERB is a logical Kubernetes API verb like 'get', 'list', 'watch', 'delete', etc. TYPE is a Kubernetes resource. Shortcuts and groups will be resolved. NONRESOURCEURL is a partial URL starts with "/". NAME is the name of a particular Kubernetes resource.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\-namespaces\fP=false
- If true, check the specified action in all namespaces.
-
-.PP
-\fB\-q\fP, \fB\-\-quiet\fP=false
- If true, suppress output and just return the exit code.
-
-.PP
-\fB\-\-subresource\fP=""
- SubResource such as pod/log or deployment/scale
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Check to see if I can create pods in any namespace
- kubectl auth can\-i create pods \-\-all\-namespaces
-
- # Check to see if I can list deployments in my current namespace
- kubectl auth can\-i list deployments.extensions
-
- # Check to see if I can do everything in my current namespace ("*" means all)
- kubectl auth can\-i '*' '*'
-
- # Check to see if I can get the job named "bar" in namespace "foo"
- kubectl auth can\-i list jobs.batch/bar \-n foo
-
- # Check to see if I can read pod logs
- kubectl auth can\-i get pods \-\-subresource=log
-
- # Check to see if I can access the URL /logs/
- kubectl auth can\-i get /logs/
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-auth(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth-reconcile.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth-reconcile.1
index 927ffb8dd8ca..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth-reconcile.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth-reconcile.1
@@ -1,357 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl auth reconcile \- Reconciles rules for RBAC Role, RoleBinding, ClusterRole, and ClusterRole binding objects
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl auth reconcile\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Reconciles rules for RBAC Role, RoleBinding, ClusterRole, and ClusterRole binding objects.
-
-.PP
-This is preferred to 'apply' for RBAC resources so that proper rule coverage checks are done.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to reconcile.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Reconcile rbac resources from a file
- kubectl auth reconcile \-f my\-rbac\-rules.yaml
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-auth(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth.1
index 4bf2092778a9..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-auth.1
@@ -1,296 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl auth \- Inspect authorization
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl auth\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Inspect authorization
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP, \fBkubectl\-auth\-can\-i(1)\fP, \fBkubectl\-auth\-reconcile(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-autoscale.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-autoscale.1
index 6d3433dc824b..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-autoscale.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-autoscale.1
@@ -1,396 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl autoscale \- Auto\-scale a Deployment, ReplicaSet, or ReplicationController
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl autoscale\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Creates an autoscaler that automatically chooses and sets the number of pods that run in a kubernetes cluster.
-
-.PP
-Looks up a Deployment, ReplicaSet, or ReplicationController by name and creates an autoscaler that uses the given resource as a reference. An autoscaler can automatically increase or decrease number of pods deployed within the system as needed.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-cpu\-percent\fP=\-1
- The target average CPU utilization (represented as a percent of requested CPU) over all the pods. If it's not specified or negative, a default autoscaling policy will be used.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to autoscale.
-
-.PP
-\fB\-\-generator\fP="horizontalpodautoscaler/v1"
- The name of the API generator to use. Currently there is only 1 generator.
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-max\fP=\-1
- The upper limit for the number of pods that can be set by the autoscaler. Required.
-
-.PP
-\fB\-\-min\fP=\-1
- The lower limit for the number of pods that can be set by the autoscaler. If it's not specified or negative, the server will apply a default value.
-
-.PP
-\fB\-\-name\fP=""
- The name for the newly created object. If not specified, the name of the input resource will be used.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Auto scale a deployment "foo", with the number of pods between 2 and 10, no target CPU utilization specified so a default autoscaling policy will be used:
- kubectl autoscale deployment foo \-\-min=2 \-\-max=10
-
- # Auto scale a replication controller "foo", with the number of pods between 1 and 5, target CPU utilization at 80%:
- kubectl autoscale rc foo \-\-max=5 \-\-cpu\-percent=80
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate-approve.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate-approve.1
index bb02ecab62e2..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate-approve.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate-approve.1
@@ -1,316 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl certificate approve \- Approve a certificate signing request
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl certificate approve\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Approve a certificate signing request.
-
-.PP
-kubectl certificate approve allows a cluster admin to approve a certificate signing request (CSR). This action tells a certificate signing controller to issue a certificate to the requestor with the attributes requested in the CSR.
-
-.PP
-SECURITY NOTICE: Depending on the requested attributes, the issued certificate can potentially grant a requester access to cluster resources or to authenticate as a requested identity. Before approving a CSR, ensure you understand what the signed certificate can do.
-
-
-.SH OPTIONS
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to update
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output mode. Use "\-o name" for shorter output (resource/name).
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-certificate(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate-deny.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate-deny.1
index 9b508500125e..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate-deny.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate-deny.1
@@ -1,313 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl certificate deny \- Deny a certificate signing request
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl certificate deny\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Deny a certificate signing request.
-
-.PP
-kubectl certificate deny allows a cluster admin to deny a certificate signing request (CSR). This action tells a certificate signing controller to not to issue a certificate to the requestor.
-
-
-.SH OPTIONS
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to update
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output mode. Use "\-o name" for shorter output (resource/name).
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-certificate(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate.1
index 1f1ae1ba2698..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-certificate.1
@@ -1,296 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl certificate \- Modify certificate resources.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl certificate\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Modify certificate resources.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP, \fBkubectl\-certificate\-approve(1)\fP, \fBkubectl\-certificate\-deny(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cluster-info-dump.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cluster-info-dump.1
index 142dc805d294..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cluster-info-dump.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cluster-info-dump.1
@@ -1,338 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl cluster\-info dump \- Dump lots of relevant info for debugging and diagnosis
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl cluster\-info dump\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Dumps cluster info out suitable for debugging and diagnosing cluster problems. By default, dumps everything to stdout. You can optionally specify a directory with \-\-output\-directory. If you specify a directory, kubernetes will build a set of files in that directory. By default only dumps things in the 'kube\-system' namespace, but you can switch to a different namespace with the \-\-namespaces flag, or specify \-\-all\-namespaces to dump all namespaces.
-
-.PP
-The command also dumps the logs of all of the pods in the cluster, these logs are dumped into different directories based on namespace and pod name.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\-namespaces\fP=false
- If true, dump all namespaces. If true, \-\-namespaces is ignored.
-
-.PP
-\fB\-\-namespaces\fP=[]
- A comma separated list of namespaces to dump.
-
-.PP
-\fB\-\-output\-directory\fP=""
- Where to output the files. If empty or '\-' uses stdout, otherwise creates a directory hierarchy in that directory
-
-.PP
-\fB\-\-pod\-running\-timeout\fP=20s
- The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Dump current cluster state to stdout
- kubectl cluster\-info dump
-
- # Dump current cluster state to /path/to/cluster\-state
- kubectl cluster\-info dump \-\-output\-directory=/path/to/cluster\-state
-
- # Dump all namespaces to stdout
- kubectl cluster\-info dump \-\-all\-namespaces
-
- # Dump a set of namespaces to /path/to/cluster\-state
- kubectl cluster\-info dump \-\-namespaces default,kube\-system \-\-output\-directory=/path/to/cluster\-state
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-cluster\-info(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cluster-info.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cluster-info.1
index 4d9d8daad7e6..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cluster-info.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cluster-info.1
@@ -1,314 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl cluster\-info \- Display cluster info
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl cluster\-info\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Display addresses of the master and services with label kubernetes.io/cluster\-service=true To further debug and diagnose cluster problems, use 'kubectl cluster\-info dump'.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Print the address of the master and cluster services
- kubectl cluster\-info
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP, \fBkubectl\-cluster\-info\-dump(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-completion.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-completion.1
index 4edaa59dec1f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-completion.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-completion.1
@@ -1,338 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl completion \- Output shell completion code for the specified shell (bash or zsh)
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl completion\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Output shell completion code for the specified shell (bash or zsh). The shell code must be evalutated to provide interactive completion of kubectl commands. This can be done by sourcing it from the .bash \_profile.
-
-.PP
-Detailed instructions on how to do this are available here:
-\[la]https://kubernetes.io/docs/tasks/tools/install-kubectl/#enabling-shell-autocompletion\[ra]
-
-.PP
-Note for zsh users: [1] zsh completions are only supported in versions of zsh >= 5.2
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Installing bash completion on macOS using homebrew
- ## If running Bash 3.2 included with macOS
- brew install bash\-completion
- ## or, if running Bash 4.1+
- brew install bash\-completion@2
- ## If kubectl is installed via homebrew, this should start working immediately.
- ## If you've installed via other means, you may need add the completion to your completion directory
- kubectl completion bash > $(brew \-\-prefix)/etc/bash\_completion.d/kubectl
-
-
- # Installing bash completion on Linux
- ## Load the kubectl completion code for bash into the current shell
- source <(kubectl completion bash)
- ## Write bash completion code to a file and source if from .bash\_profile
- kubectl completion bash > \~/.kube/completion.bash.inc
- printf "
- # Kubectl shell completion
- source '$HOME/.kube/completion.bash.inc'
- " >> $HOME/.bash\_profile
- source $HOME/.bash\_profile
-
- # Load the kubectl completion code for zsh[1] into the current shell
- source <(kubectl completion zsh)
- # Set the kubectl completion code for zsh[1] to autoload on startup
- kubectl completion zsh > "${fpath[1]}/\_kubectl"
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-current-context.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-current-context.1
index 1990bdd943d3..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-current-context.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-current-context.1
@@ -1,308 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config current\-context \- Displays the current\-context
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config current\-context\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Displays the current\-context
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Display the current\-context
- kubectl config current\-context
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-delete-cluster.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-delete-cluster.1
index 12b2264319fa..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-delete-cluster.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-delete-cluster.1
@@ -1,308 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config delete\-cluster \- Delete the specified cluster from the kubeconfig
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config delete\-cluster\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Delete the specified cluster from the kubeconfig
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Delete the minikube cluster
- kubectl config delete\-cluster minikube
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-delete-context.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-delete-context.1
index e9a0c8cba0db..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-delete-context.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-delete-context.1
@@ -1,308 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config delete\-context \- Delete the specified context from the kubeconfig
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config delete\-context\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Delete the specified context from the kubeconfig
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Delete the context for the minikube cluster
- kubectl config delete\-context minikube
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-get-clusters.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-get-clusters.1
index 24c5836defdf..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-get-clusters.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-get-clusters.1
@@ -1,308 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config get\-clusters \- Display clusters defined in the kubeconfig
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config get\-clusters\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Display clusters defined in the kubeconfig.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # List the clusters kubectl knows about
- kubectl config get\-clusters
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-get-contexts.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-get-contexts.1
index 576eca662ec2..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-get-contexts.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-get-contexts.1
@@ -1,328 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config get\-contexts \- Describe one or many contexts
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config get\-contexts\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Displays one or many contexts from the kubeconfig file.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # List all the contexts in your kubeconfig file
- kubectl config get\-contexts
-
- # Describe one context in your kubeconfig file.
- kubectl config get\-contexts my\-context
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-rename-context.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-rename-context.1
index 7d45634f295f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-rename-context.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-rename-context.1
@@ -1,317 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config rename\-context \- Renames a context from the kubeconfig file.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config rename\-context\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Renames a context from the kubeconfig file.
-
-.PP
-CONTEXT \_NAME is the context name that you wish change.
-
-.PP
-NEW \_NAME is the new name you wish to set.
-
-.PP
-Note: In case the context being renamed is the 'current\-context', this field will also be updated.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Rename the context 'old\-name' to 'new\-name' in your kubeconfig file
- kubectl config rename\-context old\-name new\-name
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-cluster.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-cluster.1
index 143a6811b7ff..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-cluster.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-cluster.1
@@ -1,323 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config set\-cluster \- Sets a cluster entry in kubeconfig
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config set\-cluster\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Sets a cluster entry in kubeconfig.
-
-.PP
-Specifying a name that already exists will merge new fields on top of existing values for those fields.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to certificate\-authority file for the cluster entry in kubeconfig
-
-.PP
-\fB\-\-embed\-certs\fP=false
- embed\-certs for the cluster entry in kubeconfig
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- insecure\-skip\-tls\-verify for the cluster entry in kubeconfig
-
-.PP
-\fB\-\-server\fP=""
- server for the cluster entry in kubeconfig
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Set only the server field on the e2e cluster entry without touching other values.
- kubectl config set\-cluster e2e \-\-server=https://1.2.3.4
-
- # Embed certificate authority data for the e2e cluster entry
- kubectl config set\-cluster e2e \-\-certificate\-authority=\~/.kube/e2e/kubernetes.ca.crt
-
- # Disable cert checking for the dev cluster entry
- kubectl config set\-cluster e2e \-\-insecure\-skip\-tls\-verify=true
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-context.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-context.1
index 66a803ff6e8d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-context.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-context.1
@@ -1,313 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config set\-context \- Sets a context entry in kubeconfig
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config set\-context\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Sets a context entry in kubeconfig
-
-.PP
-Specifying a name that already exists will merge new fields on top of existing values for those fields.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cluster\fP=""
- cluster for the context entry in kubeconfig
-
-.PP
-\fB\-\-namespace\fP=""
- namespace for the context entry in kubeconfig
-
-.PP
-\fB\-\-user\fP=""
- user for the context entry in kubeconfig
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Set the user field on the gce context entry without touching other values
- kubectl config set\-context gce \-\-user=cluster\-admin
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-credentials.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-credentials.1
index 9cd3ad9a8bf1..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-credentials.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set-credentials.1
@@ -1,356 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config set\-credentials \- Sets a user entry in kubeconfig
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config set\-credentials\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Sets a user entry in kubeconfig
-
-.PP
-Specifying a name that already exists will merge new fields on top of existing values.
-
-.PP
-Client\-certificate flags:
- \-\-client\-certificate=certfile \-\-client\-key=keyfile
-
-.PP
-Bearer token flags:
- \-\-token=bearer\_token
-
-.PP
-Basic auth flags:
- \-\-username=basic\_user \-\-password=basic\_password
-
-.PP
-Bearer token and basic auth are mutually exclusive.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-auth\-provider\fP=""
- Auth provider for the user entry in kubeconfig
-
-.PP
-\fB\-\-auth\-provider\-arg\fP=[]
- 'key=value' arguments for the auth provider
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to client\-certificate file for the user entry in kubeconfig
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to client\-key file for the user entry in kubeconfig
-
-.PP
-\fB\-\-embed\-certs\fP=false
- Embed client cert/key for the user entry in kubeconfig
-
-.PP
-\fB\-\-password\fP=""
- password for the user entry in kubeconfig
-
-.PP
-\fB\-\-token\fP=""
- token for the user entry in kubeconfig
-
-.PP
-\fB\-\-username\fP=""
- username for the user entry in kubeconfig
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Set only the "client\-key" field on the "cluster\-admin"
- # entry, without touching other values:
- kubectl config set\-credentials cluster\-admin \-\-client\-key=\~/.kube/admin.key
-
- # Set basic auth for the "cluster\-admin" entry
- kubectl config set\-credentials cluster\-admin \-\-username=admin \-\-password=uXFGweU9l35qcif
-
- # Embed client certificate data in the "cluster\-admin" entry
- kubectl config set\-credentials cluster\-admin \-\-client\-certificate=\~/.kube/admin.crt \-\-embed\-certs=true
-
- # Enable the Google Compute Platform auth provider for the "cluster\-admin" entry
- kubectl config set\-credentials cluster\-admin \-\-auth\-provider=gcp
-
- # Enable the OpenID Connect auth provider for the "cluster\-admin" entry with additional args
- kubectl config set\-credentials cluster\-admin \-\-auth\-provider=oidc \-\-auth\-provider\-arg=client\-id=foo \-\-auth\-provider\-arg=client\-secret=bar
-
- # Remove the "client\-secret" config value for the OpenID Connect auth provider for the "cluster\-admin" entry
- kubectl config set\-credentials cluster\-admin \-\-auth\-provider=oidc \-\-auth\-provider\-arg=client\-secret\-
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set.1
index 3680009043dd..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-set.1
@@ -1,308 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config set \- Sets an individual value in a kubeconfig file
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config set\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Sets an individual value in a kubeconfig file
-
-.PP
-PROPERTY \_NAME is a dot delimited name where each token represents either an attribute name or a map key. Map keys may not contain dots.
-
-.PP
-PROPERTY \_VALUE is the new value you wish to set. Binary fields such as 'certificate\-authority\-data' expect a base64 encoded string unless the \-\-set\-raw\-bytes flag is used.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-set\-raw\-bytes\fP=false
- When writing a []byte PROPERTY\_VALUE, write the given string directly without base64 decoding.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-unset.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-unset.1
index 9442927ef60d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-unset.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-unset.1
@@ -1,299 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config unset \- Unsets an individual value in a kubeconfig file
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config unset\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Unsets an individual value in a kubeconfig file
-
-.PP
-PROPERTY \_NAME is a dot delimited name where each token represents either an attribute name or a map key. Map keys may not contain dots.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-use-context.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-use-context.1
index 5b7c55e11cec..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-use-context.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-use-context.1
@@ -1,308 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config use\-context \- Sets the current\-context in a kubeconfig file
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config use\-context\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Sets the current\-context in a kubeconfig file
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Use the context for the minikube cluster
- kubectl config use\-context minikube
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-view.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-view.1
index f4276667aff3..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-view.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config-view.1
@@ -1,368 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config view \- Display merged kubeconfig settings or a specified kubeconfig file
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config view\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Display merged kubeconfig settings or a specified kubeconfig file.
-
-.PP
-You can use \-\-output jsonpath={...} to extract specific values using a jsonpath expression.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-flatten\fP=false
- Flatten the resulting kubeconfig file into self\-contained output (useful for creating portable kubeconfig files)
-
-.PP
-\fB\-\-merge\fP=true
- Merge the full hierarchy of kubeconfig files
-
-.PP
-\fB\-\-minify\fP=false
- Remove all information not used by current\-context from the output
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-raw\fP=false
- Display raw byte data
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Show Merged kubeconfig settings.
- kubectl config view
-
- # Get the password for the e2e user
- kubectl config view \-o jsonpath='{.users[?(@.name == "e2e")].user.password}'
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-config(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config.1
index b474778a6703..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-config.1
@@ -1,307 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl config \- Modify kubeconfig files
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl config\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Modify kubeconfig files using subcommands like "kubectl config set current\-context my\-context"
-
-.PP
-The loading order follows these rules:
-.IP \(bu 2
-
-\item If the \-\-kubeconfig flag is set, then only that file is loaded. The flag may only be set once and no merging takes place.
-.br
-\item If $KUBECONFIG environment variable is set, then it is used a list of paths (normal path delimitting rules for your system). These paths are merged. When a value is modified, it is modified in the file that defines the stanza. When a value is created, it is created in the first file that exists. If no files in the chain exist, then it creates the last file in the list.
-.br
-\item Otherwise, ${HOME}/.kube/config is used and no merging takes place.
-
-.SH OPTIONS
-.PP
-\fB\-\-kubeconfig\fP=""
- use a particular kubeconfig file
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP, \fBkubectl\-config\-current\-context(1)\fP, \fBkubectl\-config\-delete\-cluster(1)\fP, \fBkubectl\-config\-delete\-context(1)\fP, \fBkubectl\-config\-get\-clusters(1)\fP, \fBkubectl\-config\-get\-contexts(1)\fP, \fBkubectl\-config\-rename\-context(1)\fP, \fBkubectl\-config\-set(1)\fP, \fBkubectl\-config\-set\-cluster(1)\fP, \fBkubectl\-config\-set\-context(1)\fP, \fBkubectl\-config\-set\-credentials(1)\fP, \fBkubectl\-config\-unset(1)\fP, \fBkubectl\-config\-use\-context(1)\fP, \fBkubectl\-config\-view(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-convert.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-convert.1
index 9cfaabf5ce25..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-convert.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-convert.1
@@ -1,379 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl convert \- Convert config files between different API versions
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl convert\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Convert config files between different API versions. Both YAML and JSON formats are accepted.
-
-.PP
-The command takes filename, directory, or URL as input, and convert it into format of version specified by \-\-output\-version flag. If target version is not specified or not supported, convert to latest version.
-
-.PP
-The default output will be printed to stdout in YAML format. One can use \-o option to change to output destination.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files to need to get converted.
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-local\fP=true
- If true, convert will NOT try to contact api\-server but run locally.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- Output the formatted object with the given group version (for ex: 'extensions/v1beta1').)
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Convert 'pod.yaml' to latest version and print to stdout.
- kubectl convert \-f pod.yaml
-
- # Convert the live state of the resource specified by 'pod.yaml' to the latest version
- # and print to stdout in JSON format.
- kubectl convert \-f pod.yaml \-\-local \-o json
-
- # Convert all files under current directory to latest version and create them all.
- kubectl convert \-f . | kubectl create \-f \-
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cordon.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cordon.1
index 70cfd259452f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cordon.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cordon.1
@@ -1,318 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl cordon \- Mark node as unschedulable
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl cordon\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Mark node as unschedulable.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Mark node "foo" as unschedulable.
- kubectl cordon foo
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cp.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cp.1
index b36554cde3b9..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cp.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-cp.1
@@ -1,327 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl cp \- Copy files and directories to and from containers.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl cp\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Copy files and directories to and from containers.
-
-
-.SH OPTIONS
-.PP
-\fB\-c\fP, \fB\-\-container\fP=""
- Container name. If omitted, the first container in the pod will be chosen
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # !!!Important Note!!!
- # Requires that the 'tar' binary is present in your container
- # image. If 'tar' is not present, 'kubectl cp' will fail.
-
- # Copy /tmp/foo\_dir local directory to /tmp/bar\_dir in a remote pod in the default namespace
- kubectl cp /tmp/foo\_dir :/tmp/bar\_dir
-
- # Copy /tmp/foo local file to /tmp/bar in a remote pod in a specific container
- kubectl cp /tmp/foo :/tmp/bar \-c
-
- # Copy /tmp/foo local file to /tmp/bar in a remote pod in namespace
- kubectl cp /tmp/foo /:/tmp/bar
-
- # Copy /tmp/foo from a remote pod to /tmp/bar locally
- kubectl cp /:/tmp/foo /tmp/bar
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-clusterrole.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-clusterrole.1
index 47a6530e15ef..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-clusterrole.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-clusterrole.1
@@ -1,386 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create clusterrole \- Create a ClusterRole.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create clusterrole\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a ClusterRole.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-\-non\-resource\-url\fP=[]
- A partial url that user should have access to.
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-resource\fP=[]
- Resource that the rule applies to
-
-.PP
-\fB\-\-resource\-name\fP=[]
- Resource in the white list that the rule applies to, repeat this flag for multiple items
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-.PP
-\fB\-\-verb\fP=[]
- Verb that applies to the resources contained in the rule
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a ClusterRole named "pod\-reader" that allows user to perform "get", "watch" and "list" on pods
- kubectl create clusterrole pod\-reader \-\-verb=get,list,watch \-\-resource=pods
-
- # Create a ClusterRole named "pod\-reader" with ResourceName specified
- kubectl create clusterrole pod\-reader \-\-verb=get,list,watch \-\-resource=pods \-\-resource\-name=readablepod \-\-resource\-name=anotherpod
-
- # Create a ClusterRole named "foo" with API Group specified
- kubectl create clusterrole foo \-\-verb=get,list,watch \-\-resource=rs.extensions
-
- # Create a ClusterRole named "foo" with SubResource specified
- kubectl create clusterrole foo \-\-verb=get,list,watch \-\-resource=pods,pods/status
-
- # Create a ClusterRole name "foo" with NonResourceURL specified
- kubectl create clusterrole "foo" \-\-verb=get \-\-non\-resource\-url=/logs/*
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-clusterrolebinding.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-clusterrolebinding.1
index 24e18a6c5988..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-clusterrolebinding.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-clusterrolebinding.1
@@ -1,374 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create clusterrolebinding \- Create a ClusterRoleBinding for a particular ClusterRole
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create clusterrolebinding\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a ClusterRoleBinding for a particular ClusterRole.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-clusterrole\fP=""
- ClusterRole this ClusterRoleBinding should reference
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="clusterrolebinding.rbac.authorization.k8s.io/v1alpha1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-group\fP=[]
- Groups to bind to the role
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-\-serviceaccount\fP=[]
- Service accounts to bind to the role, in the format :
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-user\fP=[]
- Usernames to bind to the role
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a ClusterRoleBinding for user1, user2, and group1 using the cluster\-admin ClusterRole
- kubectl create clusterrolebinding cluster\-admin \-\-clusterrole=cluster\-admin \-\-user=user1 \-\-user=user2 \-\-group=group1
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-configmap.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-configmap.1
index 07d8e1a922ce..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-configmap.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-configmap.1
@@ -1,399 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create configmap \- Create a configmap from a local file, directory or literal value
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create configmap\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a configmap based on a file, directory, or specified literal value.
-
-.PP
-A single configmap may package one or more key/value pairs.
-
-.PP
-When creating a configmap based on a file, the key will default to the basename of the file, and the value will default to the file content. If the basename is an invalid key, you may specify an alternate key.
-
-.PP
-When creating a configmap based on a directory, each file whose basename is a valid key in the directory will be packaged into the configmap. Any directory entries except regular files are ignored (e.g. subdirectories, symlinks, devices, pipes, etc).
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-append\-hash\fP=false
- Append a hash of the configmap to its name.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-from\-env\-file\fP=""
- Specify the path to a file to read lines of key=val pairs to create a configmap (i.e. a Docker .env file).
-
-.PP
-\fB\-\-from\-file\fP=[]
- Key file can be specified using its file path, in which case file basename will be used as configmap key, or optionally with a key and file path, in which case the given key will be used. Specifying a directory will iterate each named file in the directory whose basename is a valid configmap key.
-
-.PP
-\fB\-\-from\-literal\fP=[]
- Specify a key and literal value to insert in configmap (i.e. mykey=somevalue)
-
-.PP
-\fB\-\-generator\fP="configmap/v1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a new configmap named my\-config based on folder bar
- kubectl create configmap my\-config \-\-from\-file=path/to/bar
-
- # Create a new configmap named my\-config with specified keys instead of file basenames on disk
- kubectl create configmap my\-config \-\-from\-file=key1=/path/to/bar/file1.txt \-\-from\-file=key2=/path/to/bar/file2.txt
-
- # Create a new configmap named my\-config with key1=config1 and key2=config2
- kubectl create configmap my\-config \-\-from\-literal=key1=config1 \-\-from\-literal=key2=config2
-
- # Create a new configmap named my\-config from the key=value pairs in the file
- kubectl create configmap my\-config \-\-from\-file=path/to/bar
-
- # Create a new configmap named my\-config from an env file
- kubectl create configmap my\-config \-\-from\-env\-file=path/to/bar.env
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-deployment.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-deployment.1
index d62fc3c49710..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-deployment.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-deployment.1
@@ -1,366 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create deployment \- Create a deployment with the specified name.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create deployment\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a deployment with the specified name.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="deployment\-basic/v1beta1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-image\fP=[]
- Image name to run.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a new deployment named my\-dep that runs the busybox image.
- kubectl create deployment my\-dep \-\-image=busybox
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-namespace.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-namespace.1
index a9889cbe537c..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-namespace.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-namespace.1
@@ -1,362 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create namespace \- Create a namespace with the specified name
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create namespace\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a namespace with the specified name.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="namespace/v1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a new namespace named my\-namespace
- kubectl create namespace my\-namespace
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-poddisruptionbudget.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-poddisruptionbudget.1
index 6a944fef798a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-poddisruptionbudget.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-poddisruptionbudget.1
@@ -1,379 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create poddisruptionbudget \- Create a pod disruption budget with the specified name.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create poddisruptionbudget\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a pod disruption budget with the specified name, selector, and desired minimum available pods
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="poddisruptionbudget/v1beta1/v2"
- The name of the API generator to use.
-
-.PP
-\fB\-\-max\-unavailable\fP=""
- The maximum number or percentage of unavailable pods this budget requires.
-
-.PP
-\fB\-\-min\-available\fP=""
- The minimum number or percentage of available pods this budget requires.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-\-selector\fP=""
- A label selector to use for this budget. Only equality\-based selector requirements are supported.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a pod disruption budget named my\-pdb that will select all pods with the app=rails label
- # and require at least one of them being available at any point in time.
- kubectl create poddisruptionbudget my\-pdb \-\-selector=app=rails \-\-min\-available=1
-
- # Create a pod disruption budget named my\-pdb that will select all pods with the app=nginx label
- # and require at least half of the pods selected to be available at any point in time.
- kubectl create pdb my\-pdb \-\-selector=app=nginx \-\-min\-available=50%
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-priorityclass.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-priorityclass.1
index 276f95c0bd9e..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-priorityclass.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-priorityclass.1
@@ -1,377 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create priorityclass \- Create a priorityclass with the specified name.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create priorityclass\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a priorityclass with the specified name, value, globalDefault and description
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-description\fP=""
- description is an arbitrary string that usually provides guidelines on when this priority class should be used.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="priorityclass/v1alpha1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-global\-default\fP=false
- global\-default specifies whether this PriorityClass should be considered as the default priority.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-.PP
-\fB\-\-value\fP=0
- the value of this priority class.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a priorityclass named high\-priority
- kubectl create priorityclass default\-priority \-\-value=1000 \-\-description="high priority"
-
- # Create a priorityclass named default\-priority that considered as the global default priority
- kubectl create priorityclass default\-priority \-\-value=1000 \-\-global\-default=true \-\-description="default priority"
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-quota.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-quota.1
index 7b963da7fb60..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-quota.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-quota.1
@@ -1,373 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create quota \- Create a quota with the specified name.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create quota\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a resourcequota with the specified name, hard limits and optional scopes
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="resourcequotas/v1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-hard\fP=""
- A comma\-delimited set of resource=quantity pairs that define a hard limit.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-\-scopes\fP=""
- A comma\-delimited set of quota scopes that must all match each object tracked by the quota.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a new resourcequota named my\-quota
- kubectl create quota my\-quota \-\-hard=cpu=1,memory=1G,pods=2,services=3,replicationcontrollers=2,resourcequotas=1,secrets=5,persistentvolumeclaims=10
-
- # Create a new resourcequota named best\-effort
- kubectl create quota best\-effort \-\-hard=pods=100 \-\-scopes=BestEffort
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-role.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-role.1
index ece9e79b845a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-role.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-role.1
@@ -1,379 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create role \- Create a role with single rule.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create role\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a role with single rule.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-resource\fP=[]
- Resource that the rule applies to
-
-.PP
-\fB\-\-resource\-name\fP=[]
- Resource in the white list that the rule applies to, repeat this flag for multiple items
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-.PP
-\fB\-\-verb\fP=[]
- Verb that applies to the resources contained in the rule
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a Role named "pod\-reader" that allows user to perform "get", "watch" and "list" on pods
- kubectl create role pod\-reader \-\-verb=get \-\-verb=list \-\-verb=watch \-\-resource=pods
-
- # Create a Role named "pod\-reader" with ResourceName specified
- kubectl create role pod\-reader \-\-verb=get,list,watch \-\-resource=pods \-\-resource\-name=readablepod \-\-resource\-name=anotherpod
-
- # Create a Role named "foo" with API Group specified
- kubectl create role foo \-\-verb=get,list,watch \-\-resource=rs.extensions
-
- # Create a Role named "foo" with SubResource specified
- kubectl create role foo \-\-verb=get,list,watch \-\-resource=pods,pods/status
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-rolebinding.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-rolebinding.1
index a2484b8a8fa6..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-rolebinding.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-rolebinding.1
@@ -1,378 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create rolebinding \- Create a RoleBinding for a particular Role or ClusterRole
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create rolebinding\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a RoleBinding for a particular Role or ClusterRole.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-clusterrole\fP=""
- ClusterRole this RoleBinding should reference
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="rolebinding.rbac.authorization.k8s.io/v1alpha1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-group\fP=[]
- Groups to bind to the role
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-role\fP=""
- Role this RoleBinding should reference
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-\-serviceaccount\fP=[]
- Service accounts to bind to the role, in the format :
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-user\fP=[]
- Usernames to bind to the role
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a RoleBinding for user1, user2, and group1 using the admin ClusterRole
- kubectl create rolebinding admin \-\-clusterrole=admin \-\-user=user1 \-\-user=user2 \-\-group=group1
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-docker-registry.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-docker-registry.1
index f66797a8f90f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-docker-registry.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-docker-registry.1
@@ -1,402 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create secret docker\-registry \- Create a secret for use with a Docker registry
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create secret docker\-registry\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a new secret for use with Docker registries.
-
-.PP
-Dockercfg secrets are used to authenticate against Docker registries.
-
-.PP
-When using the Docker command line to push images, you can authenticate to a given registry by running: '$ docker login DOCKER REGISTRY SERVER \-\-username=DOCKER USER \-\-password=DOCKER PASSWORD \-\-email=DOCKER \_EMAIL'.
-
-.PP
-That produces a \~/.dockercfg file that is used by subsequent 'docker push' and 'docker pull' commands to
-
-.PP
-authenticate to the registry. The email address is optional.
-
-.PP
-When creating applications, you may have a Docker registry that requires authentication. In order for the nodes to pull images on your behalf, they have to have the credentials. You can provide this information by creating a dockercfg secret and attaching it to your service account.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-append\-hash\fP=false
- Append a hash of the secret to its name.
-
-.PP
-\fB\-\-docker\-email\fP=""
- Email for Docker registry
-
-.PP
-\fB\-\-docker\-password\fP=""
- Password for Docker registry authentication
-
-.PP
-\fB\-\-docker\-server\fP="
-\[la]https://index.docker.io/v1/"\[ra]
- Server location for Docker registry
-
-.PP
-\fB\-\-docker\-username\fP=""
- Username for Docker registry authentication
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="secret\-for\-docker\-registry/v1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # If you don't already have a .dockercfg file, you can create a dockercfg secret directly by using:
- kubectl create secret docker\-registry my\-secret \-\-docker\-server=DOCKER\_REGISTRY\_SERVER \-\-docker\-username=DOCKER\_USER \-\-docker\-password=DOCKER\_PASSWORD \-\-docker\-email=DOCKER\_EMAIL
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create\-secret(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-generic.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-generic.1
index d7c777390c4f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-generic.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-generic.1
@@ -1,403 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create secret generic \- Create a secret from a local file, directory or literal value
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create secret generic\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a secret based on a file, directory, or specified literal value.
-
-.PP
-A single secret may package one or more key/value pairs.
-
-.PP
-When creating a secret based on a file, the key will default to the basename of the file, and the value will default to the file content. If the basename is an invalid key or you wish to chose your own, you may specify an alternate key.
-
-.PP
-When creating a secret based on a directory, each file whose basename is a valid key in the directory will be packaged into the secret. Any directory entries except regular files are ignored (e.g. subdirectories, symlinks, devices, pipes, etc).
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-append\-hash\fP=false
- Append a hash of the secret to its name.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-from\-env\-file\fP=""
- Specify the path to a file to read lines of key=val pairs to create a secret (i.e. a Docker .env file).
-
-.PP
-\fB\-\-from\-file\fP=[]
- Key files can be specified using their file path, in which case a default name will be given to them, or optionally with a name and file path, in which case the given name will be used. Specifying a directory will iterate each named file in the directory that is a valid secret key.
-
-.PP
-\fB\-\-from\-literal\fP=[]
- Specify a key and literal value to insert in secret (i.e. mykey=somevalue)
-
-.PP
-\fB\-\-generator\fP="secret/v1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-type\fP=""
- The type of secret to create
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a new secret named my\-secret with keys for each file in folder bar
- kubectl create secret generic my\-secret \-\-from\-file=path/to/bar
-
- # Create a new secret named my\-secret with specified keys instead of names on disk
- kubectl create secret generic my\-secret \-\-from\-file=ssh\-privatekey=\~/.ssh/id\_rsa \-\-from\-file=ssh\-publickey=\~/.ssh/id\_rsa.pub
-
- # Create a new secret named my\-secret with key1=supersecret and key2=topsecret
- kubectl create secret generic my\-secret \-\-from\-literal=key1=supersecret \-\-from\-literal=key2=topsecret
-
- # Create a new secret named my\-secret using a combination of a file and a literal
- kubectl create secret generic my\-secret \-\-from\-file=ssh\-privatekey=\~/.ssh/id\_rsa \-\-from\-literal=passphrase=topsecret
-
- # Create a new secret named my\-secret from an env file
- kubectl create secret generic my\-secret \-\-from\-env\-file=path/to/bar.env
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create\-secret(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-tls.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-tls.1
index 838b64810206..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-tls.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret-tls.1
@@ -1,377 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create secret tls \- Create a TLS secret
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create secret tls\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a TLS secret from the given public/private key pair.
-
-.PP
-The public/private key pair must exist before hand. The public key certificate must be .PEM encoded and match the given private key.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-append\-hash\fP=false
- Append a hash of the secret to its name.
-
-.PP
-\fB\-\-cert\fP=""
- Path to PEM encoded public key certificate.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="secret\-for\-tls/v1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-key\fP=""
- Path to private key associated with given certificate.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a new TLS secret named tls\-secret with the given key pair:
- kubectl create secret tls tls\-secret \-\-cert=path/to/tls.cert \-\-key=path/to/tls.key
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create\-secret(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret.1
index f114b04a6d34..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-secret.1
@@ -1,296 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create secret \- Create a secret using specified subcommand
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create secret\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a secret using specified subcommand.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP, \fBkubectl\-create\-secret\-docker\-registry(1)\fP, \fBkubectl\-create\-secret\-generic(1)\fP, \fBkubectl\-create\-secret\-tls(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-clusterip.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-clusterip.1
index 52b3ec775d49..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-clusterip.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-clusterip.1
@@ -1,373 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create service clusterip \- Create a ClusterIP service.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create service clusterip\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a ClusterIP service with the specified name.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-clusterip\fP=""
- Assign your own ClusterIP or set to 'None' for a 'headless' service (no loadbalancing).
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="service\-clusterip/v1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-tcp\fP=[]
- Port pairs can be specified as ':'.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a new ClusterIP service named my\-cs
- kubectl create service clusterip my\-cs \-\-tcp=5678:8080
-
- # Create a new ClusterIP service named my\-cs (in headless mode)
- kubectl create service clusterip my\-cs \-\-clusterip="None"
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create\-service(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-externalname.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-externalname.1
index a70bd29af95f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-externalname.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-externalname.1
@@ -1,373 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create service externalname \- Create an ExternalName service.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create service externalname\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create an ExternalName service with the specified name.
-
-.PP
-ExternalName service references to an external DNS address instead of only pods, which will allow application authors to reference services that exist off platform, on other clusters, or locally.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-external\-name\fP=""
- External name of service
-
-.PP
-\fB\-\-generator\fP="service\-externalname/v1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-tcp\fP=[]
- Port pairs can be specified as ':'.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a new ExternalName service named my\-ns
- kubectl create service externalname my\-ns \-\-external\-name bar.com
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create\-service(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-loadbalancer.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-loadbalancer.1
index 35f4bc23b27a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-loadbalancer.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-loadbalancer.1
@@ -1,366 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create service loadbalancer \- Create a LoadBalancer service.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create service loadbalancer\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a LoadBalancer service with the specified name.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="service\-loadbalancer/v1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-tcp\fP=[]
- Port pairs can be specified as ':'.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a new LoadBalancer service named my\-lbs
- kubectl create service loadbalancer my\-lbs \-\-tcp=5678:8080
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create\-service(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-nodeport.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-nodeport.1
index 112eb27f19ee..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-nodeport.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service-nodeport.1
@@ -1,370 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create service nodeport \- Create a NodePort service.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create service nodeport\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a NodePort service with the specified name.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="service\-nodeport/v1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-\-node\-port\fP=0
- Port used to expose the service on each node in a cluster.
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-tcp\fP=[]
- Port pairs can be specified as ':'.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a new NodePort service named my\-ns
- kubectl create service nodeport my\-ns \-\-tcp=5678:8080
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create\-service(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service.1
index f000e795c75e..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-service.1
@@ -1,296 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create service \- Create a service using specified subcommand.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create service\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a service using specified subcommand.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP, \fBkubectl\-create\-service\-clusterip(1)\fP, \fBkubectl\-create\-service\-externalname(1)\fP, \fBkubectl\-create\-service\-loadbalancer(1)\fP, \fBkubectl\-create\-service\-nodeport(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-serviceaccount.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-serviceaccount.1
index 3ccd59faf0d9..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-serviceaccount.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create-serviceaccount.1
@@ -1,366 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create serviceaccount \- Create a service account with the specified name
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create serviceaccount\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a service account with the specified name.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-generator\fP="serviceaccount/v1"
- The name of the API generator to use.
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a new service account named my\-service\-account
- kubectl create serviceaccount my\-service\-account
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-create(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create.1
index 410621b16c7d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-create.1
@@ -1,399 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl create \- Create a resource from a file or from stdin.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl create\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create a resource from a file or from stdin.
-
-.PP
-JSON and YAML formats are accepted.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-edit\fP=false
- Edit the API resource before creating
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files to use to create the resource
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-raw\fP=""
- Raw URI to POST to the server. Uses the transport specified by the kubeconfig file.
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-.PP
-\fB\-\-windows\-line\-endings\fP=false
- Only relevant if \-\-edit=true. Defaults to the line ending native to your platform.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a pod using the data in pod.json.
- kubectl create \-f ./pod.json
-
- # Create a pod based on the JSON passed into stdin.
- cat pod.json | kubectl create \-f \-
-
- # Edit the data in docker\-registry.yaml in JSON using the v1 API format then create the resource using the edited data.
- kubectl create \-f docker\-registry.yaml \-\-edit \-\-output\-version=v1 \-o json
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP, \fBkubectl\-create\-clusterrole(1)\fP, \fBkubectl\-create\-clusterrolebinding(1)\fP, \fBkubectl\-create\-configmap(1)\fP, \fBkubectl\-create\-deployment(1)\fP, \fBkubectl\-create\-namespace(1)\fP, \fBkubectl\-create\-poddisruptionbudget(1)\fP, \fBkubectl\-create\-priorityclass(1)\fP, \fBkubectl\-create\-quota(1)\fP, \fBkubectl\-create\-role(1)\fP, \fBkubectl\-create\-rolebinding(1)\fP, \fBkubectl\-create\-secret(1)\fP, \fBkubectl\-create\-service(1)\fP, \fBkubectl\-create\-serviceaccount(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-delete.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-delete.1
index 99fe8ebc82ab..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-delete.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-delete.1
@@ -1,392 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl delete \- Delete resources by filenames, stdin, resources and names, or by resources and label selector
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl delete\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Delete resources by filenames, stdin, resources and names, or by resources and label selector.
-
-.PP
-JSON and YAML formats are accepted. Only one type of the arguments may be specified: filenames, resources and names, or resources and label selector.
-
-.PP
-Some resources, such as pods, support graceful deletion. These resources define a default period before they are forcibly terminated (the grace period) but you may override that value with the \-\-grace\-period flag, or pass \-\-now to set a grace\-period of 1. Because these resources often represent entities in the cluster, deletion may not be acknowledged immediately. If the node hosting a pod is down or cannot reach the API server, termination may take significantly longer than the grace period. To force delete a resource, you must pass a grace period of 0 and specify the \-\-force flag.
-
-.PP
-IMPORTANT: Force deleting pods does not wait for confirmation that the pod's processes have been terminated, which can leave those processes running until the node detects the deletion and completes graceful deletion. If your processes use shared storage or talk to a remote API and depend on the name of the pod to identify themselves, force deleting those pods may result in multiple processes running on different machines using the same identification which may lead to data corruption or inconsistency. Only force delete pods when you are sure the pod is terminated, or if your application can tolerate multiple copies of the same pod running at once. Also, if you force delete pods the scheduler may place new pods on those nodes before the node has released those resources and causing those pods to be evicted immediately.
-
-.PP
-Note that the delete command does NOT do resource version checks, so if someone submits an update to a resource right when you submit a delete, their update will be lost along with the rest of the resource.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Delete all resources, including uninitialized ones, in the namespace of the specified resource types.
-
-.PP
-\fB\-\-cascade\fP=true
- If true, cascade the deletion of the resources managed by this resource (e.g. Pods created by a ReplicationController). Default true.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files containing the resource to delete.
-
-.PP
-\fB\-\-force\fP=false
- Immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.
-
-.PP
-\fB\-\-grace\-period\fP=\-1
- Period of time in seconds given to the resource to terminate gracefully. Ignored if negative.
-
-.PP
-\fB\-\-ignore\-not\-found\fP=false
- Treat "resource not found" as a successful delete. Defaults to "true" when \-\-all is specified.
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-\-now\fP=false
- If true, resources are signaled for immediate shutdown (same as \-\-grace\-period=1).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output mode. Use "\-o name" for shorter output (resource/name).
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, not including uninitialized ones.
-
-.PP
-\fB\-\-timeout\fP=0s
- The length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Delete a pod using the type and name specified in pod.json.
- kubectl delete \-f ./pod.json
-
- # Delete a pod based on the type and name in the JSON passed into stdin.
- cat pod.json | kubectl delete \-f \-
-
- # Delete pods and services with same names "baz" and "foo"
- kubectl delete pod,service baz foo
-
- # Delete pods and services with label name=myLabel.
- kubectl delete pods,services \-l name=myLabel
-
- # Delete a pod with minimal delay
- kubectl delete pod foo \-\-now
-
- # Force delete a pod on a dead node
- kubectl delete pod foo \-\-grace\-period=0 \-\-force
-
- # Delete all pods
- kubectl delete pods \-\-all
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-describe.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-describe.1
index a88c72907ed0..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-describe.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-describe.1
@@ -1,440 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl describe \- Show details of a specific resource or group of resources
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl describe\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Show details of a specific resource or group of resources
-
-.PP
-Print a detailed description of the selected resources, including related resources such as events or controllers. You may select a single object by name, all objects of that type, provide a name prefix, or label selector. For example:
-
-.PP
-$ kubectl describe TYPE NAME\_PREFIX
-
-.PP
-will first check for an exact match on TYPE and NAME PREFIX. If no such resource exists, it will output details for every resource that has a name prefixed with NAME PREFIX.
-
-.PP
-Valid resource types include:
-.IP \n+[step]
-
-\item all
-.br
-\item certificatesigningrequests (aka 'csr')
-.br
-\item clusterrolebindings
-.br
-\item clusterroles
-.br
-\item componentstatuses (aka 'cs')
-.br
-\item configmaps (aka 'cm')
-.br
-\item controllerrevisions
-.br
-\item cronjobs
-.br
-\item customresourcedefinition (aka 'crd')
-.br
-\item daemonsets (aka 'ds')
-.br
-\item deployments (aka 'deploy')
-.br
-\item endpoints (aka 'ep')
-.br
-\item events (aka 'ev')
-.br
-\item horizontalpodautoscalers (aka 'hpa')
-.br
-\item ingresses (aka 'ing')
-.br
-\item jobs
-.br
-\item limitranges (aka 'limits')
-.br
-\item namespaces (aka 'ns')
-.br
-\item networkpolicies (aka 'netpol')
-.br
-\item nodes (aka 'no')
-.br
-\item persistentvolumeclaims (aka 'pvc')
-.br
-\item persistentvolumes (aka 'pv')
-.br
-\item poddisruptionbudgets (aka 'pdb')
-.br
-\item podpreset
-.br
-\item pods (aka 'po')
-.br
-\item podsecuritypolicies (aka 'psp')
-.br
-\item podtemplates
-.br
-\item replicasets (aka 'rs')
-.br
-\item replicationcontrollers (aka 'rc')
-.br
-\item resourcequotas (aka 'quota')
-.br
-\item rolebindings
-.br
-\item roles
-.br
-\item secrets
-.br
-\item serviceaccounts (aka 'sa')
-.br
-\item services (aka 'svc')
-.br
-\item statefulsets (aka 'sts')
-.br
-\item storageclasses (aka 'sc')
-
-.SH OPTIONS
-.PP
-\fB\-\-all\-namespaces\fP=false
- If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with \-\-namespace.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files containing the resource to describe
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-.PP
-\fB\-\-show\-events\fP=true
- If true, display events related to the described object.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Describe a node
- kubectl describe nodes kubernetes\-node\-emt8.c.myproject.internal
-
- # Describe a pod
- kubectl describe pods/nginx
-
- # Describe a pod identified by type and name in "pod.json"
- kubectl describe \-f pod.json
-
- # Describe all pods
- kubectl describe pods
-
- # Describe pods by label name=myLabel
- kubectl describe po \-l name=myLabel
-
- # Describe all pods managed by the 'frontend' replication controller (rc\-created pods
- # get the name of the rc as a prefix in the pod the name).
- kubectl describe pods frontend
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-drain.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-drain.1
index 4f1ff40e0348..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-drain.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-drain.1
@@ -1,355 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl drain \- Drain node in preparation for maintenance
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl drain\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Drain node in preparation for maintenance.
-
-.PP
-The given node will be marked unschedulable to prevent new pods from arriving. 'drain' evicts the pods if the APIServer supports eviction (
-\[la]http://kubernetes.io/docs/admin/disruptions/\[ra]). Otherwise, it will use normal DELETE to delete the pods. The 'drain' evicts or deletes all pods except mirror pods (which cannot be deleted through the API server). If there are DaemonSet\-managed pods, drain will not proceed without \-\-ignore\-daemonsets, and regardless it will not delete any DaemonSet\-managed pods, because those pods would be immediately replaced by the DaemonSet controller, which ignores unschedulable markings. If there are any pods that are neither mirror pods nor managed by ReplicationController, ReplicaSet, DaemonSet, StatefulSet or Job, then drain will not delete any pods unless you use \-\-force. \-\-force will also allow deletion to proceed if the managing resource of one or more pods is missing.
-
-.PP
-'drain' waits for graceful termination. You should not operate on the machine until the command completes.
-
-.PP
-When you are ready to put the node back into service, use kubectl uncordon, which will make the node schedulable again.
-
-.PP
-!
-\[la]http://kubernetes.io/images/docs/kubectl_drain.svg\[ra]
-
-
-.SH OPTIONS
-.PP
-\fB\-\-delete\-local\-data\fP=false
- Continue even if there are pods using emptyDir (local data that will be deleted when the node is drained).
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-force\fP=false
- Continue even if there are pods not managed by a ReplicationController, ReplicaSet, Job, DaemonSet or StatefulSet.
-
-.PP
-\fB\-\-grace\-period\fP=\-1
- Period of time in seconds given to each pod to terminate gracefully. If negative, the default value specified in the pod will be used.
-
-.PP
-\fB\-\-ignore\-daemonsets\fP=false
- Ignore DaemonSet\-managed pods.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on
-
-.PP
-\fB\-\-timeout\fP=0s
- The length of time to wait before giving up, zero means infinite
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Drain node "foo", even if there are pods not managed by a ReplicationController, ReplicaSet, Job, DaemonSet or StatefulSet on it.
- $ kubectl drain foo \-\-force
-
- # As above, but abort if there are pods not managed by a ReplicationController, ReplicaSet, Job, DaemonSet or StatefulSet, and use a grace period of 15 minutes.
- $ kubectl drain foo \-\-grace\-period=900
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-edit.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-edit.1
index b2f38ac3e39f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-edit.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-edit.1
@@ -1,374 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl edit \- Edit a resource on the server
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl edit\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Edit a resource from the default editor.
-
-.PP
-The edit command allows you to directly edit any API resource you can retrieve via the command line tools. It will open the editor defined by your KUBE \_EDITOR, or EDITOR environment variables, or fall back to 'vi' for Linux or 'notepad' for Windows. You can edit multiple objects, although changes are applied one at a time. The command accepts filenames as well as command line arguments, although the files you point to must be previously saved versions of resources.
-
-.PP
-Editing is done with the API version used to fetch the resource. To edit using a specific API version, fully\-qualify the resource, version, and group.
-
-.PP
-The default format is YAML. To edit in JSON, specify "\-o json".
-
-.PP
-The flag \-\-windows\-line\-endings can be used to force Windows line endings, otherwise the default for your operating system will be used.
-
-.PP
-In the event an error occurs while updating, a temporary file will be created on disk that contains your unapplied changes. The most common error when updating a resource is another editor changing the resource on the server. When this occurs, you will have to apply your changes to the newer version of the resource, or update your temporary saved copy to include the latest resource version.
-
-
-.SH OPTIONS
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files to use to edit the resource
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP="yaml"
- Output format. One of: yaml|json.
-
-.PP
-\fB\-\-output\-patch\fP=false
- Output the patch if the resource is edited.
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-.PP
-\fB\-\-windows\-line\-endings\fP=false
- Defaults to the line ending native to your platform.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Edit the service named 'docker\-registry':
- kubectl edit svc/docker\-registry
-
- # Use an alternative editor
- KUBE\_EDITOR="nano" kubectl edit svc/docker\-registry
-
- # Edit the job 'myjob' in JSON using the v1 API format:
- kubectl edit job.v1.batch/myjob \-o json
-
- # Edit the deployment 'mydeployment' in YAML and save the modified config in its annotation:
- kubectl edit deployment/mydeployment \-o yaml \-\-save\-config
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-exec.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-exec.1
index 5ec57431331d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-exec.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-exec.1
@@ -1,340 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl exec \- Execute a command in a container
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl exec\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Execute a command in a container.
-
-
-.SH OPTIONS
-.PP
-\fB\-c\fP, \fB\-\-container\fP=""
- Container name. If omitted, the first container in the pod will be chosen
-
-.PP
-\fB\-p\fP, \fB\-\-pod\fP=""
- Pod name
-
-.PP
-\fB\-i\fP, \fB\-\-stdin\fP=false
- Pass stdin to the container
-
-.PP
-\fB\-t\fP, \fB\-\-tty\fP=false
- Stdin is a TTY
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Get output from running 'date' from pod 123456\-7890, using the first container by default
- kubectl exec 123456\-7890 date
-
- # Get output from running 'date' in ruby\-container from pod 123456\-7890
- kubectl exec 123456\-7890 \-c ruby\-container date
-
- # Switch to raw terminal mode, sends stdin to 'bash' in ruby\-container from pod 123456\-7890
- # and sends stdout/stderr from 'bash' back to the client
- kubectl exec 123456\-7890 \-c ruby\-container \-i \-t \-\- bash \-il
-
- # List contents of /usr from the first container of pod 123456\-7890 and sort by modification time.
- # If the command you want to execute in the pod has any flags in common (e.g. \-i),
- # you must use two dashes (\-\-) to separate your command's flags/arguments.
- # Also note, do not surround your command and its flags/arguments with quotes
- # unless that is how you would execute it normally (i.e., do ls \-t /usr, not "ls \-t /usr").
- kubectl exec 123456\-7890 \-i \-t \-\- ls \-t /usr
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-explain.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-explain.1
index 4166c9b8888a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-explain.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-explain.1
@@ -1,411 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl explain \- Documentation of resources
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl explain\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-List the fields for supported resources
-
-.PP
-This command describes the fields associated with each supported API resource. Fields are identified via a simple JSONPath identifier:
-
-.PP
-.[.]
-
-.PP
-Add the \-\-recursive flag to display all of the fields at once without descriptions. Information about each field is retrieved from the server in OpenAPI format.
-
-.PP
-Valid resource types include:
-.IP \n+[step]
-
-\item all
-.br
-\item certificatesigningrequests (aka 'csr')
-.br
-\item clusterrolebindings
-.br
-\item clusterroles
-.br
-\item componentstatuses (aka 'cs')
-.br
-\item configmaps (aka 'cm')
-.br
-\item controllerrevisions
-.br
-\item cronjobs
-.br
-\item customresourcedefinition (aka 'crd')
-.br
-\item daemonsets (aka 'ds')
-.br
-\item deployments (aka 'deploy')
-.br
-\item endpoints (aka 'ep')
-.br
-\item events (aka 'ev')
-.br
-\item horizontalpodautoscalers (aka 'hpa')
-.br
-\item ingresses (aka 'ing')
-.br
-\item jobs
-.br
-\item limitranges (aka 'limits')
-.br
-\item namespaces (aka 'ns')
-.br
-\item networkpolicies (aka 'netpol')
-.br
-\item nodes (aka 'no')
-.br
-\item persistentvolumeclaims (aka 'pvc')
-.br
-\item persistentvolumes (aka 'pv')
-.br
-\item poddisruptionbudgets (aka 'pdb')
-.br
-\item podpreset
-.br
-\item pods (aka 'po')
-.br
-\item podsecuritypolicies (aka 'psp')
-.br
-\item podtemplates
-.br
-\item replicasets (aka 'rs')
-.br
-\item replicationcontrollers (aka 'rc')
-.br
-\item resourcequotas (aka 'quota')
-.br
-\item rolebindings
-.br
-\item roles
-.br
-\item secrets
-.br
-\item serviceaccounts (aka 'sa')
-.br
-\item services (aka 'svc')
-.br
-\item statefulsets (aka 'sts')
-.br
-\item storageclasses (aka 'sc')
-
-.SH OPTIONS
-.PP
-\fB\-\-api\-version\fP=""
- Get different explanations for particular API version
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-recursive\fP=false
- Print the fields of fields (Currently only 1 level deep)
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Get the documentation of the resource and its fields
- kubectl explain pods
-
- # Get the documentation of a specific field of a resource
- kubectl explain pods.spec.containers
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-expose.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-expose.1
index 864a75f3e5cc..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-expose.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-expose.1
@@ -1,449 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl expose \- Take a replication controller, service, deployment or pod and expose it as a new Kubernetes Service
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl expose\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Expose a resource as a new Kubernetes service.
-
-.PP
-Looks up a deployment, service, replica set, replication controller or pod by name and uses the selector for that resource as the selector for a new service on the specified port. A deployment or replica set will be exposed as a service only if its selector is convertible to a selector that service supports, i.e. when the selector contains only the matchLabels component. Note that if no port is specified via \-\-port and the exposed resource has multiple ports, all will be re\-used by the new service. Also if no labels are specified, the new service will re\-use the labels from the resource it exposes.
-
-.PP
-Possible resources include (case insensitive):
-
-.PP
-pod (po), service (svc), replicationcontroller (rc), deployment (deploy), replicaset (rs)
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-cluster\-ip\fP=""
- ClusterIP to be assigned to the service. Leave empty to auto\-allocate, or set to 'None' to create a headless service.
-
-.PP
-\fB\-\-container\-port\fP=""
- Synonym for \-\-target\-port
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-external\-ip\fP=""
- Additional external IP address (not managed by Kubernetes) to accept for the service. If this IP is routed to a node, the service can be accessed by this IP in addition to its generated service IP.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to expose a service
-
-.PP
-\fB\-\-generator\fP="service/v2"
- The name of the API generator to use. There are 2 generators: 'service/v1' and 'service/v2'. The only difference between them is that service port in v1 is named 'default', while it is left unnamed in v2. Default is 'service/v2'.
-
-.PP
-\fB\-l\fP, \fB\-\-labels\fP=""
- Labels to apply to the service created by this call.
-
-.PP
-\fB\-\-load\-balancer\-ip\fP=""
- IP to assign to the Load Balancer. If empty, an ephemeral IP will be created and used (cloud\-provider specific).
-
-.PP
-\fB\-\-name\fP=""
- The name for the newly created object.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-overrides\fP=""
- An inline JSON override for the generated object. If this is non\-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.
-
-.PP
-\fB\-\-port\fP=""
- The port that the service should serve on. Copied from the resource being exposed, if unspecified
-
-.PP
-\fB\-\-protocol\fP=""
- The network protocol for the service to be created. Default is 'TCP'.
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-\-selector\fP=""
- A label selector to use for this service. Only equality\-based selector requirements are supported. If empty (the default) infer the selector from the replication controller or replica set.)
-
-.PP
-\fB\-\-session\-affinity\fP=""
- If non\-empty, set the session affinity for the service to this; legal values: 'None', 'ClientIP'
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-target\-port\fP=""
- Name or number for the port on the container that the service should direct traffic to. Optional.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-type\fP=""
- Type for this service: ClusterIP, NodePort, LoadBalancer, or ExternalName. Default is 'ClusterIP'.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Create a service for a replicated nginx, which serves on port 80 and connects to the containers on port 8000.
- kubectl expose rc nginx \-\-port=80 \-\-target\-port=8000
-
- # Create a service for a replication controller identified by type and name specified in "nginx\-controller.yaml", which serves on port 80 and connects to the containers on port 8000.
- kubectl expose \-f nginx\-controller.yaml \-\-port=80 \-\-target\-port=8000
-
- # Create a service for a pod valid\-pod, which serves on port 444 with the name "frontend"
- kubectl expose pod valid\-pod \-\-port=444 \-\-name=frontend
-
- # Create a second service based on the above service, exposing the container port 8443 as port 443 with the name "nginx\-https"
- kubectl expose service nginx \-\-port=443 \-\-target\-port=8443 \-\-name=nginx\-https
-
- # Create a service for a replicated streaming application on port 4100 balancing UDP traffic and named 'video\-stream'.
- kubectl expose rc streamer \-\-port=4100 \-\-protocol=udp \-\-name=video\-stream
-
- # Create a service for a replicated nginx using replica set, which serves on port 80 and connects to the containers on port 8000.
- kubectl expose rs nginx \-\-port=80 \-\-target\-port=8000
-
- # Create a service for an nginx deployment, which serves on port 80 and connects to the containers on port 8000.
- kubectl expose deployment nginx \-\-port=80 \-\-target\-port=8000
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-get.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-get.1
index 14f7649c822a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-get.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-get.1
@@ -1,520 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl get \- Display one or many resources
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl get\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Display one or many resources
-
-.PP
-Prints a table of the most important information about the specified resources. You can filter the list using a label selector and the \-\-selector flag. If the desired resource type is namespaced you will only see results in your current namespace unless you pass \-\-all\-namespaces.
-
-.PP
-This command will hide resources that have completed, such as pods that are in the Succeeded or Failed phases. You can see the full results for any resource by providing the \-\-show\-all flag. Uninitialized objects are not shown unless \-\-include\-uninitialized is passed.
-
-.PP
-By specifying the output as 'template' and providing a Go template as the value of the \-\-template flag, you can filter the attributes of the fetched resources.
-
-.PP
-Valid resource types include:
-.IP \n+[step]
-
-\item all
-.br
-\item certificatesigningrequests (aka 'csr')
-.br
-\item clusterrolebindings
-.br
-\item clusterroles
-.br
-\item componentstatuses (aka 'cs')
-.br
-\item configmaps (aka 'cm')
-.br
-\item controllerrevisions
-.br
-\item cronjobs
-.br
-\item customresourcedefinition (aka 'crd')
-.br
-\item daemonsets (aka 'ds')
-.br
-\item deployments (aka 'deploy')
-.br
-\item endpoints (aka 'ep')
-.br
-\item events (aka 'ev')
-.br
-\item horizontalpodautoscalers (aka 'hpa')
-.br
-\item ingresses (aka 'ing')
-.br
-\item jobs
-.br
-\item limitranges (aka 'limits')
-.br
-\item namespaces (aka 'ns')
-.br
-\item networkpolicies (aka 'netpol')
-.br
-\item nodes (aka 'no')
-.br
-\item persistentvolumeclaims (aka 'pvc')
-.br
-\item persistentvolumes (aka 'pv')
-.br
-\item poddisruptionbudgets (aka 'pdb')
-.br
-\item podpreset
-.br
-\item pods (aka 'po')
-.br
-\item podsecuritypolicies (aka 'psp')
-.br
-\item podtemplates
-.br
-\item replicasets (aka 'rs')
-.br
-\item replicationcontrollers (aka 'rc')
-.br
-\item resourcequotas (aka 'quota')
-.br
-\item rolebindings
-.br
-\item roles
-.br
-\item secrets
-.br
-\item serviceaccounts (aka 'sa')
-.br
-\item services (aka 'svc')
-.br
-\item statefulsets (aka 'sts')
-.br
-\item storageclasses (aka 'sc')
-
-.SH OPTIONS
-.PP
-\fB\-\-all\-namespaces\fP=false
- If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with \-\-namespace.
-
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-chunk\-size\fP=500
- Return large lists in chunks rather than all at once. Pass 0 to disable. This flag is beta and may change in the future.
-
-.PP
-\fB\-\-export\fP=false
- If true, use 'export' for the resources. Exported resources are stripped of cluster\-specific information.
-
-.PP
-\fB\-\-field\-selector\fP=""
- Selector (field query) to filter on, supports '=', '==', and '!='.(e.g. \-\-field\-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to get from a server.
-
-.PP
-\fB\-\-ignore\-not\-found\fP=false
- If the requested object does not exist the command will return exit code 0.
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-L\fP, \fB\-\-label\-columns\fP=[]
- Accepts a comma separated list of labels that are going to be presented as columns. Names are case\-sensitive. You can also use multiple flag options like \-L label1 \-L label2...
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-raw\fP=""
- Raw URI to request from the server. Uses the transport specified by the kubeconfig file.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-kind\fP=false
- If present, list the resource type for the requested object(s).
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-use\-openapi\-print\-columns\fP=true
- If true, use x\-kubernetes\-print\-column metadata (if present) from the OpenAPI schema for displaying a resource.
-
-.PP
-\fB\-w\fP, \fB\-\-watch\fP=false
- After listing/getting the requested object, watch for changes. Uninitialized objects are excluded if no object name is provided.
-
-.PP
-\fB\-\-watch\-only\fP=false
- Watch for changes to the requested object(s), without listing/getting first.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # List all pods in ps output format.
- kubectl get pods
-
- # List all pods in ps output format with more information (such as node name).
- kubectl get pods \-o wide
-
- # List a single replication controller with specified NAME in ps output format.
- kubectl get replicationcontroller web
-
- # List a single pod in JSON output format.
- kubectl get \-o json pod web\-pod\-13je7
-
- # List a pod identified by type and name specified in "pod.yaml" in JSON output format.
- kubectl get \-f pod.yaml \-o json
-
- # Return only the phase value of the specified pod.
- kubectl get \-o template pod/web\-pod\-13je7 \-\-template={{.status.phase}}
-
- # List all replication controllers and services together in ps output format.
- kubectl get rc,services
-
- # List one or more resources by their type and names.
- kubectl get rc/web service/frontend pods/web\-pod\-13je7
-
- # List all resources with different types.
- kubectl get all
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-label.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-label.1
index e2433303a6d9..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-label.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-label.1
@@ -1,418 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl label \- Update the labels on a resource
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl label\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Update the labels on a resource.
-.IP \n+[step]
-
-\item A label key and value must begin with a letter or number, and may contain letters, numbers, hyphens, dots, and underscores, up to 63 characters each.
-.br
-\item Optionally, the key can begin with a DNS subdomain prefix and a single '/', like example.com/my\-app
-.br
-\item If \-\-overwrite is true, then existing labels can be overwritten, otherwise attempting to overwrite a label will result in an error.
-.br
-\item If \-\-resource\-version is specified, then updates will use this resource version, otherwise the existing resource\-version will be used.
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Select all resources, including uninitialized ones, in the namespace of the specified resource types
-
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to update the labels
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-\-list\fP=false
- If true, display the labels for a given resource.
-
-.PP
-\fB\-\-local\fP=false
- If true, label will NOT contact api\-server but run locally.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-overwrite\fP=false
- If true, allow labels to be overwritten, otherwise reject label updates that overwrite existing labels.
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-resource\-version\fP=""
- If non\-empty, the labels update will only succeed if this is the current resource\-version for the object. Only valid when specifying a single resource.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, not including uninitialized ones, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2).
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Update pod 'foo' with the label 'unhealthy' and the value 'true'.
- kubectl label pods foo unhealthy=true
-
- # Update pod 'foo' with the label 'status' and the value 'unhealthy', overwriting any existing value.
- kubectl label \-\-overwrite pods foo status=unhealthy
-
- # Update all pods in the namespace
- kubectl label pods \-\-all status=unhealthy
-
- # Update a pod identified by the type and name in "pod.json"
- kubectl label \-f pod.json status=unhealthy
-
- # Update pod 'foo' only if the resource is unchanged from version 1.
- kubectl label pods foo status=unhealthy \-\-resource\-version=1
-
- # Update pod 'foo' by removing a label named 'bar' if it exists.
- # Does not require the \-\-overwrite flag.
- kubectl label pods foo bar\-
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-logs.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-logs.1
index dc0d16882a82..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-logs.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-logs.1
@@ -1,379 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl logs \- Print the logs for a container in a pod
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl logs\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Print the logs for a container in a pod or specified resource. If the pod has only one container, the container name is optional.
-
-
-.SH OPTIONS
-.PP
-\fB\-c\fP, \fB\-\-container\fP=""
- Print the logs of this container
-
-.PP
-\fB\-f\fP, \fB\-\-follow\fP=false
- Specify if the logs should be streamed.
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-interactive\fP=false
- If true, prompt the user for input when required.
-
-.PP
-\fB\-\-limit\-bytes\fP=0
- Maximum bytes of logs to return. Defaults to no limit.
-
-.PP
-\fB\-\-pod\-running\-timeout\fP=20s
- The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
-
-.PP
-\fB\-p\fP, \fB\-\-previous\fP=false
- If true, print the logs for the previous instance of the container in a pod if it exists.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on.
-
-.PP
-\fB\-\-since\fP=0s
- Only return logs newer than a relative duration like 5s, 2m, or 3h. Defaults to all logs. Only one of since\-time / since may be used.
-
-.PP
-\fB\-\-since\-time\fP=""
- Only return logs after a specific date (RFC3339). Defaults to all logs. Only one of since\-time / since may be used.
-
-.PP
-\fB\-\-tail\fP=\-1
- Lines of recent log file to display. Defaults to \-1 with no selector, showing all log lines otherwise 10, if a selector is provided.
-
-.PP
-\fB\-\-timestamps\fP=false
- Include timestamps on each line in the log output
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Return snapshot logs from pod nginx with only one container
- kubectl logs nginx
-
- # Return snapshot logs for the pods defined by label app=nginx
- kubectl logs \-lapp=nginx
-
- # Return snapshot of previous terminated ruby container logs from pod web\-1
- kubectl logs \-p \-c ruby web\-1
-
- # Begin streaming the logs of the ruby container in pod web\-1
- kubectl logs \-f \-c ruby web\-1
-
- # Display only the most recent 20 lines of output in pod nginx
- kubectl logs \-\-tail=20 nginx
-
- # Show all logs from pod nginx written in the last hour
- kubectl logs \-\-since=1h nginx
-
- # Return snapshot logs from first container of a job named hello
- kubectl logs job/hello
-
- # Return snapshot logs from container nginx\-1 of a deployment named nginx
- kubectl logs deployment/nginx \-c nginx\-1
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-options.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-options.1
index 7b11981e78a7..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-options.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-options.1
@@ -1,308 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl options \- Print the list of flags inherited by all commands
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl options\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Print the list of flags inherited by all commands
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Print flags inherited by all commands
- kubectl options
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-patch.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-patch.1
index b15fe51601d9..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-patch.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-patch.1
@@ -1,393 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl patch \- Update field(s) of a resource using strategic merge patch
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl patch\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Update field(s) of a resource using strategic merge patch, a JSON merge patch, or a JSON patch.
-
-.PP
-JSON and YAML formats are accepted.
-
-.PP
-Please refer to the models in
-\[la]https://htmlpreview.github.io/?https://github.com/kubernetes/kubernetes/blob/HEAD/docs/api-reference/v1/definitions.html\[ra] to find if a field is mutable.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to update
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-local\fP=false
- If true, patch will operate on the content of the file, not the server\-side resource.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-p\fP, \fB\-\-patch\fP=""
- The patch to be applied to the resource JSON file.
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-type\fP="strategic"
- The type of patch being provided; one of [json merge strategic]
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Partially update a node using a strategic merge patch. Specify the patch as JSON.
- kubectl patch node k8s\-node\-1 \-p '{"spec":{"unschedulable":true}}'
-
- # Partially update a node using a strategic merge patch. Specify the patch as YAML.
- kubectl patch node k8s\-node\-1 \-p $'spec:\\n unschedulable: true'
-
- # Partially update a node identified by the type and name specified in "node.json" using strategic merge patch.
- kubectl patch \-f node.json \-p '{"spec":{"unschedulable":true}}'
-
- # Update a container's image; spec.containers[*].name is required because it's a merge key.
- kubectl patch pod valid\-pod \-p '{"spec":{"containers":[{"name":"kubernetes\-serve\-hostname","image":"new image"}]}}'
-
- # Update a container's image using a json patch with positional arrays.
- kubectl patch pod valid\-pod \-\-type='json' \-p='[{"op": "replace", "path": "/spec/containers/0/image", "value":"new image"}]'
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-plugin.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-plugin.1
index b7f78c193917..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-plugin.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-plugin.1
@@ -1,299 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl plugin \- Runs a command\-line plugin
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl plugin\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Runs a command\-line plugin.
-
-.PP
-Plugins are subcommands that are not part of the major command\-line distribution and can even be provided by third\-parties. Please refer to the documentation and examples for more information about how to install and write your own plugins.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-port-forward.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-port-forward.1
index ae1c5ce4f67e..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-port-forward.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-port-forward.1
@@ -1,320 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl port\-forward \- Forward one or more local ports to a pod
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl port\-forward\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Forward one or more local ports to a pod.
-
-
-.SH OPTIONS
-.PP
-\fB\-p\fP, \fB\-\-pod\fP=""
- Pod name
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Listen on ports 5000 and 6000 locally, forwarding data to/from ports 5000 and 6000 in the pod
- kubectl port\-forward mypod 5000 6000
-
- # Listen on port 8888 locally, forwarding to 5000 in the pod
- kubectl port\-forward mypod 8888:5000
-
- # Listen on a random port locally, forwarding to 5000 in the pod
- kubectl port\-forward mypod :5000
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-proxy.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-proxy.1
index 7610d9df0170..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-proxy.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-proxy.1
@@ -1,378 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl proxy \- Run a proxy to the Kubernetes API server
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl proxy\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Creates a proxy server or application\-level gateway between localhost and the Kubernetes API Server. It also allows serving static content over specified HTTP path. All incoming data enters through one port and gets forwarded to the remote kubernetes API Server port, except for the path matching the static content path.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-accept\-hosts\fP="^localhost$,^127\\.0\\.0\\.1$,^\\[::1\\]$"
- Regular expression for hosts that the proxy should accept.
-
-.PP
-\fB\-\-accept\-paths\fP="^.*"
- Regular expression for paths that the proxy should accept.
-
-.PP
-\fB\-\-address\fP="127.0.0.1"
- The IP address on which to serve on.
-
-.PP
-\fB\-\-api\-prefix\fP="/"
- Prefix to serve the proxied API under.
-
-.PP
-\fB\-\-disable\-filter\fP=false
- If true, disable request filtering in the proxy. This is dangerous, and can leave you vulnerable to XSRF attacks, when used with an accessible port.
-
-.PP
-\fB\-p\fP, \fB\-\-port\fP=8001
- The port on which to run the proxy. Set to 0 to pick a random port.
-
-.PP
-\fB\-\-reject\-methods\fP="^$"
- Regular expression for HTTP methods that the proxy should reject (example \-\-reject\-methods='POST,PUT,PATCH').
-
-.PP
-\fB\-\-reject\-paths\fP="^/api/.\fI/pods/.\fP/exec,^/api/.\fI/pods/.\fP/attach"
- Regular expression for paths that the proxy should reject. Paths specified here will be rejected even accepted by \-\-accept\-paths.
-
-.PP
-\fB\-u\fP, \fB\-\-unix\-socket\fP=""
- Unix socket on which to run the proxy.
-
-.PP
-\fB\-w\fP, \fB\-\-www\fP=""
- Also serve static files from the given directory under the specified prefix.
-
-.PP
-\fB\-P\fP, \fB\-\-www\-prefix\fP="/static/"
- Prefix to serve static files under, if static file directory is specified.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # To proxy all of the kubernetes api and nothing else, use:
-
- $ kubectl proxy \-\-api\-prefix=/
-
- # To proxy only part of the kubernetes api and also some static files:
-
- $ kubectl proxy \-\-www=/my/files \-\-www\-prefix=/static/ \-\-api\-prefix=/api/
-
- # The above lets you 'curl localhost:8001/api/v1/pods'.
-
- # To proxy the entire kubernetes api at a different root, use:
-
- $ kubectl proxy \-\-api\-prefix=/custom/
-
- # The above lets you 'curl localhost:8001/custom/api/v1/pods'
-
- # Run a proxy to kubernetes apiserver on port 8011, serving static content from ./local/www/
- kubectl proxy \-\-port=8011 \-\-www=./local/www/
-
- # Run a proxy to kubernetes apiserver on an arbitrary local port.
- # The chosen port for the server will be output to stdout.
- kubectl proxy \-\-port=0
-
- # Run a proxy to kubernetes apiserver, changing the api prefix to k8s\-api
- # This makes e.g. the pods api available at localhost:8001/k8s\-api/v1/pods/
- kubectl proxy \-\-api\-prefix=/k8s\-api
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-replace.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-replace.1
index 6560fbe898bb..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-replace.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-replace.1
@@ -1,373 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl replace \- Replace a resource by filename or stdin
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl replace\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Replace a resource by filename or stdin.
-
-.PP
-JSON and YAML formats are accepted. If replacing an existing resource, the complete resource spec must be provided. This can be obtained by
-
-.PP
-$ kubectl get TYPE NAME \-o yaml
-
-.PP
-Please refer to the models in
-\[la]https://htmlpreview.github.io/?https://github.com/kubernetes/kubernetes/blob/HEAD/docs/api-reference/v1/definitions.html\[ra] to find if a field is mutable.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-cascade\fP=false
- Only relevant during a force replace. If true, cascade the deletion of the resources managed by this resource (e.g. Pods created by a ReplicationController).
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files to use to replace the resource.
-
-.PP
-\fB\-\-force\fP=false
- Delete and re\-create the specified resource
-
-.PP
-\fB\-\-grace\-period\fP=\-1
- Only relevant during a force replace. Period of time in seconds given to the old resource to terminate gracefully. Ignored if negative.
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output mode. Use "\-o name" for shorter output (resource/name).
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-\-timeout\fP=0s
- Only relevant during a force replace. The length of time to wait before giving up on a delete of the old resource, zero means determine a timeout from the size of the object. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Replace a pod using the data in pod.json.
- kubectl replace \-f ./pod.json
-
- # Replace a pod based on the JSON passed into stdin.
- cat pod.json | kubectl replace \-f \-
-
- # Update a single\-container pod's image version (tag) to v4
- kubectl get pod mypod \-o yaml | sed 's/\\(image: myimage\\):.*$/\\1:v4/' | kubectl replace \-f \-
-
- # Force replace, delete and then re\-create the resource
- kubectl replace \-\-force \-f ./pod.json
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rolling-update.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rolling-update.1
index 3c38f44932a0..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rolling-update.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rolling-update.1
@@ -1,414 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl rolling\-update \- Perform a rolling update of the given ReplicationController
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl rolling\-update\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Perform a rolling update of the given ReplicationController.
-
-.PP
-Replaces the specified replication controller with a new replication controller by updating one pod at a time to use the new PodTemplate. The new\-controller.json must specify the same namespace as the existing replication controller and overwrite at least one (common) label in its replicaSelector.
-
-.PP
-!
-\[la]http://kubernetes.io/images/docs/kubectl_rollingupdate.svg\[ra]
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-container\fP=""
- Container name which will have its image upgraded. Only relevant when \-\-image is specified, ignored otherwise. Required when using \-\-image on a multi\-container pod
-
-.PP
-\fB\-\-deployment\-label\-key\fP="deployment"
- The key to use to differentiate between two different controllers, default 'deployment'. Only relevant when \-\-image is specified, ignored otherwise
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename or URL to file to use to create the new replication controller.
-
-.PP
-\fB\-\-image\fP=""
- Image to use for upgrading the replication controller. Must be distinct from the existing image (either new image or new image tag). Can not be used with \-\-filename/\-f
-
-.PP
-\fB\-\-image\-pull\-policy\fP=""
- Explicit policy for when to pull container images. Required when \-\-image is same as existing image, ignored otherwise.
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-poll\-interval\fP=3s
- Time delay between polling for replication controller status after the update. Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h".
-
-.PP
-\fB\-\-rollback\fP=false
- If true, this is a request to abort an existing rollout that is partially rolled out. It effectively reverses current and next and runs a rollout
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-timeout\fP=5m0s
- Max time to wait for a replication controller to update before giving up. Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h".
-
-.PP
-\fB\-\-update\-period\fP=1m0s
- Time to wait between updating pods. Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h".
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Update pods of frontend\-v1 using new replication controller data in frontend\-v2.json.
- kubectl rolling\-update frontend\-v1 \-f frontend\-v2.json
-
- # Update pods of frontend\-v1 using JSON data passed into stdin.
- cat frontend\-v2.json | kubectl rolling\-update frontend\-v1 \-f \-
-
- # Update the pods of frontend\-v1 to frontend\-v2 by just changing the image, and switching the
- # name of the replication controller.
- kubectl rolling\-update frontend\-v1 frontend\-v2 \-\-image=image:v2
-
- # Update the pods of frontend by just changing the image, and keeping the old name.
- kubectl rolling\-update frontend \-\-image=image:v2
-
- # Abort and reverse an existing rollout in progress (from frontend\-v1 to frontend\-v2).
- kubectl rolling\-update frontend\-v1 frontend\-v2 \-\-rollback
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-history.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-history.1
index 418cdcc5e3b5..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-history.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-history.1
@@ -1,325 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl rollout history \- View rollout history
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl rollout history\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-View previous rollout revisions and configurations.
-
-
-.SH OPTIONS
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to get from a server.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-revision\fP=0
- See the details, including podTemplate of the revision specified
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # View the rollout history of a deployment
- kubectl rollout history deployment/abc
-
- # View the details of daemonset revision 3
- kubectl rollout history daemonset/abc \-\-revision=3
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-rollout(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-pause.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-pause.1
index da1565559e25..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-pause.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-pause.1
@@ -1,323 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl rollout pause \- Mark the provided resource as paused
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl rollout pause\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Mark the provided resource as paused
-
-.PP
-Paused resources will not be reconciled by a controller. Use "kubectl rollout resume" to resume a paused resource. Currently only deployments support being paused.
-
-
-.SH OPTIONS
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to get from a server.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Mark the nginx deployment as paused. Any current state of
- # the deployment will continue its function, new updates to the deployment will not
- # have an effect as long as the deployment is paused.
- kubectl rollout pause deployment/nginx
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-rollout(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-resume.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-resume.1
index ea5bf5a5917f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-resume.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-resume.1
@@ -1,321 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl rollout resume \- Resume a paused resource
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl rollout resume\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Resume a paused resource
-
-.PP
-Paused resources will not be reconciled by a controller. By resuming a resource, we allow it to be reconciled again. Currently only deployments support being resumed.
-
-
-.SH OPTIONS
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to get from a server.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Resume an already paused deployment
- kubectl rollout resume deployment/nginx
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-rollout(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-status.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-status.1
index 4c6db7870fba..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-status.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-status.1
@@ -1,329 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl rollout status \- Show the status of the rollout
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl rollout status\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Show the status of the rollout.
-
-.PP
-By default 'rollout status' will watch the status of the latest rollout until it's done. If you don't want to wait for the rollout to finish then you can use \-\-watch=false. Note that if a new rollout starts in\-between, then 'rollout status' will continue watching the latest revision. If you want to pin to a specific revision and abort if it is rolled over by another revision, use \-\-revision=N where N is the revision you need to watch for.
-
-
-.SH OPTIONS
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to get from a server.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-revision\fP=0
- Pin to a specific revision for showing its status. Defaults to 0 (last revision).
-
-.PP
-\fB\-w\fP, \fB\-\-watch\fP=true
- Watch the status of the rollout until it's done.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Watch the rollout status of a deployment
- kubectl rollout status deployment/nginx
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-rollout(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-undo.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-undo.1
index cd620af200f0..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-undo.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout-undo.1
@@ -1,332 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl rollout undo \- Undo a previous rollout
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl rollout undo\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Rollback to a previous rollout.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to get from a server.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-to\-revision\fP=0
- The revision to rollback to. Default to 0 (last revision).
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Rollback to the previous deployment
- kubectl rollout undo deployment/abc
-
- # Rollback to daemonset revision 3
- kubectl rollout undo daemonset/abc \-\-to\-revision=3
-
- # Rollback to the previous deployment with dry\-run
- kubectl rollout undo \-\-dry\-run=true deployment/abc
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-rollout(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout.1
index da4cbab28214..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-rollout.1
@@ -1,320 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl rollout \- Manage the rollout of a resource
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl rollout\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Manage the rollout of a resource.
-
-.PP
-Valid resource types include:
-.IP \n+[step]
-
-\item deployments
-.br
-\item daemonsets
-.br
-\item statefulsets
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Rollback to the previous deployment
- kubectl rollout undo deployment/abc
-
- # Check the rollout status of a daemonset
- kubectl rollout status daemonset/foo
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP, \fBkubectl\-rollout\-history(1)\fP, \fBkubectl\-rollout\-pause(1)\fP, \fBkubectl\-rollout\-resume(1)\fP, \fBkubectl\-rollout\-status(1)\fP, \fBkubectl\-rollout\-undo(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-run-container.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-run-container.1
index 186331aa8993..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-run-container.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-run-container.1
@@ -1,499 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl run\-container \- Run a particular image on the cluster. This command is deprecated, use "run" instead
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl run\-container\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create and run a particular image, possibly replicated.
-
-.PP
-Creates a deployment or job to manage the created container(s).
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-attach\fP=false
- If true, wait for the Pod to start running, and then attach to the Pod as if 'kubectl attach ...' were called. Default false, unless '\-i/\-\-stdin' is set, in which case the default is true. With '\-\-restart=Never' the exit code of the container process is returned.
-
-.PP
-\fB\-\-command\fP=false
- If true and extra arguments are present, use them as the 'command' field in the container, rather than the 'args' field which is the default.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-env\fP=[]
- Environment variables to set in the container
-
-.PP
-\fB\-\-expose\fP=false
- If true, a public, external service is created for the container(s) which are run
-
-.PP
-\fB\-\-generator\fP=""
- The name of the API generator to use, see
-\[la]http://kubernetes.io/docs/user-guide/kubectl-conventions/#generators\[ra] for a list.
-
-.PP
-\fB\-\-hostport\fP=\-1
- The host port mapping for the container port. To demonstrate a single\-machine container.
-
-.PP
-\fB\-\-image\fP=""
- The image for the container to run.
-
-.PP
-\fB\-\-image\-pull\-policy\fP=""
- The image pull policy for the container. If left empty, this value will not be specified by the client and defaulted by the server
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-l\fP, \fB\-\-labels\fP=""
- Comma separated labels to apply to the pod(s). Will override previous values.
-
-.PP
-\fB\-\-leave\-stdin\-open\fP=false
- If the pod is started in interactive mode or with stdin, leave stdin open after the first attach completes. By default, stdin will be closed after the first attach completes.
-
-.PP
-\fB\-\-limits\fP=""
- The resource requirement limits for this container. For example, 'cpu=200m,memory=512Mi'. Note that server side components may assign limits depending on the server configuration, such as limit ranges.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-overrides\fP=""
- An inline JSON override for the generated object. If this is non\-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.
-
-.PP
-\fB\-\-pod\-running\-timeout\fP=1m0s
- The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
-
-.PP
-\fB\-\-port\fP=""
- The port that this container exposes. If \-\-expose is true, this is also the port used by the service that is created.
-
-.PP
-\fB\-\-quiet\fP=false
- If true, suppress prompt messages.
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-r\fP, \fB\-\-replicas\fP=1
- Number of replicas to create for this container. Default is 1.
-
-.PP
-\fB\-\-requests\fP=""
- The resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.
-
-.PP
-\fB\-\-restart\fP="Always"
- The restart policy for this Pod. Legal values [Always, OnFailure, Never]. If set to 'Always' a deployment is created, if set to 'OnFailure' a job is created, if set to 'Never', a regular pod is created. For the latter two \-\-replicas must be 1. Default 'Always', for CronJobs \fB\fCNever\fR.
-
-.PP
-\fB\-\-rm\fP=false
- If true, delete resources created in this command for attached containers.
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-\-schedule\fP=""
- A schedule in the Cron format the job should be run with.
-
-.PP
-\fB\-\-service\-generator\fP="service/v2"
- The name of the generator to use for creating a service. Only used if \-\-expose is true
-
-.PP
-\fB\-\-service\-overrides\fP=""
- An inline JSON override for the generated service object. If this is non\-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field. Only used if \-\-expose is true.
-
-.PP
-\fB\-\-serviceaccount\fP=""
- Service account to set in the pod spec
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-i\fP, \fB\-\-stdin\fP=false
- Keep stdin open on the container(s) in the pod, even if nothing is attached.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-t\fP, \fB\-\-tty\fP=false
- Allocated a TTY for each container in the pod.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Start a single instance of nginx.
- kubectl run nginx \-\-image=nginx
-
- # Start a single instance of hazelcast and let the container expose port 5701 .
- kubectl run hazelcast \-\-image=hazelcast \-\-port=5701
-
- # Start a single instance of hazelcast and set environment variables "DNS\_DOMAIN=cluster" and "POD\_NAMESPACE=default" in the container.
- kubectl run hazelcast \-\-image=hazelcast \-\-env="DNS\_DOMAIN=cluster" \-\-env="POD\_NAMESPACE=default"
-
- # Start a single instance of hazelcast and set labels "app=hazelcast" and "env=prod" in the container.
- kubectl run hazelcast \-\-image=nginx \-\-labels="app=hazelcast,env=prod"
-
- # Start a replicated instance of nginx.
- kubectl run nginx \-\-image=nginx \-\-replicas=5
-
- # Dry run. Print the corresponding API objects without creating them.
- kubectl run nginx \-\-image=nginx \-\-dry\-run
-
- # Start a single instance of nginx, but overload the spec of the deployment with a partial set of values parsed from JSON.
- kubectl run nginx \-\-image=nginx \-\-overrides='{ "apiVersion": "v1", "spec": { ... } }'
-
- # Start a pod of busybox and keep it in the foreground, don't restart it if it exits.
- kubectl run \-i \-t busybox \-\-image=busybox \-\-restart=Never
-
- # Start the nginx container using the default command, but use custom arguments (arg1 .. argN) for that command.
- kubectl run nginx \-\-image=nginx \-\- ...
-
- # Start the nginx container using a different command and custom arguments.
- kubectl run nginx \-\-image=nginx \-\-command \-\- ...
-
- # Start the perl container to compute π to 2000 places and print it out.
- kubectl run pi \-\-image=perl \-\-restart=OnFailure \-\- perl \-Mbignum=bpi \-wle 'print bpi(2000)'
-
- # Start the cron job to compute π to 2000 places and print it out every 5 minutes.
- kubectl run pi \-\-schedule="0/5 * * * ?" \-\-image=perl \-\-restart=OnFailure \-\- perl \-Mbignum=bpi \-wle 'print bpi(2000)'
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-run.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-run.1
index 751cef6c8773..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-run.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-run.1
@@ -1,499 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl run \- Run a particular image on the cluster
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl run\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Create and run a particular image, possibly replicated.
-
-.PP
-Creates a deployment or job to manage the created container(s).
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-attach\fP=false
- If true, wait for the Pod to start running, and then attach to the Pod as if 'kubectl attach ...' were called. Default false, unless '\-i/\-\-stdin' is set, in which case the default is true. With '\-\-restart=Never' the exit code of the container process is returned.
-
-.PP
-\fB\-\-command\fP=false
- If true and extra arguments are present, use them as the 'command' field in the container, rather than the 'args' field which is the default.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-\-env\fP=[]
- Environment variables to set in the container
-
-.PP
-\fB\-\-expose\fP=false
- If true, a public, external service is created for the container(s) which are run
-
-.PP
-\fB\-\-generator\fP=""
- The name of the API generator to use, see
-\[la]http://kubernetes.io/docs/user-guide/kubectl-conventions/#generators\[ra] for a list.
-
-.PP
-\fB\-\-hostport\fP=\-1
- The host port mapping for the container port. To demonstrate a single\-machine container.
-
-.PP
-\fB\-\-image\fP=""
- The image for the container to run.
-
-.PP
-\fB\-\-image\-pull\-policy\fP=""
- The image pull policy for the container. If left empty, this value will not be specified by the client and defaulted by the server
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-l\fP, \fB\-\-labels\fP=""
- Comma separated labels to apply to the pod(s). Will override previous values.
-
-.PP
-\fB\-\-leave\-stdin\-open\fP=false
- If the pod is started in interactive mode or with stdin, leave stdin open after the first attach completes. By default, stdin will be closed after the first attach completes.
-
-.PP
-\fB\-\-limits\fP=""
- The resource requirement limits for this container. For example, 'cpu=200m,memory=512Mi'. Note that server side components may assign limits depending on the server configuration, such as limit ranges.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-overrides\fP=""
- An inline JSON override for the generated object. If this is non\-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field.
-
-.PP
-\fB\-\-pod\-running\-timeout\fP=1m0s
- The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running
-
-.PP
-\fB\-\-port\fP=""
- The port that this container exposes. If \-\-expose is true, this is also the port used by the service that is created.
-
-.PP
-\fB\-\-quiet\fP=false
- If true, suppress prompt messages.
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-r\fP, \fB\-\-replicas\fP=1
- Number of replicas to create for this container. Default is 1.
-
-.PP
-\fB\-\-requests\fP=""
- The resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.
-
-.PP
-\fB\-\-restart\fP="Always"
- The restart policy for this Pod. Legal values [Always, OnFailure, Never]. If set to 'Always' a deployment is created, if set to 'OnFailure' a job is created, if set to 'Never', a regular pod is created. For the latter two \-\-replicas must be 1. Default 'Always', for CronJobs \fB\fCNever\fR.
-
-.PP
-\fB\-\-rm\fP=false
- If true, delete resources created in this command for attached containers.
-
-.PP
-\fB\-\-save\-config\fP=false
- If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
-
-.PP
-\fB\-\-schedule\fP=""
- A schedule in the Cron format the job should be run with.
-
-.PP
-\fB\-\-service\-generator\fP="service/v2"
- The name of the generator to use for creating a service. Only used if \-\-expose is true
-
-.PP
-\fB\-\-service\-overrides\fP=""
- An inline JSON override for the generated service object. If this is non\-empty, it is used to override the generated object. Requires that the object supply a valid apiVersion field. Only used if \-\-expose is true.
-
-.PP
-\fB\-\-serviceaccount\fP=""
- Service account to set in the pod spec
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-i\fP, \fB\-\-stdin\fP=false
- Keep stdin open on the container(s) in the pod, even if nothing is attached.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-t\fP, \fB\-\-tty\fP=false
- Allocated a TTY for each container in the pod.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Start a single instance of nginx.
- kubectl run nginx \-\-image=nginx
-
- # Start a single instance of hazelcast and let the container expose port 5701 .
- kubectl run hazelcast \-\-image=hazelcast \-\-port=5701
-
- # Start a single instance of hazelcast and set environment variables "DNS\_DOMAIN=cluster" and "POD\_NAMESPACE=default" in the container.
- kubectl run hazelcast \-\-image=hazelcast \-\-env="DNS\_DOMAIN=cluster" \-\-env="POD\_NAMESPACE=default"
-
- # Start a single instance of hazelcast and set labels "app=hazelcast" and "env=prod" in the container.
- kubectl run hazelcast \-\-image=nginx \-\-labels="app=hazelcast,env=prod"
-
- # Start a replicated instance of nginx.
- kubectl run nginx \-\-image=nginx \-\-replicas=5
-
- # Dry run. Print the corresponding API objects without creating them.
- kubectl run nginx \-\-image=nginx \-\-dry\-run
-
- # Start a single instance of nginx, but overload the spec of the deployment with a partial set of values parsed from JSON.
- kubectl run nginx \-\-image=nginx \-\-overrides='{ "apiVersion": "v1", "spec": { ... } }'
-
- # Start a pod of busybox and keep it in the foreground, don't restart it if it exits.
- kubectl run \-i \-t busybox \-\-image=busybox \-\-restart=Never
-
- # Start the nginx container using the default command, but use custom arguments (arg1 .. argN) for that command.
- kubectl run nginx \-\-image=nginx \-\- ...
-
- # Start the nginx container using a different command and custom arguments.
- kubectl run nginx \-\-image=nginx \-\-command \-\- ...
-
- # Start the perl container to compute π to 2000 places and print it out.
- kubectl run pi \-\-image=perl \-\-restart=OnFailure \-\- perl \-Mbignum=bpi \-wle 'print bpi(2000)'
-
- # Start the cron job to compute π to 2000 places and print it out every 5 minutes.
- kubectl run pi \-\-schedule="0/5 * * * ?" \-\-image=perl \-\-restart=OnFailure \-\- perl \-Mbignum=bpi \-wle 'print bpi(2000)'
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-scale.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-scale.1
index 029e9999dd5f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-scale.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-scale.1
@@ -1,372 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl scale \- Set a new size for a Deployment, ReplicaSet, Replication Controller, or Job
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl scale\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Set a new size for a Deployment, ReplicaSet, Replication Controller, or Job.
-
-.PP
-Scale also allows users to specify one or more preconditions for the scale action.
-
-.PP
-If \-\-current\-replicas or \-\-resource\-version is specified, it is validated before the scale is attempted, and it is guaranteed that the precondition holds true when the scale is sent to the server.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Select all resources in the namespace of the specified resource types
-
-.PP
-\fB\-\-current\-replicas\fP=\-1
- Precondition for current size. Requires that the current size of the resource match this value in order to scale.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to set a new size
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output mode. Use "\-o name" for shorter output (resource/name).
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-replicas\fP=\-1
- The new desired number of replicas. Required.
-
-.PP
-\fB\-\-resource\-version\fP=""
- Precondition for resource version. Requires that the current resource version match this value in order to scale.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-.PP
-\fB\-\-timeout\fP=0s
- The length of time to wait before giving up on a scale operation, zero means don't wait. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Scale a replicaset named 'foo' to 3.
- kubectl scale \-\-replicas=3 rs/foo
-
- # Scale a resource identified by type and name specified in "foo.yaml" to 3.
- kubectl scale \-\-replicas=3 \-f foo.yaml
-
- # If the deployment named mysql's current size is 2, scale mysql to 3.
- kubectl scale \-\-current\-replicas=2 \-\-replicas=3 deployment/mysql
-
- # Scale multiple replication controllers.
- kubectl scale \-\-replicas=5 rc/foo rc/bar rc/baz
-
- # Scale job named 'cron' to 3.
- kubectl scale \-\-replicas=3 job/cron
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-env.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-env.1
index 845c7b7544bf..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-env.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-env.1
@@ -1,438 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl set env \- Update environment variables on a pod template
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl set env\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Update environment variables on a pod template.
-
-.PP
-List environment variable definitions in one or more pods, pod templates. Add, update, or remove container environment variable definitions in one or more pod templates (within replication controllers or deployment configurations). View or modify the environment variable definitions on all containers in the specified pods or pod templates, or just those that match a wildcard.
-
-.PP
-If "\-\-env \-" is passed, environment variables can be read from STDIN using the standard env syntax.
-
-.PP
-Possible resources include (case insensitive):
-
-.PP
-pod (po), replicationcontroller (rc), deployment (deploy), daemonset (ds), job, replicaset (rs)
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- If true, select all resources in the namespace of the specified resource types
-
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-c\fP, \fB\-\-containers\fP="*"
- The names of containers in the selected pod templates to change \- may use wildcards
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-e\fP, \fB\-\-env\fP=[]
- Specify a key\-value pair for an environment variable to set into each container.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files the resource to update the env
-
-.PP
-\fB\-\-from\fP=""
- The name of a resource from which to inject environment variables
-
-.PP
-\fB\-\-list\fP=false
- If true, display the environment and any changes in the standard format. this flag will removed when we have kubectl view env.
-
-.PP
-\fB\-\-local\fP=false
- If true, set env will NOT contact api\-server but run locally.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-overwrite\fP=true
- If true, allow environment to be overwritten, otherwise reject updates that overwrite existing environment.
-
-.PP
-\fB\-\-prefix\fP=""
- Prefix to append to variable names
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-resolve\fP=false
- If true, show secret or configmap references when listing variables
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Update deployment 'registry' with a new environment variable
- kubectl set env deployment/registry STORAGE\_DIR=/local
-
- # List the environment variables defined on a deployments 'sample\-build'
- kubectl set env deployment/sample\-build \-\-list
-
- # List the environment variables defined on all pods
- kubectl set env pods \-\-all \-\-list
-
- # Output modified deployment in YAML, and does not alter the object on the server
- kubectl set env deployment/sample\-build STORAGE\_DIR=/data \-o yaml
-
- # Update all containers in all replication controllers in the project to have ENV=prod
- kubectl set env rc \-\-all ENV=prod
-
- # Import environment from a secret
- kubectl set env \-\-from=secret/mysecret deployment/myapp
-
- # Import environment from a config map with a prefix
- kubectl set env \-\-from=configmap/myconfigmap \-\-prefix=MYSQL\_ deployment/myapp
-
- # Remove the environment variable ENV from container 'c1' in all deployment configs
- kubectl set env deployments \-\-all \-\-containers="c1" ENV\-
-
- # Remove the environment variable ENV from a deployment definition on disk and
- # update the deployment config on the server
- kubectl set env \-f deploy.json ENV\-
-
- # Set some of the local shell environment into a deployment config on the server
- env | grep RAILS\_ | kubectl set env \-e \- deployment/registry
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-set(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-image.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-image.1
index 41ba12429a80..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-image.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-image.1
@@ -1,393 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl set image \- Update image of a pod template
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl set image\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Update existing container image(s) of resources.
-
-.PP
-Possible resources include (case insensitive):
-
-.PP
-pod (po), replicationcontroller (rc), deployment (deploy), daemonset (ds), replicaset (rs)
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Select all resources, including uninitialized ones, in the namespace of the specified resource types
-
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to get from a server.
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-\-local\fP=false
- If true, set image will NOT contact api\-server but run locally.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, not including uninitialized ones, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Set a deployment's nginx container image to 'nginx:1.9.1', and its busybox container image to 'busybox'.
- kubectl set image deployment/nginx busybox=busybox nginx=nginx:1.9.1
-
- # Update all deployments' and rc's nginx container's image to 'nginx:1.9.1'
- kubectl set image deployments,rc nginx=nginx:1.9.1 \-\-all
-
- # Update image of all containers of daemonset abc to 'nginx:1.9.1'
- kubectl set image daemonset abc *=nginx:1.9.1
-
- # Print result (in yaml format) of updating nginx container image from local file, without hitting the server
- kubectl set image \-f path/to/file.yaml nginx=nginx:1.9.1 \-\-local \-o yaml
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-set(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-resources.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-resources.1
index 731722bc8389..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-resources.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-resources.1
@@ -1,405 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl set resources \- Update resource requests/limits on objects with pod templates
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl set resources\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Specify compute resource requirements (cpu, memory) for any resource that defines a pod template. If a pod is successfully scheduled, it is guaranteed the amount of resource requested, but may burst up to its specified limits.
-
-.PP
-for each compute resource, if a limit is specified and a request is omitted, the request will default to the limit.
-
-.PP
-Possible resources include (case insensitive): replicationcontroller, deployment, daemonset, job, replicaset.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Select all resources, including uninitialized ones, in the namespace of the specified resource types
-
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-c\fP, \fB\-\-containers\fP="*"
- The names of containers in the selected pod templates to change, all containers are selected by default \- may use wildcards
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to get from a server.
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-\-limits\fP=""
- The resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.
-
-.PP
-\fB\-\-local\fP=false
- If true, set resources will NOT contact api\-server but run locally.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-requests\fP=""
- The resource requirement requests for this container. For example, 'cpu=100m,memory=256Mi'. Note that server side components may assign requests depending on the server configuration, such as limit ranges.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, not including uninitialized ones,supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Set a deployments nginx container cpu limits to "200m" and memory to "512Mi"
- kubectl set resources deployment nginx \-c=nginx \-\-limits=cpu=200m,memory=512Mi
-
- # Set the resource request and limits for all containers in nginx
- kubectl set resources deployment nginx \-\-limits=cpu=200m,memory=512Mi \-\-requests=cpu=100m,memory=256Mi
-
- # Remove the resource requests for resources on containers in nginx
- kubectl set resources deployment nginx \-\-limits=cpu=0,memory=0 \-\-requests=cpu=0,memory=0
-
- # Print the result (in yaml format) of updating nginx container limits from a local, without hitting the server
- kubectl set resources \-f path/to/file.yaml \-\-limits=cpu=200m,memory=512Mi \-\-local \-o yaml
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-set(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-selector.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-selector.1
index 67d05274e8ab..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-selector.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-selector.1
@@ -1,382 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl set selector \- Set the selector on a resource
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl set selector\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Set the selector on a resource. Note that the new selector will overwrite the old selector if the resource had one prior to the invocation of 'set selector'.
-
-.PP
-A selector must begin with a letter or number, and may contain letters, numbers, hyphens, dots, and underscores, up to 63 characters. If \-\-resource\-version is specified, then updates will use this resource version, otherwise the existing resource\-version will be used. Note: currently selectors can only be set on Service objects.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Select all resources, including uninitialized ones, in the namespace of the specified resource types
-
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files the resource to update the selectors
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-\-local\fP=false
- If true, set selector will NOT contact api\-server but run locally.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-\-resource\-version\fP=""
- If non\-empty, the selectors update will only succeed if this is the current resource\-version for the object. Only valid when specifying a single resource.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # set the labels and selector before creating a deployment/service pair.
- kubectl create service clusterip my\-svc \-\-clusterip="None" \-o yaml \-\-dry\-run | kubectl set selector \-\-local \-f \- 'environment=qa' \-o yaml | kubectl create \-f \-
- kubectl create deployment my\-dep \-o yaml \-\-dry\-run | kubectl label \-\-local \-f \- environment=qa \-o yaml | kubectl create \-f \-
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-set(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-serviceaccount.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-serviceaccount.1
index fc994ad8f8ef..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-serviceaccount.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-serviceaccount.1
@@ -1,383 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl set serviceaccount \- Update ServiceAccount of a resource
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl set serviceaccount\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Update ServiceAccount of pod template resources.
-
-.PP
-Possible resources (case insensitive) can be:
-
-.PP
-replicationcontroller (rc), deployment (deploy), daemonset (ds), job, replicaset (rs), statefulset
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Select all resources, including uninitialized ones, in the namespace of the specified resource types
-
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files identifying the resource to get from a server.
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-\-local\fP=false
- If true, set serviceaccount will NOT contact api\-server but run locally.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-record\fP=false
- Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Set Deployment nginx\-deployment's ServiceAccount to serviceaccount1
- kubectl set serviceaccount deployment nginx\-deployment serviceaccount1
-
- # Print the result (in yaml format) of updated nginx deployment with serviceaccount from local file, without hitting apiserver
- kubectl set sa \-f nginx\-deployment.yaml serviceaccount1 \-\-local \-\-dry\-run \-o yaml
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-set(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-subject.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-subject.1
index 09e28fa7d369..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-subject.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set-subject.1
@@ -1,388 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl set subject \- Update User, Group or ServiceAccount in a RoleBinding/ClusterRoleBinding
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl set subject\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Update User, Group or ServiceAccount in a RoleBinding/ClusterRoleBinding.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Select all resources, including uninitialized ones, in the namespace of the specified resource types
-
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-f\fP, \fB\-\-filename\fP=[]
- Filename, directory, or URL to files the resource to update the subjects
-
-.PP
-\fB\-\-group\fP=[]
- Groups to bind to the role
-
-.PP
-\fB\-\-include\-uninitialized\fP=false
- If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "\-\-all". Objects with empty metadata.initializers are regarded as initialized.
-
-.PP
-\fB\-\-local\fP=false
- If true, set subject will NOT contact api\-server but run locally.
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-R\fP, \fB\-\-recursive\fP=false
- Process the directory used in \-f, \-\-filename recursively. Useful when you want to manage related manifests organized within the same directory.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, not including uninitialized ones, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-.PP
-\fB\-\-serviceaccount\fP=[]
- Service accounts to bind to the role
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-user\fP=[]
- Usernames to bind to the role
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Update a ClusterRoleBinding for serviceaccount1
- kubectl set subject clusterrolebinding admin \-\-serviceaccount=namespace:serviceaccount1
-
- # Update a RoleBinding for user1, user2, and group1
- kubectl set subject rolebinding admin \-\-user=user1 \-\-user=user2 \-\-group=group1
-
- # Print the result (in yaml format) of updating rolebinding subjects from a local, without hitting the server
- kubectl create rolebinding admin \-\-role=admin \-\-user=admin \-o yaml \-\-dry\-run | kubectl set subject \-\-local \-f \- \-\-user=foo \-o yaml
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-set(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set.1
index bc1bd2e62259..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-set.1
@@ -1,299 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl set \- Set specific features on objects
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl set\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Configure application resources
-
-.PP
-These commands help you make changes to existing application resources.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP, \fBkubectl\-set\-env(1)\fP, \fBkubectl\-set\-image(1)\fP, \fBkubectl\-set\-resources(1)\fP, \fBkubectl\-set\-selector(1)\fP, \fBkubectl\-set\-serviceaccount(1)\fP, \fBkubectl\-set\-subject(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-taint.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-taint.1
index f3e56fac0905..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-taint.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-taint.1
@@ -1,388 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl taint \- Update the taints on one or more nodes
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl taint\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Update the taints on one or more nodes.
-.IP \n+[step]
-
-\item A taint consists of a key, value, and effect. As an argument here, it is expressed as key=value:effect.
-.br
-\item The key must begin with a letter or number, and may contain letters, numbers, hyphens, dots, and underscores, up to 253 characters.
-.br
-\item Optionally, the key can begin with a DNS subdomain prefix and a single '/', like example.com/my\-app
-.br
-\item The value must begin with a letter or number, and may contain letters, numbers, hyphens, dots, and underscores, up to 63 characters.
-.br
-\item The effect must be NoSchedule, PreferNoSchedule or NoExecute.
-.br
-\item Currently taint can only apply to node.
-
-.SH OPTIONS
-.PP
-\fB\-\-all\fP=false
- Select all nodes in the cluster
-
-.PP
-\fB\-\-allow\-missing\-template\-keys\fP=true
- If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
-
-.PP
-\fB\-\-include\-extended\-apis\fP=true
- If true, include definitions of new APIs via calls to the API server. [default true]
-
-.PP
-\fB\-\-no\-headers\fP=false
- When using the default or custom\-column output format, don't print headers (default print headers).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- Output format. One of: json|yaml|wide|name|custom\-columns=...|custom\-columns\-file=...|go\-template=...|go\-template\-file=...|jsonpath=...|jsonpath\-file=... See custom columns [
-\[la]http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns\[ra]], golang template [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]] and jsonpath template [
-\[la]http://kubernetes.io/docs/user-guide/jsonpath\[ra]].
-
-.PP
-\fB\-\-output\-version\fP=""
- DEPRECATED: To use a specific API version, fully\-qualify the resource, version, and group (for example: 'jobs.v1.batch/myjob').
-
-.PP
-\fB\-\-overwrite\fP=false
- If true, allow taints to be overwritten, otherwise reject taint updates that overwrite existing taints.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-.PP
-\fB\-a\fP, \fB\-\-show\-all\fP=false
- When printing, show all resources (default hide terminated pods.)
-
-.PP
-\fB\-\-show\-labels\fP=false
- When printing, show all labels as the last column (default hide labels column)
-
-.PP
-\fB\-\-sort\-by\fP=""
- If non\-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
-
-.PP
-\fB\-\-template\fP=""
- Template string or path to template file to use when \-o=go\-template, \-o=go\-template\-file. The template format is golang templates [
-\[la]http://golang.org/pkg/text/template/#pkg-overview\[ra]].
-
-.PP
-\fB\-\-validate\fP=true
- If true, use a schema to validate the input before sending it
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Update node 'foo' with a taint with key 'dedicated' and value 'special\-user' and effect 'NoSchedule'.
- # If a taint with that key and effect already exists, its value is replaced as specified.
- kubectl taint nodes foo dedicated=special\-user:NoSchedule
-
- # Remove from node 'foo' the taint with key 'dedicated' and effect 'NoSchedule' if one exists.
- kubectl taint nodes foo dedicated:NoSchedule\-
-
- # Remove from node 'foo' all the taints with key 'dedicated'
- kubectl taint nodes foo dedicated\-
-
- # Add a taint with key 'dedicated' on nodes having label mylabel=X
- kubectl taint node \-l myLabel=X dedicated=foo:PreferNoSchedule
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top-node.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top-node.1
index 698b7a86fc7a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top-node.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top-node.1
@@ -1,336 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl top node \- Display Resource (CPU/Memory/Storage) usage of nodes
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl top node\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Display Resource (CPU/Memory/Storage) usage of nodes.
-
-.PP
-The top\-node command allows you to see the resource consumption of nodes.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-heapster\-namespace\fP="kube\-system"
- Namespace Heapster service is located in
-
-.PP
-\fB\-\-heapster\-port\fP=""
- Port name in service to use
-
-.PP
-\fB\-\-heapster\-scheme\fP="http"
- Scheme (http or https) to connect to Heapster as
-
-.PP
-\fB\-\-heapster\-service\fP="heapster"
- Name of Heapster service
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Show metrics for all nodes
- kubectl top node
-
- # Show metrics for a given node
- kubectl top node NODE\_NAME
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-top(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top-pod.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top-pod.1
index 31f385fd9fda..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top-pod.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top-pod.1
@@ -1,353 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl top pod \- Display Resource (CPU/Memory/Storage) usage of pods
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl top pod\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Display Resource (CPU/Memory/Storage) usage of pods.
-
-.PP
-The 'top pod' command allows you to see the resource consumption of pods.
-
-.PP
-Due to the metrics pipeline delay, they may be unavailable for a few minutes since pod creation.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-all\-namespaces\fP=false
- If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with \-\-namespace.
-
-.PP
-\fB\-\-containers\fP=false
- If present, print usage of containers within a pod.
-
-.PP
-\fB\-\-heapster\-namespace\fP="kube\-system"
- Namespace Heapster service is located in
-
-.PP
-\fB\-\-heapster\-port\fP=""
- Port name in service to use
-
-.PP
-\fB\-\-heapster\-scheme\fP="http"
- Scheme (http or https) to connect to Heapster as
-
-.PP
-\fB\-\-heapster\-service\fP="heapster"
- Name of Heapster service
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. \-l key1=value1,key2=value2)
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Show metrics for all pods in the default namespace
- kubectl top pod
-
- # Show metrics for all pods in the given namespace
- kubectl top pod \-\-namespace=NAMESPACE
-
- # Show metrics for a given pod and its containers
- kubectl top pod POD\_NAME \-\-containers
-
- # Show metrics for the pods defined by label name=myLabel
- kubectl top pod \-l name=myLabel
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-top(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top.1
index 680200c81231..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-top.1
@@ -1,302 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl top \- Display Resource (CPU/Memory/Storage) usage.
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl top\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Display Resource (CPU/Memory/Storage) usage.
-
-.PP
-The top command allows you to see the resource consumption for nodes or pods.
-
-.PP
-This command requires Heapster to be correctly configured and working on the server.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP, \fBkubectl\-top\-node(1)\fP, \fBkubectl\-top\-pod(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-uncordon.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-uncordon.1
index e1b928a4b240..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-uncordon.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-uncordon.1
@@ -1,318 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl uncordon \- Mark node as schedulable
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl uncordon\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Mark node as schedulable.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-dry\-run\fP=false
- If true, only print the object that would be sent, without sending it.
-
-.PP
-\fB\-l\fP, \fB\-\-selector\fP=""
- Selector (label query) to filter on
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Mark node "foo" as schedulable.
- $ kubectl uncordon foo
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-version.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-version.1
index 5dd67f155c7d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-version.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl-version.1
@@ -1,322 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl version \- Print the client and server version information
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl version\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-Print the client and server version information for the current context
-
-
-.SH OPTIONS
-.PP
-\fB\-\-client\fP=false
- Client version only (no server required).
-
-.PP
-\fB\-o\fP, \fB\-\-output\fP=""
- One of 'yaml' or 'json'.
-
-.PP
-\fB\-\-short\fP=false
- Print just the version number.
-
-
-.SH OPTIONS INHERITED FROM PARENT COMMANDS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH EXAMPLE
-.PP
-.RS
-
-.nf
- # Print the client and server versions for the current context
- kubectl version
-
-.fi
-.RE
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl.1
index 541b1d5397a4..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubectl.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubectl.1
@@ -1,300 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubectl \- kubectl controls the Kubernetes cluster manager
-
-
-.SH SYNOPSIS
-.PP
-\fBkubectl\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-kubectl controls the Kubernetes cluster manager.
-
-.PP
-Find more information at
-\[la]https://github.com/kubernetes/kubernetes\[ra].
-
-
-.SH OPTIONS
-.PP
-\fB\-\-allow\-verification\-with\-non\-compliant\-keys\fP=false
- Allow a SignatureVerifier to use keys which are technically non\-compliant with RFC6962.
-
-.PP
-\fB\-\-alsologtostderr\fP=false
- log to standard error as well as files
-
-.PP
-\fB\-\-application\-metrics\-count\-limit\fP=100
- Max number of application metrics to store (per container)
-
-.PP
-\fB\-\-as\fP=""
- Username to impersonate for the operation
-
-.PP
-\fB\-\-as\-group\fP=[]
- Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-boot\-id\-file\fP="/proc/sys/kernel/random/boot\_id"
- Comma\-separated list of files to check for boot\-id. Use the first one that exists.
-
-.PP
-\fB\-\-cache\-dir\fP="/home/username/.kube/http\-cache"
- Default HTTP cache directory
-
-.PP
-\fB\-\-certificate\-authority\fP=""
- Path to a cert file for the certificate authority
-
-.PP
-\fB\-\-client\-certificate\fP=""
- Path to a client certificate file for TLS
-
-.PP
-\fB\-\-client\-key\fP=""
- Path to a client key file for TLS
-
-.PP
-\fB\-\-cloud\-provider\-gce\-lb\-src\-cidrs\fP=130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22
- CIDRs opened in GCE firewall for LB traffic proxy \& health checks
-
-.PP
-\fB\-\-cluster\fP=""
- The name of the kubeconfig cluster to use
-
-.PP
-\fB\-\-container\-hints\fP="/etc/cadvisor/container\_hints.json"
- location of the container hints file
-
-.PP
-\fB\-\-containerd\fP="unix:///var/run/containerd.sock"
- containerd endpoint
-
-.PP
-\fB\-\-context\fP=""
- The name of the kubeconfig context to use
-
-.PP
-\fB\-\-default\-not\-ready\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for notReady:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-default\-unreachable\-toleration\-seconds\fP=300
- Indicates the tolerationSeconds of the toleration for unreachable:NoExecute that is added by default to every pod that does not already have such a toleration.
-
-.PP
-\fB\-\-docker\fP="unix:///var/run/docker.sock"
- docker endpoint
-
-.PP
-\fB\-\-docker\-env\-metadata\-whitelist\fP=""
- a comma\-separated list of environment variable keys that needs to be collected for docker containers
-
-.PP
-\fB\-\-docker\-only\fP=false
- Only report docker containers in addition to root stats
-
-.PP
-\fB\-\-docker\-root\fP="/var/lib/docker"
- DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker)
-
-.PP
-\fB\-\-docker\-tls\fP=false
- use TLS to connect to docker
-
-.PP
-\fB\-\-docker\-tls\-ca\fP="ca.pem"
- path to trusted CA
-
-.PP
-\fB\-\-docker\-tls\-cert\fP="cert.pem"
- path to client certificate
-
-.PP
-\fB\-\-docker\-tls\-key\fP="key.pem"
- path to private key
-
-.PP
-\fB\-\-enable\-load\-reader\fP=false
- Whether to enable cpu load reader
-
-.PP
-\fB\-\-event\-storage\-age\-limit\fP="default=0"
- Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-event\-storage\-event\-limit\fP="default=0"
- Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non\-specified event types
-
-.PP
-\fB\-\-global\-housekeeping\-interval\fP=1m0s
- Interval between global housekeepings
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-housekeeping\-interval\fP=10s
- Interval between container housekeepings
-
-.PP
-\fB\-\-insecure\-skip\-tls\-verify\fP=false
- If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
-
-.PP
-\fB\-\-ir\-data\-source\fP="influxdb"
- Data source used by InitialResources. Supported options: influxdb, gcm.
-
-.PP
-\fB\-\-ir\-dbname\fP="k8s"
- InfluxDB database name which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-hawkular\fP=""
- Hawkular configuration URL
-
-.PP
-\fB\-\-ir\-influxdb\-host\fP="localhost:8080/api/v1/namespaces/kube\-system/services/monitoring\-influxdb:api/proxy"
- Address of InfluxDB which contains metrics required by InitialResources
-
-.PP
-\fB\-\-ir\-namespace\-only\fP=false
- Whether the estimation should be made only based on data from the same namespace.
-
-.PP
-\fB\-\-ir\-password\fP="root"
- Password used for connecting to InfluxDB
-
-.PP
-\fB\-\-ir\-percentile\fP=90
- Which percentile of samples should InitialResources use when estimating resources. For experiment purposes.
-
-.PP
-\fB\-\-ir\-user\fP="root"
- User used for connecting to InfluxDB
-
-.PP
-\fB\-\-kubeconfig\fP=""
- Path to the kubeconfig file to use for CLI requests.
-
-.PP
-\fB\-\-log\-backtrace\-at\fP=:0
- when logging hits line file:N, emit a stack trace
-
-.PP
-\fB\-\-log\-cadvisor\-usage\fP=false
- Whether to log the usage of the cAdvisor container
-
-.PP
-\fB\-\-log\-dir\fP=""
- If non\-empty, write log files in this directory
-
-.PP
-\fB\-\-loglevel\fP=1
- Log level (0 = DEBUG, 5 = FATAL)
-
-.PP
-\fB\-\-logtostderr\fP=false
- log to standard error instead of files
-
-.PP
-\fB\-\-machine\-id\-file\fP="/etc/machine\-id,/var/lib/dbus/machine\-id"
- Comma\-separated list of files to check for machine\-id. Use the first one that exists.
-
-.PP
-\fB\-\-match\-server\-version\fP=false
- Require server version to match client version
-
-.PP
-\fB\-n\fP, \fB\-\-namespace\fP=""
- If present, the namespace scope for this CLI request
-
-.PP
-\fB\-\-password\fP=""
- Password for basic authentication to the API server
-
-.PP
-\fB\-\-request\-timeout\fP="0"
- The length of time to wait before giving up on a single server request. Non\-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
-
-.PP
-\fB\-s\fP, \fB\-\-server\fP=""
- The address and port of the Kubernetes API server
-
-.PP
-\fB\-\-stderrthreshold\fP=2
- logs at or above this threshold go to stderr
-
-.PP
-\fB\-\-storage\-driver\-buffer\-duration\fP=1m0s
- Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction
-
-.PP
-\fB\-\-storage\-driver\-db\fP="cadvisor"
- database name
-
-.PP
-\fB\-\-storage\-driver\-host\fP="localhost:8086"
- database host:port
-
-.PP
-\fB\-\-storage\-driver\-password\fP="root"
- database password
-
-.PP
-\fB\-\-storage\-driver\-secure\fP=false
- use secure connection with database
-
-.PP
-\fB\-\-storage\-driver\-table\fP="stats"
- table name
-
-.PP
-\fB\-\-storage\-driver\-user\fP="root"
- database username
-
-.PP
-\fB\-\-token\fP=""
- Bearer token for authentication to the API server
-
-.PP
-\fB\-\-user\fP=""
- The name of the kubeconfig user to use
-
-.PP
-\fB\-\-username\fP=""
- Username for basic authentication to the API server
-
-.PP
-\fB\-v\fP, \fB\-\-v\fP=0
- log level for V logs
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-vmodule\fP=
- comma\-separated list of pattern=N settings for file\-filtered logging
-
-
-.SH SEE ALSO
-.PP
-\fBkubectl\-alpha(1)\fP, \fBkubectl\-annotate(1)\fP, \fBkubectl\-api\-versions(1)\fP, \fBkubectl\-apply(1)\fP, \fBkubectl\-attach(1)\fP, \fBkubectl\-auth(1)\fP, \fBkubectl\-autoscale(1)\fP, \fBkubectl\-certificate(1)\fP, \fBkubectl\-cluster\-info(1)\fP, \fBkubectl\-completion(1)\fP, \fBkubectl\-config(1)\fP, \fBkubectl\-convert(1)\fP, \fBkubectl\-cordon(1)\fP, \fBkubectl\-cp(1)\fP, \fBkubectl\-create(1)\fP, \fBkubectl\-delete(1)\fP, \fBkubectl\-describe(1)\fP, \fBkubectl\-drain(1)\fP, \fBkubectl\-edit(1)\fP, \fBkubectl\-exec(1)\fP, \fBkubectl\-explain(1)\fP, \fBkubectl\-expose(1)\fP, \fBkubectl\-get(1)\fP, \fBkubectl\-label(1)\fP, \fBkubectl\-logs(1)\fP, \fBkubectl\-options(1)\fP, \fBkubectl\-patch(1)\fP, \fBkubectl\-plugin(1)\fP, \fBkubectl\-port\-forward(1)\fP, \fBkubectl\-proxy(1)\fP, \fBkubectl\-replace(1)\fP, \fBkubectl\-rolling\-update(1)\fP, \fBkubectl\-rollout(1)\fP, \fBkubectl\-run(1)\fP, \fBkubectl\-run\-container(1)\fP, \fBkubectl\-scale(1)\fP, \fBkubectl\-set(1)\fP, \fBkubectl\-taint(1)\fP, \fBkubectl\-top(1)\fP, \fBkubectl\-uncordon(1)\fP, \fBkubectl\-version(1)\fP,
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kubelet.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kubelet.1
index 61d8cdfddcfc..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/man/man1/kubelet.1
+++ b/vendor/k8s.io/kubernetes/docs/man/man1/kubelet.1
@@ -1,642 +1,3 @@
-.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" ""
-
-
-.SH NAME
-.PP
-kubelet \-
-
-
-.SH SYNOPSIS
-.PP
-\fBkubelet\fP [OPTIONS]
-
-
-.SH DESCRIPTION
-.PP
-The kubelet is the primary "node agent" that runs on each
-node. The kubelet works in terms of a PodSpec. A PodSpec is a YAML or JSON object
-that describes a pod. The kubelet takes a set of PodSpecs that are provided through
-various mechanisms (primarily through the apiserver) and ensures that the containers
-described in those PodSpecs are running and healthy. The kubelet doesn't manage
-containers which were not created by Kubernetes.
-
-.PP
-Other than from an PodSpec from the apiserver, there are three ways that a container
-manifest can be provided to the Kubelet.
-
-.PP
-File: Path passed as a flag on the command line. Files under this path will be monitored
-periodically for updates. The monitoring period is 20s by default and is configurable
-via a flag.
-
-.PP
-HTTP endpoint: HTTP endpoint passed as a parameter on the command line. This endpoint
-is checked every 20 seconds (also configurable with a flag).
-
-.PP
-HTTP server: The kubelet can also listen for HTTP and respond to a simple API
-(underspec'd currently) to submit a new manifest.
-
-
-.SH OPTIONS
-.PP
-\fB\-\-address\fP=0.0.0.0
- The IP address for the Kubelet to serve on (set to 0.0.0.0 for all interfaces)
-
-.PP
-\fB\-\-allow\-privileged\fP=false
- If true, allow containers to request privileged mode.
-
-.PP
-\fB\-\-anonymous\-auth\fP=true
- Enables anonymous requests to the Kubelet server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.
-
-.PP
-\fB\-\-authentication\-token\-webhook\fP=false
- Use the TokenReview API to determine authentication for bearer tokens.
-
-.PP
-\fB\-\-authentication\-token\-webhook\-cache\-ttl\fP=2m0s
- The duration to cache responses from the webhook token authenticator.
-
-.PP
-\fB\-\-authorization\-mode\fP="AlwaysAllow"
- Authorization mode for Kubelet server. Valid options are AlwaysAllow or Webhook. Webhook mode uses the SubjectAccessReview API to determine authorization.
-
-.PP
-\fB\-\-authorization\-webhook\-cache\-authorized\-ttl\fP=5m0s
- The duration to cache 'authorized' responses from the webhook authorizer.
-
-.PP
-\fB\-\-authorization\-webhook\-cache\-unauthorized\-ttl\fP=30s
- The duration to cache 'unauthorized' responses from the webhook authorizer.
-
-.PP
-\fB\-\-azure\-container\-registry\-config\fP=""
- Path to the file container Azure container registry configuration information.
-
-.PP
-\fB\-\-bootstrap\-checkpoint\-path\fP=""
- Path to to the directory where the checkpoints are stored
-
-.PP
-\fB\-\-bootstrap\-kubeconfig\fP=""
- Path to a kubeconfig file that will be used to get client certificate for kubelet. If the file specified by \-\-kubeconfig does not exist, the bootstrap kubeconfig is used to request a client certificate from the API server. On success, a kubeconfig file referencing the generated client certificate and key is written to the path specified by \-\-kubeconfig. The client certificate and key file will be stored in the directory pointed by \-\-cert\-dir.
-
-.PP
-\fB\-\-cadvisor\-port\fP=4194
- The port of the localhost cAdvisor endpoint (set to 0 to disable)
-
-.PP
-\fB\-\-cert\-dir\fP="/var/lib/kubelet/pki"
- The directory where the TLS certs are located. If \-\-tls\-cert\-file and \-\-tls\-private\-key\-file are provided, this flag will be ignored.
-
-.PP
-\fB\-\-cgroup\-driver\fP="cgroupfs"
- Driver that the kubelet uses to manipulate cgroups on the host. Possible values: 'cgroupfs', 'systemd'
-
-.PP
-\fB\-\-cgroup\-root\fP=""
- Optional root cgroup to use for pods. This is handled by the container runtime on a best effort basis. Default: '', which means use the container runtime default.
-
-.PP
-\fB\-\-cgroups\-per\-qos\fP=true
- Enable creation of QoS cgroup hierarchy, if true top level QoS and pod cgroups are created.
-
-.PP
-\fB\-\-chaos\-chance\fP=0
- If > 0.0, introduce random client errors and latency. Intended for testing.
-
-.PP
-\fB\-\-client\-ca\-file\fP=""
- If set, any request presenting a client certificate signed by one of the authorities in the client\-ca\-file is authenticated with an identity corresponding to the CommonName of the client certificate.
-
-.PP
-\fB\-\-cloud\-config\fP=""
- The path to the cloud provider configuration file. Empty string for no configuration file.
-
-.PP
-\fB\-\-cloud\-provider\fP=""
- The provider for cloud services. Specify empty string for running with no cloud provider.
-
-.PP
-\fB\-\-cluster\-dns\fP=[]
- Comma\-separated list of DNS server IP address. This value is used for containers DNS server in case of Pods with "dnsPolicy=ClusterFirst". Note: all DNS servers appearing in the list MUST serve the same set of records otherwise name resolution within the cluster may not work correctly. There is no guarantee as to which DNS server may be contacted for name resolution.
-
-.PP
-\fB\-\-cluster\-domain\fP=""
- Domain for this cluster. If set, kubelet will configure all containers to search this domain in addition to the host's search domains
-
-.PP
-\fB\-\-cni\-bin\-dir\fP=""
- The full path of the directory in which to search for CNI plugin binaries. Default: /opt/cni/bin
-
-.PP
-\fB\-\-cni\-conf\-dir\fP=""
- The full path of the directory in which to search for CNI config files. Default: /etc/cni/net.d
-
-.PP
-\fB\-\-container\-runtime\fP="docker"
- The container runtime to use. Possible values: 'docker', 'rkt'.
-
-.PP
-\fB\-\-container\-runtime\-endpoint\fP="unix:///var/run/dockershim.sock"
- [Experimental] The endpoint of remote runtime service. Currently unix socket is supported on Linux, and tcp is supported on windows. Examples:'unix:///var/run/dockershim.sock', 'tcp://localhost:3735'
-
-.PP
-\fB\-\-containerized\fP=false
- Experimental support for running kubelet in a container. Intended for testing.
-
-.PP
-\fB\-\-contention\-profiling\fP=false
- Enable lock contention profiling, if profiling is enabled
-
-.PP
-\fB\-\-cpu\-cfs\-quota\fP=true
- Enable CPU CFS quota enforcement for containers that specify CPU limits
-
-.PP
-\fB\-\-cpu\-manager\-policy\fP="none"
- CPU Manager policy to use. Possible values: 'none', 'static'. Default: 'none'
-
-.PP
-\fB\-\-cpu\-manager\-reconcile\-period\fP=10s
- CPU Manager reconciliation period. Examples: '10s', or '1m'. If not supplied, defaults to \fB\fCNodeStatusUpdateFrequency\fR
-
-.PP
-\fB\-\-docker\-disable\-shared\-pid\fP=true
- The Container Runtime Interface (CRI) defaults to using a shared PID namespace for containers in a pod when running with Docker 1.13.1 or higher. Setting this flag reverts to the previous behavior of isolated PID namespaces. This ability will be removed in a future Kubernetes release.
-
-.PP
-\fB\-\-docker\-endpoint\fP="unix:///var/run/docker.sock"
- Use this for the docker endpoint to communicate with
-
-.PP
-\fB\-\-dynamic\-config\-dir\fP=""
- The Kubelet will use this directory for checkpointing downloaded configurations and tracking configuration health. The Kubelet will create this directory if it does not already exist. The path may be absolute or relative; relative paths start at the Kubelet's current working directory. Providing this flag enables dynamic Kubelet configuration. Presently, you must also enable the DynamicKubeletConfig feature gate to pass this flag.
-
-.PP
-\fB\-\-enable\-controller\-attach\-detach\fP=true
- Enables the Attach/Detach controller to manage attachment/detachment of volumes scheduled to this node, and disables kubelet from executing any attach/detach operations
-
-.PP
-\fB\-\-enable\-custom\-metrics\fP=false
- Support for gathering custom metrics.
-
-.PP
-\fB\-\-enable\-debugging\-handlers\fP=true
- Enables server endpoints for log collection and local running of containers and commands
-
-.PP
-\fB\-\-enable\-server\fP=true
- Enable the Kubelet's server
-
-.PP
-\fB\-\-enforce\-node\-allocatable\fP=[pods]
- A comma separated list of levels of node allocatable enforcement to be enforced by kubelet. Acceptible options are 'pods', 'system\-reserved' \& 'kube\-reserved'. If the latter two options are specified, '\-\-system\-reserved\-cgroup' \& '\-\-kube\-reserved\-cgroup' must also be set respectively. See
-\[la]https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/\[ra] for more details.
-
-.PP
-\fB\-\-event\-burst\fP=10
- Maximum size of a bursty event records, temporarily allows event records to burst to this number, while still not exceeding event\-qps. Only used if \-\-event\-qps > 0
-
-.PP
-\fB\-\-event\-qps\fP=5
- If > 0, limit event creations per second to this value. If 0, unlimited.
-
-.PP
-\fB\-\-eviction\-hard\fP=imagefs.available<15%,memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%
- A set of eviction thresholds (e.g. memory.available<1Gi) that if met would trigger a pod eviction.
-
-.PP
-\fB\-\-eviction\-max\-pod\-grace\-period\fP=0
- Maximum allowed grace period (in seconds) to use when terminating pods in response to a soft eviction threshold being met. If negative, defer to pod specified value.
-
-.PP
-\fB\-\-eviction\-minimum\-reclaim\fP=
- A set of minimum reclaims (e.g. imagefs.available=2Gi) that describes the minimum amount of resource the kubelet will reclaim when performing a pod eviction if that resource is under pressure.
-
-.PP
-\fB\-\-eviction\-pressure\-transition\-period\fP=5m0s
- Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition.
-
-.PP
-\fB\-\-eviction\-soft\fP=
- A set of eviction thresholds (e.g. memory.available<1.5Gi) that if met over a corresponding grace period would trigger a pod eviction.
-
-.PP
-\fB\-\-eviction\-soft\-grace\-period\fP=
- A set of eviction grace periods (e.g. memory.available=1m30s) that correspond to how long a soft eviction threshold must hold before triggering a pod eviction.
-
-.PP
-\fB\-\-exit\-on\-lock\-contention\fP=false
- Whether kubelet should exit upon lock\-file contention.
-
-.PP
-\fB\-\-experimental\-allocatable\-ignore\-eviction\fP=false
- When set to 'true', Hard Eviction Thresholds will be ignored while calculating Node Allocatable. See
-\[la]https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/\[ra] for more details. [default=false]
-
-.PP
-\fB\-\-experimental\-allowed\-unsafe\-sysctls\fP=[]
- Comma\-separated whitelist of unsafe sysctls or unsafe sysctl patterns (ending in *). Use these at your own risk.
-
-.PP
-\fB\-\-experimental\-bootstrap\-kubeconfig\fP=""
- deprecated: use \-\-bootstrap\-kubeconfig
-
-.PP
-\fB\-\-experimental\-check\-node\-capabilities\-before\-mount\fP=false
- [Experimental] if set true, the kubelet will check the underlying node for required componenets (binaries, etc.) before performing the mount
-
-.PP
-\fB\-\-experimental\-dockershim\fP=false
- Enable dockershim only mode. In this mode, kubelet will only start dockershim without any other functionalities. This flag only serves test purpose, please do not use it unless you are conscious of what you are doing. [default=false]
-
-.PP
-\fB\-\-experimental\-dockershim\-root\-directory\fP="/var/lib/dockershim"
- Path to the dockershim root directory.
-
-.PP
-\fB\-\-experimental\-fail\-swap\-on\fP=true
- DEPRECATED: please use \-\-fail\-swap\-on instead.
-
-.PP
-\fB\-\-experimental\-kernel\-memcg\-notification\fP=false
- If enabled, the kubelet will integrate with the kernel memcg notification to determine if memory eviction thresholds are crossed rather than polling.
-
-.PP
-\fB\-\-experimental\-mounter\-path\fP=""
- [Experimental] Path of mounter binary. Leave empty to use the default mount.
-
-.PP
-\fB\-\-experimental\-qos\-reserved\fP=
- A set of ResourceName=Percentage (e.g. memory=50%) pairs that describe how pod resource requests are reserved at the QoS level. Currently only memory is supported. [default=none]
-
-.PP
-\fB\-\-fail\-swap\-on\fP=true
- Makes the Kubelet fail to start if swap is enabled on the node.
-
-.PP
-\fB\-\-feature\-gates\fP=
- A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
-APIListChunking=true|false (BETA \- default=true)
-APIResponseCompression=true|false (ALPHA \- default=false)
-Accelerators=true|false (ALPHA \- default=false)
-AdvancedAuditing=true|false (BETA \- default=true)
-AllAlpha=true|false (ALPHA \- default=false)
-AllowExtTrafficLocalEndpoints=true|false (default=true)
-AppArmor=true|false (BETA \- default=true)
-BlockVolume=true|false (ALPHA \- default=false)
-CPUManager=true|false (ALPHA \- default=false)
-CSIPersistentVolume=true|false (ALPHA \- default=false)
-CustomPodDNS=true|false (ALPHA \- default=false)
-CustomResourceValidation=true|false (BETA \- default=true)
-DebugContainers=true|false (ALPHA \- default=false)
-DevicePlugins=true|false (ALPHA \- default=false)
-DynamicKubeletConfig=true|false (ALPHA \- default=false)
-EnableEquivalenceClassCache=true|false (ALPHA \- default=false)
-ExpandPersistentVolumes=true|false (ALPHA \- default=false)
-ExperimentalCriticalPodAnnotation=true|false (ALPHA \- default=false)
-ExperimentalHostUserNamespaceDefaulting=true|false (BETA \- default=false)
-HugePages=true|false (ALPHA \- default=false)
-Initializers=true|false (ALPHA \- default=false)
-KubeletConfigFile=true|false (ALPHA \- default=false)
-LocalStorageCapacityIsolation=true|false (ALPHA \- default=false)
-MountContainers=true|false (ALPHA \- default=false)
-MountPropagation=true|false (ALPHA \- default=false)
-PVCProtection=true|false (ALPHA \- default=false)
-PersistentLocalVolumes=true|false (ALPHA \- default=false)
-PodPriority=true|false (ALPHA \- default=false)
-ResourceLimitsPriorityFunction=true|false (ALPHA \- default=false)
-RotateKubeletClientCertificate=true|false (BETA \- default=true)
-RotateKubeletServerCertificate=true|false (ALPHA \- default=false)
-ServiceNodeExclusion=true|false (ALPHA \- default=false)
-StreamingProxyRedirects=true|false (BETA \- default=true)
-SupportIPVSProxyMode=true|false (ALPHA \- default=false)
-TaintBasedEvictions=true|false (ALPHA \- default=false)
-TaintNodesByCondition=true|false (ALPHA \- default=false)
-VolumeScheduling=true|false (ALPHA \- default=false)
-
-.PP
-\fB\-\-file\-check\-frequency\fP=20s
- Duration between checking config files for new data
-
-.PP
-\fB\-\-google\-json\-key\fP=""
- The Google Cloud Platform Service Account JSON Key to use for authentication.
-
-.PP
-\fB\-\-hairpin\-mode\fP="promiscuous\-bridge"
- How should the kubelet setup hairpin NAT. This allows endpoints of a Service to loadbalance back to themselves if they should try to access their own Service. Valid values are "promiscuous\-bridge", "hairpin\-veth" and "none".
-
-.PP
-\fB\-\-healthz\-bind\-address\fP=127.0.0.1
- The IP address for the healthz server to serve on. (set to 0.0.0.0 for all interfaces)
-
-.PP
-\fB\-\-healthz\-port\fP=10248
- The port of the localhost healthz endpoint (set to 0 to disable)
-
-.PP
-\fB\-\-host\-ipc\-sources\fP=[*]
- Comma\-separated list of sources from which the Kubelet allows pods to use the host ipc namespace.
-
-.PP
-\fB\-\-host\-network\-sources\fP=[*]
- Comma\-separated list of sources from which the Kubelet allows pods to use of host network.
-
-.PP
-\fB\-\-host\-pid\-sources\fP=[*]
- Comma\-separated list of sources from which the Kubelet allows pods to use the host pid namespace.
-
-.PP
-\fB\-\-hostname\-override\fP=""
- If non\-empty, will use this string as identification instead of the actual hostname.
-
-.PP
-\fB\-\-http\-check\-frequency\fP=20s
- Duration between checking http for new data
-
-.PP
-\fB\-\-image\-gc\-high\-threshold\fP=85
- The percent of disk usage after which image garbage collection is always run.
-
-.PP
-\fB\-\-image\-gc\-low\-threshold\fP=80
- The percent of disk usage before which image garbage collection is never run. Lowest disk usage to garbage collect to.
-
-.PP
-\fB\-\-image\-pull\-progress\-deadline\fP=1m0s
- If no pulling progress is made before this deadline, the image pulling will be cancelled.
-
-.PP
-\fB\-\-image\-service\-endpoint\fP=""
- [Experimental] The endpoint of remote image service. If not specified, it will be the same with container\-runtime\-endpoint by default. Currently unix socket is supported on Linux, and tcp is supported on windows. Examples:'unix:///var/run/dockershim.sock', 'tcp://localhost:3735'
-
-.PP
-\fB\-\-init\-config\-dir\fP=""
- The Kubelet will look in this directory for the init configuration. The path may be absolute or relative; relative paths start at the Kubelet's current working directory. Omit this argument to use the built\-in default configuration values. Presently, you must also enable the KubeletConfigFile feature gate to pass this flag.
-
-.PP
-\fB\-\-iptables\-drop\-bit\fP=15
- The bit of the fwmark space to mark packets for dropping. Must be within the range [0, 31].
-
-.PP
-\fB\-\-iptables\-masquerade\-bit\fP=14
- The bit of the fwmark space to mark packets for SNAT. Must be within the range [0, 31]. Please match this parameter with corresponding parameter in kube\-proxy.
-
-.PP
-\fB\-\-keep\-terminated\-pod\-volumes\fP=false
- Keep terminated pod volumes mounted to the node after the pod terminates. Can be useful for debugging volume related issues.
-
-.PP
-\fB\-\-kube\-api\-burst\fP=10
- Burst to use while talking with kubernetes apiserver
-
-.PP
-\fB\-\-kube\-api\-content\-type\fP="application/vnd.kubernetes.protobuf"
- Content type of requests sent to apiserver.
-
-.PP
-\fB\-\-kube\-api\-qps\fP=5
- QPS to use while talking with kubernetes apiserver
-
-.PP
-\fB\-\-kube\-reserved\fP=
- A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=500Mi,ephemeral\-storage=1Gi) pairs that describe resources reserved for kubernetes system components. Currently cpu, memory and local ephemeral storage for root file system are supported. See
-\[la]http://kubernetes.io/docs/user-guide/compute-resources\[ra] for more detail. [default=none]
-
-.PP
-\fB\-\-kube\-reserved\-cgroup\fP=""
- Absolute name of the top level cgroup that is used to manage kubernetes components for which compute resources were reserved via '\-\-kube\-reserved' flag. Ex. '/kube\-reserved'. [default='']
-
-.PP
-\fB\-\-kubeconfig\fP="/var/lib/kubelet/kubeconfig"
- Path to a kubeconfig file, specifying how to connect to the API server.
-
-.PP
-\fB\-\-kubelet\-cgroups\fP=""
- Optional absolute name of cgroups to create and run the Kubelet in.
-
-.PP
-\fB\-\-lock\-file\fP=""
- The path to file for kubelet to use as a lock file.
-
-.PP
-\fB\-\-make\-iptables\-util\-chains\fP=true
- If true, kubelet will ensure iptables utility rules are present on host.
-
-.PP
-\fB\-\-manifest\-url\fP=""
- URL for accessing the container manifest
-
-.PP
-\fB\-\-manifest\-url\-header\fP=
- Comma\-separated list of HTTP headers to use when accessing the manifest URL. Multiple headers with the same name will be added in the same order provided. This flag can be repeatedly invoked. For example: \fB\fC\-\-manifest\-url\-header 'a:hello,b:again,c:world' \-\-manifest\-url\-header 'b:beautiful'\fR
-
-.PP
-\fB\-\-master\-service\-namespace\fP="default"
- The namespace from which the kubernetes master services should be injected into pods
-
-.PP
-\fB\-\-max\-open\-files\fP=1000000
- Number of files that can be opened by Kubelet process.
-
-.PP
-\fB\-\-max\-pods\fP=110
- Number of Pods that can run on this Kubelet.
-
-.PP
-\fB\-\-maximum\-dead\-containers\fP=\-1
- Maximum number of old instances of containers to retain globally. Each container takes up some disk space. To disable, set to a negative number.
-
-.PP
-\fB\-\-maximum\-dead\-containers\-per\-container\fP=1
- Maximum number of old instances to retain per container. Each container takes up some disk space.
-
-.PP
-\fB\-\-minimum\-container\-ttl\-duration\fP=0s
- Minimum age for a finished container before it is garbage collected. Examples: '300ms', '10s' or '2h45m'
-
-.PP
-\fB\-\-minimum\-image\-ttl\-duration\fP=2m0s
- Minimum age for an unused image before it is garbage collected. Examples: '300ms', '10s' or '2h45m'.
-
-.PP
-\fB\-\-network\-plugin\fP=""
- The name of the network plugin to be invoked for various events in kubelet/pod lifecycle
-
-.PP
-\fB\-\-network\-plugin\-mtu\fP=0
- The MTU to be passed to the network plugin, to override the default. Set to 0 to use the default 1460 MTU.
-
-.PP
-\fB\-\-node\-ip\fP=""
- IP address of the node. If set, kubelet will use this IP address for the node
-
-.PP
-\fB\-\-node\-labels\fP=
- Labels to add when registering the node in the cluster. Labels must be key=value pairs separated by ','.
-
-.PP
-\fB\-\-node\-status\-update\-frequency\fP=10s
- Specifies how often kubelet posts node status to master. Note: be cautious when changing the constant, it must work with nodeMonitorGracePeriod in nodecontroller.
-
-.PP
-\fB\-\-non\-masquerade\-cidr\fP="10.0.0.0/8"
- Traffic to IPs outside this range will use IP masquerade. Set to '0.0.0.0/0' to never masquerade.
-
-.PP
-\fB\-\-oom\-score\-adj\fP=\-999
- The oom\-score\-adj value for kubelet process. Values must be within the range [\-1000, 1000]
-
-.PP
-\fB\-\-pod\-cidr\fP=""
- The CIDR to use for pod IP addresses, only used in standalone mode. In cluster mode, this is obtained from the master.
-
-.PP
-\fB\-\-pod\-infra\-container\-image\fP="gcr.io/google\_containers/pause\-amd64:3.0"
- The image whose network/ipc namespaces containers in each pod will use.
-
-.PP
-\fB\-\-pod\-manifest\-path\fP=""
- Path to the directory containing pod manifest files to run, or the path to a single pod manifest file. Files starting with dots will be ignored.
-
-.PP
-\fB\-\-pods\-per\-core\fP=0
- Number of Pods per core that can run on this Kubelet. The total number of Pods on this Kubelet cannot exceed max\-pods, so max\-pods will be used if this calculation results in a larger number of Pods allowed on the Kubelet. A value of 0 disables this limit.
-
-.PP
-\fB\-\-port\fP=10250
- The port for the Kubelet to serve on.
-
-.PP
-\fB\-\-protect\-kernel\-defaults\fP=false
- Default kubelet behaviour for kernel tuning. If set, kubelet errors if any of kernel tunables is different than kubelet defaults.
-
-.PP
-\fB\-\-provider\-id\fP=""
- Unique identifier for identifying the node in a machine database, i.e cloudprovider
-
-.PP
-\fB\-\-read\-only\-port\fP=10255
- The read\-only port for the Kubelet to serve on with no authentication/authorization (set to 0 to disable)
-
-.PP
-\fB\-\-really\-crash\-for\-testing\fP=false
- If true, when panics occur crash. Intended for testing.
-
-.PP
-\fB\-\-register\-node\fP=true
- Register the node with the apiserver. If \-\-kubeconfig is not provided, this flag is irrelevant, as the Kubelet won't have an apiserver to register with. Default=true.
-
-.PP
-\fB\-\-register\-schedulable\fP=true
- Register the node as schedulable. Won't have any effect if register\-node is false.
-
-.PP
-\fB\-\-register\-with\-taints\fP=
- Register the node with the given list of taints (comma separated "=:"). No\-op if register\-node is false.
-
-.PP
-\fB\-\-registry\-burst\fP=10
- Maximum size of a bursty pulls, temporarily allows pulls to burst to this number, while still not exceeding registry\-qps. Only used if \-\-registry\-qps > 0
-
-.PP
-\fB\-\-registry\-qps\fP=5
- If > 0, limit registry pull QPS to this value. If 0, unlimited.
-
-.PP
-\fB\-\-require\-kubeconfig\fP=false
- This flag is no longer necessary. It has been deprecated and will be removed in a future version.
-
-.PP
-\fB\-\-resolv\-conf\fP="/etc/resolv.conf"
- Resolver configuration file used as the basis for the container DNS resolution configuration.
-
-.PP
-\fB\-\-rkt\-api\-endpoint\fP="localhost:15441"
- The endpoint of the rkt API service to communicate with. Only used if \-\-container\-runtime='rkt'.
-
-.PP
-\fB\-\-rkt\-path\fP=""
- Path of rkt binary. Leave empty to use the first rkt in $PATH. Only used if \-\-container\-runtime='rkt'.
-
-.PP
-\fB\-\-rkt\-stage1\-image\fP=""
- image to use as stage1. Local paths and http/https URLs are supported. If empty, the 'stage1.aci' in the same directory as '\-\-rkt\-path' will be used.
-
-.PP
-\fB\-\-root\-dir\fP="/var/lib/kubelet"
- Directory path for managing kubelet files (volume mounts,etc).
-
-.PP
-\fB\-\-rotate\-certificates\fP=false
- Auto rotate the kubelet client certificates by requesting new certificates from the kube\-apiserver when the certificate expiration approaches.
-
-.PP
-\fB\-\-runonce\fP=false
- If true, exit after spawning pods from local manifests or remote urls. Exclusive with \-\-enable\-server
-
-.PP
-\fB\-\-runtime\-cgroups\fP=""
- Optional absolute name of cgroups to create and run the runtime in.
-
-.PP
-\fB\-\-runtime\-request\-timeout\fP=2m0s
- Timeout of all runtime requests except long running request \- pull, logs, exec and attach. When timeout exceeded, kubelet will cancel the request, throw out an error and retry later.
-
-.PP
-\fB\-\-seccomp\-profile\-root\fP="/var/lib/kubelet/seccomp"
- Directory path for seccomp profiles.
-
-.PP
-\fB\-\-serialize\-image\-pulls\fP=true
- Pull images one at a time. We recommend \fInot\fP changing the default value on nodes that run docker daemon with version < 1.9 or an Aufs storage backend. Issue #10959 has more details.
-
-.PP
-\fB\-\-streaming\-connection\-idle\-timeout\fP=4h0m0s
- Maximum time a streaming connection can be idle before the connection is automatically closed. 0 indicates no timeout. Example: '5m'
-
-.PP
-\fB\-\-sync\-frequency\fP=1m0s
- Max period between synchronizing running containers and config
-
-.PP
-\fB\-\-system\-cgroups\fP=""
- Optional absolute name of cgroups in which to place all non\-kernel processes that are not already inside a cgroup under \fB\fC/\fR. Empty for no container. Rolling back the flag requires a reboot.
-
-.PP
-\fB\-\-system\-reserved\fP=
- A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=500Mi,ephemeral\-storage=1Gi) pairs that describe resources reserved for non\-kubernetes components. Currently only cpu and memory are supported. See
-\[la]http://kubernetes.io/docs/user-guide/compute-resources\[ra] for more detail. [default=none]
-
-.PP
-\fB\-\-system\-reserved\-cgroup\fP=""
- Absolute name of the top level cgroup that is used to manage non\-kubernetes components for which compute resources were reserved via '\-\-system\-reserved' flag. Ex. '/system\-reserved'. [default='']
-
-.PP
-\fB\-\-tls\-cert\-file\fP=""
- File containing x509 Certificate used for serving HTTPS (with intermediate certs, if any, concatenated after server cert). If \-\-tls\-cert\-file and \-\-tls\-private\-key\-file are not provided, a self\-signed certificate and key are generated for the public address and saved to the directory passed to \-\-cert\-dir.
-
-.PP
-\fB\-\-tls\-private\-key\-file\fP=""
- File containing x509 private key matching \-\-tls\-cert\-file.
-
-.PP
-\fB\-\-version\fP=false
- Print version information and quit
-
-.PP
-\fB\-\-volume\-plugin\-dir\fP="/usr/libexec/kubernetes/kubelet\-plugins/volume/exec/"
- The full path of the directory in which to search for additional third party volume plugins
-
-.PP
-\fB\-\-volume\-stats\-agg\-period\fP=1m0s
- Specifies interval for kubelet to calculate and cache the volume disk usage for all pods and volumes. To disable volume calculations, set to 0.
-
-
-.SH HISTORY
-.PP
-January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl.md
index 714078f94036..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl.md
@@ -1,88 +1,3 @@
-## kubectl
-
-kubectl controls the Kubernetes cluster manager
-
-### Synopsis
-
-
-kubectl controls the Kubernetes cluster manager.
-
-Find more information at https://github.com/kubernetes/kubernetes.
-
-```
-kubectl
-```
-
-### Options
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl alpha](kubectl_alpha.md) - Commands for features in alpha
-* [kubectl annotate](kubectl_annotate.md) - Update the annotations on a resource
-* [kubectl api-versions](kubectl_api-versions.md) - Print the supported API versions on the server, in the form of "group/version"
-* [kubectl apply](kubectl_apply.md) - Apply a configuration to a resource by filename or stdin
-* [kubectl attach](kubectl_attach.md) - Attach to a running container
-* [kubectl auth](kubectl_auth.md) - Inspect authorization
-* [kubectl autoscale](kubectl_autoscale.md) - Auto-scale a Deployment, ReplicaSet, or ReplicationController
-* [kubectl certificate](kubectl_certificate.md) - Modify certificate resources.
-* [kubectl cluster-info](kubectl_cluster-info.md) - Display cluster info
-* [kubectl completion](kubectl_completion.md) - Output shell completion code for the specified shell (bash or zsh)
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-* [kubectl convert](kubectl_convert.md) - Convert config files between different API versions
-* [kubectl cordon](kubectl_cordon.md) - Mark node as unschedulable
-* [kubectl cp](kubectl_cp.md) - Copy files and directories to and from containers.
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-* [kubectl delete](kubectl_delete.md) - Delete resources by filenames, stdin, resources and names, or by resources and label selector
-* [kubectl describe](kubectl_describe.md) - Show details of a specific resource or group of resources
-* [kubectl drain](kubectl_drain.md) - Drain node in preparation for maintenance
-* [kubectl edit](kubectl_edit.md) - Edit a resource on the server
-* [kubectl exec](kubectl_exec.md) - Execute a command in a container
-* [kubectl explain](kubectl_explain.md) - Documentation of resources
-* [kubectl expose](kubectl_expose.md) - Take a replication controller, service, deployment or pod and expose it as a new Kubernetes Service
-* [kubectl get](kubectl_get.md) - Display one or many resources
-* [kubectl label](kubectl_label.md) - Update the labels on a resource
-* [kubectl logs](kubectl_logs.md) - Print the logs for a container in a pod
-* [kubectl options](kubectl_options.md) - Print the list of flags inherited by all commands
-* [kubectl patch](kubectl_patch.md) - Update field(s) of a resource using strategic merge patch
-* [kubectl plugin](kubectl_plugin.md) - Runs a command-line plugin
-* [kubectl port-forward](kubectl_port-forward.md) - Forward one or more local ports to a pod
-* [kubectl proxy](kubectl_proxy.md) - Run a proxy to the Kubernetes API server
-* [kubectl replace](kubectl_replace.md) - Replace a resource by filename or stdin
-* [kubectl rolling-update](kubectl_rolling-update.md) - Perform a rolling update of the given ReplicationController
-* [kubectl rollout](kubectl_rollout.md) - Manage the rollout of a resource
-* [kubectl run](kubectl_run.md) - Run a particular image on the cluster
-* [kubectl scale](kubectl_scale.md) - Set a new size for a Deployment, ReplicaSet, Replication Controller, or Job
-* [kubectl set](kubectl_set.md) - Set specific features on objects
-* [kubectl taint](kubectl_taint.md) - Update the taints on one or more nodes
-* [kubectl top](kubectl_top.md) - Display Resource (CPU/Memory/Storage) usage.
-* [kubectl uncordon](kubectl_uncordon.md) - Mark node as schedulable
-* [kubectl version](kubectl_version.md) - Print the client and server version information
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_alpha.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_alpha.md
index a9a35cd780cd..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_alpha.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_alpha.md
@@ -1,44 +1,3 @@
-## kubectl alpha
-
-Commands for features in alpha
-
-### Synopsis
-
-
-These commands correspond to alpha features that are not enabled in Kubernetes clusters by default.
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-* [kubectl alpha diff](kubectl_alpha_diff.md) - Diff different versions of configurations
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_alpha_diff.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_alpha_diff.md
index 874984af6b7b..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_alpha_diff.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_alpha_diff.md
@@ -1,73 +1,3 @@
-## kubectl alpha diff
-
-Diff different versions of configurations
-
-### Synopsis
-
-
-Diff configurations specified by filename or stdin between their local, last-applied, live and/or "merged" versions.
-
-LOCAL and LIVE versions are diffed by default. Other availble keywords are MERGED and LAST.
-
-Output is always YAML.
-
-KUBERNETES EXTERNAL DIFF environment variable can be used to select your own diff command. By default, the "diff" command available in your path will be run with "-u" (unicode) and "-N" (treat new files as empty) options.
-
-```
-kubectl alpha diff -f FILENAME
-```
-
-### Examples
-
-```
- # Diff resources included in pod.json. By default, it will diff LOCAL and LIVE versions
- kubectl alpha diff -f pod.json
-
- # When one version is specified, diff that version against LIVE
- cat service.yaml | kubectl alpha diff -f - MERGED
-
- # Or specify both versions
- kubectl alpha diff -f pod.json -f service.yaml LAST LOCAL
-```
-
-### Options
-
-```
- -f, --filename stringSlice Filename, directory, or URL to files contains the configuration to diff
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl alpha](kubectl_alpha.md) - Commands for features in alpha
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_annotate.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_annotate.md
index 82bd751bb4c4..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_annotate.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_annotate.md
@@ -1,137 +1,3 @@
-## kubectl annotate
-
-Update the annotations on a resource
-
-### Synopsis
-
-
-Update the annotations on one or more resources
-
-All Kubernetes objects support the ability to store additional data with the object as annotations. Annotations are key/value pairs that can be larger than labels and include arbitrary string values such as structured JSON. Tools and system extensions may use annotations to store their own data.
-
-Attempting to set an annotation that already exists will fail unless --overwrite is set. If --resource-version is specified and does not match the current resource version on the server the command will fail.
-
-Valid resource types include:
-
- * all
- * certificatesigningrequests (aka 'csr')
- * clusterrolebindings
- * clusterroles
- * componentstatuses (aka 'cs')
- * configmaps (aka 'cm')
- * controllerrevisions
- * cronjobs
- * customresourcedefinition (aka 'crd')
- * daemonsets (aka 'ds')
- * deployments (aka 'deploy')
- * endpoints (aka 'ep')
- * events (aka 'ev')
- * horizontalpodautoscalers (aka 'hpa')
- * ingresses (aka 'ing')
- * jobs
- * limitranges (aka 'limits')
- * namespaces (aka 'ns')
- * networkpolicies (aka 'netpol')
- * nodes (aka 'no')
- * persistentvolumeclaims (aka 'pvc')
- * persistentvolumes (aka 'pv')
- * poddisruptionbudgets (aka 'pdb')
- * podpreset
- * pods (aka 'po')
- * podsecuritypolicies (aka 'psp')
- * podtemplates
- * replicasets (aka 'rs')
- * replicationcontrollers (aka 'rc')
- * resourcequotas (aka 'quota')
- * rolebindings
- * roles
- * secrets
- * serviceaccounts (aka 'sa')
- * services (aka 'svc')
- * statefulsets (aka 'sts')
- * storageclasses (aka 'sc')
-
-```
-kubectl annotate [--overwrite] (-f FILENAME | TYPE NAME) KEY_1=VAL_1 ... KEY_N=VAL_N [--resource-version=version]
-```
-
-### Examples
-
-```
- # Update pod 'foo' with the annotation 'description' and the value 'my frontend'.
- # If the same annotation is set multiple times, only the last value will be applied
- kubectl annotate pods foo description='my frontend'
-
- # Update a pod identified by type and name in "pod.json"
- kubectl annotate -f pod.json description='my frontend'
-
- # Update pod 'foo' with the annotation 'description' and the value 'my frontend running nginx', overwriting any existing value.
- kubectl annotate --overwrite pods foo description='my frontend running nginx'
-
- # Update all pods in the namespace
- kubectl annotate pods --all description='my frontend running nginx'
-
- # Update pod 'foo' only if the resource is unchanged from version 1.
- kubectl annotate pods foo description='my frontend running nginx' --resource-version=1
-
- # Update pod 'foo' by removing an annotation named 'description' if it exists.
- # Does not require the --overwrite flag.
- kubectl annotate pods foo description-
-```
-
-### Options
-
-```
- --all Select all resources, including uninitialized ones, in the namespace of the specified resource types.
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- -f, --filename stringSlice Filename, directory, or URL to files identifying the resource to update the annotation
- --include-uninitialized If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "--all". Objects with empty metadata.initializers are regarded as initialized.
- --local If true, annotation will NOT contact api-server but run locally.
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --overwrite If true, allow annotations to be overwritten, otherwise reject annotation updates that overwrite existing annotations.
- --record Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
- --resource-version string If non-empty, the annotation update will only succeed if this is the current resource-version for the object. Only valid when specifying a single resource.
- -l, --selector string Selector (label query) to filter on, not including uninitialized ones, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2).
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_api-versions.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_api-versions.md
index 2fd638ab50f8..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_api-versions.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_api-versions.md
@@ -1,54 +1,3 @@
-## kubectl api-versions
-
-Print the supported API versions on the server, in the form of "group/version"
-
-### Synopsis
-
-
-Print the supported API versions on the server, in the form of "group/version"
-
-```
-kubectl api-versions
-```
-
-### Examples
-
-```
- # Print the supported API versions
- kubectl api-versions
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply.md
index 7746c3764e59..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply.md
@@ -1,99 +1,3 @@
-## kubectl apply
-
-Apply a configuration to a resource by filename or stdin
-
-### Synopsis
-
-
-Apply a configuration to a resource by filename or stdin. The resource name must be specified. This resource will be created if it doesn't exist yet. To use 'apply', always create the resource initially with either 'apply' or 'create --save-config'.
-
-JSON and YAML formats are accepted.
-
-Alpha Disclaimer: the --prune functionality is not yet complete. Do not use unless you are aware of what the current state is. See https://issues.k8s.io/34274.
-
-```
-kubectl apply -f FILENAME
-```
-
-### Examples
-
-```
- # Apply the configuration in pod.json to a pod.
- kubectl apply -f ./pod.json
-
- # Apply the JSON passed into stdin to a pod.
- cat pod.json | kubectl apply -f -
-
- # Note: --prune is still in Alpha
- # Apply the configuration in manifest.yaml that matches label app=nginx and delete all the other resources that are not in the file and match label app=nginx.
- kubectl apply --prune -f manifest.yaml -l app=nginx
-
- # Apply the configuration in manifest.yaml and delete all the other configmaps that are not in the file.
- kubectl apply --prune -f manifest.yaml --all --prune-whitelist=core/v1/ConfigMap
-```
-
-### Options
-
-```
- --all Select all resources in the namespace of the specified resource types.
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --cascade Only relevant during a prune or a force apply. If true, cascade the deletion of the resources managed by pruned or deleted resources (e.g. Pods created by a ReplicationController). (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- -f, --filename stringSlice Filename, directory, or URL to files that contains the configuration to apply
- --force Delete and re-create the specified resource, when PATCH encounters conflict and has retried for 5 times.
- --grace-period int Only relevant during a prune or a force apply. Period of time in seconds given to pruned or deleted resources to terminate gracefully. Ignored if negative. (default -1)
- --include-uninitialized If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "--all". Objects with empty metadata.initializers are regarded as initialized.
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- --openapi-patch If true, use openapi to calculate diff when the openapi presents and the resource can be found in the openapi spec. Otherwise, fall back to use baked-in types. (default true)
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --overwrite Automatically resolve conflicts between the modified and live configuration by using values from the modified configuration (default true)
- --prune Automatically delete resource objects, including the uninitialized ones, that do not appear in the configs and are created by either apply or create --save-config. Should be used with either -l or --all.
- --prune-whitelist stringArray Overwrite the default whitelist with for --prune
- --record Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
- -l, --selector string Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2)
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --timeout duration Only relevant during a force apply. The length of time to wait before giving up on a delete of the old resource, zero means determine a timeout from the size of the object. Any other values should contain a corresponding time unit (e.g. 1s, 2m, 3h).
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-* [kubectl apply edit-last-applied](kubectl_apply_edit-last-applied.md) - Edit latest last-applied-configuration annotations of a resource/object
-* [kubectl apply set-last-applied](kubectl_apply_set-last-applied.md) - Set the last-applied-configuration annotation on a live object to match the contents of a file.
-* [kubectl apply view-last-applied](kubectl_apply_view-last-applied.md) - View latest last-applied-configuration annotations of a resource/object
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_edit-last-applied.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_edit-last-applied.md
index c8ac9cb5e63a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_edit-last-applied.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_edit-last-applied.md
@@ -1,76 +1,3 @@
-## kubectl apply edit-last-applied
-
-Edit latest last-applied-configuration annotations of a resource/object
-
-### Synopsis
-
-
-Edit the latest last-applied-configuration annotations of resources from the default editor.
-
-The edit-last-applied command allows you to directly edit any API resource you can retrieve via the command line tools. It will open the editor defined by your KUBE _EDITOR, or EDITOR environment variables, or fall back to 'vi' for Linux or 'notepad' for Windows. You can edit multiple objects, although changes are applied one at a time. The command accepts filenames as well as command line arguments, although the files you point to must be previously saved versions of resources.
-
-The default format is YAML. To edit in JSON, specify "-o json".
-
-The flag --windows-line-endings can be used to force Windows line endings, otherwise the default for your operating system will be used.
-
-In the event an error occurs while updating, a temporary file will be created on disk that contains your unapplied changes. The most common error when updating a resource is another editor changing the resource on the server. When this occurs, you will have to apply your changes to the newer version of the resource, or update your temporary saved copy to include the latest resource version.
-
-```
-kubectl apply edit-last-applied (RESOURCE/NAME | -f FILENAME)
-```
-
-### Examples
-
-```
- # Edit the last-applied-configuration annotations by type/name in YAML.
- kubectl apply edit-last-applied deployment/nginx
-
- # Edit the last-applied-configuration annotations by file in JSON.
- kubectl apply edit-last-applied -f deploy.yaml -o json
-```
-
-### Options
-
-```
- -f, --filename stringSlice Filename, directory, or URL to files to use to edit the resource
- --include-uninitialized If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "--all". Objects with empty metadata.initializers are regarded as initialized.
- -o, --output string Output format. One of: yaml|json. (default "yaml")
- --record Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
- --windows-line-endings Defaults to the line ending native to your platform.
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl apply](kubectl_apply.md) - Apply a configuration to a resource by filename or stdin
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_set-last-applied.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_set-last-applied.md
index 0544b507cb23..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_set-last-applied.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_set-last-applied.md
@@ -1,76 +1,3 @@
-## kubectl apply set-last-applied
-
-Set the last-applied-configuration annotation on a live object to match the contents of a file.
-
-### Synopsis
-
-
-Set the latest last-applied-configuration annotations by setting it to match the contents of a file. This results in the last-applied-configuration being updated as though 'kubectl apply -f ' was run, without updating any other parts of the object.
-
-```
-kubectl apply set-last-applied -f FILENAME
-```
-
-### Examples
-
-```
- # Set the last-applied-configuration of a resource to match the contents of a file.
- kubectl apply set-last-applied -f deploy.yaml
-
- # Execute set-last-applied against each configuration file in a directory.
- kubectl apply set-last-applied -f path/
-
- # Set the last-applied-configuration of a resource to match the contents of a file, will create the annotation if it does not already exist.
- kubectl apply set-last-applied -f deploy.yaml --create-annotation=true
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --create-annotation Will create 'last-applied-configuration' annotations if current objects doesn't have one
- --dry-run If true, only print the object that would be sent, without sending it.
- -f, --filename stringSlice Filename, directory, or URL to files that contains the last-applied-configuration annotations
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --record Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl apply](kubectl_apply.md) - Apply a configuration to a resource by filename or stdin
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_view-last-applied.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_view-last-applied.md
index 9bab53df479a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_view-last-applied.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_apply_view-last-applied.md
@@ -1,69 +1,3 @@
-## kubectl apply view-last-applied
-
-View latest last-applied-configuration annotations of a resource/object
-
-### Synopsis
-
-
-View the latest last-applied-configuration annotations by type/name or file.
-
-The default output will be printed to stdout in YAML format. One can use -o option to change output format.
-
-```
-kubectl apply view-last-applied (TYPE [NAME | -l label] | TYPE/NAME | -f FILENAME)
-```
-
-### Examples
-
-```
- # View the last-applied-configuration annotations by type/name in YAML.
- kubectl apply view-last-applied deployment/nginx
-
- # View the last-applied-configuration annotations by file in JSON
- kubectl apply view-last-applied -f deploy.yaml -o json
-```
-
-### Options
-
-```
- --all Select all resources in the namespace of the specified resource types
- -f, --filename stringSlice Filename, directory, or URL to files that contains the last-applied-configuration annotations
- -o, --output string Output format. Must be one of yaml|json
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
- -l, --selector string Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl apply](kubectl_apply.md) - Apply a configuration to a resource by filename or stdin
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_attach.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_attach.md
index 51d4e9909fd0..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_attach.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_attach.md
@@ -1,73 +1,3 @@
-## kubectl attach
-
-Attach to a running container
-
-### Synopsis
-
-
-Attach to a process that is already running inside an existing container.
-
-```
-kubectl attach (POD | TYPE/NAME) -c CONTAINER
-```
-
-### Examples
-
-```
- # Get output from running pod 123456-7890, using the first container by default
- kubectl attach 123456-7890
-
- # Get output from ruby-container from pod 123456-7890
- kubectl attach 123456-7890 -c ruby-container
-
- # Switch to raw terminal mode, sends stdin to 'bash' in ruby-container from pod 123456-7890
- # and sends stdout/stderr from 'bash' back to the client
- kubectl attach 123456-7890 -c ruby-container -i -t
-
- # Get output from the first pod of a ReplicaSet named nginx
- kubectl attach rs/nginx
-```
-
-### Options
-
-```
- -c, --container string Container name. If omitted, the first container in the pod will be chosen
- --pod-running-timeout duration The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running (default 1m0s)
- -i, --stdin Pass stdin to the container
- -t, --tty Stdin is a TTY
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth.md
index 8d46fb9c9f64..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth.md
@@ -1,49 +1,3 @@
-## kubectl auth
-
-Inspect authorization
-
-### Synopsis
-
-
-Inspect authorization
-
-```
-kubectl auth
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-* [kubectl auth can-i](kubectl_auth_can-i.md) - Check whether an action is allowed
-* [kubectl auth reconcile](kubectl_auth_reconcile.md) - Reconciles rules for RBAC Role, RoleBinding, ClusterRole, and ClusterRole binding objects
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth_can-i.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth_can-i.md
index ef13481b792c..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth_can-i.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth_can-i.md
@@ -1,79 +1,3 @@
-## kubectl auth can-i
-
-Check whether an action is allowed
-
-### Synopsis
-
-
-Check whether an action is allowed.
-
-VERB is a logical Kubernetes API verb like 'get', 'list', 'watch', 'delete', etc. TYPE is a Kubernetes resource. Shortcuts and groups will be resolved. NONRESOURCEURL is a partial URL starts with "/". NAME is the name of a particular Kubernetes resource.
-
-```
-kubectl auth can-i VERB [TYPE | TYPE/NAME | NONRESOURCEURL]
-```
-
-### Examples
-
-```
- # Check to see if I can create pods in any namespace
- kubectl auth can-i create pods --all-namespaces
-
- # Check to see if I can list deployments in my current namespace
- kubectl auth can-i list deployments.extensions
-
- # Check to see if I can do everything in my current namespace ("*" means all)
- kubectl auth can-i '*' '*'
-
- # Check to see if I can get the job named "bar" in namespace "foo"
- kubectl auth can-i list jobs.batch/bar -n foo
-
- # Check to see if I can read pod logs
- kubectl auth can-i get pods --subresource=log
-
- # Check to see if I can access the URL /logs/
- kubectl auth can-i get /logs/
-```
-
-### Options
-
-```
- --all-namespaces If true, check the specified action in all namespaces.
- -q, --quiet If true, suppress output and just return the exit code.
- --subresource string SubResource such as pod/log or deployment/scale
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl auth](kubectl_auth.md) - Inspect authorization
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth_reconcile.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth_reconcile.md
index 2385678e671f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth_reconcile.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_auth_reconcile.md
@@ -1,70 +1,3 @@
-## kubectl auth reconcile
-
-Reconciles rules for RBAC Role, RoleBinding, ClusterRole, and ClusterRole binding objects
-
-### Synopsis
-
-
-Reconciles rules for RBAC Role, RoleBinding, ClusterRole, and ClusterRole binding objects.
-
-This is preferred to 'apply' for RBAC resources so that proper rule coverage checks are done.
-
-```
-kubectl auth reconcile -f FILENAME
-```
-
-### Examples
-
-```
- # Reconcile rbac resources from a file
- kubectl auth reconcile -f my-rbac-rules.yaml
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- -f, --filename stringSlice Filename, directory, or URL to files identifying the resource to reconcile.
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl auth](kubectl_auth.md) - Inspect authorization
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_autoscale.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_autoscale.md
index 4a020761dadc..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_autoscale.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_autoscale.md
@@ -1,81 +1,3 @@
-## kubectl autoscale
-
-Auto-scale a Deployment, ReplicaSet, or ReplicationController
-
-### Synopsis
-
-
-Creates an autoscaler that automatically chooses and sets the number of pods that run in a kubernetes cluster.
-
-Looks up a Deployment, ReplicaSet, or ReplicationController by name and creates an autoscaler that uses the given resource as a reference. An autoscaler can automatically increase or decrease number of pods deployed within the system as needed.
-
-```
-kubectl autoscale (-f FILENAME | TYPE NAME | TYPE/NAME) [--min=MINPODS] --max=MAXPODS [--cpu-percent=CPU] [flags]
-```
-
-### Examples
-
-```
- # Auto scale a deployment "foo", with the number of pods between 2 and 10, no target CPU utilization specified so a default autoscaling policy will be used:
- kubectl autoscale deployment foo --min=2 --max=10
-
- # Auto scale a replication controller "foo", with the number of pods between 1 and 5, target CPU utilization at 80%:
- kubectl autoscale rc foo --max=5 --cpu-percent=80
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --cpu-percent int The target average CPU utilization (represented as a percent of requested CPU) over all the pods. If it's not specified or negative, a default autoscaling policy will be used. (default -1)
- --dry-run If true, only print the object that would be sent, without sending it.
- -f, --filename stringSlice Filename, directory, or URL to files identifying the resource to autoscale.
- --generator string The name of the API generator to use. Currently there is only 1 generator. (default "horizontalpodautoscaler/v1")
- --max int The upper limit for the number of pods that can be set by the autoscaler. Required. (default -1)
- --min int The lower limit for the number of pods that can be set by the autoscaler. If it's not specified or negative, the server will apply a default value. (default -1)
- --name string The name for the newly created object. If not specified, the name of the input resource will be used.
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --record Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate.md
index a9869c72a829..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate.md
@@ -1,49 +1,3 @@
-## kubectl certificate
-
-Modify certificate resources.
-
-### Synopsis
-
-
-Modify certificate resources.
-
-```
-kubectl certificate SUBCOMMAND
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-* [kubectl certificate approve](kubectl_certificate_approve.md) - Approve a certificate signing request
-* [kubectl certificate deny](kubectl_certificate_deny.md) - Deny a certificate signing request
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate_approve.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate_approve.md
index 85546bafd0b1..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate_approve.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate_approve.md
@@ -1,59 +1,3 @@
-## kubectl certificate approve
-
-Approve a certificate signing request
-
-### Synopsis
-
-
-Approve a certificate signing request.
-
-kubectl certificate approve allows a cluster admin to approve a certificate signing request (CSR). This action tells a certificate signing controller to issue a certificate to the requestor with the attributes requested in the CSR.
-
-SECURITY NOTICE: Depending on the requested attributes, the issued certificate can potentially grant a requester access to cluster resources or to authenticate as a requested identity. Before approving a CSR, ensure you understand what the signed certificate can do.
-
-```
-kubectl certificate approve (-f FILENAME | NAME)
-```
-
-### Options
-
-```
- -f, --filename stringSlice Filename, directory, or URL to files identifying the resource to update
- -o, --output string Output mode. Use "-o name" for shorter output (resource/name).
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl certificate](kubectl_certificate.md) - Modify certificate resources.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate_deny.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate_deny.md
index 670b34c0ac21..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate_deny.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_certificate_deny.md
@@ -1,57 +1,3 @@
-## kubectl certificate deny
-
-Deny a certificate signing request
-
-### Synopsis
-
-
-Deny a certificate signing request.
-
-kubectl certificate deny allows a cluster admin to deny a certificate signing request (CSR). This action tells a certificate signing controller to not to issue a certificate to the requestor.
-
-```
-kubectl certificate deny (-f FILENAME | NAME)
-```
-
-### Options
-
-```
- -f, --filename stringSlice Filename, directory, or URL to files identifying the resource to update
- -o, --output string Output mode. Use "-o name" for shorter output (resource/name).
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl certificate](kubectl_certificate.md) - Modify certificate resources.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cluster-info.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cluster-info.md
index 0ea3f8485acb..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cluster-info.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cluster-info.md
@@ -1,60 +1,3 @@
-## kubectl cluster-info
-
-Display cluster info
-
-### Synopsis
-
-
-Display addresses of the master and services with label kubernetes.io/cluster-service=true To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.
-
-```
-kubectl cluster-info
-```
-
-### Examples
-
-```
- # Print the address of the master and cluster services
- kubectl cluster-info
-```
-
-### Options
-
-```
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-* [kubectl cluster-info dump](kubectl_cluster-info_dump.md) - Dump lots of relevant info for debugging and diagnosis
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cluster-info_dump.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cluster-info_dump.md
index b64dc67b0bbd..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cluster-info_dump.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cluster-info_dump.md
@@ -1,74 +1,3 @@
-## kubectl cluster-info dump
-
-Dump lots of relevant info for debugging and diagnosis
-
-### Synopsis
-
-
-Dumps cluster info out suitable for debugging and diagnosing cluster problems. By default, dumps everything to stdout. You can optionally specify a directory with --output-directory. If you specify a directory, kubernetes will build a set of files in that directory. By default only dumps things in the 'kube-system' namespace, but you can switch to a different namespace with the --namespaces flag, or specify --all-namespaces to dump all namespaces.
-
-The command also dumps the logs of all of the pods in the cluster, these logs are dumped into different directories based on namespace and pod name.
-
-```
-kubectl cluster-info dump
-```
-
-### Examples
-
-```
- # Dump current cluster state to stdout
- kubectl cluster-info dump
-
- # Dump current cluster state to /path/to/cluster-state
- kubectl cluster-info dump --output-directory=/path/to/cluster-state
-
- # Dump all namespaces to stdout
- kubectl cluster-info dump --all-namespaces
-
- # Dump a set of namespaces to /path/to/cluster-state
- kubectl cluster-info dump --namespaces default,kube-system --output-directory=/path/to/cluster-state
-```
-
-### Options
-
-```
- --all-namespaces If true, dump all namespaces. If true, --namespaces is ignored.
- --namespaces stringSlice A comma separated list of namespaces to dump.
- --output-directory string Where to output the files. If empty or '-' uses stdout, otherwise creates a directory hierarchy in that directory
- --pod-running-timeout duration The length of time (like 5s, 2m, or 3h, higher than zero) to wait until at least one pod is running (default 20s)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl cluster-info](kubectl_cluster-info.md) - Display cluster info
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_completion.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_completion.md
index 1478062ea24c..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_completion.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_completion.md
@@ -1,81 +1,3 @@
-## kubectl completion
-
-Output shell completion code for the specified shell (bash or zsh)
-
-### Synopsis
-
-
-Output shell completion code for the specified shell (bash or zsh). The shell code must be evalutated to provide interactive completion of kubectl commands. This can be done by sourcing it from the .bash _profile.
-
-Detailed instructions on how to do this are available here: https://kubernetes.io/docs/tasks/tools/install-kubectl/#enabling-shell-autocompletion
-
-Note for zsh users: [1] zsh completions are only supported in versions of zsh >= 5.2
-
-```
-kubectl completion SHELL
-```
-
-### Examples
-
-```
- # Installing bash completion on macOS using homebrew
- ## If running Bash 3.2 included with macOS
- brew install bash-completion
- ## or, if running Bash 4.1+
- brew install bash-completion@2
- ## If kubectl is installed via homebrew, this should start working immediately.
- ## If you've installed via other means, you may need add the completion to your completion directory
- kubectl completion bash > $(brew --prefix)/etc/bash_completion.d/kubectl
-
-
- # Installing bash completion on Linux
- ## Load the kubectl completion code for bash into the current shell
- source <(kubectl completion bash)
- ## Write bash completion code to a file and source if from .bash_profile
- kubectl completion bash > ~/.kube/completion.bash.inc
- printf "
- # Kubectl shell completion
- source '$HOME/.kube/completion.bash.inc'
- " >> $HOME/.bash_profile
- source $HOME/.bash_profile
-
- # Load the kubectl completion code for zsh[1] into the current shell
- source <(kubectl completion zsh)
- # Set the kubectl completion code for zsh[1] to autoload on startup
- kubectl completion zsh > "${fpath[1]}/_kubectl"
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config.md
index f11c73b41e82..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config.md
@@ -1,71 +1,3 @@
-## kubectl config
-
-Modify kubeconfig files
-
-### Synopsis
-
-
-Modify kubeconfig files using subcommands like "kubectl config set current-context my-context"
-
-The loading order follows these rules:
-
- 1. If the --kubeconfig flag is set, then only that file is loaded. The flag may only be set once and no merging takes place.
- 2. If $KUBECONFIG environment variable is set, then it is used a list of paths (normal path delimitting rules for your system). These paths are merged. When a value is modified, it is modified in the file that defines the stanza. When a value is created, it is created in the first file that exists. If no files in the chain exist, then it creates the last file in the list.
- 3. Otherwise, ${HOME}/.kube/config is used and no merging takes place.
-
-```
-kubectl config SUBCOMMAND
-```
-
-### Options
-
-```
- --kubeconfig string use a particular kubeconfig file
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-* [kubectl config current-context](kubectl_config_current-context.md) - Displays the current-context
-* [kubectl config delete-cluster](kubectl_config_delete-cluster.md) - Delete the specified cluster from the kubeconfig
-* [kubectl config delete-context](kubectl_config_delete-context.md) - Delete the specified context from the kubeconfig
-* [kubectl config get-clusters](kubectl_config_get-clusters.md) - Display clusters defined in the kubeconfig
-* [kubectl config get-contexts](kubectl_config_get-contexts.md) - Describe one or many contexts
-* [kubectl config rename-context](kubectl_config_rename-context.md) - Renames a context from the kubeconfig file.
-* [kubectl config set](kubectl_config_set.md) - Sets an individual value in a kubeconfig file
-* [kubectl config set-cluster](kubectl_config_set-cluster.md) - Sets a cluster entry in kubeconfig
-* [kubectl config set-context](kubectl_config_set-context.md) - Sets a context entry in kubeconfig
-* [kubectl config set-credentials](kubectl_config_set-credentials.md) - Sets a user entry in kubeconfig
-* [kubectl config unset](kubectl_config_unset.md) - Unsets an individual value in a kubeconfig file
-* [kubectl config use-context](kubectl_config_use-context.md) - Sets the current-context in a kubeconfig file
-* [kubectl config view](kubectl_config_view.md) - Display merged kubeconfig settings or a specified kubeconfig file
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_current-context.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_current-context.md
index c9425467f19d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_current-context.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_current-context.md
@@ -1,54 +1,3 @@
-## kubectl config current-context
-
-Displays the current-context
-
-### Synopsis
-
-
-Displays the current-context
-
-```
-kubectl config current-context
-```
-
-### Examples
-
-```
- # Display the current-context
- kubectl config current-context
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_delete-cluster.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_delete-cluster.md
index 07172063f9b0..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_delete-cluster.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_delete-cluster.md
@@ -1,54 +1,3 @@
-## kubectl config delete-cluster
-
-Delete the specified cluster from the kubeconfig
-
-### Synopsis
-
-
-Delete the specified cluster from the kubeconfig
-
-```
-kubectl config delete-cluster NAME
-```
-
-### Examples
-
-```
- # Delete the minikube cluster
- kubectl config delete-cluster minikube
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_delete-context.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_delete-context.md
index 5f99ff86a069..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_delete-context.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_delete-context.md
@@ -1,54 +1,3 @@
-## kubectl config delete-context
-
-Delete the specified context from the kubeconfig
-
-### Synopsis
-
-
-Delete the specified context from the kubeconfig
-
-```
-kubectl config delete-context NAME
-```
-
-### Examples
-
-```
- # Delete the context for the minikube cluster
- kubectl config delete-context minikube
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_get-clusters.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_get-clusters.md
index e731957fe542..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_get-clusters.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_get-clusters.md
@@ -1,54 +1,3 @@
-## kubectl config get-clusters
-
-Display clusters defined in the kubeconfig
-
-### Synopsis
-
-
-Display clusters defined in the kubeconfig.
-
-```
-kubectl config get-clusters
-```
-
-### Examples
-
-```
- # List the clusters kubectl knows about
- kubectl config get-clusters
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_get-contexts.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_get-contexts.md
index d89fa46679da..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_get-contexts.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_get-contexts.md
@@ -1,65 +1,3 @@
-## kubectl config get-contexts
-
-Describe one or many contexts
-
-### Synopsis
-
-
-Displays one or many contexts from the kubeconfig file.
-
-```
-kubectl config get-contexts [(-o|--output=)name)]
-```
-
-### Examples
-
-```
- # List all the contexts in your kubeconfig file
- kubectl config get-contexts
-
- # Describe one context in your kubeconfig file.
- kubectl config get-contexts my-context
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_rename-context.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_rename-context.md
index 3b91afa5da0f..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_rename-context.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_rename-context.md
@@ -1,60 +1,3 @@
-## kubectl config rename-context
-
-Renames a context from the kubeconfig file.
-
-### Synopsis
-
-
-Renames a context from the kubeconfig file.
-
-CONTEXT _NAME is the context name that you wish change.
-
-NEW _NAME is the new name you wish to set.
-
-Note: In case the context being renamed is the 'current-context', this field will also be updated.
-
-```
-kubectl config rename-context CONTEXT_NAME NEW_NAME
-```
-
-### Examples
-
-```
- # Rename the context 'old-name' to 'new-name' in your kubeconfig file
- kubectl config rename-context old-name new-name
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-cluster.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-cluster.md
index 9d4d8dfcd8eb..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-cluster.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-cluster.md
@@ -1,68 +1,3 @@
-## kubectl config set-cluster
-
-Sets a cluster entry in kubeconfig
-
-### Synopsis
-
-
-Sets a cluster entry in kubeconfig.
-
-Specifying a name that already exists will merge new fields on top of existing values for those fields.
-
-```
-kubectl config set-cluster NAME [--server=server] [--certificate-authority=path/to/certificate/authority] [--insecure-skip-tls-verify=true]
-```
-
-### Examples
-
-```
- # Set only the server field on the e2e cluster entry without touching other values.
- kubectl config set-cluster e2e --server=https://1.2.3.4
-
- # Embed certificate authority data for the e2e cluster entry
- kubectl config set-cluster e2e --certificate-authority=~/.kube/e2e/kubernetes.ca.crt
-
- # Disable cert checking for the dev cluster entry
- kubectl config set-cluster e2e --insecure-skip-tls-verify=true
-```
-
-### Options
-
-```
- --certificate-authority string Path to certificate-authority file for the cluster entry in kubeconfig
- --embed-certs tristate[=true] embed-certs for the cluster entry in kubeconfig
- --insecure-skip-tls-verify tristate[=true] insecure-skip-tls-verify for the cluster entry in kubeconfig
- --server string server for the cluster entry in kubeconfig
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-context.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-context.md
index 3059016a7298..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-context.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-context.md
@@ -1,61 +1,3 @@
-## kubectl config set-context
-
-Sets a context entry in kubeconfig
-
-### Synopsis
-
-
-Sets a context entry in kubeconfig
-
-Specifying a name that already exists will merge new fields on top of existing values for those fields.
-
-```
-kubectl config set-context NAME [--cluster=cluster_nickname] [--user=user_nickname] [--namespace=namespace]
-```
-
-### Examples
-
-```
- # Set the user field on the gce context entry without touching other values
- kubectl config set-context gce --user=cluster-admin
-```
-
-### Options
-
-```
- --cluster string cluster for the context entry in kubeconfig
- --namespace string namespace for the context entry in kubeconfig
- --user string user for the context entry in kubeconfig
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-credentials.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-credentials.md
index 762402dcdfac..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-credentials.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set-credentials.md
@@ -1,91 +1,3 @@
-## kubectl config set-credentials
-
-Sets a user entry in kubeconfig
-
-### Synopsis
-
-
-Sets a user entry in kubeconfig
-
-Specifying a name that already exists will merge new fields on top of existing values.
-
- Client-certificate flags:
- --client-certificate=certfile --client-key=keyfile
-
- Bearer token flags:
- --token=bearer_token
-
- Basic auth flags:
- --username=basic_user --password=basic_password
-
-Bearer token and basic auth are mutually exclusive.
-
-```
-kubectl config set-credentials NAME [--client-certificate=path/to/certfile] [--client-key=path/to/keyfile] [--token=bearer_token] [--username=basic_user] [--password=basic_password] [--auth-provider=provider_name] [--auth-provider-arg=key=value]
-```
-
-### Examples
-
-```
- # Set only the "client-key" field on the "cluster-admin"
- # entry, without touching other values:
- kubectl config set-credentials cluster-admin --client-key=~/.kube/admin.key
-
- # Set basic auth for the "cluster-admin" entry
- kubectl config set-credentials cluster-admin --username=admin --password=uXFGweU9l35qcif
-
- # Embed client certificate data in the "cluster-admin" entry
- kubectl config set-credentials cluster-admin --client-certificate=~/.kube/admin.crt --embed-certs=true
-
- # Enable the Google Compute Platform auth provider for the "cluster-admin" entry
- kubectl config set-credentials cluster-admin --auth-provider=gcp
-
- # Enable the OpenID Connect auth provider for the "cluster-admin" entry with additional args
- kubectl config set-credentials cluster-admin --auth-provider=oidc --auth-provider-arg=client-id=foo --auth-provider-arg=client-secret=bar
-
- # Remove the "client-secret" config value for the OpenID Connect auth provider for the "cluster-admin" entry
- kubectl config set-credentials cluster-admin --auth-provider=oidc --auth-provider-arg=client-secret-
-```
-
-### Options
-
-```
- --auth-provider string Auth provider for the user entry in kubeconfig
- --auth-provider-arg stringSlice 'key=value' arguments for the auth provider
- --client-certificate string Path to client-certificate file for the user entry in kubeconfig
- --client-key string Path to client-key file for the user entry in kubeconfig
- --embed-certs tristate[=true] Embed client cert/key for the user entry in kubeconfig
- --password string password for the user entry in kubeconfig
- --token string token for the user entry in kubeconfig
- --username string username for the user entry in kubeconfig
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --user string The name of the kubeconfig user to use
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set.md
index e942b01d00b0..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_set.md
@@ -1,57 +1,3 @@
-## kubectl config set
-
-Sets an individual value in a kubeconfig file
-
-### Synopsis
-
-
-Sets an individual value in a kubeconfig file
-
-PROPERTY _NAME is a dot delimited name where each token represents either an attribute name or a map key. Map keys may not contain dots.
-
-PROPERTY _VALUE is the new value you wish to set. Binary fields such as 'certificate-authority-data' expect a base64 encoded string unless the --set-raw-bytes flag is used.
-
-```
-kubectl config set PROPERTY_NAME PROPERTY_VALUE
-```
-
-### Options
-
-```
- --set-raw-bytes tristate[=true] When writing a []byte PROPERTY_VALUE, write the given string directly without base64 decoding.
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_unset.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_unset.md
index 8cde9402943d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_unset.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_unset.md
@@ -1,49 +1,3 @@
-## kubectl config unset
-
-Unsets an individual value in a kubeconfig file
-
-### Synopsis
-
-
-Unsets an individual value in a kubeconfig file
-
-PROPERTY _NAME is a dot delimited name where each token represents either an attribute name or a map key. Map keys may not contain dots.
-
-```
-kubectl config unset PROPERTY_NAME
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_use-context.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_use-context.md
index 76abf9c3b6ae..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_use-context.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_use-context.md
@@ -1,54 +1,3 @@
-## kubectl config use-context
-
-Sets the current-context in a kubeconfig file
-
-### Synopsis
-
-
-Sets the current-context in a kubeconfig file
-
-```
-kubectl config use-context CONTEXT_NAME
-```
-
-### Examples
-
-```
- # Use the context for the minikube cluster
- kubectl config use-context minikube
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_view.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_view.md
index 7d055b4c951e..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_view.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_config_view.md
@@ -1,75 +1,3 @@
-## kubectl config view
-
-Display merged kubeconfig settings or a specified kubeconfig file
-
-### Synopsis
-
-
-Display merged kubeconfig settings or a specified kubeconfig file.
-
-You can use --output jsonpath={...} to extract specific values using a jsonpath expression.
-
-```
-kubectl config view
-```
-
-### Examples
-
-```
- # Show Merged kubeconfig settings.
- kubectl config view
-
- # Get the password for the e2e user
- kubectl config view -o jsonpath='{.users[?(@.name == "e2e")].user.password}'
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --flatten Flatten the resulting kubeconfig file into self-contained output (useful for creating portable kubeconfig files)
- --merge tristate[=true] Merge the full hierarchy of kubeconfig files (default true)
- --minify Remove all information not used by current-context from the output
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --raw Display raw byte data
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string use a particular kubeconfig file
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl config](kubectl_config.md) - Modify kubeconfig files
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_convert.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_convert.md
index 854c6026bee8..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_convert.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_convert.md
@@ -1,82 +1,3 @@
-## kubectl convert
-
-Convert config files between different API versions
-
-### Synopsis
-
-
-Convert config files between different API versions. Both YAML and JSON formats are accepted.
-
-The command takes filename, directory, or URL as input, and convert it into format of version specified by --output-version flag. If target version is not specified or not supported, convert to latest version.
-
-The default output will be printed to stdout in YAML format. One can use -o option to change to output destination.
-
-```
-kubectl convert -f FILENAME
-```
-
-### Examples
-
-```
- # Convert 'pod.yaml' to latest version and print to stdout.
- kubectl convert -f pod.yaml
-
- # Convert the live state of the resource specified by 'pod.yaml' to the latest version
- # and print to stdout in JSON format.
- kubectl convert -f pod.yaml --local -o json
-
- # Convert all files under current directory to latest version and create them all.
- kubectl convert -f . | kubectl create -f -
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- -f, --filename stringSlice Filename, directory, or URL to files to need to get converted.
- --local If true, convert will NOT try to contact api-server but run locally. (default true)
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --output-version string Output the formatted object with the given group version (for ex: 'extensions/v1beta1').)
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cordon.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cordon.md
index 802374200f48..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cordon.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cordon.md
@@ -1,61 +1,3 @@
-## kubectl cordon
-
-Mark node as unschedulable
-
-### Synopsis
-
-
-Mark node as unschedulable.
-
-```
-kubectl cordon NODE
-```
-
-### Examples
-
-```
- # Mark node "foo" as unschedulable.
- kubectl cordon foo
-```
-
-### Options
-
-```
- --dry-run If true, only print the object that would be sent, without sending it.
- -l, --selector string Selector (label query) to filter on
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cp.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cp.md
index 66f5e8800643..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cp.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_cp.md
@@ -1,73 +1,3 @@
-## kubectl cp
-
-Copy files and directories to and from containers.
-
-### Synopsis
-
-
-Copy files and directories to and from containers.
-
-```
-kubectl cp
-```
-
-### Examples
-
-```
- # !!!Important Note!!!
- # Requires that the 'tar' binary is present in your container
- # image. If 'tar' is not present, 'kubectl cp' will fail.
-
- # Copy /tmp/foo_dir local directory to /tmp/bar_dir in a remote pod in the default namespace
- kubectl cp /tmp/foo_dir :/tmp/bar_dir
-
- # Copy /tmp/foo local file to /tmp/bar in a remote pod in a specific container
- kubectl cp /tmp/foo :/tmp/bar -c
-
- # Copy /tmp/foo local file to /tmp/bar in a remote pod in namespace
- kubectl cp /tmp/foo /:/tmp/bar
-
- # Copy /tmp/foo from a remote pod to /tmp/bar locally
- kubectl cp /:/tmp/foo /tmp/bar
-```
-
-### Options
-
-```
- -c, --container string Container name. If omitted, the first container in the pod will be chosen
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create.md
index 13c494f285d8..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create.md
@@ -1,97 +1,3 @@
-## kubectl create
-
-Create a resource from a file or from stdin.
-
-### Synopsis
-
-
-Create a resource from a file or from stdin.
-
-JSON and YAML formats are accepted.
-
-```
-kubectl create -f FILENAME
-```
-
-### Examples
-
-```
- # Create a pod using the data in pod.json.
- kubectl create -f ./pod.json
-
- # Create a pod based on the JSON passed into stdin.
- cat pod.json | kubectl create -f -
-
- # Edit the data in docker-registry.yaml in JSON using the v1 API format then create the resource using the edited data.
- kubectl create -f docker-registry.yaml --edit --output-version=v1 -o json
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- --edit Edit the API resource before creating
- -f, --filename stringSlice Filename, directory, or URL to files to use to create the resource
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --raw string Raw URI to POST to the server. Uses the transport specified by the kubeconfig file.
- --record Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -l, --selector string Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2)
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
- --windows-line-endings Only relevant if --edit=true. Defaults to the line ending native to your platform.
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-* [kubectl create clusterrole](kubectl_create_clusterrole.md) - Create a ClusterRole.
-* [kubectl create clusterrolebinding](kubectl_create_clusterrolebinding.md) - Create a ClusterRoleBinding for a particular ClusterRole
-* [kubectl create configmap](kubectl_create_configmap.md) - Create a configmap from a local file, directory or literal value
-* [kubectl create deployment](kubectl_create_deployment.md) - Create a deployment with the specified name.
-* [kubectl create namespace](kubectl_create_namespace.md) - Create a namespace with the specified name
-* [kubectl create poddisruptionbudget](kubectl_create_poddisruptionbudget.md) - Create a pod disruption budget with the specified name.
-* [kubectl create priorityclass](kubectl_create_priorityclass.md) - Create a priorityclass with the specified name.
-* [kubectl create quota](kubectl_create_quota.md) - Create a quota with the specified name.
-* [kubectl create role](kubectl_create_role.md) - Create a role with single rule.
-* [kubectl create rolebinding](kubectl_create_rolebinding.md) - Create a RoleBinding for a particular Role or ClusterRole
-* [kubectl create secret](kubectl_create_secret.md) - Create a secret using specified subcommand
-* [kubectl create service](kubectl_create_service.md) - Create a service using specified subcommand.
-* [kubectl create serviceaccount](kubectl_create_serviceaccount.md) - Create a service account with the specified name
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_clusterrole.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_clusterrole.md
index 6085600eb0dd..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_clusterrole.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_clusterrole.md
@@ -1,85 +1,3 @@
-## kubectl create clusterrole
-
-Create a ClusterRole.
-
-### Synopsis
-
-
-Create a ClusterRole.
-
-```
-kubectl create clusterrole NAME --verb=verb --resource=resource.group [--resource-name=resourcename] [--dry-run]
-```
-
-### Examples
-
-```
- # Create a ClusterRole named "pod-reader" that allows user to perform "get", "watch" and "list" on pods
- kubectl create clusterrole pod-reader --verb=get,list,watch --resource=pods
-
- # Create a ClusterRole named "pod-reader" with ResourceName specified
- kubectl create clusterrole pod-reader --verb=get,list,watch --resource=pods --resource-name=readablepod --resource-name=anotherpod
-
- # Create a ClusterRole named "foo" with API Group specified
- kubectl create clusterrole foo --verb=get,list,watch --resource=rs.extensions
-
- # Create a ClusterRole named "foo" with SubResource specified
- kubectl create clusterrole foo --verb=get,list,watch --resource=pods,pods/status
-
- # Create a ClusterRole name "foo" with NonResourceURL specified
- kubectl create clusterrole "foo" --verb=get --non-resource-url=/logs/*
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- --non-resource-url stringSlice A partial url that user should have access to.
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --resource stringSlice Resource that the rule applies to
- --resource-name stringArray Resource in the white list that the rule applies to, repeat this flag for multiple items
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
- --verb stringSlice Verb that applies to the resources contained in the rule
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_clusterrolebinding.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_clusterrolebinding.md
index 2f12acc5d0d7..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_clusterrolebinding.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_clusterrolebinding.md
@@ -1,73 +1,3 @@
-## kubectl create clusterrolebinding
-
-Create a ClusterRoleBinding for a particular ClusterRole
-
-### Synopsis
-
-
-Create a ClusterRoleBinding for a particular ClusterRole.
-
-```
-kubectl create clusterrolebinding NAME --clusterrole=NAME [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run]
-```
-
-### Examples
-
-```
- # Create a ClusterRoleBinding for user1, user2, and group1 using the cluster-admin ClusterRole
- kubectl create clusterrolebinding cluster-admin --clusterrole=cluster-admin --user=user1 --user=user2 --group=group1
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --clusterrole string ClusterRole this ClusterRoleBinding should reference
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "clusterrolebinding.rbac.authorization.k8s.io/v1alpha1")
- --group stringArray Groups to bind to the role
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- --serviceaccount stringArray Service accounts to bind to the role, in the format :
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --user stringArray Usernames to bind to the role
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_configmap.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_configmap.md
index ecb125ac87a3..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_configmap.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_configmap.md
@@ -1,92 +1,3 @@
-## kubectl create configmap
-
-Create a configmap from a local file, directory or literal value
-
-### Synopsis
-
-
-Create a configmap based on a file, directory, or specified literal value.
-
-A single configmap may package one or more key/value pairs.
-
-When creating a configmap based on a file, the key will default to the basename of the file, and the value will default to the file content. If the basename is an invalid key, you may specify an alternate key.
-
-When creating a configmap based on a directory, each file whose basename is a valid key in the directory will be packaged into the configmap. Any directory entries except regular files are ignored (e.g. subdirectories, symlinks, devices, pipes, etc).
-
-```
-kubectl create configmap NAME [--from-file=[key=]source] [--from-literal=key1=value1] [--dry-run]
-```
-
-### Examples
-
-```
- # Create a new configmap named my-config based on folder bar
- kubectl create configmap my-config --from-file=path/to/bar
-
- # Create a new configmap named my-config with specified keys instead of file basenames on disk
- kubectl create configmap my-config --from-file=key1=/path/to/bar/file1.txt --from-file=key2=/path/to/bar/file2.txt
-
- # Create a new configmap named my-config with key1=config1 and key2=config2
- kubectl create configmap my-config --from-literal=key1=config1 --from-literal=key2=config2
-
- # Create a new configmap named my-config from the key=value pairs in the file
- kubectl create configmap my-config --from-file=path/to/bar
-
- # Create a new configmap named my-config from an env file
- kubectl create configmap my-config --from-env-file=path/to/bar.env
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --append-hash Append a hash of the configmap to its name.
- --dry-run If true, only print the object that would be sent, without sending it.
- --from-env-file string Specify the path to a file to read lines of key=val pairs to create a configmap (i.e. a Docker .env file).
- --from-file stringSlice Key file can be specified using its file path, in which case file basename will be used as configmap key, or optionally with a key and file path, in which case the given key will be used. Specifying a directory will iterate each named file in the directory whose basename is a valid configmap key.
- --from-literal stringArray Specify a key and literal value to insert in configmap (i.e. mykey=somevalue)
- --generator string The name of the API generator to use. (default "configmap/v1")
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_deployment.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_deployment.md
index e918a509a50b..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_deployment.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_deployment.md
@@ -1,71 +1,3 @@
-## kubectl create deployment
-
-Create a deployment with the specified name.
-
-### Synopsis
-
-
-Create a deployment with the specified name.
-
-```
-kubectl create deployment NAME --image=image [--dry-run]
-```
-
-### Examples
-
-```
- # Create a new deployment named my-dep that runs the busybox image.
- kubectl create deployment my-dep --image=busybox
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "deployment-basic/v1beta1")
- --image stringSlice Image name to run.
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_namespace.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_namespace.md
index daeafe7e4ad1..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_namespace.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_namespace.md
@@ -1,70 +1,3 @@
-## kubectl create namespace
-
-Create a namespace with the specified name
-
-### Synopsis
-
-
-Create a namespace with the specified name.
-
-```
-kubectl create namespace NAME [--dry-run]
-```
-
-### Examples
-
-```
- # Create a new namespace named my-namespace
- kubectl create namespace my-namespace
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "namespace/v1")
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_poddisruptionbudget.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_poddisruptionbudget.md
index b6aa19b34834..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_poddisruptionbudget.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_poddisruptionbudget.md
@@ -1,78 +1,3 @@
-## kubectl create poddisruptionbudget
-
-Create a pod disruption budget with the specified name.
-
-### Synopsis
-
-
-Create a pod disruption budget with the specified name, selector, and desired minimum available pods
-
-```
-kubectl create poddisruptionbudget NAME --selector=SELECTOR --min-available=N [--dry-run]
-```
-
-### Examples
-
-```
- # Create a pod disruption budget named my-pdb that will select all pods with the app=rails label
- # and require at least one of them being available at any point in time.
- kubectl create poddisruptionbudget my-pdb --selector=app=rails --min-available=1
-
- # Create a pod disruption budget named my-pdb that will select all pods with the app=nginx label
- # and require at least half of the pods selected to be available at any point in time.
- kubectl create pdb my-pdb --selector=app=nginx --min-available=50%
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "poddisruptionbudget/v1beta1/v2")
- --max-unavailable string The maximum number or percentage of unavailable pods this budget requires.
- --min-available string The minimum number or percentage of available pods this budget requires.
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- --selector string A label selector to use for this budget. Only equality-based selector requirements are supported.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_priorityclass.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_priorityclass.md
index f2095ac6eb18..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_priorityclass.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_priorityclass.md
@@ -1,76 +1,3 @@
-## kubectl create priorityclass
-
-Create a priorityclass with the specified name.
-
-### Synopsis
-
-
-Create a priorityclass with the specified name, value, globalDefault and description
-
-```
-kubectl create priorityclass NAME --value=VALUE --global-default=BOOL [--dry-run]
-```
-
-### Examples
-
-```
- # Create a priorityclass named high-priority
- kubectl create priorityclass default-priority --value=1000 --description="high priority"
-
- # Create a priorityclass named default-priority that considered as the global default priority
- kubectl create priorityclass default-priority --value=1000 --global-default=true --description="default priority"
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --description string description is an arbitrary string that usually provides guidelines on when this priority class should be used.
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "priorityclass/v1alpha1")
- --global-default global-default specifies whether this PriorityClass should be considered as the default priority.
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
- --value int32 the value of this priority class.
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_quota.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_quota.md
index 02afca826a31..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_quota.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_quota.md
@@ -1,75 +1,3 @@
-## kubectl create quota
-
-Create a quota with the specified name.
-
-### Synopsis
-
-
-Create a resourcequota with the specified name, hard limits and optional scopes
-
-```
-kubectl create quota NAME [--hard=key1=value1,key2=value2] [--scopes=Scope1,Scope2] [--dry-run=bool]
-```
-
-### Examples
-
-```
- # Create a new resourcequota named my-quota
- kubectl create quota my-quota --hard=cpu=1,memory=1G,pods=2,services=3,replicationcontrollers=2,resourcequotas=1,secrets=5,persistentvolumeclaims=10
-
- # Create a new resourcequota named best-effort
- kubectl create quota best-effort --hard=pods=100 --scopes=BestEffort
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "resourcequotas/v1")
- --hard string A comma-delimited set of resource=quantity pairs that define a hard limit.
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- --scopes string A comma-delimited set of quota scopes that must all match each object tracked by the quota.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_role.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_role.md
index 47d8d331cae5..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_role.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_role.md
@@ -1,81 +1,3 @@
-## kubectl create role
-
-Create a role with single rule.
-
-### Synopsis
-
-
-Create a role with single rule.
-
-```
-kubectl create role NAME --verb=verb --resource=resource.group/subresource [--resource-name=resourcename] [--dry-run]
-```
-
-### Examples
-
-```
- # Create a Role named "pod-reader" that allows user to perform "get", "watch" and "list" on pods
- kubectl create role pod-reader --verb=get --verb=list --verb=watch --resource=pods
-
- # Create a Role named "pod-reader" with ResourceName specified
- kubectl create role pod-reader --verb=get,list,watch --resource=pods --resource-name=readablepod --resource-name=anotherpod
-
- # Create a Role named "foo" with API Group specified
- kubectl create role foo --verb=get,list,watch --resource=rs.extensions
-
- # Create a Role named "foo" with SubResource specified
- kubectl create role foo --verb=get,list,watch --resource=pods,pods/status
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --resource stringSlice Resource that the rule applies to
- --resource-name stringArray Resource in the white list that the rule applies to, repeat this flag for multiple items
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
- --verb stringSlice Verb that applies to the resources contained in the rule
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_rolebinding.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_rolebinding.md
index ac5f8a26b685..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_rolebinding.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_rolebinding.md
@@ -1,74 +1,3 @@
-## kubectl create rolebinding
-
-Create a RoleBinding for a particular Role or ClusterRole
-
-### Synopsis
-
-
-Create a RoleBinding for a particular Role or ClusterRole.
-
-```
-kubectl create rolebinding NAME --clusterrole=NAME|--role=NAME [--user=username] [--group=groupname] [--serviceaccount=namespace:serviceaccountname] [--dry-run]
-```
-
-### Examples
-
-```
- # Create a RoleBinding for user1, user2, and group1 using the admin ClusterRole
- kubectl create rolebinding admin --clusterrole=admin --user=user1 --user=user2 --group=group1
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --clusterrole string ClusterRole this RoleBinding should reference
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "rolebinding.rbac.authorization.k8s.io/v1alpha1")
- --group stringArray Groups to bind to the role
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --role string Role this RoleBinding should reference
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- --serviceaccount stringArray Service accounts to bind to the role, in the format :
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --user stringArray Usernames to bind to the role
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret.md
index 949caf93df83..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret.md
@@ -1,50 +1,3 @@
-## kubectl create secret
-
-Create a secret using specified subcommand
-
-### Synopsis
-
-
-Create a secret using specified subcommand.
-
-```
-kubectl create secret
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-* [kubectl create secret docker-registry](kubectl_create_secret_docker-registry.md) - Create a secret for use with a Docker registry
-* [kubectl create secret generic](kubectl_create_secret_generic.md) - Create a secret from a local file, directory or literal value
-* [kubectl create secret tls](kubectl_create_secret_tls.md) - Create a TLS secret
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_docker-registry.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_docker-registry.md
index 5032184011d1..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_docker-registry.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_docker-registry.md
@@ -1,85 +1,3 @@
-## kubectl create secret docker-registry
-
-Create a secret for use with a Docker registry
-
-### Synopsis
-
-
-Create a new secret for use with Docker registries.
-
-Dockercfg secrets are used to authenticate against Docker registries.
-
-When using the Docker command line to push images, you can authenticate to a given registry by running: '$ docker login DOCKER REGISTRY SERVER --username=DOCKER USER --password=DOCKER PASSWORD --email=DOCKER _EMAIL'.
-
- That produces a ~/.dockercfg file that is used by subsequent 'docker push' and 'docker pull' commands to
-
-authenticate to the registry. The email address is optional.
-
-When creating applications, you may have a Docker registry that requires authentication. In order for the nodes to pull images on your behalf, they have to have the credentials. You can provide this information by creating a dockercfg secret and attaching it to your service account.
-
-```
-kubectl create secret docker-registry NAME --docker-username=user --docker-password=password --docker-email=email [--docker-server=string] [--from-literal=key1=value1] [--dry-run]
-```
-
-### Examples
-
-```
- # If you don't already have a .dockercfg file, you can create a dockercfg secret directly by using:
- kubectl create secret docker-registry my-secret --docker-server=DOCKER_REGISTRY_SERVER --docker-username=DOCKER_USER --docker-password=DOCKER_PASSWORD --docker-email=DOCKER_EMAIL
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --append-hash Append a hash of the secret to its name.
- --docker-email string Email for Docker registry
- --docker-password string Password for Docker registry authentication
- --docker-server string Server location for Docker registry (default "https://index.docker.io/v1/")
- --docker-username string Username for Docker registry authentication
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "secret-for-docker-registry/v1")
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create secret](kubectl_create_secret.md) - Create a secret using specified subcommand
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_generic.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_generic.md
index a505514da50e..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_generic.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_generic.md
@@ -1,93 +1,3 @@
-## kubectl create secret generic
-
-Create a secret from a local file, directory or literal value
-
-### Synopsis
-
-
-Create a secret based on a file, directory, or specified literal value.
-
-A single secret may package one or more key/value pairs.
-
-When creating a secret based on a file, the key will default to the basename of the file, and the value will default to the file content. If the basename is an invalid key or you wish to chose your own, you may specify an alternate key.
-
-When creating a secret based on a directory, each file whose basename is a valid key in the directory will be packaged into the secret. Any directory entries except regular files are ignored (e.g. subdirectories, symlinks, devices, pipes, etc).
-
-```
-kubectl create secret generic NAME [--type=string] [--from-file=[key=]source] [--from-literal=key1=value1] [--dry-run]
-```
-
-### Examples
-
-```
- # Create a new secret named my-secret with keys for each file in folder bar
- kubectl create secret generic my-secret --from-file=path/to/bar
-
- # Create a new secret named my-secret with specified keys instead of names on disk
- kubectl create secret generic my-secret --from-file=ssh-privatekey=~/.ssh/id_rsa --from-file=ssh-publickey=~/.ssh/id_rsa.pub
-
- # Create a new secret named my-secret with key1=supersecret and key2=topsecret
- kubectl create secret generic my-secret --from-literal=key1=supersecret --from-literal=key2=topsecret
-
- # Create a new secret named my-secret using a combination of a file and a literal
- kubectl create secret generic my-secret --from-file=ssh-privatekey=~/.ssh/id_rsa --from-literal=passphrase=topsecret
-
- # Create a new secret named my-secret from an env file
- kubectl create secret generic my-secret --from-env-file=path/to/bar.env
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --append-hash Append a hash of the secret to its name.
- --dry-run If true, only print the object that would be sent, without sending it.
- --from-env-file string Specify the path to a file to read lines of key=val pairs to create a secret (i.e. a Docker .env file).
- --from-file stringSlice Key files can be specified using their file path, in which case a default name will be given to them, or optionally with a name and file path, in which case the given name will be used. Specifying a directory will iterate each named file in the directory that is a valid secret key.
- --from-literal stringArray Specify a key and literal value to insert in secret (i.e. mykey=somevalue)
- --generator string The name of the API generator to use. (default "secret/v1")
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --type string The type of secret to create
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create secret](kubectl_create_secret.md) - Create a secret using specified subcommand
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_tls.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_tls.md
index b7ec0087eeca..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_tls.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_secret_tls.md
@@ -1,75 +1,3 @@
-## kubectl create secret tls
-
-Create a TLS secret
-
-### Synopsis
-
-
-Create a TLS secret from the given public/private key pair.
-
-The public/private key pair must exist before hand. The public key certificate must be .PEM encoded and match the given private key.
-
-```
-kubectl create secret tls NAME --cert=path/to/cert/file --key=path/to/key/file [--dry-run]
-```
-
-### Examples
-
-```
- # Create a new TLS secret named tls-secret with the given key pair:
- kubectl create secret tls tls-secret --cert=path/to/tls.cert --key=path/to/tls.key
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --append-hash Append a hash of the secret to its name.
- --cert string Path to PEM encoded public key certificate.
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "secret-for-tls/v1")
- --key string Path to private key associated with given certificate.
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create secret](kubectl_create_secret.md) - Create a secret using specified subcommand
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service.md
index 11f9925416e6..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service.md
@@ -1,51 +1,3 @@
-## kubectl create service
-
-Create a service using specified subcommand.
-
-### Synopsis
-
-
-Create a service using specified subcommand.
-
-```
-kubectl create service
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-* [kubectl create service clusterip](kubectl_create_service_clusterip.md) - Create a ClusterIP service.
-* [kubectl create service externalname](kubectl_create_service_externalname.md) - Create an ExternalName service.
-* [kubectl create service loadbalancer](kubectl_create_service_loadbalancer.md) - Create a LoadBalancer service.
-* [kubectl create service nodeport](kubectl_create_service_nodeport.md) - Create a NodePort service.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_clusterip.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_clusterip.md
index 054c328df632..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_clusterip.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_clusterip.md
@@ -1,75 +1,3 @@
-## kubectl create service clusterip
-
-Create a ClusterIP service.
-
-### Synopsis
-
-
-Create a ClusterIP service with the specified name.
-
-```
-kubectl create service clusterip NAME [--tcp=:] [--dry-run]
-```
-
-### Examples
-
-```
- # Create a new ClusterIP service named my-cs
- kubectl create service clusterip my-cs --tcp=5678:8080
-
- # Create a new ClusterIP service named my-cs (in headless mode)
- kubectl create service clusterip my-cs --clusterip="None"
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --clusterip string Assign your own ClusterIP or set to 'None' for a 'headless' service (no loadbalancing).
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "service-clusterip/v1")
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --tcp stringSlice Port pairs can be specified as ':'.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create service](kubectl_create_service.md) - Create a service using specified subcommand.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_externalname.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_externalname.md
index 03cc36c3134a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_externalname.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_externalname.md
@@ -1,74 +1,3 @@
-## kubectl create service externalname
-
-Create an ExternalName service.
-
-### Synopsis
-
-
-Create an ExternalName service with the specified name.
-
-ExternalName service references to an external DNS address instead of only pods, which will allow application authors to reference services that exist off platform, on other clusters, or locally.
-
-```
-kubectl create service externalname NAME --external-name external.name [--dry-run]
-```
-
-### Examples
-
-```
- # Create a new ExternalName service named my-ns
- kubectl create service externalname my-ns --external-name bar.com
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- --external-name string External name of service
- --generator string The name of the API generator to use. (default "service-externalname/v1")
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --tcp stringSlice Port pairs can be specified as ':'.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create service](kubectl_create_service.md) - Create a service using specified subcommand.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_loadbalancer.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_loadbalancer.md
index ac9172e15f44..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_loadbalancer.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_loadbalancer.md
@@ -1,71 +1,3 @@
-## kubectl create service loadbalancer
-
-Create a LoadBalancer service.
-
-### Synopsis
-
-
-Create a LoadBalancer service with the specified name.
-
-```
-kubectl create service loadbalancer NAME [--tcp=port:targetPort] [--dry-run]
-```
-
-### Examples
-
-```
- # Create a new LoadBalancer service named my-lbs
- kubectl create service loadbalancer my-lbs --tcp=5678:8080
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "service-loadbalancer/v1")
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --tcp stringSlice Port pairs can be specified as ':'.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create service](kubectl_create_service.md) - Create a service using specified subcommand.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_nodeport.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_nodeport.md
index 3a4224804358..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_nodeport.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_service_nodeport.md
@@ -1,72 +1,3 @@
-## kubectl create service nodeport
-
-Create a NodePort service.
-
-### Synopsis
-
-
-Create a NodePort service with the specified name.
-
-```
-kubectl create service nodeport NAME [--tcp=port:targetPort] [--dry-run]
-```
-
-### Examples
-
-```
- # Create a new NodePort service named my-ns
- kubectl create service nodeport my-ns --tcp=5678:8080
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "service-nodeport/v1")
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- --node-port int Port used to expose the service on each node in a cluster.
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --tcp stringSlice Port pairs can be specified as ':'.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create service](kubectl_create_service.md) - Create a service using specified subcommand.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_serviceaccount.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_serviceaccount.md
index 4897e04ea708..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_serviceaccount.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_create_serviceaccount.md
@@ -1,70 +1,3 @@
-## kubectl create serviceaccount
-
-Create a service account with the specified name
-
-### Synopsis
-
-
-Create a service account with the specified name.
-
-```
-kubectl create serviceaccount NAME [--dry-run]
-```
-
-### Examples
-
-```
- # Create a new service account named my-service-account
- kubectl create serviceaccount my-service-account
-```
-
-### Options
-
-```
- --allow-missing-template-keys If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats. (default true)
- --dry-run If true, only print the object that would be sent, without sending it.
- --generator string The name of the API generator to use. (default "serviceaccount/v1")
- --no-headers When using the default or custom-column output format, don't print headers (default print headers).
- -o, --output string Output format. One of: json|yaml|wide|name|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=... See custom columns [http://kubernetes.io/docs/user-guide/kubectl-overview/#custom-columns], golang template [http://golang.org/pkg/text/template/#pkg-overview] and jsonpath template [http://kubernetes.io/docs/user-guide/jsonpath].
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- -a, --show-all When printing, show all resources (default hide terminated pods.)
- --show-labels When printing, show all labels as the last column (default hide labels column)
- --sort-by string If non-empty, sort list types using this field specification. The field specification is expressed as a JSONPath expression (e.g. '{.metadata.name}'). The field in the API resource specified by this JSONPath expression must be an integer or a string.
- --template string Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
- --validate If true, use a schema to validate the input before sending it (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl create](kubectl_create.md) - Create a resource from a file or from stdin.
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_delete.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_delete.md
index ee6d10751be5..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_delete.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_delete.md
@@ -1,97 +1,3 @@
-## kubectl delete
-
-Delete resources by filenames, stdin, resources and names, or by resources and label selector
-
-### Synopsis
-
-
-Delete resources by filenames, stdin, resources and names, or by resources and label selector.
-
-JSON and YAML formats are accepted. Only one type of the arguments may be specified: filenames, resources and names, or resources and label selector.
-
-Some resources, such as pods, support graceful deletion. These resources define a default period before they are forcibly terminated (the grace period) but you may override that value with the --grace-period flag, or pass --now to set a grace-period of 1. Because these resources often represent entities in the cluster, deletion may not be acknowledged immediately. If the node hosting a pod is down or cannot reach the API server, termination may take significantly longer than the grace period. To force delete a resource, you must pass a grace period of 0 and specify the --force flag.
-
-IMPORTANT: Force deleting pods does not wait for confirmation that the pod's processes have been terminated, which can leave those processes running until the node detects the deletion and completes graceful deletion. If your processes use shared storage or talk to a remote API and depend on the name of the pod to identify themselves, force deleting those pods may result in multiple processes running on different machines using the same identification which may lead to data corruption or inconsistency. Only force delete pods when you are sure the pod is terminated, or if your application can tolerate multiple copies of the same pod running at once. Also, if you force delete pods the scheduler may place new pods on those nodes before the node has released those resources and causing those pods to be evicted immediately.
-
-Note that the delete command does NOT do resource version checks, so if someone submits an update to a resource right when you submit a delete, their update will be lost along with the rest of the resource.
-
-```
-kubectl delete ([-f FILENAME] | TYPE [(NAME | -l label | --all)])
-```
-
-### Examples
-
-```
- # Delete a pod using the type and name specified in pod.json.
- kubectl delete -f ./pod.json
-
- # Delete a pod based on the type and name in the JSON passed into stdin.
- cat pod.json | kubectl delete -f -
-
- # Delete pods and services with same names "baz" and "foo"
- kubectl delete pod,service baz foo
-
- # Delete pods and services with label name=myLabel.
- kubectl delete pods,services -l name=myLabel
-
- # Delete a pod with minimal delay
- kubectl delete pod foo --now
-
- # Force delete a pod on a dead node
- kubectl delete pod foo --grace-period=0 --force
-
- # Delete all pods
- kubectl delete pods --all
-```
-
-### Options
-
-```
- --all Delete all resources, including uninitialized ones, in the namespace of the specified resource types.
- --cascade If true, cascade the deletion of the resources managed by this resource (e.g. Pods created by a ReplicationController). Default true. (default true)
- -f, --filename stringSlice Filename, directory, or URL to files containing the resource to delete.
- --force Immediate deletion of some resources may result in inconsistency or data loss and requires confirmation.
- --grace-period int Period of time in seconds given to the resource to terminate gracefully. Ignored if negative. (default -1)
- --ignore-not-found Treat "resource not found" as a successful delete. Defaults to "true" when --all is specified.
- --include-uninitialized If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "--all". Objects with empty metadata.initializers are regarded as initialized.
- --now If true, resources are signaled for immediate shutdown (same as --grace-period=1).
- -o, --output string Output mode. Use "-o name" for shorter output (resource/name).
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
- -l, --selector string Selector (label query) to filter on, not including uninitialized ones.
- --timeout duration The length of time to wait before giving up on a delete, zero means determine a timeout from the size of the object
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_describe.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_describe.md
index bbe4eebab2da..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_describe.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_describe.md
@@ -1,127 +1,3 @@
-## kubectl describe
-
-Show details of a specific resource or group of resources
-
-### Synopsis
-
-
-Show details of a specific resource or group of resources
-
-Print a detailed description of the selected resources, including related resources such as events or controllers. You may select a single object by name, all objects of that type, provide a name prefix, or label selector. For example:
-
- $ kubectl describe TYPE NAME_PREFIX
-
-will first check for an exact match on TYPE and NAME PREFIX. If no such resource exists, it will output details for every resource that has a name prefixed with NAME PREFIX.
-
-Valid resource types include:
-
- * all
- * certificatesigningrequests (aka 'csr')
- * clusterrolebindings
- * clusterroles
- * componentstatuses (aka 'cs')
- * configmaps (aka 'cm')
- * controllerrevisions
- * cronjobs
- * customresourcedefinition (aka 'crd')
- * daemonsets (aka 'ds')
- * deployments (aka 'deploy')
- * endpoints (aka 'ep')
- * events (aka 'ev')
- * horizontalpodautoscalers (aka 'hpa')
- * ingresses (aka 'ing')
- * jobs
- * limitranges (aka 'limits')
- * namespaces (aka 'ns')
- * networkpolicies (aka 'netpol')
- * nodes (aka 'no')
- * persistentvolumeclaims (aka 'pvc')
- * persistentvolumes (aka 'pv')
- * poddisruptionbudgets (aka 'pdb')
- * podpreset
- * pods (aka 'po')
- * podsecuritypolicies (aka 'psp')
- * podtemplates
- * replicasets (aka 'rs')
- * replicationcontrollers (aka 'rc')
- * resourcequotas (aka 'quota')
- * rolebindings
- * roles
- * secrets
- * serviceaccounts (aka 'sa')
- * services (aka 'svc')
- * statefulsets (aka 'sts')
- * storageclasses (aka 'sc')
-
-```
-kubectl describe (-f FILENAME | TYPE [NAME_PREFIX | -l label] | TYPE/NAME)
-```
-
-### Examples
-
-```
- # Describe a node
- kubectl describe nodes kubernetes-node-emt8.c.myproject.internal
-
- # Describe a pod
- kubectl describe pods/nginx
-
- # Describe a pod identified by type and name in "pod.json"
- kubectl describe -f pod.json
-
- # Describe all pods
- kubectl describe pods
-
- # Describe pods by label name=myLabel
- kubectl describe po -l name=myLabel
-
- # Describe all pods managed by the 'frontend' replication controller (rc-created pods
- # get the name of the rc as a prefix in the pod the name).
- kubectl describe pods frontend
-```
-
-### Options
-
-```
- --all-namespaces If present, list the requested object(s) across all namespaces. Namespace in current context is ignored even if specified with --namespace.
- -f, --filename stringSlice Filename, directory, or URL to files containing the resource to describe
- --include-uninitialized If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "--all". Objects with empty metadata.initializers are regarded as initialized.
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
- -l, --selector string Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2)
- --show-events If true, display events related to the described object. (default true)
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_drain.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_drain.md
index 257a3f8e096d..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_drain.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_drain.md
@@ -1,77 +1,3 @@
-## kubectl drain
-
-Drain node in preparation for maintenance
-
-### Synopsis
-
-
-Drain node in preparation for maintenance.
-
-The given node will be marked unschedulable to prevent new pods from arriving. 'drain' evicts the pods if the APIServer supports eviction (http://kubernetes.io/docs/admin/disruptions/). Otherwise, it will use normal DELETE to delete the pods. The 'drain' evicts or deletes all pods except mirror pods (which cannot be deleted through the API server). If there are DaemonSet-managed pods, drain will not proceed without --ignore-daemonsets, and regardless it will not delete any DaemonSet-managed pods, because those pods would be immediately replaced by the DaemonSet controller, which ignores unschedulable markings. If there are any pods that are neither mirror pods nor managed by ReplicationController, ReplicaSet, DaemonSet, StatefulSet or Job, then drain will not delete any pods unless you use --force. --force will also allow deletion to proceed if the managing resource of one or more pods is missing.
-
-'drain' waits for graceful termination. You should not operate on the machine until the command completes.
-
-When you are ready to put the node back into service, use kubectl uncordon, which will make the node schedulable again.
-
-! http://kubernetes.io/images/docs/kubectl_drain.svg
-
-```
-kubectl drain NODE
-```
-
-### Examples
-
-```
- # Drain node "foo", even if there are pods not managed by a ReplicationController, ReplicaSet, Job, DaemonSet or StatefulSet on it.
- $ kubectl drain foo --force
-
- # As above, but abort if there are pods not managed by a ReplicationController, ReplicaSet, Job, DaemonSet or StatefulSet, and use a grace period of 15 minutes.
- $ kubectl drain foo --grace-period=900
-```
-
-### Options
-
-```
- --delete-local-data Continue even if there are pods using emptyDir (local data that will be deleted when the node is drained).
- --dry-run If true, only print the object that would be sent, without sending it.
- --force Continue even if there are pods not managed by a ReplicationController, ReplicaSet, Job, DaemonSet or StatefulSet.
- --grace-period int Period of time in seconds given to each pod to terminate gracefully. If negative, the default value specified in the pod will be used. (default -1)
- --ignore-daemonsets Ignore DaemonSet-managed pods.
- -l, --selector string Selector (label query) to filter on
- --timeout duration The length of time to wait before giving up, zero means infinite
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_edit.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_edit.md
index fa69ca5fd34a..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_edit.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_edit.md
@@ -1,87 +1,3 @@
-## kubectl edit
-
-Edit a resource on the server
-
-### Synopsis
-
-
-Edit a resource from the default editor.
-
-The edit command allows you to directly edit any API resource you can retrieve via the command line tools. It will open the editor defined by your KUBE _EDITOR, or EDITOR environment variables, or fall back to 'vi' for Linux or 'notepad' for Windows. You can edit multiple objects, although changes are applied one at a time. The command accepts filenames as well as command line arguments, although the files you point to must be previously saved versions of resources.
-
-Editing is done with the API version used to fetch the resource. To edit using a specific API version, fully-qualify the resource, version, and group.
-
-The default format is YAML. To edit in JSON, specify "-o json".
-
-The flag --windows-line-endings can be used to force Windows line endings, otherwise the default for your operating system will be used.
-
-In the event an error occurs while updating, a temporary file will be created on disk that contains your unapplied changes. The most common error when updating a resource is another editor changing the resource on the server. When this occurs, you will have to apply your changes to the newer version of the resource, or update your temporary saved copy to include the latest resource version.
-
-```
-kubectl edit (RESOURCE/NAME | -f FILENAME)
-```
-
-### Examples
-
-```
- # Edit the service named 'docker-registry':
- kubectl edit svc/docker-registry
-
- # Use an alternative editor
- KUBE_EDITOR="nano" kubectl edit svc/docker-registry
-
- # Edit the job 'myjob' in JSON using the v1 API format:
- kubectl edit job.v1.batch/myjob -o json
-
- # Edit the deployment 'mydeployment' in YAML and save the modified config in its annotation:
- kubectl edit deployment/mydeployment -o yaml --save-config
-```
-
-### Options
-
-```
- -f, --filename stringSlice Filename, directory, or URL to files to use to edit the resource
- --include-uninitialized If true, the kubectl command applies to uninitialized objects. If explicitly set to false, this flag overrides other flags that make the kubectl commands apply to uninitialized objects, e.g., "--all". Objects with empty metadata.initializers are regarded as initialized.
- -o, --output string Output format. One of: yaml|json. (default "yaml")
- --output-patch Output the patch if the resource is edited.
- --record Record current kubectl command in the resource annotation. If set to false, do not record the command. If set to true, record the command. If not set, default to updating the existing annotation value only if one already exists.
- -R, --recursive Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
- --save-config If true, the configuration of current object will be saved in its annotation. Otherwise, the annotation will be unchanged. This flag is useful when you want to perform kubectl apply on this object in the future.
- --validate If true, use a schema to validate the input before sending it (default true)
- --windows-line-endings Defaults to the line ending native to your platform.
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_exec.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_exec.md
index 01649c9e43bc..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_exec.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_exec.md
@@ -1,77 +1,3 @@
-## kubectl exec
-
-Execute a command in a container
-
-### Synopsis
-
-
-Execute a command in a container.
-
-```
-kubectl exec POD [-c CONTAINER] -- COMMAND [args...]
-```
-
-### Examples
-
-```
- # Get output from running 'date' from pod 123456-7890, using the first container by default
- kubectl exec 123456-7890 date
-
- # Get output from running 'date' in ruby-container from pod 123456-7890
- kubectl exec 123456-7890 -c ruby-container date
-
- # Switch to raw terminal mode, sends stdin to 'bash' in ruby-container from pod 123456-7890
- # and sends stdout/stderr from 'bash' back to the client
- kubectl exec 123456-7890 -c ruby-container -i -t -- bash -il
-
- # List contents of /usr from the first container of pod 123456-7890 and sort by modification time.
- # If the command you want to execute in the pod has any flags in common (e.g. -i),
- # you must use two dashes (--) to separate your command's flags/arguments.
- # Also note, do not surround your command and its flags/arguments with quotes
- # unless that is how you would execute it normally (i.e., do ls -t /usr, not "ls -t /usr").
- kubectl exec 123456-7890 -i -t -- ls -t /usr
-```
-
-### Options
-
-```
- -c, --container string Container name. If omitted, the first container in the pod will be chosen
- -p, --pod string Pod name
- -i, --stdin Pass stdin to the container
- -t, --tty Stdin is a TTY
-```
-
-### Options inherited from parent commands
-
-```
- --alsologtostderr log to standard error as well as files
- --as string Username to impersonate for the operation
- --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
- --cache-dir string Default HTTP cache directory (default "/home/username/.kube/http-cache")
- --certificate-authority string Path to a cert file for the certificate authority
- --client-certificate string Path to a client certificate file for TLS
- --client-key string Path to a client key file for TLS
- --cluster string The name of the kubeconfig cluster to use
- --context string The name of the kubeconfig context to use
- --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
- --kubeconfig string Path to the kubeconfig file to use for CLI requests.
- --log-backtrace-at traceLocation when logging hits line file:N, emit a stack trace (default :0)
- --log-dir string If non-empty, write log files in this directory
- --logtostderr log to standard error instead of files
- --match-server-version Require server version to match client version
- -n, --namespace string If present, the namespace scope for this CLI request
- --password string Password for basic authentication to the API server
- --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
- -s, --server string The address and port of the Kubernetes API server
- --stderrthreshold severity logs at or above this threshold go to stderr (default 2)
- --token string Bearer token for authentication to the API server
- --user string The name of the kubeconfig user to use
- --username string Username for basic authentication to the API server
- -v, --v Level log level for V logs
- --vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
-```
-
-### SEE ALSO
-* [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager
-
-###### Auto generated by spf13/cobra on 29-Nov-2017
+This file is autogenerated, but we've stopped checking such files into the
+repository to reduce the need for rebases. Please run hack/generate-docs.sh to
+populate this file.
diff --git a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_explain.md b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_explain.md
index 60a734d8b695..b6fd7a0f9896 100644
--- a/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_explain.md
+++ b/vendor/k8s.io/kubernetes/docs/user-guide/kubectl/kubectl_explain.md
@@ -1,110 +1,3 @@
-## kubectl explain
-
-Documentation of resources
-
-### Synopsis
-
-
-List the fields for supported resources
-
-This command describes the fields associated with each supported API resource. Fields are identified via a simple JSONPath identifier:
-
- .[.
-
-### Other notable improvements
-
- * Job was Beta in 1.1 and is GA in 1.2 .
- * apiVersion: batch/v1 is now available. You now do not need to specify the .spec.selector field — a [unique selector is automatically generated ](http://kubernetes.io/docs/user-guide/jobs/#pod-selector)for you.
- * The previous version, apiVersion: extensions/v1beta1, is still supported. Even if you roll back to 1.1, the objects created using
-the new apiVersion will still be accessible, using the old version. You can
-continue to use your existing JSON and YAML files until you are ready to switch
-to batch/v1. We may remove support for Jobs with apiVersion: extensions/v1beta1 in 1.3 or 1.4.
- * HorizontalPodAutoscaler was Beta in 1.1 and is GA in 1.2 .
- * apiVersion: autoscaling/v1 is now available. Changes in this version are:
- * Field CPUUtilization which was a nested structure CPUTargetUtilization in
-HorizontalPodAutoscalerSpec was replaced by TargetCPUUtilizationPercentage
-which is an integer.
- * ScaleRef of type SubresourceReference in HorizontalPodAutoscalerSpec which
-referred to scale subresource of the resource being scaled was replaced by
-ScaleTargetRef which points just to the resource being scaled.
- * In extensions/v1beta1 if CPUUtilization in HorizontalPodAutoscalerSpec was not
-specified it was set to 80 by default while in autoscaling/v1 HPA object
-without TargetCPUUtilizationPercentage specified is a valid object. Pod
-autoscaler controller will apply a default scaling policy in this case which is
-equivalent to the previous one but may change in the future.
- * The previous version, apiVersion: extensions/v1beta1, is still supported. Even if you roll back to 1.1, the objects created using
-the new apiVersions will still be accessible, using the old version. You can
-continue to use your existing JSON and YAML files until you are ready to switch
-to autoscaling/v1. We may remove support for HorizontalPodAutoscalers with apiVersion: extensions/v1beta1 in 1.3 or 1.4.
- * Kube-Proxy now defaults to an iptables-based proxy. If the --proxy-mode flag is
-specified while starting kube-proxy (‘userspace’ or ‘iptables’), the flag value
-will be respected. If the flag value is not specified, the kube-proxy respects
-the Node object annotation: ‘net.beta.kubernetes.io/proxy-mode’. If the
-annotation is not specified, then ‘iptables’ mode is the default. If kube-proxy
-is unable to start in iptables mode because system requirements are not met
-(kernel or iptables versions are insufficient), the kube-proxy will fall-back
-to userspace mode. Kube-proxy is much more performant and less
-resource-intensive in ‘iptables’ mode.
- * Node stability can be improved by reserving [resources](https://github.com/kubernetes/kubernetes/blob/release-1.2/docs/proposals/node-allocatable.md) for the base operating system using --system-reserved and --kube-reserved Kubelet flags
- * Liveness and readiness probes now support more configuration parameters:
-periodSeconds, successThreshold, failureThreshold
- * The new ReplicaSet API (Beta) in the Extensions API group is similar to
-ReplicationController, but its [selector](http://kubernetes.io/docs/user-guide/labels/#label-selectors) is more general (supports set-based selector; whereas ReplicationController
-only supports equality-based selector).
- * Scale subresource support is now expanded to ReplicaSets along with
-ReplicationControllers and Deployments. Scale now supports two different types
-of selectors to accommodate both [equality-based selectors](http://kubernetes.io/docs/user-guide/labels/#equality-based-requirement) supported by ReplicationControllers and [set-based selectors](http://kubernetes.io/docs/user-guide/labels/#set-based-requirement) supported by Deployments and ReplicaSets.
- * “kubectl run” now produces Deployments (instead of ReplicationControllers) and
-Jobs (instead of Pods) by default.
- * Pods can now consume Secret data in environment variables and inject those
-environment variables into a container’s command-line args.
- * Stable version of Heapster which scales up to 1000 nodes: more metrics, reduced
-latency, reduced cpu/memory consumption (~4mb per monitored node).
- * Pods now have a security context which allows users to specify:
- * attributes which apply to the whole pod:
- * User ID
- * Whether all containers should be non-root
- * Supplemental Groups
- * FSGroup - a special supplemental group
- * SELinux options
- * If a pod defines an FSGroup, that Pod’s system (emptyDir, secret, configMap,
-etc) volumes and block-device volumes will be owned by the FSGroup, and each
-container in the pod will run with the FSGroup as a supplemental group
- * Volumes that support SELinux labelling are now automatically relabeled with the
-Pod’s SELinux context, if specified
- * A stable client library release\_1\_2 is added. The library is [here](pkg/client/clientset_generated/), and detailed doc is [here](docs/devel/generating-clientset.md#released-clientsets). We will keep the interface of this go client stable.
- * New Azure File Service Volume Plugin enables mounting Microsoft Azure File
-Volumes (SMB 2.1 and 3.0) into a Pod. See [example](https://github.com/kubernetes/kubernetes/blob/release-1.2/examples/azure_file/README.md) for details.
- * Logs usage and root filesystem usage of a container, volumes usage of a pod and node disk usage are exposed through Kubelet new metrics API.
-
-### Experimental Features
-
- * Dynamic Provisioning of PersistentVolumes: Kubernetes previously required all
-volumes to be manually provisioned by a cluster administrator before use. With
-this feature, volume plugins that support it (GCE PD, AWS EBS, and Cinder) can
-automatically provision a PersistentVolume to bind to an unfulfilled
-PersistentVolumeClaim.
- * Run multiple schedulers in parallel, e.g. one or more custom schedulers
-alongside the default Kubernetes scheduler, using pod annotations to select
-among the schedulers for each pod. Documentation is [here](http://kubernetes.io/docs/admin/multiple-schedulers.md), design doc is [here](docs/proposals/multiple-schedulers.md).
- * More expressive node affinity syntax, and support for “soft” node affinity.
-Node selectors (to constrain pods to schedule on a subset of nodes) now support
-the operators {In, NotIn, Exists, DoesNotExist, Gt, Lt} instead of just conjunction of exact match on node label values. In
-addition, we’ve introduced a new “soft” kind of node selector that is just a
-hint to the scheduler; the scheduler will try to satisfy these requests but it
-does not guarantee they will be satisfied. Both the “hard” and “soft” variants
-of node affinity use the new syntax. Documentation is [here](http://kubernetes.io/docs/user-guide/node-selection/) (see section “Alpha feature in Kubernetes v1.2: Node Affinity“). Design doc is [here](https://github.com/kubernetes/kubernetes/blob/release-1.2/docs/design/nodeaffinity.md).
- * A pod can specify its own Hostname and Subdomain via annotations (pod.beta.kubernetes.io/hostname, pod.beta.kubernetes.io/subdomain). If the Subdomain matches the name of a [headless service](http://kubernetes.io/docs/user-guide/services/#headless-services) in the same namespace, a DNS A record is also created for the pod’s FQDN. More
-details can be found in the [DNS README](https://github.com/kubernetes/kubernetes/blob/release-1.2/cluster/saltbase/salt/kube-dns/README.md#a-records-and-hostname-based-on-pod-annotations---a-beta-feature-in-kubernetes-v12). Changes were introduced in PR [#20688](https://github.com/kubernetes/kubernetes/pull/20688).
- * New SchedulerExtender enables users to implement custom
-out-of-(the-scheduler)-process scheduling predicates and priority functions,
-for example to schedule pods based on resources that are not directly managed
-by Kubernetes. Changes were introduced in PR [#13580](https://github.com/kubernetes/kubernetes/pull/13580). Example configuration and documentation is available [here](docs/design/scheduler_extender.md). This is an alpha feature and may not be supported in its current form at beta
-or GA.
- * New Flex Volume Plugin enables users to use out-of-process volume plugins that
-are installed to “/usr/libexec/kubernetes/kubelet-plugins/volume/exec/” on
-every node, instead of being compiled into the Kubernetes binary. See [example](examples/volumes/flexvolume/README.md) for details.
- * vendor volumes into a pod. It expects vendor drivers are installed in the
-volume plugin path on each kubelet node. This is an alpha feature and may
-change in future.
- * Kubelet exposes a new Alpha metrics API - /stats/summary in a user friendly format with reduced system overhead. The measurement is done in PR [#22542](https://github.com/kubernetes/kubernetes/pull/22542).
-
-### Action required
-
- * Docker v1.9.1 is officially recommended. Docker v1.8.3 and Docker v1.10 are
-supported. If you are using an older release of Docker, please upgrade. Known
-issues with Docker 1.9.1 can be found below.
- * CPU hardcapping will be enabled by default for containers with CPU limit set,
-if supported by the kernel. You should either adjust your CPU limit, or set CPU
-request only, if you want to avoid hardcapping. If the kernel does not support
-CPU Quota, NodeStatus will contain a warning indicating that CPU Limits cannot
-be enforced.
- * The following applies only if you use the Go language client (/pkg/client/unversioned) to create Job by defining Go variables of type "k8s.io/kubernetes/pkg/apis/extensions".Job). We think this is not common, so if you are not sure what this means, you probably aren't doing this. If
-you do this, then, at the time you re-vendor the "k8s.io/kubernetes/" code, you will need to set job.Spec.ManualSelector = true, or else set job.Spec.Selector = nil. Otherwise, the jobs you create may be rejected. See [Specifying your own pod selector](http://kubernetes.io/docs/user-guide/jobs/#specifying-your-own-pod-selector).
- * Deployment was Alpha in 1.1 (though it had apiVersion extensions/v1beta1) and
-was disabled by default. Due to some non-backward-compatible API changes, any
-Deployment objects you created in 1.1 won’t work with in the 1.2 release.
- * Before upgrading to 1.2, delete all Deployment alpha-version resources, including the Replication Controllers and Pods the Deployment manages. Then
-create Deployment Beta resources after upgrading to 1.2. Not deleting the
-Deployment objects may cause the deployment controller to mistakenly match
-other pods and delete them, due to the selector API change.
- * Client (kubectl) and server versions must match (both 1.1 or both 1.2) for any
-Deployment-related operations.
- * Behavior change:
- * Deployment creates ReplicaSets instead of ReplicationControllers.
- * Scale subresource now has a new targetSelector field in its status. This field supports the new set-based selectors supported
-by Deployments, but in a serialized format.
- * Spec change:
- * Deployment’s [selector](http://kubernetes.io/docs/user-guide/labels/#label-selectors) is now more general (supports set-based selector; it only supported
-equality-based selector in 1.1).
- * .spec.uniqueLabelKey is removed -- users can’t customize unique label key --
-and its default value is changed from
-“deployment.kubernetes.io/podTemplateHash” to “pod-template-hash”.
- * .spec.strategy.rollingUpdate.minReadySeconds is moved to .spec.minReadySeconds
- * DaemonSet was Alpha in 1.1 (though it had apiVersion extensions/v1beta1) and
-was disabled by default. Due to some non-backward-compatible API changes, any
-DaemonSet objects you created in 1.1 won’t work with in the 1.2 release.
- * Before upgrading to 1.2, delete all DaemonSet alpha-version resources. If you do not want to disrupt the pods, use kubectl delete daemonset curl -H "Content-Type: application/json" -XPOST -d
-'{"apiVersion":"v1","kind":"Namespace","metadata":{"name":"kube-system"}}' "[http://127.0.0.1:8080/api/v1/namespaces](http://127.0.0.1:8080/api/v1/namespaces)"
- * The version of InfluxDB is bumped from 0.8 to 0.9 which means storage schema
-change. More details [here](https://docs.influxdata.com/influxdb/v0.9/administration/upgrading/).
- * We have renamed “minions” to “nodes”. If you were specifying NUM\_MINIONS or
-MINION\_SIZE to kube-up, you should now specify NUM\_NODES or NODE\_SIZE.
-
-### Known Issues
-
- * Paused deployments can't be resized and don't clean up old ReplicaSets.
- * Minimum memory limit is 4MB. This is a docker limitation
- * Minimum CPU limits is 10m. This is a Linux Kernel limitation
- * “kubectl rollout undo” (i.e. rollback) will hang on paused deployments, because
-paused deployments can’t be rolled back (this is expected), and the command
-waits for rollback events to return the result. Users should use “kubectl
-rollout resume” to resume a deployment before rolling back.
- * “kubectl edit - ” will open the editor multiple times, once for each
-resource in the list.
- * If you create HPA object using autoscaling/v1 API without specifying
-targetCPUUtilizationPercentage and read it using kubectl it will print default
-value as specified in extensions/v1beta1 (see details in [#23196](https://github.com/kubernetes/kubernetes/issues/23196)).
- * If a node or kubelet crashes with a volume attached, the volume will remain
-attached to that node. If that volume can only be attached to one node at a
-time (GCE PDs attached in RW mode, for example), then the volume must be
-manually detached before Kubernetes can attach it to other nodes.
- * If a volume is already attached to a node any subsequent attempts to attach it
-again (due to kubelet restart, for example) will fail. The volume must either
-be manually detached first or the pods referencing it deleted (which would
-trigger automatic volume detach).
- * In very large clusters it may happen that a few nodes won’t register in API
-server in a given timeframe for whatever reasons (networking issue, machine
-failure, etc.). Normally when kube-up script will encounter even one NotReady
-node it will fail, even though the cluster most likely will be working. We
-added an environmental variable to kube-up ALLOWED\_NOTREADY\_NODES that
-defines the number of nodes that if not Ready in time won’t cause kube-up
-failure.
- * “kubectl rolling-update” only supports Replication Controllers (it doesn’t
-support Replica Sets). It’s recommended to use Deployment 1.2 with “kubectl
-rollout” commands instead, if you want to rolling update Replica Sets.
- * When live upgrading Kubelet to 1.2 without draining the pods running on the node,
-the containers will be restarted by Kubelet (see details in [#23104](https://github.com/kubernetes/kubernetes/issues/23104)).
-
-#### Docker Known Issues
-
-##### 1.9.1
-
- * Listing containers can be slow at times which will affect kubelet performance.
-More information [here](https://github.com/docker/docker/issues/17720)
- * Docker daemon restarts can fail. Docker checkpoints have to deleted between
-restarts. More information [here](https://github.com/kubernetes/kubernetes/issues/20995)
- * Pod IP allocation-related issues. Deleting the docker checkpoint prior to
-restarting the daemon alleviates this issue, but hasn’t been verified to
-completely eliminate the IP allocation issue. More information [here](https://github.com/kubernetes/kubernetes/issues/21523#issuecomment-191498969)
- * Daemon becomes unresponsive (rarely) due to kernel deadlocks. More information [here](https://github.com/kubernetes/kubernetes/issues/21866#issuecomment-189492391)
-
-### Provider-specific Notes
-
-#### Various
-
- Core changes:
-
- * Support for load balancers with source ranges
-
-#### AWS
-
-Core changes:
-
- * Support for ELBs with complex configurations: better subnet selection with
-multiple subnets, and internal ELBs
- * Support for VPCs with private dns names
- * Multiple fixes to EBS volume mounting code for robustness, and to support
-mounting the full number of AWS recommended volumes.
- * Multiple fixes to avoid hitting AWS rate limits, and to throttle if we do
- * Support for the EC2 Container Registry (currently in us-east-1 only)
-
-With kube-up:
-
- * Automatically install updates on boot & reboot
- * Use optimized image based on Jessie by default
- * Add support for Ubuntu Wily
- * Master is configured with automatic restart-on-failure, via CloudWatch
- * Bootstrap reworked to be more similar to GCE; better supports reboots/restarts
- * Use an elastic IP for the master by default
- * Experimental support for node spot instances (set NODE\_SPOT\_PRICE=0.05)
-
-#### GCE
-
- * Ubuntu Trusty support added
-
-Please see the [Releases Page](https://github.com/kubernetes/kubernetes/releases) for older releases.
-
-
-[]()
diff --git a/vendor/k8s.io/kubernetes/CHANGELOG-1.3.md b/vendor/k8s.io/kubernetes/CHANGELOG-1.3.md
deleted file mode 100644
index 2427031ccc29..000000000000
--- a/vendor/k8s.io/kubernetes/CHANGELOG-1.3.md
+++ /dev/null
@@ -1,972 +0,0 @@
-
-- [v1.3.10](#v1310)
- - [Downloads for v1.3.10](#downloads-for-v1310)
- - [Client Binaries](#client-binaries)
- - [Server Binaries](#server-binaries)
- - [Changelog since v1.3.9](#changelog-since-v139)
- - [Other notable changes](#other-notable-changes)
-- [v1.3.9](#v139)
- - [Downloads](#downloads)
- - [Changelog since v1.3.8](#changelog-since-v138)
- - [Other notable changes](#other-notable-changes-1)
-- [v1.3.8](#v138)
- - [Downloads](#downloads-1)
- - [Changelog since v1.3.7](#changelog-since-v137)
- - [Other notable changes](#other-notable-changes-2)
-- [v1.3.7](#v137)
- - [Downloads](#downloads-2)
- - [Changelog since v1.3.6](#changelog-since-v136)
- - [Other notable changes](#other-notable-changes-3)
-- [v1.3.6](#v136)
- - [Downloads](#downloads-3)
- - [Changelog since v1.3.5](#changelog-since-v135)
- - [Other notable changes](#other-notable-changes-4)
-- [v1.3.5](#v135)
- - [Downloads](#downloads-4)
- - [Changelog since v1.3.4](#changelog-since-v134)
- - [Other notable changes](#other-notable-changes-5)
-- [v1.3.4](#v134)
- - [Downloads](#downloads-5)
- - [Changelog since v1.3.3](#changelog-since-v133)
- - [Other notable changes](#other-notable-changes-6)
-- [v1.3.3](#v133)
- - [Downloads](#downloads-6)
- - [Changelog since v1.3.2](#changelog-since-v132)
- - [Other notable changes](#other-notable-changes-7)
- - [Known Issues](#known-issues)
-- [v1.3.2](#v132)
- - [Downloads](#downloads-7)
- - [Changelog since v1.3.1](#changelog-since-v131)
- - [Other notable changes](#other-notable-changes-8)
-- [v1.3.1](#v131)
- - [Downloads](#downloads-8)
- - [Changelog since v1.3.0](#changelog-since-v130)
- - [Other notable changes](#other-notable-changes-9)
-- [v1.3.0](#v130)
- - [Downloads](#downloads-9)
- - [Highlights](#highlights)
- - [Known Issues and Important Steps before Upgrading](#known-issues-and-important-steps-before-upgrading)
- - [ThirdPartyResource](#thirdpartyresource)
- - [kubectl](#kubectl)
- - [kubernetes Core Known Issues](#kubernetes-core-known-issues)
- - [Docker runtime Known Issues](#docker-runtime-known-issues)
- - [Rkt runtime Known Issues](#rkt-runtime-known-issues)
- - [Provider-specific Notes](#provider-specific-notes)
- - [Previous Releases Included in v1.3.0](#previous-releases-included-in-v130)
-- [v1.3.0-beta.3](#v130-beta3)
- - [Downloads](#downloads-10)
- - [Changelog since v1.3.0-beta.2](#changelog-since-v130-beta2)
- - [Action Required](#action-required)
- - [Other notable changes](#other-notable-changes-10)
-- [v1.3.0-beta.2](#v130-beta2)
- - [Downloads](#downloads-11)
- - [Changes since v1.3.0-beta.1](#changes-since-v130-beta1)
- - [Experimental Features](#experimental-features)
- - [Other notable changes](#other-notable-changes-11)
-- [v1.3.0-beta.1](#v130-beta1)
- - [Downloads](#downloads-12)
- - [Changes since v1.3.0-alpha.5](#changes-since-v130-alpha5)
- - [Action Required](#action-required-1)
- - [Other notable changes](#other-notable-changes-12)
-- [v1.3.0-alpha.5](#v130-alpha5)
- - [Downloads](#downloads-13)
- - [Changes since v1.3.0-alpha.4](#changes-since-v130-alpha4)
- - [Action Required](#action-required-2)
- - [Other notable changes](#other-notable-changes-13)
-- [v1.3.0-alpha.4](#v130-alpha4)
- - [Downloads](#downloads-14)
- - [Changes since v1.3.0-alpha.3](#changes-since-v130-alpha3)
- - [Action Required](#action-required-3)
- - [Other notable changes](#other-notable-changes-14)
-- [v1.3.0-alpha.3](#v130-alpha3)
- - [Downloads](#downloads-15)
- - [Changes since v1.3.0-alpha.2](#changes-since-v130-alpha2)
- - [Action Required](#action-required-4)
- - [Other notable changes](#other-notable-changes-15)
-- [v1.3.0-alpha.2](#v130-alpha2)
- - [Downloads](#downloads-16)
- - [Changes since v1.3.0-alpha.1](#changes-since-v130-alpha1)
- - [Other notable changes](#other-notable-changes-16)
-- [v1.3.0-alpha.1](#v130-alpha1)
- - [Downloads](#downloads-17)
- - [Changes since v1.2.0](#changes-since-v120)
- - [Action Required](#action-required-5)
- - [Other notable changes](#other-notable-changes-17)
-
-
-
-
-
-# v1.3.10
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads for v1.3.10
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes.tar.gz) | `0f61517fbab1feafbe1024da0b88bfe16e61fed7e612285d70e3ecb53ce518cf`
-[kubernetes-src.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-src.tar.gz) | `7b1be0dcc12ae1b0cb1928b770c1025755fd0858ce7520907bacda19e5bfa53f`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-darwin-386.tar.gz) | `64a7012411a506ff7825e7b9c64b50197917d6f4e1128ea0e7b30a121059da47`
-[kubernetes-client-darwin-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-darwin-amd64.tar.gz) | `5d85843e643eaebe3e34e48810f4786430b5ecce915144e01ba2d8539aa77364`
-[kubernetes-client-linux-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-linux-386.tar.gz) | `06d478c601b1d4aa1fc539e9120adbcbbd2fb370d062516f84a064e465d8eadc`
-[kubernetes-client-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-linux-amd64.tar.gz) | `fe571542482b8ba3ff94b9e5e9657f6ab4fc0feb8971930dc80b7ae2548d669b`
-[kubernetes-client-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-linux-arm64.tar.gz) | `176b52d35150ca9f08a7e90e33e2839b7574afe350edf4fafa46745d77bb5aa4`
-[kubernetes-client-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-linux-arm.tar.gz) | `1c3bf4ac1e4eb0e02f785db725efd490beaf06c8acd26d694971ba510b60a94d`
-[kubernetes-client-linux-ppc64le.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-linux-ppc64le.tar.gz) | `172cd0af71fcba7c51e9476732dbe86ba251c03b1d74f912111e4e755be540ce`
-[kubernetes-client-windows-386.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-windows-386.tar.gz) | `f2d2f82d7e285c98d8cc58a8a6e13a1122c9f60bb2c73e4cefe3555f963e56cd`
-[kubernetes-client-windows-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-client-windows-amd64.tar.gz) | `ac0aa2b09dfeb8001e76f3aefe82c7bd2fda5bd0ef744ac3aed966b99c8dc8e5`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-server-linux-amd64.tar.gz) | `bf0d3924ff84c95c316fcb4b21876cc019bd648ca8ab87fd6b2712ccda30992b`
-[kubernetes-server-linux-arm64.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-server-linux-arm64.tar.gz) | `45e88d1c8edc17d7f1deab8d040a769d8647203c465d76763abb1ce445a98773`
-[kubernetes-server-linux-arm.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-server-linux-arm.tar.gz) | `40ac46a265021615637f07d532cd563b4256dcf340a27c594bfd3501fe66b84c`
-[kubernetes-server-linux-ppc64le.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.10/kubernetes-server-linux-ppc64le.tar.gz) | `faa5075ab3e6688666bbbb274fa55a825513ee082a3b17bcddb5b8f4fd6f9aa0`
-
-## Changelog since v1.3.9
-
-### Other notable changes
-
-* gci: decouple from the built-in kubelet version ([#31367](https://github.com/kubernetes/kubernetes/pull/31367), [@Amey-D](https://github.com/Amey-D))
-* Bump GCE debian image to container-vm-v20161025 (CVE-2016-5195 Dirty… ([#35825](https://github.com/kubernetes/kubernetes/pull/35825), [@dchen1107](https://github.com/dchen1107))
-* Add RELEASE_INFRA_PUSH related code to support pushes from kubernetes/release. ([#28922](https://github.com/kubernetes/kubernetes/pull/28922), [@david-mcmahon](https://github.com/david-mcmahon))
-
-
-
-# v1.3.9
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.9/kubernetes.tar.gz) | `a994c732d2b852bbee55a78601d50d046323021a99b0801aea07dacf64c2c59a`
-
-## Changelog since v1.3.8
-
-### Other notable changes
-
-* Test x509 intermediates correctly ([#34524](https://github.com/kubernetes/kubernetes/pull/34524), [@liggitt](https://github.com/liggitt))
-* Remove headers that are unnecessary for proxy target ([#34076](https://github.com/kubernetes/kubernetes/pull/34076), [@mbohlool](https://github.com/mbohlool))
-
-
-
-# v1.3.8
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.8/kubernetes.tar.gz) | `66cf72d8f07e2f700acfcb11536694e0d904483611ff154f34a8380c63720a8d`
-
-## Changelog since v1.3.7
-
-### Other notable changes
-
-* AWS: fix volume device assignment race condition ([#31090](https://github.com/kubernetes/kubernetes/pull/31090), [@justinsb](https://github.com/justinsb))
-
-
-
-# v1.3.7
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.7/kubernetes.tar.gz) | `ad18566a09ff87b36107c2ea238fa5e20988d7a62c85df9c8598920679fec4a1`
-
-## Changelog since v1.3.6
-
-### Other notable changes
-
-* AWS: Add ap-south-1 to list of known AWS regions ([#28428](https://github.com/kubernetes/kubernetes/pull/28428), [@justinsb](https://github.com/justinsb))
-* Back porting critical vSphere bug fixes to release 1.3 ([#31993](https://github.com/kubernetes/kubernetes/pull/31993), [@dagnello](https://github.com/dagnello))
-* Back port - Openstack provider allowing more than one service port for lbaas v2 ([#32001](https://github.com/kubernetes/kubernetes/pull/32001), [@dagnello](https://github.com/dagnello))
-* Fix a bug in kubelet hostport logic which flushes KUBE-MARK-MASQ iptables chain ([#32413](https://github.com/kubernetes/kubernetes/pull/32413), [@freehan](https://github.com/freehan))
-* Fixes the panic that occurs in the federation controller manager when registering a GKE cluster to the federation. Fixes issue [#30790](https://github.com/kubernetes/kubernetes/pull/30790). ([#30940](https://github.com/kubernetes/kubernetes/pull/30940), [@madhusudancs](https://github.com/madhusudancs))
-
-
-
-# v1.3.6
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.6/kubernetes.tar.gz) | `2db7ace2f72a2e162329a6dc969a5a158bb8c5d0f8054c5b1b2b1063aa22020d`
-
-## Changelog since v1.3.5
-
-### Other notable changes
-
-* Addresses vSphere Volume Attach limits ([#29881](https://github.com/kubernetes/kubernetes/pull/29881), [@dagnello](https://github.com/dagnello))
-* Increase request timeout based on termination grace period ([#31275](https://github.com/kubernetes/kubernetes/pull/31275), [@dims](https://github.com/dims))
-* Skip safe to detach check if node API object no longer exists ([#30737](https://github.com/kubernetes/kubernetes/pull/30737), [@saad-ali](https://github.com/saad-ali))
-* Nodecontroller doesn't flip readiness on pods if kubeletVersion < 1.2.0 ([#30828](https://github.com/kubernetes/kubernetes/pull/30828), [@bprashanth](https://github.com/bprashanth))
-* Update cadvisor to v0.23.9 to fix a problem where attempting to gather container filesystem usage statistics could result in corrupted devicemapper thin pool storage for Docker. ([#30307](https://github.com/kubernetes/kubernetes/pull/30307), [@sjenning](https://github.com/sjenning))
-
-
-
-# v1.3.5
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.5/kubernetes.tar.gz) | `46be88ce927124f7cef7e280720b42c63051086880b7ebdba298b561dbe19f82`
-
-## Changelog since v1.3.4
-
-### Other notable changes
-
-* Update Dashboard UI to version v1.1.1 ([#30273](https://github.com/kubernetes/kubernetes/pull/30273), [@bryk](https://github.com/bryk))
-* allow restricting subresource access ([#30001](https://github.com/kubernetes/kubernetes/pull/30001), [@deads2k](https://github.com/deads2k))
-* Fix PVC.Status.Capacity and AccessModes after binding ([#29982](https://github.com/kubernetes/kubernetes/pull/29982), [@jsafrane](https://github.com/jsafrane))
-* oidc authentication plugin: don't trim issuer URLs with trailing slashes ([#29860](https://github.com/kubernetes/kubernetes/pull/29860), [@ericchiang](https://github.com/ericchiang))
-* network/cni: Bring up the `lo` interface for rkt ([#29310](https://github.com/kubernetes/kubernetes/pull/29310), [@euank](https://github.com/euank))
-* Fixing kube-up for CVM masters. ([#29140](https://github.com/kubernetes/kubernetes/pull/29140), [@maisem](https://github.com/maisem))
-
-
-
-# v1.3.4
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.4/kubernetes.tar.gz) | `818acc1a8ba61cff434d4c0c5aa3d342d06e6907b565cfd8651b8cfcf3f0a1e6`
-
-## Changelog since v1.3.3
-
-### Other notable changes
-
-* NetworkPolicy cherry-pick 1.3 ([#29556](https://github.com/kubernetes/kubernetes/pull/29556), [@caseydavenport](https://github.com/caseydavenport))
-* Allow mounts to run in parallel for non-attachable volumes ([#28939](https://github.com/kubernetes/kubernetes/pull/28939), [@saad-ali](https://github.com/saad-ali))
-* add enhanced volume and mount logging for block devices ([#24797](https://github.com/kubernetes/kubernetes/pull/24797), [@screeley44](https://github.com/screeley44))
-* kube-up: increase download timeout for kubernetes.tar.gz ([#29426](https://github.com/kubernetes/kubernetes/pull/29426), [@justinsb](https://github.com/justinsb))
-* Fix RBAC authorizer of ServiceAccount ([#29071](https://github.com/kubernetes/kubernetes/pull/29071), [@albatross0](https://github.com/albatross0))
-* Update docker engine-api to dea108d3aa ([#29144](https://github.com/kubernetes/kubernetes/pull/29144), [@ronnielai](https://github.com/ronnielai))
-* Assume volume is detached if node doesn't exist ([#29485](https://github.com/kubernetes/kubernetes/pull/29485), [@saad-ali](https://github.com/saad-ali))
-* Make PD E2E Tests Wait for Detach to Prevent Kernel Errors ([#29031](https://github.com/kubernetes/kubernetes/pull/29031), [@saad-ali](https://github.com/saad-ali))
-* Fix "PVC Volume not detached if pod deleted via namespace deletion" issue ([#29077](https://github.com/kubernetes/kubernetes/pull/29077), [@saad-ali](https://github.com/saad-ali))
-* append an abac rule for $KUBE_USER. ([#29164](https://github.com/kubernetes/kubernetes/pull/29164), [@cjcullen](https://github.com/cjcullen))
-
-
-
-# v1.3.3
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha256 hash
------- | -----------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.3/kubernetes.tar.gz) | `a92a74a0d3f7d02d01ac2c8dfb5ee2e97b0485819e77b2110eb7c6b7c782478c`
-
-## Changelog since v1.3.2
-
-### Other notable changes
-
-* Removing images with multiple tags ([#29316](https://github.com/kubernetes/kubernetes/pull/29316), [@ronnielai](https://github.com/ronnielai))
-* kubectl: don't display an empty list when trying to get a single resource that isn't found ([#28294](https://github.com/kubernetes/kubernetes/pull/28294), [@ncdc](https://github.com/ncdc))
-* Fix working_set calculation in kubelet ([#29154](https://github.com/kubernetes/kubernetes/pull/29154), [@vishh](https://github.com/vishh))
-* Don't delete affinity when endpoints are empty ([#28655](https://github.com/kubernetes/kubernetes/pull/28655), [@freehan](https://github.com/freehan))
-* GCE bring-up: Differentiate NODE_TAGS from NODE_INSTANCE_PREFIX ([#29141](https://github.com/kubernetes/kubernetes/pull/29141), [@zmerlynn](https://github.com/zmerlynn))
-* Fix logrotate config on GCI ([#29139](https://github.com/kubernetes/kubernetes/pull/29139), [@adityakali](https://github.com/adityakali))
-* Do not query the metadata server to find out if running on GCE. Retry metadata server query for gcr if running on gce. ([#28871](https://github.com/kubernetes/kubernetes/pull/28871), [@vishh](https://github.com/vishh))
-* Fix GPU resource validation ([#28743](https://github.com/kubernetes/kubernetes/pull/28743), [@therc](https://github.com/therc))
-* Scale kube-proxy conntrack limits by cores (new default behavior) ([#28876](https://github.com/kubernetes/kubernetes/pull/28876), [@thockin](https://github.com/thockin))
-* Don't recreate lb cloud resources on kcm restart ([#29082](https://github.com/kubernetes/kubernetes/pull/29082), [@bprashanth](https://github.com/bprashanth))
-
-## Known Issues
-
-There are a number of known issues that have been found and are being worked on.
-Please be aware of them as you test your workloads.
-
-* PVC Volume not detached if pod deleted via namespace deletion ([29051](https://github.com/kubernetes/kubernetes/issues/29051))
-* Google Compute Engine PD Detach fails if node no longer exists ([29358](https://github.com/kubernetes/kubernetes/issues/29358))
-* Mounting (only 'default-token') volume takes a long time when creating a batch of pods (parallelization issue) ([28616](https://github.com/kubernetes/kubernetes/issues/28616))
-* Error while tearing down pod, "device or resource busy" on service account secret ([28750](https://github.com/kubernetes/kubernetes/issues/28750))
-
-
-
-# v1.3.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.2/kubernetes.tar.gz) | `f46664d04dc2966c77d8727bba57f57b5f917572` | `1a5b0639941054585d0432dd5ce3abc7`
-
-## Changelog since v1.3.1
-
-### Other notable changes
-
-* List all nodes and occupy cidr map before starting allocations ([#29062](https://github.com/kubernetes/kubernetes/pull/29062), [@bprashanth](https://github.com/bprashanth))
-* Fix watch cache filtering ([#28968](https://github.com/kubernetes/kubernetes/pull/28968), [@liggitt](https://github.com/liggitt))
-* Lock all possible kubecfg files at the beginning of ModifyConfig. ([#28232](https://github.com/kubernetes/kubernetes/pull/28232), [@cjcullen](https://github.com/cjcullen))
-
-
-
-# v1.3.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3.0/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.1/kubernetes.tar.gz) | `5645b12beda22137204439de8260c62c9925f89b` | `ae6e9902ec70c1322d9a0a29ef385190`
-
-## Changelog since v1.3.0
-
-### Other notable changes
-
-* Fix watch cache filtering ([#29046](https://github.com/kubernetes/kubernetes/pull/29046), [@liggitt](https://github.com/liggitt))
-
-
-
-# v1.3.0
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0/kubernetes.tar.gz) | `88249c443d438666928379aa7fe865b389ed72ea` | `9270f001aef8c03ff5db63456ca9eecc`
-
-## Highlights
-
-* Authorization:
- * **Alpha** RBAC authorization API group
-* Federation
- * federation api group is now **beta**
- * Services from all federated clusters are now registered in Cloud DNS (AWS and GCP).
-* Stateful Apps:
- * **alpha** PetSets manage stateful apps
- * **alpha** Init containers provide one-time setup for stateful containers
-* Updating:
- * Retry Pod/RC updates in kubectl rolling-update.
- * Stop 'kubectl drain' deleting pods with local storage.
- * Add `kubectl rollout status`
-* Security/Auth
- * L7 LB controller and disk attach controllers run on master, so nodes do not need those privileges.
- * Setting TLS1.2 minimum
- * `kubectl create secret tls` command
- * Webhook Token Authenticator
- * **beta** PodSecurityPolicy objects limits use of security-sensitive features by pods.
-* Kubectl
- * Display line number on JSON errors
- * Add flag -t as shorthand for --tty
-* Resources
- * Improved node stability by *optionally* evicting pods upon memory pressure - [Design Doc](https://github.com/kubernetes/kubernetes/blob/release-1.3/docs/proposals/kubelet-eviction.md)
- * **alpha**: NVIDIA GPU support ([#24836](https://github.com/kubernetes/kubernetes/pull/24836), [@therc](https://github.com/therc))
- * Adding loadBalancer services and nodeports services to quota system
-
-## Known Issues and Important Steps before Upgrading
-
-The following versions of Docker Engine are supported - *[v1.10](https://github.com/kubernetes/kubernetes/issues/19720)*, *[v1.11](https://github.com/kubernetes/kubernetes/issues/23397)*
-Although *v1.9* is still compatible, we recommend upgrading to one of the supported versions.
-All prior versions of docker will not be supported.
-
-#### ThirdPartyResource
-
-If you use ThirdPartyResource objects, they have moved from being namespaced-scoped to be cluster-scoped. Before upgrading to 1.3.0, export and delete any existing ThirdPartyResource objects using a 1.2.x client:
-
-kubectl get thirdpartyresource --all-namespaces -o yaml > tprs.yaml
-kubectl delete -f tprs.yaml
-
-After upgrading to 1.3.0, re-register the third party resource objects at the root scope (using a 1.3 server and client):
-
-kubectl create -f tprs.yaml
-
-#### kubectl
-
-Kubectl flag `--container-port` flag is deprecated: it will be removed in the future, please use `--target-port` instead.
-
-#### kubernetes Core Known Issues
-
-- Kube Proxy crashes infrequently due to a docker bug ([#24000](https://github.com/docker/docker/issues/24000))
- - This issue can be resolved by restarting docker daemon
-- CORS works only in insecure mode ([#24086](https://github.com/kubernetes/kubernetes/issues/24086))
-- Persistent volume claims gets added incorrectly after being deleted under stress. Happens very infrequently. ([#26082](https://github.com/kubernetes/kubernetes/issues/26082))
-
-#### Docker runtime Known Issues
-
-- Kernel crash with Aufs storage driver on Debian Jessie ([#27885](https://github.com/kubernetes/kubernetes/issues/27885))
- - Consider running the *new* [kubernetes node problem detector](https://github.com/kubernetes/node-problem-detector) to identify this (and other) kernel issues automatically.
-
-- File descriptors are leaked in docker v1.11 ([#275](https://github.com/docker/containerd/issues/275))
-- Additional memory overhead per container in docker v1.11 ([#21737](https://github.com/docker/docker/issues/21737))
-- [List of upstream fixes](https://github.com/docker/docker/compare/v1.10.3...runcom:docker-1.10.3-stable) for docker v1.10 identified by RedHat
-
-#### Rkt runtime Known Issues
-
-- A detailed list of known issues can be found [here](https://github.com/kubernetes/kubernetes.github.io/blob/release-1.3/docs/getting-started-guides/rkt/notes.md)
-
-*More Instructions coming soon*
-
-## Provider-specific Notes
-
-* AWS
- * Support for ap-northeast-2 region (Seoul)
- * Allow cross-region image pulling with ECR
- * More reliable kube-up/kube-down
- * Enable ICMP Type 3 Code 4 for ELBs
- * ARP caching fix
- * Use /dev/xvdXX names
- * ELB:
- * ELB proxy protocol support
- * mixed plaintext/encrypted ports support in ELBs
- * SSL support for ELB listeners
- * Allow VPC CIDR to be specified (experimental)
- * Fix problems with >2 security groups
-* GCP:
- * Enable using gcr.io as a Docker registry mirror.
- * Make bigger master root disks in GCE for large clusters.
- * Change default clusterCIDRs from /16 to /14 allowing 1000 Node clusters by default.
- * Allow Debian Jessie on GCE.
- * Node problem detector addon pod detects and reports kernel deadlocks.
-* OpenStack
- * Provider added.
-* VSphere:
- * Provider updated.
-
-## Previous Releases Included in v1.3.0
-
-- [v1.3.0-beta.3](CHANGELOG.md#v130-beta3)
-- [v1.3.0-beta.2](CHANGELOG.md#v130-beta2)
-- [v1.3.0-beta.1](CHANGELOG.md#v130-beta1)
-- [v1.3.0-alpha.5](CHANGELOG.md#v130-alpha5)
-- [v1.3.0-alpha.4](CHANGELOG.md#v130-alpha4)
-- [v1.3.0-alpha.3](CHANGELOG.md#v130-alpha3)
-- [v1.3.0-alpha.2](CHANGELOG.md#v130-alpha2)
-- [v1.3.0-alpha.1](CHANGELOG.md#v130-alpha1)
-
-
-
-# v1.3.0-beta.3
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-beta.3/kubernetes.tar.gz) | `9d18964a294f356bfdc841957dcad8ff35ed909c` | `ee5fcdf86645135ed132663967876dd6`
-
-## Changelog since v1.3.0-beta.2
-
-### Action Required
-
-* [kubelet] Allow opting out of automatic cloud provider detection in kubelet. By default kubelet will auto-detect cloud providers ([#28258](https://github.com/kubernetes/kubernetes/pull/28258), [@vishh](https://github.com/vishh))
-* If you use one of the kube-dns replication controller manifest in `cluster/saltbase/salt/kube-dns`, i.e. `cluster/saltbase/salt/kube-dns/{skydns-rc.yaml.base,skydns-rc.yaml.in}`, either substitute one of `__PILLAR__FEDERATIONS__DOMAIN__MAP__` or `{{ pillar['federations_domain_map'] }}` with the corresponding federation name to domain name value or remove them if you do not support cluster federation at this time. If you plan to substitute the parameter with its value, here is an example for `{{ pillar['federations_domain_map'] }` ([#28132](https://github.com/kubernetes/kubernetes/pull/28132), [@madhusudancs](https://github.com/madhusudancs))
- * pillar['federations_domain_map'] = "- --federations=myfederation=federation.test"
- * where `myfederation` is the name of the federation and `federation.test` is the domain name registered for the federation.
-* federation: Upgrading the groupversion to v1beta1 ([#28186](https://github.com/kubernetes/kubernetes/pull/28186), [@nikhiljindal](https://github.com/nikhiljindal))
-* Set Dashboard UI version to v1.1.0 ([#27869](https://github.com/kubernetes/kubernetes/pull/27869), [@bryk](https://github.com/bryk))
-
-### Other notable changes
-
-* Build: Add KUBE_GCS_RELEASE_BUCKET_MIRROR option to push-ci-build.sh ([#28172](https://github.com/kubernetes/kubernetes/pull/28172), [@zmerlynn](https://github.com/zmerlynn))
-* Image GC logic should compensate for reserved blocks ([#27996](https://github.com/kubernetes/kubernetes/pull/27996), [@ronnielai](https://github.com/ronnielai))
-* Bump minimum API version for docker to 1.21 ([#27208](https://github.com/kubernetes/kubernetes/pull/27208), [@yujuhong](https://github.com/yujuhong))
-* Adding lock files for kubeconfig updating ([#28034](https://github.com/kubernetes/kubernetes/pull/28034), [@krousey](https://github.com/krousey))
-* federation service controller: fixing the logic to update DNS records ([#27999](https://github.com/kubernetes/kubernetes/pull/27999), [@quinton-hoole](https://github.com/quinton-hoole))
-* federation: Updating KubeDNS to try finding a local service first for federation query ([#27708](https://github.com/kubernetes/kubernetes/pull/27708), [@nikhiljindal](https://github.com/nikhiljindal))
-* Support journal logs in fluentd-gcp on GCI ([#27981](https://github.com/kubernetes/kubernetes/pull/27981), [@a-robinson](https://github.com/a-robinson))
-* Copy and display source location prominently on Kubernetes instances ([#27985](https://github.com/kubernetes/kubernetes/pull/27985), [@maisem](https://github.com/maisem))
-* Federation e2e support for AWS ([#27791](https://github.com/kubernetes/kubernetes/pull/27791), [@colhom](https://github.com/colhom))
-* Copy and display source location prominently on Kubernetes instances ([#27840](https://github.com/kubernetes/kubernetes/pull/27840), [@zmerlynn](https://github.com/zmerlynn))
-* AWS/GCE: Spread PetSet volume creation across zones, create GCE volumes in non-master zones ([#27553](https://github.com/kubernetes/kubernetes/pull/27553), [@justinsb](https://github.com/justinsb))
-* GCE provider: Create TargetPool with 200 instances, then update with rest ([#27829](https://github.com/kubernetes/kubernetes/pull/27829), [@zmerlynn](https://github.com/zmerlynn))
-* Add sources to server tarballs. ([#27830](https://github.com/kubernetes/kubernetes/pull/27830), [@david-mcmahon](https://github.com/david-mcmahon))
-* Retry Pod/RC updates in kubectl rolling-update ([#27509](https://github.com/kubernetes/kubernetes/pull/27509), [@janetkuo](https://github.com/janetkuo))
-* AWS kube-up: Authorize route53 in the IAM policy ([#27794](https://github.com/kubernetes/kubernetes/pull/27794), [@justinsb](https://github.com/justinsb))
-* Allow conformance tests to run on non-GCE providers ([#26932](https://github.com/kubernetes/kubernetes/pull/26932), [@aaronlevy](https://github.com/aaronlevy))
-* AWS kube-up: move to Docker 1.11.2 ([#27676](https://github.com/kubernetes/kubernetes/pull/27676), [@justinsb](https://github.com/justinsb))
-* Fixed an issue that Deployment may be scaled down further than allowed by maxUnavailable when minReadySeconds is set. ([#27728](https://github.com/kubernetes/kubernetes/pull/27728), [@janetkuo](https://github.com/janetkuo))
-
-
-
-# v1.3.0-beta.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-beta.2/kubernetes.tar.gz) | `9c95762970b943d6c6547f0841c1e5471148b0e3` | `dc9e8560f24459b2313317b15910bee7`
-
-## Changes since v1.3.0-beta.1
-
-### Experimental Features
-
-* Init containers enable pod authors to perform tasks before their normal containers start. Each init container is started in order, and failing containers will prevent the application from starting. ([#23666](https://github.com/kubernetes/kubernetes/pull/23666), [@smarterclayton](https://github.com/smarterclayton))
-
-### Other notable changes
-
-* GCE provider: Limit Filter calls to regexps rather than large blobs ([#27741](https://github.com/kubernetes/kubernetes/pull/27741), [@zmerlynn](https://github.com/zmerlynn))
-* Show LASTSEEN, the sorting key, as the first column in `kubectl get event` output ([#27549](https://github.com/kubernetes/kubernetes/pull/27549), [@therc](https://github.com/therc))
-* GCI: fix kubectl permission issue [#27643](https://github.com/kubernetes/kubernetes/pull/27643) ([#27740](https://github.com/kubernetes/kubernetes/pull/27740), [@andyzheng0831](https://github.com/andyzheng0831))
-* Add federation api and cm servers to hyperkube ([#27586](https://github.com/kubernetes/kubernetes/pull/27586), [@colhom](https://github.com/colhom))
-* federation: Creating kubeconfig files to be used for creating secrets for clusters on aws and gke ([#27332](https://github.com/kubernetes/kubernetes/pull/27332), [@nikhiljindal](https://github.com/nikhiljindal))
-* AWS: Enable ICMP Type 3 Code 4 for ELBs ([#27677](https://github.com/kubernetes/kubernetes/pull/27677), [@justinsb](https://github.com/justinsb))
-* Bumped Heapster to v1.1.0. ([#27542](https://github.com/kubernetes/kubernetes/pull/27542), [@piosz](https://github.com/piosz))
- * More details about the release https://github.com/kubernetes/heapster/releases/tag/v1.1.0
-* Deleting federation-push.sh ([#27400](https://github.com/kubernetes/kubernetes/pull/27400), [@nikhiljindal](https://github.com/nikhiljindal))
-* Validate-cluster finishes shortly after at most ALLOWED_NOTREADY_NODE… ([#26778](https://github.com/kubernetes/kubernetes/pull/26778), [@gmarek](https://github.com/gmarek))
-* AWS kube-down: Issue warning if VPC not found ([#27518](https://github.com/kubernetes/kubernetes/pull/27518), [@justinsb](https://github.com/justinsb))
-* gce/kube-down: Parallelize IGM deletion, batch more ([#27302](https://github.com/kubernetes/kubernetes/pull/27302), [@zmerlynn](https://github.com/zmerlynn))
-* Enable dynamic allocation of heapster/eventer cpu request/limit ([#27185](https://github.com/kubernetes/kubernetes/pull/27185), [@gmarek](https://github.com/gmarek))
-* 'kubectl describe pv' now shows events ([#27431](https://github.com/kubernetes/kubernetes/pull/27431), [@jsafrane](https://github.com/jsafrane))
-* AWS kube-up: set net.ipv4.neigh.default.gc_thresh1=0 to avoid ARP over-caching ([#27682](https://github.com/kubernetes/kubernetes/pull/27682), [@justinsb](https://github.com/justinsb))
-* AWS volumes: Use /dev/xvdXX names with EC2 ([#27628](https://github.com/kubernetes/kubernetes/pull/27628), [@justinsb](https://github.com/justinsb))
-* Add a test config variable to specify desired Docker version to run on GCI. ([#26813](https://github.com/kubernetes/kubernetes/pull/26813), [@wonderfly](https://github.com/wonderfly))
-* Check for thin_is binary in path for devicemapper when using ThinPoolWatcher and fix uint64 overflow issue for CPU stats ([#27591](https://github.com/kubernetes/kubernetes/pull/27591), [@dchen1107](https://github.com/dchen1107))
-* Change default value of deleting-pods-burst to 1 ([#27606](https://github.com/kubernetes/kubernetes/pull/27606), [@gmarek](https://github.com/gmarek))
-* MESOS: fix race condition in contrib/mesos/pkg/queue/delay ([#24916](https://github.com/kubernetes/kubernetes/pull/24916), [@jdef](https://github.com/jdef))
-* including federation binaries in the list of images we push during release ([#27396](https://github.com/kubernetes/kubernetes/pull/27396), [@nikhiljindal](https://github.com/nikhiljindal))
-* fix updatePod() of RS and RC controllers ([#27415](https://github.com/kubernetes/kubernetes/pull/27415), [@caesarxuchao](https://github.com/caesarxuchao))
-* Change default value of deleting-pods-burst to 1 ([#27422](https://github.com/kubernetes/kubernetes/pull/27422), [@gmarek](https://github.com/gmarek))
-* A new volume manager was introduced in kubelet that synchronizes volume mount/unmount (and attach/detach, if attach/detach controller is not enabled). ([#26801](https://github.com/kubernetes/kubernetes/pull/26801), [@saad-ali](https://github.com/saad-ali))
- * This eliminates the race conditions between the pod creation loop and the orphaned volumes loops. It also removes the unmount/detach from the `syncPod()` path so volume clean up never blocks the `syncPod` loop.
-
-
-
-# v1.3.0-beta.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.3/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-beta.1/kubernetes.tar.gz) | `2b54995ee8f52d78dc31c3d7291e8dfa5c809fe7` | `f1022a84c3441cae4ebe1d295470be8f`
-
-## Changes since v1.3.0-alpha.5
-
-### Action Required
-
-* Fixing logic to generate ExternalHost in genericapiserver ([#26796](https://github.com/kubernetes/kubernetes/pull/26796), [@nikhiljindal](https://github.com/nikhiljindal))
-* federation: Updating federation-controller-manager to use secret to get federation-apiserver's kubeconfig ([#26819](https://github.com/kubernetes/kubernetes/pull/26819), [@nikhiljindal](https://github.com/nikhiljindal))
-
-### Other notable changes
-
-* federation: fix dns provider initialization issues ([#27252](https://github.com/kubernetes/kubernetes/pull/27252), [@mfanjie](https://github.com/mfanjie))
-* Updating federation up scripts to work in non e2e setup ([#27260](https://github.com/kubernetes/kubernetes/pull/27260), [@nikhiljindal](https://github.com/nikhiljindal))
-* version bump for gci to milestone 53 ([#27210](https://github.com/kubernetes/kubernetes/pull/27210), [@adityakali](https://github.com/adityakali))
-* kubectl apply: retry applying a patch if a version conflict error is encountered ([#26557](https://github.com/kubernetes/kubernetes/pull/26557), [@AdoHe](https://github.com/AdoHe))
-* Revert "Wait for arc.getArchive() to complete before running tests" ([#27130](https://github.com/kubernetes/kubernetes/pull/27130), [@pwittrock](https://github.com/pwittrock))
-* ResourceQuota BestEffort scope aligned with Pod level QoS ([#26969](https://github.com/kubernetes/kubernetes/pull/26969), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* The AWS cloudprovider will cache results from DescribeInstances() if the set of nodes hasn't changed ([#26900](https://github.com/kubernetes/kubernetes/pull/26900), [@therc](https://github.com/therc))
-* GCE provider: Log full contents of long operations ([#26962](https://github.com/kubernetes/kubernetes/pull/26962), [@zmerlynn](https://github.com/zmerlynn))
-* Fix system container detection in kubelet on systemd. ([#26586](https://github.com/kubernetes/kubernetes/pull/26586), [@derekwaynecarr](https://github.com/derekwaynecarr))
- * This fixed environments where CPU and Memory Accounting were not enabled on the unit that launched the kubelet or docker from reporting the root cgroup when monitoring usage stats for those components.
-* New default horizontalpodautoscaler/v1 generator for kubectl autoscale. ([#26775](https://github.com/kubernetes/kubernetes/pull/26775), [@piosz](https://github.com/piosz))
- * Use autoscaling/v1 in kubectl by default.
-* federation: Adding dnsprovider flags to federation-controller-manager ([#27158](https://github.com/kubernetes/kubernetes/pull/27158), [@nikhiljindal](https://github.com/nikhiljindal))
-* federation service controller: fixing a bug so that existing services are created in newly registered clusters ([#27028](https://github.com/kubernetes/kubernetes/pull/27028), [@mfanjie](https://github.com/mfanjie))
-* Rename environment variables (KUBE_)ENABLE_NODE_AUTOSCALER to (KUBE_)ENABLE_CLUSTER_AUTOSCALER. ([#27117](https://github.com/kubernetes/kubernetes/pull/27117), [@mwielgus](https://github.com/mwielgus))
-* support for mounting local-ssds on GCI ([#27143](https://github.com/kubernetes/kubernetes/pull/27143), [@adityakali](https://github.com/adityakali))
-* AWS: support mixed plaintext/encrypted ports in ELBs via service.beta.kubernetes.io/aws-load-balancer-ssl-ports annotation ([#26976](https://github.com/kubernetes/kubernetes/pull/26976), [@therc](https://github.com/therc))
-* Updating e2e docs with instructions on running federation tests ([#27072](https://github.com/kubernetes/kubernetes/pull/27072), [@colhom](https://github.com/colhom))
-* LBaaS v2 Support for Openstack Cloud Provider Plugin ([#25987](https://github.com/kubernetes/kubernetes/pull/25987), [@dagnello](https://github.com/dagnello))
-* GCI: add support for network plugin ([#27027](https://github.com/kubernetes/kubernetes/pull/27027), [@andyzheng0831](https://github.com/andyzheng0831))
-* Bump cAdvisor to v0.23.3 ([#27065](https://github.com/kubernetes/kubernetes/pull/27065), [@timstclair](https://github.com/timstclair))
-* Stop 'kubectl drain' deleting pods with local storage. ([#26667](https://github.com/kubernetes/kubernetes/pull/26667), [@mml](https://github.com/mml))
-* Networking e2es: Wait for all nodes to be schedulable in kubeproxy and networking tests ([#27008](https://github.com/kubernetes/kubernetes/pull/27008), [@zmerlynn](https://github.com/zmerlynn))
-* change clientset of service controller to versioned ([#26694](https://github.com/kubernetes/kubernetes/pull/26694), [@mfanjie](https://github.com/mfanjie))
-* Use gcr.io as a Docker registry mirror when setting up a cluster in GCE. ([#25841](https://github.com/kubernetes/kubernetes/pull/25841), [@ojarjur](https://github.com/ojarjur))
-* correction on rbd volume object and defaults ([#25490](https://github.com/kubernetes/kubernetes/pull/25490), [@rootfs](https://github.com/rootfs))
-* Bump GCE debian image to container-v1-3-v20160604 ([#26851](https://github.com/kubernetes/kubernetes/pull/26851), [@zmerlynn](https://github.com/zmerlynn))
-* Option to enable http2 on client connections. ([#25280](https://github.com/kubernetes/kubernetes/pull/25280), [@timothysc](https://github.com/timothysc))
-* kubectl get ingress output remove rules ([#26684](https://github.com/kubernetes/kubernetes/pull/26684), [@AdoHe](https://github.com/AdoHe))
-* AWS kube-up: Remove SecurityContextDeny admission controller (to mirror GCE) ([#25381](https://github.com/kubernetes/kubernetes/pull/25381), [@zquestz](https://github.com/zquestz))
-* Fix third party ([#25894](https://github.com/kubernetes/kubernetes/pull/25894), [@brendandburns](https://github.com/brendandburns))
-* AWS Route53 dnsprovider ([#26049](https://github.com/kubernetes/kubernetes/pull/26049), [@quinton-hoole](https://github.com/quinton-hoole))
-* GCI/Trusty: support the Docker registry mirror ([#26745](https://github.com/kubernetes/kubernetes/pull/26745), [@andyzheng0831](https://github.com/andyzheng0831))
-* Kubernetes v1.3 introduces a new Attach/Detach Controller. This controller manages attaching and detaching of volumes on-behalf of nodes. ([#26351](https://github.com/kubernetes/kubernetes/pull/26351), [@saad-ali](https://github.com/saad-ali))
- * This ensures that attachment and detachment of volumes is independent of any single nodes’ availability. Meaning, if a node or kubelet becomes unavailable for any reason, the volumes attached to that node will be detached so they are free to be attached to other nodes.
- * Specifically the new controller watches the API server for scheduled pods. It processes each pod and ensures that any volumes that implement the volume Attacher interface are attached to the node their pod is scheduled to.
- * When a pod is deleted, the controller waits for the volume to be safely unmounted by kubelet. It does this by waiting for the volume to no longer be present in the nodes Node.Status.VolumesInUse list. If the volume is not safely unmounted by kubelet within a pre-configured duration (3 minutes in Kubernetes v1.3), the controller unilaterally detaches the volume (this prevents volumes from getting stranded on nodes that become unavailable).
- * In order to remain backwards compatible, the new controller only manages attach/detach of volumes that are scheduled to nodes that opt-in to controller management. Nodes running v1.3 or higher of Kubernetes opt-in to controller management by default by setting the "volumes.kubernetes.io/controller-managed-attach-detach" annotation on the Node object on startup. This behavior is gated by a new kubelet flag, "enable-controller-attach-detach,” (default true).
- * In order to safely upgrade an existing Kubernetes cluster without interruption of volume attach/detach logic:
- * First upgrade the master to Kubernetes v1.3.
- * This will start the new attach/detach controller.
- * The new controller will initially ignore volumes for all nodes since they lack the "volumes.kubernetes.io/controller-managed-attach-detach" annotation.
- * Then upgrade nodes to Kubernetes v1.3.
- * As nodes are upgraded, they will automatically, by default, opt-in to attach/detach controller management, which will cause the controller to start managing attaches/detaches for volumes that get scheduled to those nodes.
-* Added DNS Reverse Record logic for service IPs ([#26226](https://github.com/kubernetes/kubernetes/pull/26226), [@ArtfulCoder](https://github.com/ArtfulCoder))
-* read gluster log to surface glusterfs plugin errors properly in describe events ([#24808](https://github.com/kubernetes/kubernetes/pull/24808), [@screeley44](https://github.com/screeley44))
-
-
-
-# v1.3.0-alpha.5
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-alpha.5/kubernetes.tar.gz) | `724bf5a4437ca9dc75d9297382f47a179e8dc5a6` | `2a8b4a5297df3007fce69f1e344fd87e`
-
-## Changes since v1.3.0-alpha.4
-
-### Action Required
-
-* Add direct serializer ([#26251](https://github.com/kubernetes/kubernetes/pull/26251), [@caesarxuchao](https://github.com/caesarxuchao))
-* Add a NodeCondition "NetworkUnavailable" to prevent scheduling onto a node until the routes have been created ([#26415](https://github.com/kubernetes/kubernetes/pull/26415), [@wojtek-t](https://github.com/wojtek-t))
-* Add garbage collector into kube-controller-manager ([#26341](https://github.com/kubernetes/kubernetes/pull/26341), [@caesarxuchao](https://github.com/caesarxuchao))
-* Add orphaning finalizer logic to GC ([#25599](https://github.com/kubernetes/kubernetes/pull/25599), [@caesarxuchao](https://github.com/caesarxuchao))
-* GCI-backed masters mount srv/kubernetes and srv/sshproxy in the right place ([#26238](https://github.com/kubernetes/kubernetes/pull/26238), [@ihmccreery](https://github.com/ihmccreery))
-* Updaing QoS policy to be at the pod level ([#14943](https://github.com/kubernetes/kubernetes/pull/14943), [@vishh](https://github.com/vishh))
-* add CIDR allocator for NodeController ([#19242](https://github.com/kubernetes/kubernetes/pull/19242), [@mqliang](https://github.com/mqliang))
-* Adding garbage collector controller ([#24509](https://github.com/kubernetes/kubernetes/pull/24509), [@caesarxuchao](https://github.com/caesarxuchao))
-
-### Other notable changes
-
-* Fix a bug with pluralization of third party resources ([#25374](https://github.com/kubernetes/kubernetes/pull/25374), [@brendandburns](https://github.com/brendandburns))
-* Run l7 controller on master ([#26048](https://github.com/kubernetes/kubernetes/pull/26048), [@bprashanth](https://github.com/bprashanth))
-* AWS: ELB proxy protocol support via annotation service.beta.kubernetes.io/aws-load-balancer-proxy-protocol ([#24569](https://github.com/kubernetes/kubernetes/pull/24569), [@williamsandrew](https://github.com/williamsandrew))
-* kubectl run --restart=Never creates pods ([#25253](https://github.com/kubernetes/kubernetes/pull/25253), [@soltysh](https://github.com/soltysh))
-* Add LabelSelector to PersistentVolumeClaimSpec ([#25917](https://github.com/kubernetes/kubernetes/pull/25917), [@pmorie](https://github.com/pmorie))
-* Removed metrics api group ([#26073](https://github.com/kubernetes/kubernetes/pull/26073), [@piosz](https://github.com/piosz))
-* Fixed check in kubectl autoscale: cpu consumption can be higher than 100%. ([#26162](https://github.com/kubernetes/kubernetes/pull/26162), [@jszczepkowski](https://github.com/jszczepkowski))
-* Add support for 3rd party objects to kubectl label ([#24882](https://github.com/kubernetes/kubernetes/pull/24882), [@brendandburns](https://github.com/brendandburns))
-* Move shell completion generation into 'kubectl completion' command ([#23801](https://github.com/kubernetes/kubernetes/pull/23801), [@sttts](https://github.com/sttts))
-* Fix strategic merge diff list diff bug ([#26418](https://github.com/kubernetes/kubernetes/pull/26418), [@AdoHe](https://github.com/AdoHe))
-* Setting TLS1.2 minimum because TLS1.0 and TLS1.1 are vulnerable ([#26169](https://github.com/kubernetes/kubernetes/pull/26169), [@victorgp](https://github.com/victorgp))
-* Kubelet: Periodically reporting image pulling progress in log ([#26145](https://github.com/kubernetes/kubernetes/pull/26145), [@Random-Liu](https://github.com/Random-Liu))
-* Federation service controller is one key component of federation controller manager, it watches federation service, creates/updates services to all registered clusters, and update DNS records to global DNS server. ([#26034](https://github.com/kubernetes/kubernetes/pull/26034), [@mfanjie](https://github.com/mfanjie))
-* Stabilize map order in kubectl describe ([#26046](https://github.com/kubernetes/kubernetes/pull/26046), [@timoreimann](https://github.com/timoreimann))
-* Google Cloud DNS dnsprovider - replacement for [#25389](https://github.com/kubernetes/kubernetes/pull/25389) ([#26020](https://github.com/kubernetes/kubernetes/pull/26020), [@quinton-hoole](https://github.com/quinton-hoole))
-* Fix system container detection in kubelet on systemd. ([#25982](https://github.com/kubernetes/kubernetes/pull/25982), [@derekwaynecarr](https://github.com/derekwaynecarr))
- * This fixed environments where CPU and Memory Accounting were not enabled on the unit
- * that launched the kubelet or docker from reporting the root cgroup when
- * monitoring usage stats for those components.
-* Added pods-per-core to kubelet. [#25762](https://github.com/kubernetes/kubernetes/pull/25762) ([#25813](https://github.com/kubernetes/kubernetes/pull/25813), [@rrati](https://github.com/rrati))
-* promote sourceRange into service spec ([#25826](https://github.com/kubernetes/kubernetes/pull/25826), [@freehan](https://github.com/freehan))
-* kube-controller-manager: Add configure-cloud-routes option ([#25614](https://github.com/kubernetes/kubernetes/pull/25614), [@justinsb](https://github.com/justinsb))
-* kubelet: reading cloudinfo from cadvisor ([#21373](https://github.com/kubernetes/kubernetes/pull/21373), [@enoodle](https://github.com/enoodle))
-* Disable cAdvisor event storage by default ([#24771](https://github.com/kubernetes/kubernetes/pull/24771), [@timstclair](https://github.com/timstclair))
-* Remove docker-multinode ([#26031](https://github.com/kubernetes/kubernetes/pull/26031), [@luxas](https://github.com/luxas))
-* nodecontroller: Fix log message on successful update ([#26207](https://github.com/kubernetes/kubernetes/pull/26207), [@zmerlynn](https://github.com/zmerlynn))
-* remove deprecated generated typed clients ([#26336](https://github.com/kubernetes/kubernetes/pull/26336), [@caesarxuchao](https://github.com/caesarxuchao))
-* Kubenet host-port support through iptables ([#25604](https://github.com/kubernetes/kubernetes/pull/25604), [@freehan](https://github.com/freehan))
-* Add metrics support for a GCE PD, EC2 EBS & Azure File volumes ([#25852](https://github.com/kubernetes/kubernetes/pull/25852), [@vishh](https://github.com/vishh))
-* Bump cAdvisor to v0.23.2 - See [changelog](https://github.com/google/cadvisor/blob/master/CHANGELOG.md) for details ([#25914](https://github.com/kubernetes/kubernetes/pull/25914), [@timstclair](https://github.com/timstclair))
-* Alpha version of "Role Based Access Control" API. ([#25634](https://github.com/kubernetes/kubernetes/pull/25634), [@ericchiang](https://github.com/ericchiang))
-* Add Seccomp API ([#25324](https://github.com/kubernetes/kubernetes/pull/25324), [@jfrazelle](https://github.com/jfrazelle))
-* AWS: Fix long-standing bug in stringSetToPointers ([#26331](https://github.com/kubernetes/kubernetes/pull/26331), [@therc](https://github.com/therc))
-* Add dnsmasq as a DNS cache in kube-dns pod ([#26114](https://github.com/kubernetes/kubernetes/pull/26114), [@ArtfulCoder](https://github.com/ArtfulCoder))
-* routecontroller: Add wait.NonSlidingUntil, use it ([#26301](https://github.com/kubernetes/kubernetes/pull/26301), [@zmerlynn](https://github.com/zmerlynn))
-* Attempt 2: Bump GCE containerVM to container-v1-3-v20160517 (Docker 1.11.1) again. ([#26001](https://github.com/kubernetes/kubernetes/pull/26001), [@dchen1107](https://github.com/dchen1107))
-* Downward API implementation for resources limits and requests ([#24179](https://github.com/kubernetes/kubernetes/pull/24179), [@aveshagarwal](https://github.com/aveshagarwal))
-* GCE clusters start using GCI as the default OS image for masters ([#26197](https://github.com/kubernetes/kubernetes/pull/26197), [@wonderfly](https://github.com/wonderfly))
-* Add a 'kubectl clusterinfo dump' option ([#20672](https://github.com/kubernetes/kubernetes/pull/20672), [@brendandburns](https://github.com/brendandburns))
-* Fixing heapster memory requirements. ([#26109](https://github.com/kubernetes/kubernetes/pull/26109), [@Q-Lee](https://github.com/Q-Lee))
-* Handle federated service name lookups in kube-dns. ([#25727](https://github.com/kubernetes/kubernetes/pull/25727), [@madhusudancs](https://github.com/madhusudancs))
-* Support sort-by timestamp in kubectl get ([#25600](https://github.com/kubernetes/kubernetes/pull/25600), [@janetkuo](https://github.com/janetkuo))
-* vSphere Volume Plugin Implementation ([#24947](https://github.com/kubernetes/kubernetes/pull/24947), [@abithap](https://github.com/abithap))
-* ResourceQuota controller uses rate limiter to prevent hot-loops in error situations ([#25748](https://github.com/kubernetes/kubernetes/pull/25748), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Fix hyperkube flag parsing ([#25512](https://github.com/kubernetes/kubernetes/pull/25512), [@colhom](https://github.com/colhom))
-* Add a kubectl create secret tls command ([#24719](https://github.com/kubernetes/kubernetes/pull/24719), [@bprashanth](https://github.com/bprashanth))
-* Introduce a new add-on pod NodeProblemDetector. ([#25986](https://github.com/kubernetes/kubernetes/pull/25986), [@Random-Liu](https://github.com/Random-Liu))
- * NodeProblemDetector is a DaemonSet running on each node, monitoring node health and reporting
- * node problems as NodeCondition and Event. Currently it already supports kernel log monitoring, and
- * will support more problem detection in the future. It is enabled by default on gce now.
-* Handle cAdvisor partial failures ([#25933](https://github.com/kubernetes/kubernetes/pull/25933), [@timstclair](https://github.com/timstclair))
-* Use SkyDNS as a library for a more integrated kube DNS ([#23930](https://github.com/kubernetes/kubernetes/pull/23930), [@ArtfulCoder](https://github.com/ArtfulCoder))
-* Introduce node memory pressure condition to scheduler ([#25531](https://github.com/kubernetes/kubernetes/pull/25531), [@ingvagabund](https://github.com/ingvagabund))
-* Fix detection of docker cgroup on RHEL ([#25907](https://github.com/kubernetes/kubernetes/pull/25907), [@ncdc](https://github.com/ncdc))
-* Kubelet evicts pods when available memory falls below configured eviction thresholds ([#25772](https://github.com/kubernetes/kubernetes/pull/25772), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Use protobufs by default to communicate with apiserver (still store JSONs in etcd) ([#25738](https://github.com/kubernetes/kubernetes/pull/25738), [@wojtek-t](https://github.com/wojtek-t))
-* Implement NetworkPolicy v1beta1 API object / client support. ([#25638](https://github.com/kubernetes/kubernetes/pull/25638), [@caseydavenport](https://github.com/caseydavenport))
-* Only expose top N images in `NodeStatus` ([#25328](https://github.com/kubernetes/kubernetes/pull/25328), [@resouer](https://github.com/resouer))
-* Extend secrets volumes with path control ([#25285](https://github.com/kubernetes/kubernetes/pull/25285), [@ingvagabund](https://github.com/ingvagabund))
-* With this PR, kubectl and other RestClient's using the AuthProvider framework can make OIDC authenticated requests, and, if there is a refresh token present, the tokens will be refreshed as needed. ([#25270](https://github.com/kubernetes/kubernetes/pull/25270), [@bobbyrullo](https://github.com/bobbyrullo))
-* Make addon-manager cross-platform and use it with hyperkube ([#25631](https://github.com/kubernetes/kubernetes/pull/25631), [@luxas](https://github.com/luxas))
-* kubelet: Optionally, have kubelet exit if lock file contention is observed, using --exit-on-lock-contention flag ([#25596](https://github.com/kubernetes/kubernetes/pull/25596), [@derekparker](https://github.com/derekparker))
-* Bump up glbc version to 0.6.2 ([#25446](https://github.com/kubernetes/kubernetes/pull/25446), [@bprashanth](https://github.com/bprashanth))
-* Add "kubectl set image" for easier updating container images (for pods or resources with pod templates). ([#25509](https://github.com/kubernetes/kubernetes/pull/25509), [@janetkuo](https://github.com/janetkuo))
-* NodeController doesn't evict Pods if no Nodes are Ready ([#25571](https://github.com/kubernetes/kubernetes/pull/25571), [@gmarek](https://github.com/gmarek))
-* Incompatible change of kube-up.sh: ([#25734](https://github.com/kubernetes/kubernetes/pull/25734), [@jszczepkowski](https://github.com/jszczepkowski))
- * when turning on cluster autoscaler by setting KUBE_ENABLE_NODE_AUTOSCALER=true,
- * KUBE_AUTOSCALER_MIN_NODES and KUBE_AUTOSCALER_MAX_NODES need to be set.
-* systemd node spec proposal ([#17688](https://github.com/kubernetes/kubernetes/pull/17688), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Bump GCE ContainerVM to container-v1-3-v20160517 (Docker 1.11.1) ([#25843](https://github.com/kubernetes/kubernetes/pull/25843), [@zmerlynn](https://github.com/zmerlynn))
-* AWS: Move enforcement of attached AWS device limit from kubelet to scheduler ([#23254](https://github.com/kubernetes/kubernetes/pull/23254), [@jsafrane](https://github.com/jsafrane))
-* Refactor persistent volume controller ([#24331](https://github.com/kubernetes/kubernetes/pull/24331), [@jsafrane](https://github.com/jsafrane))
-* Add support for running GCI on the GCE cloud provider ([#25425](https://github.com/kubernetes/kubernetes/pull/25425), [@andyzheng0831](https://github.com/andyzheng0831))
-* Implement taints and tolerations ([#24134](https://github.com/kubernetes/kubernetes/pull/24134), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* Add init containers to pods ([#23567](https://github.com/kubernetes/kubernetes/pull/23567), [@smarterclayton](https://github.com/smarterclayton))
-
-
-
-# v1.3.0-alpha.4
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-alpha.4/kubernetes.tar.gz) | `758e97e7e50153840379ecd9f8fda1869543539f` | `4e18ae6a428c99fcc30e2137d7c41854`
-
-## Changes since v1.3.0-alpha.3
-
-### Action Required
-
-* validate third party resources ([#25007](https://github.com/kubernetes/kubernetes/pull/25007), [@liggitt](https://github.com/liggitt))
-* Automatically create the kube-system namespace ([#25196](https://github.com/kubernetes/kubernetes/pull/25196), [@luxas](https://github.com/luxas))
-* Make ThirdPartyResource a root scoped object ([#25006](https://github.com/kubernetes/kubernetes/pull/25006), [@liggitt](https://github.com/liggitt))
-* mark container-port flag as deprecated ([#25072](https://github.com/kubernetes/kubernetes/pull/25072), [@AdoHe](https://github.com/AdoHe))
-* Provide flags to use etcd3 backed storage ([#24455](https://github.com/kubernetes/kubernetes/pull/24455), [@hongchaodeng](https://github.com/hongchaodeng))
-
-### Other notable changes
-
-* Fix hyperkube's layer caching, and remove --make-symlinks at build time ([#25693](https://github.com/kubernetes/kubernetes/pull/25693), [@luxas](https://github.com/luxas))
-* AWS: More support for ap-northeast-2 region ([#24464](https://github.com/kubernetes/kubernetes/pull/24464), [@matthewrudy](https://github.com/matthewrudy))
-* Make bigger master root disks in GCE for large clusters ([#25670](https://github.com/kubernetes/kubernetes/pull/25670), [@gmarek](https://github.com/gmarek))
-* AWS kube-down: don't fail if ELB not in VPC - [#23784](https://github.com/kubernetes/kubernetes/pull/23784) ([#23785](https://github.com/kubernetes/kubernetes/pull/23785), [@ajohnstone](https://github.com/ajohnstone))
-* Build hyperkube in hack/local-up-cluster instead of separate binaries ([#25627](https://github.com/kubernetes/kubernetes/pull/25627), [@luxas](https://github.com/luxas))
-* enable recursive processing in kubectl rollout ([#25110](https://github.com/kubernetes/kubernetes/pull/25110), [@metral](https://github.com/metral))
-* Support struct,array,slice types when sorting kubectl output ([#25022](https://github.com/kubernetes/kubernetes/pull/25022), [@zhouhaibing089](https://github.com/zhouhaibing089))
-* federated api servers: Adding a discovery summarizer server ([#20358](https://github.com/kubernetes/kubernetes/pull/20358), [@nikhiljindal](https://github.com/nikhiljindal))
-* AWS: Allow cross-region image pulling with ECR ([#24369](https://github.com/kubernetes/kubernetes/pull/24369), [@therc](https://github.com/therc))
-* Automatically add node labels beta.kubernetes.io/{os,arch} ([#23684](https://github.com/kubernetes/kubernetes/pull/23684), [@luxas](https://github.com/luxas))
-* kubectl "rm" will suggest using "delete"; "ps" and "list" will suggest "get". ([#25181](https://github.com/kubernetes/kubernetes/pull/25181), [@janetkuo](https://github.com/janetkuo))
-* Add IPv6 address support for pods - does NOT include services ([#23090](https://github.com/kubernetes/kubernetes/pull/23090), [@tgraf](https://github.com/tgraf))
-* Use local disk for ConfigMap volume instead of tmpfs ([#25306](https://github.com/kubernetes/kubernetes/pull/25306), [@pmorie](https://github.com/pmorie))
-* Alpha support for scheduling pods on machines with NVIDIA GPUs whose kubelets use the `--experimental-nvidia-gpus` flag, using the alpha.kubernetes.io/nvidia-gpu resource ([#24836](https://github.com/kubernetes/kubernetes/pull/24836), [@therc](https://github.com/therc))
-* AWS: SSL support for ELB listeners through annotations ([#23495](https://github.com/kubernetes/kubernetes/pull/23495), [@therc](https://github.com/therc))
-* Implement `kubectl rollout status` that can be used to watch a deployment's rollout status ([#19946](https://github.com/kubernetes/kubernetes/pull/19946), [@janetkuo](https://github.com/janetkuo))
-* Webhook Token Authenticator ([#24902](https://github.com/kubernetes/kubernetes/pull/24902), [@cjcullen](https://github.com/cjcullen))
-* Update PodSecurityPolicy types and add admission controller that could enforce them ([#24600](https://github.com/kubernetes/kubernetes/pull/24600), [@pweil-](https://github.com/pweil-))
-* Introducing ScheduledJobs as described in [the proposal](docs/proposals/scheduledjob.md) as part of `batch/v2alpha1` version (experimental feature). ([#24970](https://github.com/kubernetes/kubernetes/pull/24970), [@soltysh](https://github.com/soltysh))
-* kubectl now supports validation of nested objects with different ApiGroups (e.g. objects in a List) ([#25172](https://github.com/kubernetes/kubernetes/pull/25172), [@pwittrock](https://github.com/pwittrock))
-* Change default clusterCIDRs from /16 to /14 in GCE configs allowing 1000 Node clusters by default. ([#25350](https://github.com/kubernetes/kubernetes/pull/25350), [@gmarek](https://github.com/gmarek))
-* Add 'kubectl set' ([#25444](https://github.com/kubernetes/kubernetes/pull/25444), [@janetkuo](https://github.com/janetkuo))
-* vSphere Cloud Provider Implementation ([#24703](https://github.com/kubernetes/kubernetes/pull/24703), [@dagnello](https://github.com/dagnello))
-* Added JobTemplate, a preliminary step for ScheduledJob and Workflow ([#21675](https://github.com/kubernetes/kubernetes/pull/21675), [@soltysh](https://github.com/soltysh))
-* Openstack provider ([#21737](https://github.com/kubernetes/kubernetes/pull/21737), [@zreigz](https://github.com/zreigz))
-* AWS kube-up: Allow VPC CIDR to be specified (experimental) ([#23362](https://github.com/kubernetes/kubernetes/pull/23362), [@miguelfrde](https://github.com/miguelfrde))
-* Return "410 Gone" errors via watch stream when using watch cache ([#25369](https://github.com/kubernetes/kubernetes/pull/25369), [@liggitt](https://github.com/liggitt))
-* GKE provider: Add cluster-ipv4-cidr and arbitrary flags ([#25437](https://github.com/kubernetes/kubernetes/pull/25437), [@zmerlynn](https://github.com/zmerlynn))
-* AWS kube-up: Increase timeout waiting for docker start ([#25405](https://github.com/kubernetes/kubernetes/pull/25405), [@justinsb](https://github.com/justinsb))
-* Sort resources in quota errors to avoid duplicate events ([#25161](https://github.com/kubernetes/kubernetes/pull/25161), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Display line number on JSON errors ([#25038](https://github.com/kubernetes/kubernetes/pull/25038), [@mfojtik](https://github.com/mfojtik))
-* If the cluster node count exceeds the GCE TargetPool maximum (currently 1000), ([#25178](https://github.com/kubernetes/kubernetes/pull/25178), [@zmerlynn](https://github.com/zmerlynn))
- * randomly select which nodes are members of Kubernetes External Load Balancers.
-* Clarify supported version skew between masters, nodes, and clients ([#25087](https://github.com/kubernetes/kubernetes/pull/25087), [@ihmccreery](https://github.com/ihmccreery))
-* Move godeps to vendor/ ([#24242](https://github.com/kubernetes/kubernetes/pull/24242), [@thockin](https://github.com/thockin))
-* Introduce events flag for describers ([#24554](https://github.com/kubernetes/kubernetes/pull/24554), [@ingvagabund](https://github.com/ingvagabund))
-* run kube-addon-manager in a static pod ([#23600](https://github.com/kubernetes/kubernetes/pull/23600), [@mikedanese](https://github.com/mikedanese))
-* Reimplement 'pause' in C - smaller footprint all around ([#23009](https://github.com/kubernetes/kubernetes/pull/23009), [@uluyol](https://github.com/uluyol))
-* Add subPath to mount a child dir or file of a volumeMount ([#22575](https://github.com/kubernetes/kubernetes/pull/22575), [@MikaelCluseau](https://github.com/MikaelCluseau))
-* Handle image digests in node status and image GC ([#25088](https://github.com/kubernetes/kubernetes/pull/25088), [@ncdc](https://github.com/ncdc))
-* PLEG: reinspect pods that failed prior inspections ([#25077](https://github.com/kubernetes/kubernetes/pull/25077), [@ncdc](https://github.com/ncdc))
-* Fix kubectl create secret/configmap to allow = values ([#24989](https://github.com/kubernetes/kubernetes/pull/24989), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Upgrade installed packages when building hyperkube to improve the security profile ([#25114](https://github.com/kubernetes/kubernetes/pull/25114), [@aaronlevy](https://github.com/aaronlevy))
-* GCI/Trusty: Support ABAC authorization ([#24950](https://github.com/kubernetes/kubernetes/pull/24950), [@andyzheng0831](https://github.com/andyzheng0831))
-* fix cinder volume dir umount issue [#24717](https://github.com/kubernetes/kubernetes/pull/24717) ([#24718](https://github.com/kubernetes/kubernetes/pull/24718), [@chengyli](https://github.com/chengyli))
-* Inter pod topological affinity and anti-affinity implementation ([#22985](https://github.com/kubernetes/kubernetes/pull/22985), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* start etcd compactor in background ([#25010](https://github.com/kubernetes/kubernetes/pull/25010), [@hongchaodeng](https://github.com/hongchaodeng))
-* GCI: Add two GCI specific metadata pairs ([#25105](https://github.com/kubernetes/kubernetes/pull/25105), [@andyzheng0831](https://github.com/andyzheng0831))
-* Ensure status is not changed during an update of PV, PVC, HPA objects ([#24924](https://github.com/kubernetes/kubernetes/pull/24924), [@mqliang](https://github.com/mqliang))
-* GCE: Prefer preconfigured node tags for firewalls, if available ([#25148](https://github.com/kubernetes/kubernetes/pull/25148), [@a-robinson](https://github.com/a-robinson))
-* kubectl rolling-update support for same image ([#24645](https://github.com/kubernetes/kubernetes/pull/24645), [@jlowdermilk](https://github.com/jlowdermilk))
-* Add an entry to the salt config to allow Debian jessie on GCE. ([#25123](https://github.com/kubernetes/kubernetes/pull/25123), [@jlewi](https://github.com/jlewi))
- * As with the existing Wheezy image on GCE, docker is expected
- * to already be installed in the image.
-* Mark kube-push.sh as broken ([#25095](https://github.com/kubernetes/kubernetes/pull/25095), [@ihmccreery](https://github.com/ihmccreery))
-* AWS: Add support for ap-northeast-2 region (Seoul) ([#24457](https://github.com/kubernetes/kubernetes/pull/24457), [@leokhoa](https://github.com/leokhoa))
-* GCI: Update the command to get the image ([#24987](https://github.com/kubernetes/kubernetes/pull/24987), [@andyzheng0831](https://github.com/andyzheng0831))
-* Port-forward: use out and error streams instead of glog ([#17030](https://github.com/kubernetes/kubernetes/pull/17030), [@csrwng](https://github.com/csrwng))
-* Promote Pod Hostname & Subdomain to fields (were annotations) ([#24362](https://github.com/kubernetes/kubernetes/pull/24362), [@ArtfulCoder](https://github.com/ArtfulCoder))
-* Validate deletion timestamp doesn't change on update ([#24839](https://github.com/kubernetes/kubernetes/pull/24839), [@liggitt](https://github.com/liggitt))
-* Add flag -t as shorthand for --tty ([#24365](https://github.com/kubernetes/kubernetes/pull/24365), [@janetkuo](https://github.com/janetkuo))
-* Add support for running clusters on GCI ([#24893](https://github.com/kubernetes/kubernetes/pull/24893), [@andyzheng0831](https://github.com/andyzheng0831))
-* Switch to ABAC authorization from AllowAll ([#24210](https://github.com/kubernetes/kubernetes/pull/24210), [@cjcullen](https://github.com/cjcullen))
-* Fix DeletingLoadBalancer event generation. ([#24833](https://github.com/kubernetes/kubernetes/pull/24833), [@a-robinson](https://github.com/a-robinson))
-
-
-
-# v1.3.0-alpha.3
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-alpha.3/kubernetes.tar.gz) | `01e0dc68653173614dc99f44875173478f837b38` | `ae22c35f3a963743d21daa17683e0288`
-
-## Changes since v1.3.0-alpha.2
-
-### Action Required
-
-* Updating go-restful to generate "type":"object" instead of "type":"any" in swagger-spec (breaks kubectl 1.1) ([#22897](https://github.com/kubernetes/kubernetes/pull/22897), [@nikhiljindal](https://github.com/nikhiljindal))
-* Make watch cache treat resourceVersion consistent with uncached watch ([#24008](https://github.com/kubernetes/kubernetes/pull/24008), [@liggitt](https://github.com/liggitt))
-
-### Other notable changes
-
-* Trusty: Add retry in curl commands ([#24749](https://github.com/kubernetes/kubernetes/pull/24749), [@andyzheng0831](https://github.com/andyzheng0831))
-* Collect and expose runtime's image storage usage via Kubelet's /stats/summary endpoint ([#23595](https://github.com/kubernetes/kubernetes/pull/23595), [@vishh](https://github.com/vishh))
-* Adding loadBalancer services to quota system ([#24247](https://github.com/kubernetes/kubernetes/pull/24247), [@sdminonne](https://github.com/sdminonne))
-* Enforce --max-pods in kubelet admission; previously was only enforced in scheduler ([#24674](https://github.com/kubernetes/kubernetes/pull/24674), [@gmarek](https://github.com/gmarek))
-* All clients under ClientSet share one RateLimiter. ([#24166](https://github.com/kubernetes/kubernetes/pull/24166), [@gmarek](https://github.com/gmarek))
-* Remove requirement that Endpoints IPs be IPv4 ([#23317](https://github.com/kubernetes/kubernetes/pull/23317), [@aanm](https://github.com/aanm))
-* Fix unintended change of Service.spec.ports[].nodePort during kubectl apply ([#24180](https://github.com/kubernetes/kubernetes/pull/24180), [@AdoHe](https://github.com/AdoHe))
-* Don't log private SSH key ([#24506](https://github.com/kubernetes/kubernetes/pull/24506), [@timstclair](https://github.com/timstclair))
-* Incremental improvements to kubelet e2e tests ([#24426](https://github.com/kubernetes/kubernetes/pull/24426), [@pwittrock](https://github.com/pwittrock))
-* Bridge off-cluster traffic into services by masquerading. ([#24429](https://github.com/kubernetes/kubernetes/pull/24429), [@cjcullen](https://github.com/cjcullen))
-* Flush conntrack state for removed/changed UDP Services ([#22573](https://github.com/kubernetes/kubernetes/pull/22573), [@freehan](https://github.com/freehan))
-* Allow setting the Host header in a httpGet probe ([#24292](https://github.com/kubernetes/kubernetes/pull/24292), [@errm](https://github.com/errm))
-* Fix goroutine leak in ssh-tunnel healthcheck. ([#24487](https://github.com/kubernetes/kubernetes/pull/24487), [@cjcullen](https://github.com/cjcullen))
-* Fix gce.getDiskByNameUnknownZone logic. ([#24452](https://github.com/kubernetes/kubernetes/pull/24452), [@a-robinson](https://github.com/a-robinson))
-* Make etcd cache size configurable ([#23914](https://github.com/kubernetes/kubernetes/pull/23914), [@jsravn](https://github.com/jsravn))
-* Drain pods created from ReplicaSets in 'kubectl drain' ([#23689](https://github.com/kubernetes/kubernetes/pull/23689), [@maclof](https://github.com/maclof))
-* Make kubectl edit not convert GV on edits ([#23437](https://github.com/kubernetes/kubernetes/pull/23437), [@DirectXMan12](https://github.com/DirectXMan12))
-* don't ship kube-registry-proxy and pause images in tars. ([#23605](https://github.com/kubernetes/kubernetes/pull/23605), [@mikedanese](https://github.com/mikedanese))
-* Do not throw creation errors for containers that fail immediately after being started ([#23894](https://github.com/kubernetes/kubernetes/pull/23894), [@vishh](https://github.com/vishh))
-* Add a client flag to delete "--now" for grace period 0 ([#23756](https://github.com/kubernetes/kubernetes/pull/23756), [@smarterclayton](https://github.com/smarterclayton))
-* add act-as powers ([#23549](https://github.com/kubernetes/kubernetes/pull/23549), [@deads2k](https://github.com/deads2k))
-* Build Kubernetes, etcd and flannel for arm64 and ppc64le ([#23931](https://github.com/kubernetes/kubernetes/pull/23931), [@luxas](https://github.com/luxas))
-* Honor starting resourceVersion in watch cache ([#24208](https://github.com/kubernetes/kubernetes/pull/24208), [@ncdc](https://github.com/ncdc))
-* Update the pause image to build for arm64 and ppc64le ([#23697](https://github.com/kubernetes/kubernetes/pull/23697), [@luxas](https://github.com/luxas))
-* Return more useful error information when a persistent volume fails to mount ([#23122](https://github.com/kubernetes/kubernetes/pull/23122), [@screeley44](https://github.com/screeley44))
-* Trusty: Avoid unnecessary in-memory temp files ([#24144](https://github.com/kubernetes/kubernetes/pull/24144), [@andyzheng0831](https://github.com/andyzheng0831))
-* e2e: fix error checking in kubelet stats ([#24205](https://github.com/kubernetes/kubernetes/pull/24205), [@yujuhong](https://github.com/yujuhong))
-* Fixed mounting with containerized kubelet ([#23435](https://github.com/kubernetes/kubernetes/pull/23435), [@jsafrane](https://github.com/jsafrane))
-* Adding nodeports services to quota ([#22154](https://github.com/kubernetes/kubernetes/pull/22154), [@sdminonne](https://github.com/sdminonne))
-* e2e: adapt kubelet_perf.go to use the new summary metrics API ([#24003](https://github.com/kubernetes/kubernetes/pull/24003), [@yujuhong](https://github.com/yujuhong))
-* kubelet: add RSS memory to the summary API ([#24015](https://github.com/kubernetes/kubernetes/pull/24015), [@yujuhong](https://github.com/yujuhong))
-
-
-
-# v1.3.0-alpha.2
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-alpha.2/kubernetes.tar.gz) | `305c8c2af7e99d463dbbe4208ecfe2b50585e796` | `aadb8d729d855e69212008f8fda628c0`
-
-## Changes since v1.3.0-alpha.1
-
-### Other notable changes
-
-* Make kube2sky and skydns docker images cross-platform ([#19376](https://github.com/kubernetes/kubernetes/pull/19376), [@luxas](https://github.com/luxas))
-* Allowing type object in kubectl swagger validation ([#24054](https://github.com/kubernetes/kubernetes/pull/24054), [@nikhiljindal](https://github.com/nikhiljindal))
-* Fix TerminationMessagePath ([#23658](https://github.com/kubernetes/kubernetes/pull/23658), [@Random-Liu](https://github.com/Random-Liu))
-* Trusty: Do not create the docker-daemon cgroup ([#23996](https://github.com/kubernetes/kubernetes/pull/23996), [@andyzheng0831](https://github.com/andyzheng0831))
-* Make ConfigMap volume readable as non-root ([#23793](https://github.com/kubernetes/kubernetes/pull/23793), [@pmorie](https://github.com/pmorie))
-* only include running and pending pods in daemonset should place calculation ([#23929](https://github.com/kubernetes/kubernetes/pull/23929), [@mikedanese](https://github.com/mikedanese))
-* Upgrade to golang 1.6 ([#22149](https://github.com/kubernetes/kubernetes/pull/22149), [@luxas](https://github.com/luxas))
-* Cross-build hyperkube and debian-iptables for ARM. Also add a flannel image ([#21617](https://github.com/kubernetes/kubernetes/pull/21617), [@luxas](https://github.com/luxas))
-* Add a timeout to the sshDialer to prevent indefinite hangs. ([#23843](https://github.com/kubernetes/kubernetes/pull/23843), [@cjcullen](https://github.com/cjcullen))
-* Ensure object returned by volume getCloudProvider incorporates cloud config ([#23769](https://github.com/kubernetes/kubernetes/pull/23769), [@saad-ali](https://github.com/saad-ali))
-* Update Dashboard UI addon to v1.0.1 ([#23724](https://github.com/kubernetes/kubernetes/pull/23724), [@maciaszczykm](https://github.com/maciaszczykm))
-* Add zsh completion for kubectl ([#23797](https://github.com/kubernetes/kubernetes/pull/23797), [@sttts](https://github.com/sttts))
-* AWS kube-up: tolerate a lack of ephemeral volumes ([#23776](https://github.com/kubernetes/kubernetes/pull/23776), [@justinsb](https://github.com/justinsb))
-* duplicate kube-apiserver to federated-apiserver ([#23509](https://github.com/kubernetes/kubernetes/pull/23509), [@jianhuiz](https://github.com/jianhuiz))
-* Kubelet: Start using the official docker engine-api ([#23506](https://github.com/kubernetes/kubernetes/pull/23506), [@Random-Liu](https://github.com/Random-Liu))
-* Fix so setup-files don't recreate/invalidate certificates that already exist ([#23550](https://github.com/kubernetes/kubernetes/pull/23550), [@luxas](https://github.com/luxas))
-* A pod never terminated if a container image registry was unavailable ([#23746](https://github.com/kubernetes/kubernetes/pull/23746), [@derekwaynecarr](https://github.com/derekwaynecarr))
-* Fix jsonpath to handle maps with key of nonstring types ([#23358](https://github.com/kubernetes/kubernetes/pull/23358), [@aveshagarwal](https://github.com/aveshagarwal))
-* Trusty: Regional release .tar.gz support ([#23558](https://github.com/kubernetes/kubernetes/pull/23558), [@andyzheng0831](https://github.com/andyzheng0831))
-* Add support for 3rd party objects to kubectl ([#18835](https://github.com/kubernetes/kubernetes/pull/18835), [@brendandburns](https://github.com/brendandburns))
-* Remove unnecessary override of /etc/init.d/docker on containervm image. ([#23593](https://github.com/kubernetes/kubernetes/pull/23593), [@dchen1107](https://github.com/dchen1107))
-* make docker-checker more robust ([#23662](https://github.com/kubernetes/kubernetes/pull/23662), [@ArtfulCoder](https://github.com/ArtfulCoder))
-* Change kube-proxy & fluentd CPU request to 20m/80m. ([#23646](https://github.com/kubernetes/kubernetes/pull/23646), [@cjcullen](https://github.com/cjcullen))
-* Create a new Deployment in kube-system for every version. ([#23512](https://github.com/kubernetes/kubernetes/pull/23512), [@Q-Lee](https://github.com/Q-Lee))
-* IngressTLS: allow secretName to be blank for SNI routing ([#23500](https://github.com/kubernetes/kubernetes/pull/23500), [@tam7t](https://github.com/tam7t))
-* don't sync deployment when pod selector is empty ([#23467](https://github.com/kubernetes/kubernetes/pull/23467), [@mikedanese](https://github.com/mikedanese))
-* AWS: Fix problems with >2 security groups ([#23340](https://github.com/kubernetes/kubernetes/pull/23340), [@justinsb](https://github.com/justinsb))
-
-
-
-# v1.3.0-alpha.1
-
-[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/HEAD/examples)
-
-## Downloads
-
-binary | sha1 hash | md5 hash
------- | --------- | --------
-[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.3.0-alpha.1/kubernetes.tar.gz) | `e0041b08e220a4704ea2ad90a6ec7c8f2120c2d3` | `7bb2df32aea94678f72a8d1f43a12098`
-
-## Changes since v1.2.0
-
-### Action Required
-
-* Disabling swagger ui by default on apiserver. Adding a flag that can enable it ([#23025](https://github.com/kubernetes/kubernetes/pull/23025), [@nikhiljindal](https://github.com/nikhiljindal))
-* restore ability to run against secured etcd ([#21535](https://github.com/kubernetes/kubernetes/pull/21535), [@AdoHe](https://github.com/AdoHe))
-
-### Other notable changes
-
-* validate that daemonsets don't have empty selectors on creation ([#23530](https://github.com/kubernetes/kubernetes/pull/23530), [@mikedanese](https://github.com/mikedanese))
-* Trusty: Update heapster manifest handling code ([#23434](https://github.com/kubernetes/kubernetes/pull/23434), [@andyzheng0831](https://github.com/andyzheng0831))
-* Support differentiation of OS distro in e2e tests ([#23466](https://github.com/kubernetes/kubernetes/pull/23466), [@andyzheng0831](https://github.com/andyzheng0831))
-* don't sync daemonsets with selectors that match all pods ([#23223](https://github.com/kubernetes/kubernetes/pull/23223), [@mikedanese](https://github.com/mikedanese))
-* Trusty: Avoid reaching GCE custom metadata size limit ([#22818](https://github.com/kubernetes/kubernetes/pull/22818), [@andyzheng0831](https://github.com/andyzheng0831))
-* Update kubectl help for 1.2 resources ([#23305](https://github.com/kubernetes/kubernetes/pull/23305), [@janetkuo](https://github.com/janetkuo))
-* Support addon Deployments, make heapster a deployment with a nanny. ([#22893](https://github.com/kubernetes/kubernetes/pull/22893), [@Q-Lee](https://github.com/Q-Lee))
-* Removing URL query param from swagger UI to fix the XSS issue ([#23234](https://github.com/kubernetes/kubernetes/pull/23234), [@nikhiljindal](https://github.com/nikhiljindal))
-* Fix hairpin mode ([#23325](https://github.com/kubernetes/kubernetes/pull/23325), [@MurgaNikolay](https://github.com/MurgaNikolay))
-* Bump to container-vm-v20160321 ([#23313](https://github.com/kubernetes/kubernetes/pull/23313), [@zmerlynn](https://github.com/zmerlynn))
-* Remove the restart-kube-proxy and restart-apiserver functions ([#23180](https://github.com/kubernetes/kubernetes/pull/23180), [@roberthbailey](https://github.com/roberthbailey))
-* Copy annotations back from RS to Deployment on rollback ([#23160](https://github.com/kubernetes/kubernetes/pull/23160), [@janetkuo](https://github.com/janetkuo))
-* Trusty: Support hybrid cluster with nodes on ContainerVM ([#23079](https://github.com/kubernetes/kubernetes/pull/23079), [@andyzheng0831](https://github.com/andyzheng0831))
-* update expose command description to add deployment ([#23246](https://github.com/kubernetes/kubernetes/pull/23246), [@AdoHe](https://github.com/AdoHe))
-* Add a rate limiter to the GCE cloudprovider ([#23019](https://github.com/kubernetes/kubernetes/pull/23019), [@alex-mohr](https://github.com/alex-mohr))
-* Add a Deployment example for kubectl expose. ([#23222](https://github.com/kubernetes/kubernetes/pull/23222), [@madhusudancs](https://github.com/madhusudancs))
-* Use versioned object when computing patch ([#23145](https://github.com/kubernetes/kubernetes/pull/23145), [@liggitt](https://github.com/liggitt))
-* kubelet: send all recevied pods in one update ([#23141](https://github.com/kubernetes/kubernetes/pull/23141), [@yujuhong](https://github.com/yujuhong))
-* Add a SSHKey sync check to the master's healthz (when using SSHTunnels). ([#23167](https://github.com/kubernetes/kubernetes/pull/23167), [@cjcullen](https://github.com/cjcullen))
-* Validate minimum CPU limits to be >= 10m ([#23143](https://github.com/kubernetes/kubernetes/pull/23143), [@vishh](https://github.com/vishh))
-* Fix controller-manager race condition issue which cause endpoints flush during restart ([#23035](https://github.com/kubernetes/kubernetes/pull/23035), [@xinxiaogang](https://github.com/xinxiaogang))
-* MESOS: forward globally declared cadvisor housekeeping flags ([#22974](https://github.com/kubernetes/kubernetes/pull/22974), [@jdef](https://github.com/jdef))
-* Trusty: support developer workflow on base image ([#22960](https://github.com/kubernetes/kubernetes/pull/22960), [@andyzheng0831](https://github.com/andyzheng0831))
-* Bumped Heapster to stable version 1.0.0 ([#22993](https://github.com/kubernetes/kubernetes/pull/22993), [@piosz](https://github.com/piosz))
-* Deprecating --api-version flag ([#22410](https://github.com/kubernetes/kubernetes/pull/22410), [@nikhiljindal](https://github.com/nikhiljindal))
-* allow resource.version.group in kubectl ([#22853](https://github.com/kubernetes/kubernetes/pull/22853), [@deads2k](https://github.com/deads2k))
-* Use SCP to dump logs and parallelize a bit. ([#22835](https://github.com/kubernetes/kubernetes/pull/22835), [@spxtr](https://github.com/spxtr))
-* update wide option output ([#22772](https://github.com/kubernetes/kubernetes/pull/22772), [@AdoHe](https://github.com/AdoHe))
-* Change scheduler logic from random to round-robin ([#22430](https://github.com/kubernetes/kubernetes/pull/22430), [@gmarek](https://github.com/gmarek))
-
-Please see the [Releases Page](https://github.com/kubernetes/kubernetes/releases) for older releases.
-
-Release notes of older releases can be found in:
-- [CHANGELOG-1.2.md](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.2.md)
-
-[]()
diff --git a/vendor/k8s.io/kubernetes/CHANGELOG-1.4.md b/vendor/k8s.io/kubernetes/CHANGELOG-1.4.md
deleted file mode 100644
index 8c229de490bf..000000000000
--- a/vendor/k8s.io/kubernetes/CHANGELOG-1.4.md
+++ /dev/null
@@ -1,1436 +0,0 @@
-
-- [v1.4.12](#v1412)
- - [Downloads for v1.4.12](#downloads-for-v1412)
- - [Client Binaries](#client-binaries)
- - [Server Binaries](#server-binaries)
- - [Node Binaries](#node-binaries)
- - [Changelog since v1.4.9](#changelog-since-v149)
- - [Other notable changes](#other-notable-changes)
-- [v1.4.9](#v149)
- - [Downloads for v1.4.9](#downloads-for-v149)
- - [Client Binaries](#client-binaries-1)
- - [Server Binaries](#server-binaries-1)
- - [Changelog since v1.4.8](#changelog-since-v148)
- - [Other notable changes](#other-notable-changes-1)
-- [v1.4.8](#v148)
- - [Downloads for v1.4.8](#downloads-for-v148)
- - [Client Binaries](#client-binaries-2)
- - [Server Binaries](#server-binaries-2)
- - [Changelog since v1.4.7](#changelog-since-v147)
- - [Other notable changes](#other-notable-changes-2)
-- [v1.4.7](#v147)
- - [Downloads for v1.4.7](#downloads-for-v147)
- - [Client Binaries](#client-binaries-3)
- - [Server Binaries](#server-binaries-3)
- - [Changelog since v1.4.6](#changelog-since-v146)
- - [Other notable changes](#other-notable-changes-3)
-- [v1.4.6](#v146)
- - [Downloads for v1.4.6](#downloads-for-v146)
- - [Client Binaries](#client-binaries-4)
- - [Server Binaries](#server-binaries-4)
- - [Changelog since v1.4.5](#changelog-since-v145)
- - [Other notable changes](#other-notable-changes-4)
-- [v1.4.5](#v145)
- - [Downloads for v1.4.5](#downloads-for-v145)
- - [Client Binaries](#client-binaries-5)
- - [Server Binaries](#server-binaries-5)
- - [Changelog since v1.4.4](#changelog-since-v144)
- - [Other notable changes](#other-notable-changes-5)
-- [v1.4.4](#v144)
- - [Downloads for v1.4.4](#downloads-for-v144)
- - [Client Binaries](#client-binaries-6)
- - [Server Binaries](#server-binaries-6)
- - [Changelog since v1.4.3](#changelog-since-v143)
- - [Other notable changes](#other-notable-changes-6)
-- [v1.4.3](#v143)
- - [Downloads](#downloads)
- - [Changelog since v1.4.2-beta.1](#changelog-since-v142-beta1)
- - [Other notable changes](#other-notable-changes-7)
-- [v1.4.2](#v142)
- - [Downloads](#downloads-1)
- - [Changelog since v1.4.2-beta.1](#changelog-since-v142-beta1-1)
- - [Other notable changes](#other-notable-changes-8)
-- [v1.4.2-beta.1](#v142-beta1)
- - [Downloads](#downloads-2)
- - [Changelog since v1.4.1](#changelog-since-v141)
- - [Other notable changes](#other-notable-changes-9)
-- [v1.4.1](#v141)
- - [Downloads](#downloads-3)
- - [Changelog since v1.4.1-beta.2](#changelog-since-v141-beta2)
-- [v1.4.1-beta.2](#v141-beta2)
- - [Downloads](#downloads-4)
- - [Changelog since v1.4.0](#changelog-since-v140)
- - [Other notable changes](#other-notable-changes-10)
-- [v1.4.0](#v140)
- - [Downloads](#downloads-5)
- - [Major Themes](#major-themes)
- - [Features](#features)
- - [Known Issues](#known-issues)
- - [Notable Changes to Existing Behavior](#notable-changes-to-existing-behavior)
- - [Deployments](#deployments)
- - [kubectl rolling-update: < v1.4.0 client vs >=v1.4.0 cluster](#kubectl-rolling-update--v140-client-vs-v140-cluster)
- - [kubectl delete: < v1.4.0 client vs >=v1.4.0 cluster](#kubectl-delete--v140-client-vs-v140-cluster)
- - [DELETE operation in REST API](#delete-operation-in-rest-api)
- - [Action Required Before Upgrading](#action-required-before-upgrading)
-- [optionally, remove the old secret](#optionally-remove-the-old-secret)
- - [Previous Releases Included in v1.4.0](#previous-releases-included-in-v140)
-- [v1.4.0-beta.11](#v140-beta11)
- - [Downloads](#downloads-6)
- - [Changelog since v1.4.0-beta.10](#changelog-since-v140-beta10)
-- [v1.4.0-beta.10](#v140-beta10)
- - [Downloads](#downloads-7)
- - [Changelog since v1.4.0-beta.8](#changelog-since-v140-beta8)
- - [Other notable changes](#other-notable-changes-11)
-- [v1.4.0-beta.8](#v140-beta8)
- - [Downloads](#downloads-8)
- - [Changelog since v1.4.0-beta.7](#changelog-since-v140-beta7)
-- [v1.4.0-beta.7](#v140-beta7)
- - [Downloads](#downloads-9)
- - [Changelog since v1.4.0-beta.6](#changelog-since-v140-beta6)
- - [Other notable changes](#other-notable-changes-12)
-- [v1.4.0-beta.6](#v140-beta6)
- - [Downloads](#downloads-10)
- - [Changelog since v1.4.0-beta.5](#changelog-since-v140-beta5)
- - [Other notable changes](#other-notable-changes-13)
-- [v1.4.0-beta.5](#v140-beta5)
- - [Downloads](#downloads-11)
- - [Changelog since v1.4.0-beta.3](#changelog-since-v140-beta3)
- - [Other notable changes](#other-notable-changes-14)
-- [v1.4.0-beta.3](#v140-beta3)
- - [Downloads](#downloads-12)
- - [Changelog since v1.4.0-beta.2](#changelog-since-v140-beta2)
- - [Behavior changes caused by enabling the garbage collector](#behavior-changes-caused-by-enabling-the-garbage-collector)
- - [kubectl rolling-update](#kubectl-rolling-update)
- - [kubectl delete](#kubectl-delete)
- - [DELETE operation in REST API](#delete-operation-in-rest-api-1)
-- [v1.4.0-beta.2](#v140-beta2)
- - [Downloads](#downloads-13)
- - [Changelog since v1.4.0-beta.1](#changelog-since-v140-beta1)
- - [Other notable changes](#other-notable-changes-15)
-- [v1.4.0-beta.1](#v140-beta1)
- - [Downloads](#downloads-14)
- - [Changelog since v1.4.0-alpha.3](#changelog-since-v140-alpha3)
- - [Action Required](#action-required)
- - [Other notable changes](#other-notable-changes-16)
-- [v1.4.0-alpha.3](#v140-alpha3)
- - [Downloads](#downloads-15)
- - [Changelog since v1.4.0-alpha.2](#changelog-since-v140-alpha2)
- - [Action Required](#action-required-1)
- - [Other notable changes](#other-notable-changes-17)
-- [v1.4.0-alpha.2](#v140-alpha2)
- - [Downloads](#downloads-16)
- - [Changelog since v1.4.0-alpha.1](#changelog-since-v140-alpha1)
- - [Action Required](#action-required-2)
- - [Other notable changes](#other-notable-changes-18)
-- [v1.4.0-alpha.1](#v140-alpha1)
- - [Downloads](#downloads-17)
- - [Changelog since v1.3.0](#changelog-since-v130)
- - [Experimental Features](#experimental-features)
- - [Action Required](#action-required-3)
- - [Other notable changes](#other-notable-changes-19)
-
-
-
-
-
-# v1.4.12
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.4/examples)
-
-## Downloads for v1.4.12
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes.tar.gz) | `f0d7ca7e1c92174c900d49087347d043b817eb589803eacc7727a84df9280ed2`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-src.tar.gz) | `251835f258d79f186d8c715b18f2ccb93312270b35c22434b4ff27bc1de50eda`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-darwin-386.tar.gz) | `e91c76b6281fe7b488f2f30aeaeecde58a6df1a0e23f6c431b6dc9d1adc1ff1a`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-darwin-amd64.tar.gz) | `4504bc965bd1b5bcea91d18c3a879252026796fdd251b72e3541499c65ac20e0`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-linux-386.tar.gz) | `adf1f939db2da0b87bca876d9bee69e0d6bf4ca4a78e64195e9a08960e5ef010`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-linux-amd64.tar.gz) | `5419bdbba8144b55bf7bf2af1aefa531e25279f31a02d692f19b505862d0204f`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-linux-arm64.tar.gz) | `98ae30ac2e447b9e3c2768cac6861de5368d80cbd2db1983697c5436a2a2fe75`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-linux-arm.tar.gz) | `ed8e9901c130aebfd295a6016cccb123ee42d826619815250a6add2d03942c69`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-windows-386.tar.gz) | `bdca3096bed1a4c485942ab1d3f9351f5de00962058adefbb5297d50071461d4`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-client-windows-amd64.tar.gz) | `a74934eca20dd2e753d385ddca912e76dafbfff2a65e3e3a1ec3c5c40fd92bc8`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-server-linux-amd64.tar.gz) | `bf8aa3e2e204c1f782645f7df9338767daab7be3ab47a4670e2df08ee410ee7f`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-server-linux-arm64.tar.gz) | `7c5cfe06fe1fcfe11bd754921e88582d16887aacb6cee0eb82573c88debce65e`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-server-linux-arm.tar.gz) | `551c2bc2e3d1c0b8fa30cc0b0c8fae1acf561b5e303e9ddaf647e49239a97e6e`
-
-### Node Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-node*.tar.gz](https://dl.k8s.io/v1.4.12/kubernetes-node*.tar.gz) | ``
-
-## Changelog since v1.4.9
-
-### Other notable changes
-
-* kube-apiserver now drops unneeded path information if an older version of Windows kubectl sends it. ([#44586](https://github.com/kubernetes/kubernetes/pull/44586), [@mml](https://github.com/mml))
-* Bump gcr.io/google_containers/glbc from 0.8.0 to 0.9.2. Release notes: [0.9.0](https://github.com/kubernetes/ingress/releases/tag/0.9.0), [0.9.1](https://github.com/kubernetes/ingress/releases/tag/0.9.1), [0.9.2](https://github.com/kubernetes/ingress/releases/tag/0.9.2) ([#43098](https://github.com/kubernetes/kubernetes/pull/43098), [@timstclair](https://github.com/timstclair))
-* Patch CVE-2016-8859 in alpine based images: ([#42937](https://github.com/kubernetes/kubernetes/pull/42937), [@timstclair](https://github.com/timstclair))
- * - gcr.io/google-containers/etcd-empty-dir-cleanup
- * - gcr.io/google-containers/kube-dnsmasq-amd64
-* Check if pathExists before performing Unmount ([#39311](https://github.com/kubernetes/kubernetes/pull/39311), [@rkouj](https://github.com/rkouj))
-* Unmount operation should not fail if volume is already unmounted ([#38547](https://github.com/kubernetes/kubernetes/pull/38547), [@rkouj](https://github.com/rkouj))
-* Updates base image used for `kube-addon-manager` to latest `python:2.7-slim` and embedded `kubectl` to `v1.3.10`. No functionality changes expected. ([#42842](https://github.com/kubernetes/kubernetes/pull/42842), [@ixdy](https://github.com/ixdy))
-* list-resources: don't fail if the grep fails to match any resources ([#41933](https://github.com/kubernetes/kubernetes/pull/41933), [@ixdy](https://github.com/ixdy))
-* Update gcr.io/google-containers/rescheduler to v0.2.2, which uses busybox as a base image instead of ubuntu. ([#41911](https://github.com/kubernetes/kubernetes/pull/41911), [@ixdy](https://github.com/ixdy))
-* Backporting TPR fix to 1.4 ([#42380](https://github.com/kubernetes/kubernetes/pull/42380), [@foxish](https://github.com/foxish))
-* Fix AWS device allocator to only use valid device names ([#41455](https://github.com/kubernetes/kubernetes/pull/41455), [@gnufied](https://github.com/gnufied))
-* Reverts to looking up the current VM in vSphere using the machine's UUID, either obtained via sysfs or via the `vm-uuid` parameter in the cloud configuration file. ([#40892](https://github.com/kubernetes/kubernetes/pull/40892), [@robdaemon](https://github.com/robdaemon))
-* We change the default attach_detach_controller sync period to 1 minute to reduce the query frequency through cloud provider to check whether volumes are attached or not. ([#41363](https://github.com/kubernetes/kubernetes/pull/41363), [@jingxu97](https://github.com/jingxu97))
-* Bump GCI to gci-stable-56-9000-84-2: Fixed google-accounts-daemon breaks on GCI when network is unavailable. Fixed iptables-restore performance regression. ([#41831](https://github.com/kubernetes/kubernetes/pull/41831), [@freehan](https://github.com/freehan))
-* Update fluentd-gcp addon to 1.25.2 ([#41863](https://github.com/kubernetes/kubernetes/pull/41863), [@ixdy](https://github.com/ixdy))
-* Bump GCE ContainerVM to container-vm-v20170214 to address CVE-2016-9962. ([#41449](https://github.com/kubernetes/kubernetes/pull/41449), [@zmerlynn](https://github.com/zmerlynn))
-
-
-
-# v1.4.9
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.4/examples)
-
-## Downloads for v1.4.9
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes.tar.gz) | `9d385d555073c7cf509a92ce3aa96d0414a93c21c51bcf020744c70b4b290aa2`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-src.tar.gz) | `6fd7d33775356f0245d06b401ac74d8227a92abd07cc5a0ef362bac16e01f011`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-darwin-386.tar.gz) | `16b362f3cf56dee7b0c291188767222fd65176ed9573a8b87e8acf7eb6b22ed9`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-darwin-amd64.tar.gz) | `537e5c5d8a9148cd464f5d6d0a796e214add04c185b859ea9e39a4cc7264394c`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-linux-386.tar.gz) | `e9d2e55b42e002771c32d9f26e8eb0b65c257ea257e8ab19f7fd928f21caace8`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-linux-amd64.tar.gz) | `1ba81d64d1ae165b73375d61d364c642068385d6a1d68196d90e42a8d0fd6c7d`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-linux-arm64.tar.gz) | `d0398d2b11ed591575adde3ce9e1ad877fe37b8b56bd2be5b2aee344a35db330`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-linux-arm.tar.gz) | `714b06319bf047084514803531edab6a0a262c5f38a0d0bfda0a8e59672595b6`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-windows-386.tar.gz) | `16a7224313889d2f98a7d072f328198790531fd0e724eaeeccffe82521ae63b8`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-client-windows-amd64.tar.gz) | `dc19651287701ea6dcbd7b4949db2331468f730e8ebe951de1216f1105761d97`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-server-linux-amd64.tar.gz) | `6a104d143f8568a8ce16c979d1cb2eb357263d96ab43bd399b05d28f8da2b961`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-server-linux-arm64.tar.gz) | `8137ecde19574e6aba0cd9efe127f3b3eb02c312d7691745df3a23e40b7a5d72`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.4.9/kubernetes-server-linux-arm.tar.gz) | `085195abeb9133cb43f0e6198e638ded7f15beca44d19503c2836339a7e604aa`
-
-## Changelog since v1.4.8
-
-### Other notable changes
-
-* Bump GCE ContainerVM to container-vm-v20170201 to address CVE-2016-9962. ([#40828](https://github.com/kubernetes/kubernetes/pull/40828), [@zmerlynn](https://github.com/zmerlynn))
-* Bump GCI to gci-beta-56-9000-80-0 ([#41027](https://github.com/kubernetes/kubernetes/pull/41027), [@dchen1107](https://github.com/dchen1107))
-* Fix for detach volume when node is not present/ powered off ([#40118](https://github.com/kubernetes/kubernetes/pull/40118), [@BaluDontu](https://github.com/BaluDontu))
-* Bump GCI to gci-beta-56-9000-80-0 ([#41027](https://github.com/kubernetes/kubernetes/pull/41027), [@dchen1107](https://github.com/dchen1107))
-* Move b.gcr.io/k8s_authenticated_test to gcr.io/k8s-authenticated-test ([#40335](https://github.com/kubernetes/kubernetes/pull/40335), [@zmerlynn](https://github.com/zmerlynn))
-* Prep node_e2e for GCI to COS name change ([#41088](https://github.com/kubernetes/kubernetes/pull/41088), [@jessfraz](https://github.com/jessfraz))
-* If ExperimentalCriticalPodAnnotation=True flag gate is set, kubelet will ensure that pods with `scheduler.alpha.kubernetes.io/critical-pod` annotation will be admitted even under resource pressure, will not be evicted, and are reasonably protected from system OOMs. ([#41052](https://github.com/kubernetes/kubernetes/pull/41052), [@vishh](https://github.com/vishh))
-* Fix resync goroutine leak in ListAndWatch ([#35672](https://github.com/kubernetes/kubernetes/pull/35672), [@tatsuhiro-t](https://github.com/tatsuhiro-t))
-* Kubelet will no longer set hairpin mode on every interface on the machine when an error occurs in setting up hairpin for a specific interface. ([#36990](https://github.com/kubernetes/kubernetes/pull/36990), [@bboreham](https://github.com/bboreham))
-* Bump GCE ContainerVM to container-vm-v20170201 to address CVE-2016-9962. ([#40828](https://github.com/kubernetes/kubernetes/pull/40828), [@zmerlynn](https://github.com/zmerlynn))
-* Adding vmdk file extension for vmDiskPath in vsphere DeleteVolume ([#40538](https://github.com/kubernetes/kubernetes/pull/40538), [@divyenpatel](https://github.com/divyenpatel))
-* Prevent hotloops on error conditions, which could fill up the disk faster than log rotation can free space. ([#40497](https://github.com/kubernetes/kubernetes/pull/40497), [@lavalamp](https://github.com/lavalamp))
-* Update GCE ContainerVM deployment to container-vm-v20170117 to pick up CVE fixes in base image. ([#40094](https://github.com/kubernetes/kubernetes/pull/40094), [@zmerlynn](https://github.com/zmerlynn))
-* Update kube-proxy image to be based off of Debian 8.6 base image. ([#39695](https://github.com/kubernetes/kubernetes/pull/39695), [@ixdy](https://github.com/ixdy))
-* Update amd64 kube-proxy base image to debian-iptables-amd64:v5 ([#39725](https://github.com/kubernetes/kubernetes/pull/39725), [@ixdy](https://github.com/ixdy))
-
-
-
-# v1.4.8
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.4/examples)
-
-## Downloads for v1.4.8
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes.tar.gz) | `888d2e6c5136e8805805498729a1da55cf89addfd28f098e0d2cf3f28697ab5c`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-src.tar.gz) | `0992c3f4f4cb21011fea32187c909babc1a3806f35cec86aacfe9c3d8bef2485`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-darwin-386.tar.gz) | `8b1c9931544b7b42df64ea98e0d8e1430d09eea3c9f78309834e4e18b091dc18`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-darwin-amd64.tar.gz) | `a306a687979013b8a27acae244d000de9a77f73714ccf96510ecf0398d677051`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-linux-386.tar.gz) | `81fc5e1b5aba4e0aead37c82c7e45891c4493c7df51da5200f83462b6f7ad98f`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-linux-amd64.tar.gz) | `704a5f8424190406821b69283f802ade95e39944efcce10bcaf4bd7b3183abc4`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-linux-arm64.tar.gz) | `7f3e5e8dadb51257afa8650bcd3db3e8f3bc60e767c1a13d946b88fa8625a326`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-linux-arm.tar.gz) | `461d359067cd90542ce2ceb46a4b2ec9d92dd8fd1e7d21a9d9f469c98f446e56`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-windows-386.tar.gz) | `894a9c8667e4c4942cb25ac32d10c4f6de8477c6bbbad94e9e6f47121151f5df`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-client-windows-amd64.tar.gz) | `b2bd4afdd3eaea305c03b94b0864c5622abf19113c6794dedff4ad85327fda01`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-server-linux-amd64.tar.gz) | `c3dc0e26c00bbe40bd19f61d2d7faeaa56384355c58a0efc4227a360b3eb2da2`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-server-linux-arm64.tar.gz) | `745d7ba03bb9c6b57a5a36b389f6467a0707f0a1476d7536ad47417c853eeffd`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.4.8/kubernetes-server-linux-arm.tar.gz) | `dc21f9c659f1d762cad9d0cce0a32146c11cd0d41c58eb2dcbfb0c9f9707349f`
-
-## Changelog since v1.4.7
-
-### Other notable changes
-
-* AWS: recognize eu-west-2 region ([#38746](https://github.com/kubernetes/kubernetes/pull/38746), [@justinsb](https://github.com/justinsb))
-* Add path exist check in getPodVolumePathListFromDisk ([#38909](https://github.com/kubernetes/kubernetes/pull/38909), [@jingxu97](https://github.com/jingxu97))
-* Update fluentd-gcp addon to 1.21.1/1.25.1. ([#39705](https://github.com/kubernetes/kubernetes/pull/39705), [@ixdy](https://github.com/ixdy))
-* Admit critical pods in the kubelet ([#38836](https://github.com/kubernetes/kubernetes/pull/38836), [@bprashanth](https://github.com/bprashanth))
-* assign -998 as the oom_score_adj for critical pods (e.g. kube-proxy) ([#39114](https://github.com/kubernetes/kubernetes/pull/39114), [@dchen1107](https://github.com/dchen1107))
-* Don't evict static pods ([#39059](https://github.com/kubernetes/kubernetes/pull/39059), [@bprashanth](https://github.com/bprashanth))
-* Provide kubernetes-controller-manager flags to control volume attach/detach reconciler sync. The duration of the syncs can be controlled, and the syncs can be shut off as well. ([#39551](https://github.com/kubernetes/kubernetes/pull/39551), [@chrislovecnm](https://github.com/chrislovecnm))
-* AWS: Recognize ca-central-1 region ([#38410](https://github.com/kubernetes/kubernetes/pull/38410), [@justinsb](https://github.com/justinsb))
-* Add TLS conf for Go1.7 ([#38600](https://github.com/kubernetes/kubernetes/pull/38600), [@k82cn](https://github.com/k82cn))
-* Fix fsGroup to vSphere ([#38655](https://github.com/kubernetes/kubernetes/pull/38655), [@abrarshivani](https://github.com/abrarshivani))
-* Only set sysctls for infra containers ([#32383](https://github.com/kubernetes/kubernetes/pull/32383), [@sttts](https://github.com/sttts))
-* fix kubectl taint e2e flake: add retries for removing taint ([#33872](https://github.com/kubernetes/kubernetes/pull/33872), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
-* portfordwardtester: avoid data loss during send+close+exit ([#37103](https://github.com/kubernetes/kubernetes/pull/37103), [@sttts](https://github.com/sttts))
-* Wait for the port to be ready before starting ([#38260](https://github.com/kubernetes/kubernetes/pull/38260), [@fraenkel](https://github.com/fraenkel))
-* Ensure the GCI metadata files do not have newline at the end ([#38727](https://github.com/kubernetes/kubernetes/pull/38727), [@Amey-D](https://github.com/Amey-D))
-* Fix nil pointer dereference in test framework ([#37583](https://github.com/kubernetes/kubernetes/pull/37583), [@mtaufen](https://github.com/mtaufen))
-* Kubelet: Add image cache. ([#38375](https://github.com/kubernetes/kubernetes/pull/38375), [@Random-Liu](https://github.com/Random-Liu))
-* Collect logs for dead kubelets too ([#37671](https://github.com/kubernetes/kubernetes/pull/37671), [@mtaufen](https://github.com/mtaufen))
-
-
-
-# v1.4.7
-
-[Documentation](https://docs.k8s.io) & [Examples](https://releases.k8s.io/release-1.4/examples)
-
-## Downloads for v1.4.7
-
-
-filename | sha256 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes.tar.gz) | `d193f76e70322010b3e86ac61c7a893175f9e62d37bece87cfd14ea068c8d187`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-src.tar.gz) | `7c7ef45e903ed2691c73bb2752805f190b4042ba233a6260f2cdeab7d0ac9bd3`
-
-### Client Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-darwin-386.tar.gz) | `a5a3ec9f5270156cf507b4c6bf2d08da67062a2ed9cb5f21e8891f2fd83f438a`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-darwin-amd64.tar.gz) | `e5328781640b19e86b59aa8afd665dd21999c6740acbee8332cfa20745d6a5ce`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-linux-386.tar.gz) | `61082afc6aee2dc5bbd35bfda2e5991bd9f9730192f1c9396b6db500fc64e121`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-linux-amd64.tar.gz) | `36232c9e21298f5f53dbf4851520a8cc53a2d6b6d2be8810cf5258a067570314`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-linux-arm64.tar.gz) | `802d0c5e7bb55dacdd19afe73ed71d0726960ec9933c49e77051df7e2594790b`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-linux-arm.tar.gz) | `f42d8d2d918b31564d12d742bce2263df0c93807619bd03194028ff2714f1a17`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-windows-386.tar.gz) | `b45dcdfe0ba0177fad5419b4fd6b5b80bf9bca0e56e7fe19d2bc217c9aae1f9d`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-client-windows-amd64.tar.gz) | `ae4666aea8fa74ef1cce746d1d90cbadc972850560b65a8eeff4417fdede6b4e`
-
-### Server Binaries
-
-filename | sha256 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-server-linux-amd64.tar.gz) | `56e01e9788d1ef0499b1783768022cb188b5bb840d1499a62e9f0a18c2bd2bd5`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-server-linux-arm64.tar.gz) | `6654ef3c142694a79ec2596929ceec36a399407e1fb74b09be1a67c59b30ca42`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.4.7/kubernetes-server-linux-arm.tar.gz) | `b10e78286dea804d69311e3805c35f5414b0669094edec7a2e0ba99170a5d04a`
-
-## Changelog since v1.4.6
-
-### Other notable changes
-
-* Exit with error if
v1.SecretVolumeSource
v1.FlexVolumeSource
-
FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future.
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.
flexVolume |
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future. |
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. |
false |
@@ -3804,7 +3804,7 @@ | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
dnsPolicy |
-Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. |
+Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
string |
@@ -3937,7 +3937,7 @@ | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
dnsConfig |
-Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. |
+Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
diff --git a/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1beta1/definitions.html b/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1beta1/definitions.html index f90176654d7f..8bf4a106ec9d 100755 --- a/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1beta1/definitions.html +++ b/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1beta1/definitions.html @@ -2726,7 +2726,7 @@ |
flexVolume |
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future. |
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. |
false |
@@ -3857,7 +3857,7 @@ | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
dnsPolicy |
-Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. |
+Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
string |
@@ -3990,7 +3990,7 @@ | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
dnsConfig |
-Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. |
+Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
diff --git a/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1beta2/definitions.html b/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1beta2/definitions.html index 157fa46b3297..0eb7eae50bae 100755 --- a/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1beta2/definitions.html +++ b/vendor/k8s.io/kubernetes/docs/api-reference/apps/v1beta2/definitions.html @@ -1013,7 +1013,7 @@ |
flexVolume |
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future. |
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. |
false |
@@ -4473,7 +4473,7 @@ | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
dnsPolicy |
-Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. |
+Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
string |
@@ -4606,7 +4606,7 @@ | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
dnsConfig |
-Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. |
+Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
@@ -5207,7 +5207,7 @@ |
flexVolume |
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future. |
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. |
false |
@@ -3137,7 +3137,7 @@ | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
dnsPolicy |
-Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. |
+Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
string |
@@ -3270,7 +3270,7 @@ | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
dnsConfig |
-Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. |
+Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
diff --git a/vendor/k8s.io/kubernetes/docs/api-reference/batch/v1beta1/definitions.html b/vendor/k8s.io/kubernetes/docs/api-reference/batch/v1beta1/definitions.html index 798d8d6b21ee..1e84af1e5ec5 100755 --- a/vendor/k8s.io/kubernetes/docs/api-reference/batch/v1beta1/definitions.html +++ b/vendor/k8s.io/kubernetes/docs/api-reference/batch/v1beta1/definitions.html @@ -2061,7 +2061,7 @@ |
flexVolume |
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future. |
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. |
false |
@@ -3171,7 +3171,7 @@ | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
dnsPolicy |
-Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. |
+Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
string |
@@ -3304,7 +3304,7 @@ | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
dnsConfig |
-Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. |
+Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
diff --git a/vendor/k8s.io/kubernetes/docs/api-reference/batch/v2alpha1/definitions.html b/vendor/k8s.io/kubernetes/docs/api-reference/batch/v2alpha1/definitions.html index d319cb99dd05..12662acce979 100755 --- a/vendor/k8s.io/kubernetes/docs/api-reference/batch/v2alpha1/definitions.html +++ b/vendor/k8s.io/kubernetes/docs/api-reference/batch/v2alpha1/definitions.html @@ -2020,7 +2020,7 @@ |
flexVolume |
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future. |
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. |
false |
@@ -3144,7 +3144,7 @@ | |||||||||||||||||||||||||||||||||||||||||||||||||
dnsPolicy |
-Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. |
+Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
string |
@@ -3277,7 +3277,7 @@ | ||||||||||||||||||||||||||||||||||||||||||||||||
dnsConfig |
-Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. |
+Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
diff --git a/vendor/k8s.io/kubernetes/docs/api-reference/extensions/v1beta1/definitions.html b/vendor/k8s.io/kubernetes/docs/api-reference/extensions/v1beta1/definitions.html index 2776574ca6d1..bd302b0eb89f 100755 --- a/vendor/k8s.io/kubernetes/docs/api-reference/extensions/v1beta1/definitions.html +++ b/vendor/k8s.io/kubernetes/docs/api-reference/extensions/v1beta1/definitions.html @@ -1395,7 +1395,7 @@ |
flexVolume |
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future. |
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. |
false |
@@ -4496,7 +4496,7 @@ | |||||||||||||||||||||||||||||||
dnsPolicy |
-Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. |
+Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
string |
@@ -4629,7 +4629,7 @@ | ||||||||||||||||||||||||||||||
dnsConfig |
-Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. |
+Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
@@ -5329,7 +5329,7 @@ |
flexVolume |
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future. |
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. |
false |
diff --git a/vendor/k8s.io/kubernetes/docs/api-reference/v1/definitions.html b/vendor/k8s.io/kubernetes/docs/api-reference/v1/definitions.html index 08c3b84c8ce2..b169977ecee7 100755 --- a/vendor/k8s.io/kubernetes/docs/api-reference/v1/definitions.html +++ b/vendor/k8s.io/kubernetes/docs/api-reference/v1/definitions.html @@ -2244,7 +2244,7 @@ |
flexVolume |
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future. |
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. |
false |
@@ -8380,7 +8380,7 @@ | |
flexVolume |
-FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. This is an alpha feature and may change in future. |
+FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin. |
false |
@@ -9082,7 +9082,7 @@ | |
dnsPolicy |
-Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. |
+Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are ClusterFirstWithHostNet, ClusterFirst, Default or None. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to ClusterFirstWithHostNet. Note that None policy is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
string |
@@ -9215,7 +9215,7 @@ |
dnsConfig |
-Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. |
+Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy. This is an alpha feature introduced in v1.9 and CustomPodDNS feature gate must be enabled to use it. |
false |
diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/cloud-controller-manager.1 b/vendor/k8s.io/kubernetes/docs/man/man1/cloud-controller-manager.1 index dfecfb90c7a8..b6fd7a0f9896 100644 --- a/vendor/k8s.io/kubernetes/docs/man/man1/cloud-controller-manager.1 +++ b/vendor/k8s.io/kubernetes/docs/man/man1/cloud-controller-manager.1 @@ -1,193 +1,3 @@ -.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" "" - - -.SH NAME -.PP -cloud\-controller\-manager \- - - -.SH SYNOPSIS -.PP -\fBcloud\-controller\-manager\fP [OPTIONS] - - -.SH DESCRIPTION -.PP -The Cloud controller manager is a daemon that embeds -the cloud specific control loops shipped with Kubernetes. - - -.SH OPTIONS -.PP -\fB\-\-address\fP=0.0.0.0 - The IP address to serve on (set to 0.0.0.0 for all interfaces). - -.PP -\fB\-\-allocate\-node\-cidrs\fP=false - Should CIDRs for Pods be allocated and set on the cloud provider. - -.PP -\fB\-\-allow\-untagged\-cloud\fP=false - Allow the cluster to run without the cluster\-id on cloud instances. This is a legacy mode of operation and a cluster\-id will be required in the future. - -.PP -\fB\-\-azure\-container\-registry\-config\fP="" - Path to the file container Azure container registry configuration information. - -.PP -\fB\-\-cloud\-config\fP="" - The path to the cloud provider configuration file. Empty string for no configuration file. - -.PP -\fB\-\-cloud\-provider\fP="" - The provider of cloud services. Cannot be empty. - -.PP -\fB\-\-cluster\-cidr\fP="" - CIDR Range for Pods in cluster. - -.PP -\fB\-\-cluster\-name\fP="kubernetes" - The instance prefix for the cluster. - -.PP -\fB\-\-concurrent\-service\-syncs\fP=1 - The number of services that are allowed to sync concurrently. Larger number = more responsive service management, but more CPU (and network) load - -.PP -\fB\-\-configure\-cloud\-routes\fP=true - Should CIDRs allocated by allocate\-node\-cidrs be configured on the cloud provider. - -.PP -\fB\-\-contention\-profiling\fP=false - Enable lock contention profiling, if profiling is enabled. - -.PP -\fB\-\-controller\-start\-interval\fP=0s - Interval between starting controller managers. - -.PP -\fB\-\-feature\-gates\fP= - A set of key=value pairs that describe feature gates for alpha/experimental features. Options are: -APIListChunking=true|false (BETA \- default=true) -APIResponseCompression=true|false (ALPHA \- default=false) -Accelerators=true|false (ALPHA \- default=false) -AdvancedAuditing=true|false (BETA \- default=true) -AllAlpha=true|false (ALPHA \- default=false) -AllowExtTrafficLocalEndpoints=true|false (default=true) -AppArmor=true|false (BETA \- default=true) -BlockVolume=true|false (ALPHA \- default=false) -CPUManager=true|false (ALPHA \- default=false) -CSIPersistentVolume=true|false (ALPHA \- default=false) -CustomPodDNS=true|false (ALPHA \- default=false) -CustomResourceValidation=true|false (BETA \- default=true) -DebugContainers=true|false (ALPHA \- default=false) -DevicePlugins=true|false (ALPHA \- default=false) -DynamicKubeletConfig=true|false (ALPHA \- default=false) -EnableEquivalenceClassCache=true|false (ALPHA \- default=false) -ExpandPersistentVolumes=true|false (ALPHA \- default=false) -ExperimentalCriticalPodAnnotation=true|false (ALPHA \- default=false) -ExperimentalHostUserNamespaceDefaulting=true|false (BETA \- default=false) -HugePages=true|false (ALPHA \- default=false) -Initializers=true|false (ALPHA \- default=false) -KubeletConfigFile=true|false (ALPHA \- default=false) -LocalStorageCapacityIsolation=true|false (ALPHA \- default=false) -MountContainers=true|false (ALPHA \- default=false) -MountPropagation=true|false (ALPHA \- default=false) -PVCProtection=true|false (ALPHA \- default=false) -PersistentLocalVolumes=true|false (ALPHA \- default=false) -PodPriority=true|false (ALPHA \- default=false) -ResourceLimitsPriorityFunction=true|false (ALPHA \- default=false) -RotateKubeletClientCertificate=true|false (BETA \- default=true) -RotateKubeletServerCertificate=true|false (ALPHA \- default=false) -ServiceNodeExclusion=true|false (ALPHA \- default=false) -StreamingProxyRedirects=true|false (BETA \- default=true) -SupportIPVSProxyMode=true|false (ALPHA \- default=false) -TaintBasedEvictions=true|false (ALPHA \- default=false) -TaintNodesByCondition=true|false (ALPHA \- default=false) -VolumeScheduling=true|false (ALPHA \- default=false) - -.PP -\fB\-\-google\-json\-key\fP="" - The Google Cloud Platform Service Account JSON Key to use for authentication. - -.PP -\fB\-\-kube\-api\-burst\fP=30 - Burst to use while talking with kubernetes apiserver. - -.PP -\fB\-\-kube\-api\-content\-type\fP="application/vnd.kubernetes.protobuf" - Content type of requests sent to apiserver. - -.PP -\fB\-\-kube\-api\-qps\fP=20 - QPS to use while talking with kubernetes apiserver. - -.PP -\fB\-\-kubeconfig\fP="" - Path to kubeconfig file with authorization and master location information. - -.PP -\fB\-\-leader\-elect\fP=true - Start a leader election client and gain leadership before executing the main loop. Enable this when running replicated components for high availability. - -.PP -\fB\-\-leader\-elect\-lease\-duration\fP=15s - The duration that non\-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled. - -.PP -\fB\-\-leader\-elect\-renew\-deadline\fP=10s - The interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled. - -.PP -\fB\-\-leader\-elect\-resource\-lock\fP="endpoints" - The type of resource object that is used for locking during leader election. Supported options are \fB\fCendpoints\fR (default) and \fB\fCconfigmaps\fR. - -.PP -\fB\-\-leader\-elect\-retry\-period\fP=2s - The duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled. - -.PP -\fB\-\-master\fP="" - The address of the Kubernetes API server (overrides any value in kubeconfig). - -.PP -\fB\-\-min\-resync\-period\fP=12h0m0s - The resync period in reflectors will be random between MinResyncPeriod and 2*MinResyncPeriod. - -.PP -\fB\-\-node\-monitor\-period\fP=5s - The period for syncing NodeStatus in NodeController. - -.PP -\fB\-\-node\-status\-update\-frequency\fP=5m0s - Specifies how often the controller updates nodes' status. - -.PP -\fB\-\-port\fP=10253 - The port that the cloud\-controller\-manager's http service runs on. - -.PP -\fB\-\-profiling\fP=true - Enable profiling via web interface host:port/debug/pprof/. - -.PP -\fB\-\-route\-reconciliation\-period\fP=10s - The period for reconciling routes created for Nodes by cloud provider. - -.PP -\fB\-\-service\-account\-private\-key\-file\fP="" - Filename containing a PEM\-encoded private RSA or ECDSA key used to sign service account tokens. - -.PP -\fB\-\-use\-service\-account\-credentials\fP=false - If true, use individual service account credentials for each controller. - -.PP -\fB\-\-version\fP=false - Print version information and quit - - -.SH HISTORY -.PP -January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since! +This file is autogenerated, but we've stopped checking such files into the +repository to reduce the need for rebases. Please run hack/generate-docs.sh to +populate this file. diff --git a/vendor/k8s.io/kubernetes/docs/man/man1/kube-apiserver.1 b/vendor/k8s.io/kubernetes/docs/man/man1/kube-apiserver.1 index 39dde5c796fc..b6fd7a0f9896 100644 --- a/vendor/k8s.io/kubernetes/docs/man/man1/kube-apiserver.1 +++ b/vendor/k8s.io/kubernetes/docs/man/man1/kube-apiserver.1 @@ -1,512 +1,3 @@ -.TH "KUBERNETES" "1" " kubernetes User Manuals" "Eric Paris" "Jan 2015" "" - - -.SH NAME -.PP -kube\-apiserver \- - - -.SH SYNOPSIS -.PP -\fBkube\-apiserver\fP [OPTIONS] - - -.SH DESCRIPTION -.PP -The Kubernetes API server validates and configures data -for the api objects which include pods, services, replicationcontrollers, and -others. The API Server services REST operations and provides the frontend to the -cluster's shared state through which all other components interact. - - -.SH OPTIONS -.PP -\fB\-\-address\fP=127.0.0.1 - DEPRECATED: see \-\-insecure\-bind\-address instead. - -.PP -\fB\-\-admission\-control\fP=[AlwaysAdmit] - Admission is divided into two phases. In the first phase, only mutating admission plugins run. In the second phase, only validating admission plugins run. The names in the below list may represent a validating plugin, a mutating plugin, or both. Within each phase, the plugins will run in the order in which they are passed to this flag. Comma\-delimited list of: AlwaysAdmit, AlwaysDeny, AlwaysPullImages, DefaultStorageClass, DefaultTolerationSeconds, DenyEscalatingExec, DenyExecOnPrivileged, EventRateLimit, ExtendedResourceToleration, ImagePolicyWebhook, InitialResources, Initializers, LimitPodHardAntiAffinityTopology, LimitRanger, MutatingAdmissionWebhook, NamespaceAutoProvision, NamespaceExists, NamespaceLifecycle, NodeRestriction, OwnerReferencesPermissionEnforcement, PVCProtection, PersistentVolumeClaimResize, PersistentVolumeLabel, PodNodeSelector, PodPreset, PodSecurityPolicy, PodTolerationRestriction, Priority, ResourceQuota, SecurityContextDeny, ServiceAccount, ValidatingAdmissionWebhook. - -.PP -\fB\-\-admission\-control\-config\-file\fP="" - File with admission control configuration. - -.PP -\fB\-\-advertise\-address\fP= |