Changelog for kubectl-1.10.11-7.19.x86_64.rpm :

* Tue Dec 18 2018 jmassaguerplaAATTsuse.com- Update go requirements to >= go1.11.3 to fix
* bsc#1118897 CVE-2018-16873 go#29230 cmd/go: remote command execution during \"go get -u\"
* bsc#1118898 CVE-2018-16874 go#29231 cmd/go: directory traversal in \"go get\" via curly braces in import paths
* bsc#1118899 CVE-2018-16875 go#29233 crypto/x509: CPU denial of service
* Wed Dec 12 2018 alvaro.saurinAATTsuse.com- Updated to a supported version of Go (due to security reasons)
* Mon Dec 03 2018 opensuse-packagingAATTopensuse.org- Update to version 1.10.11:
* Verify backend upgraded connection
* Add/Update CHANGELOG-1.10.md for v1.10.10.
* Kubernetes version v1.10.11-beta.0 openapi-spec file updates
* Add code for including shutdown nodes
* remove retry operation on attach/detach disk
* Ensure orphan public IPs deleted
* Cherry-pick metadata-agent psp binding
* fix openstack provider to handle only Cinder volumes
* Improve Azure instance metadata handling
* Change GCE LB health check interval from 2s to 8s, unhealthyThreashold to 3
* update coredns image to gcr.io
* improve azure disk attachment perf on Linux
* Fix parsing timestamp in test
* Remove old NAP tests
* Skip node cidr mask size check for cloud allocation.
* change azure file mount permission to 0777
* Fix DS tests to set their namespaces to empty node selectors so that they keep working with PodNodeSelector plugin.
* Add/Update CHANGELOG-1.10.md for v1.10.9.
* Grant permissions for batch/job to cluster-autoscaler
* Kubernetes version v1.10.10-beta.0 openapi-spec file updates
* Always reconcile extended resource capacity after kubelet restart. There are cases that nodes can be recreated (i.e., external_id changes) but still have pods assigned to it. The previous cherry-pick PR https://github.com/kubernetes/kubernetes/pull/66881 doesn\'t cover this case in 1.10 where we only reconcile with old API node state if the new node has the same external_id. We don\'t need this fix in 1.11 from which we always reconcile with old API node state.
* Don\'t run limitranger admission plugin on pod update requests
* Bump version of fluentd-gcp-scaler
* Change the portworx volume attribute SupportsSELinux to false
* Add fallbacks for getting node IP from Azure IMDS
* fix UnmountDevice failure on Windows
* Add unit tests for getting vmss node IP
* Get public IP for Azure vmss nodes
* Add volume spec to mountedPod in actual state of world
* fix bug that defer in infinite loop
* Add privileged test pod security policy to local volume provisioner test service account
* bazel: update debian-iptables and debian-hyperkube-base
* Update to use debian-iptables v10.2 and debian-hyperkube-base 0.10.2
* Install netbase in debian-iptables and debian-hyperkube-base as it is needed by ipvs
* Add support of zero nodes in vmss
* verify invalid secret/configmap/projected volumes
* Add/Update CHANGELOG-1.10.md for v1.10.8.
* Kubernetes version v1.10.9-beta.0 openapi-spec file updates
* Fix potential panic when getting azure load balancer status
* Size http2 buffers to allow concurrent streams
* Fix for duplicate revisions created by StatefulSet
* Thu Oct 11 2018 opensuse-packagingAATTopensuse.org- Update to version 1.10.8:
* Fix running e2e tests with completed kube-system pods
* Add Logf message for skipped succeeded pods
* Fix comments about default mount propagation
* when copy file from host to pod like this: 1.kubectl copy /tmp/test-file test-pod:/ 2.kubectl copy /tmp/test-file test-pod: example 1 will fail, example 2 will cause a panic. This patch fix bugs above.
* Don\'t validate HealthzBindAddress in KubeProxyConfiguration if it\'s empty
* Include unavailable API services in discovery response
* attachdetach controller: attach volumes immediately when Pod\'s PVCs are bound - Use queue to process PVCs on add/update events - Index pods by PVC key then we don\'t need to iterate to find pods
* attachdetach controller: attach volumes immediately when Pod\'s PVCs are bound - Add integration test for this feature
* Double check PVC if not found in syncVolume.
* Kubernetes version v1.10.8-beta.0 openapi-spec file updates
* Add/Update CHANGELOG-1.10.md for v1.10.7.
* allow failed discovery on initial quota controller start
* Log real file\'s name and line
* Added test for scheduler informers
* Fix scheduler Pod informers to receive events when pods are scheduled by other schedulers.
* Fix parameter for fluentd-gcp-scaler
* apiserver: forward panic in WithTimeout filter
* Bump ip-masq-agent to v2.1.1 - Update debian-iptables image for CVEs. - Change chain name to IP-MASQ to be compatible with the pre-injected masquerade rules.
* Fix VMWare VM freezing bug by reverting #51066
* support cross resource group for azure file
* Add namespace for (cluster)role(binding) cloud-provider.
* Cluster Autoscaler 1.2.3
* Bump versions of components with latest security patches.
* Fixed GCE PD tests to wait for pod deletion after usage, and to not force detach PD\'s from nodes
* Wed Aug 29 2018 opensuse-packagingAATTopensuse.org- Update to version 1.10.7:
* Report node DNS info with --node-ip
* Add missing binaryData field to the ConfigMap Hash
* Return vmUUID when renewing nodeinfo in VCP
* fix acr sp access issue
* Kubernetes version v1.10.7-beta.0 openapi-spec file updates
* Add/Update CHANGELOG-1.10.md for v1.10.6.
* Bump to k8s.gcr.io/metadata-proxy:v0.1.10
* Detect if GCE PD udev link is wrong and try to correct it
* Reconcile extended resource capacity after kubelet restart.
* Stub out BackendService check in Ingress upgrade test.
* Rework multi-volume test to use StatefulSet
* A large set of improvements to the Stackdriver components.
* Add NoSchedule and NoExecute tolerations to ip-masq-agent
* Fixed vsphere volume plugin unsafe type cast; added unit tests
* Support pulling requestheader CA from extension-apiserver-authentication ConfigMap without client CA
* Escape illegal characters in remote extra keys
* fill in normal restmapping info with the legacy guess
* Ignore EIO error in unmount path
* Upgrade debian-base to 0.3.1 for CVEs
* ensure qemu-ARCH-static binary is world readable and executable
* Only register qemu-user-static when necessary.
* Bump debian-base to 0.3.2
* Add missing tmpdir path to chmod
* Update to use debian-base:0.3.2
* Update to debian-iptables v10.1 and hyperkube-base 0.10.1
* fix an issue in NodeInfo.Clone()
* should cast va instead of pv
* Wed Aug 01 2018 jmassaguerplaAATTsuse.com- Add a conflict with kubernetes-client. Both packages provide kubectl but in kubernetes-client kubectl is a link to hyperkube, from kubernetes-common.
* Fri Jul 27 2018 opensuse-packagingAATTopensuse.org- Update to version 1.10.6:
* fix IsLikelyNotMountPoint func on Windows
* add IsLikelyNotMountPoint test on Windows
* Ensure /etc/hosts has a header always - Fix conformance test
* Fix issue #63183 that pods on different nodes mount Ceph RBD PVC stuck on ContainerCreating.
* apiextensions: fix concurrent map access copying items\' ObjectMeta in Unstructured
* Disable session affinity for internal kuberntes service
* Fix some log issues in flexvolume
* Kubernetes version v1.10.6-beta.0 openapi-spec file updates
* Add/Update CHANGELOG-1.10.md for v1.10.5.
* update cadvisor godeps to v0.29.2
* Remove item from taint manager workqueue on completion
* Pass cluster_location argument to Heapster
* Fix scheduler config decoding
* update NPD version to v0.5.0 for gci
* etcd: reuse leases for keys in a time window
* Fix UnmountDevice with deleted pod.
* Fix cleanup of volume metadata json file.
* Add a GPUClusterDowngrade test.
* BUGFIX: must use ID, not name, of the node security group when adding rules to it
* In case storage class parameters are empty, create a new map for Portworx volume labels
* remove format operation in WaitForAttach
* Remove optimization from getWork in resourcequota/controller.go
* Bug fix: Should allow alias range size equals to max number of pods
* 2
* skip nic that are in failing state
* add external resource group support for azure disk
* fix comments
* specify external resource group in ResizeDisk
* fix azure disk issue for external resource group
* azure: Add validation of resourceGroup option
* Reload systemd config files before starting kubelet.
* fix smb mount security issue
* gc: remove crd and apiservice from ignored resources
* Fix RunAsGroup.
* set EnableHTTPSTrafficOnly in storageAccount creation
* Fix truncating and buffering backends integration.
* Update Calico addon yamls to make it work for both 2.x and 3.x. versions.
* A few cleanups (remove duplicated env vars & unnecessary comments) on yaml files.
* Add a helper function to customize K8s addon yamls and use it to customize Calico addons on GKE.
* Remove unnecessary spaces ahead of custom yaml.
* Fix pod worker deadlock.
* Removes defaulting of CSI fsType to ext4
* Adding generated files
* Fix NPD preload.
* Make kubelet `ReadLogs` backward compatible.
* Compare stateful set updates semantically
* Remove patch retry conflict detection
* Fix locating resporce-pool for volume provisioning
* Reverting commit #56600 as GCE PD is allocated in chunks of GiB instead of GBs
* Fixing E2E tests for disk resizing
* Return correct error type and HTTP Status code for operation errors
* extend timeout to workaround slow arm64 math
* re-reorder authorizers (RBAC before Webhook).
* Thu Jul 19 2018 jmassaguerplaAATTsuse.com- Get the commit id from the obsinfo file. This way this is automatic and we don\'t have a regression of bsc#1065972
* Mon Jul 16 2018 jmassaguerplaAATTsuse.com- initial commit in order to split kubectl package (fix bsc#1097473 and bsc#1101010 and fate#325820) add lintrc filter to avoid conflict with kubernetes-client package which is built in SLE12 but not shipped in SLE12