Kubernetes v1.8.1 cut planned Wed Oct 11

[Joe Betz]

Below is a draft of the generated changelog for v1.8.1. If you submitted a cherrypick, please make sure it's listed and has an accurate release note.

If your cherrypick PR is still pending (see list below) and you want it to make v1.8.1, make sure it merges by the end of day. Tag me (@jpbetz) on the issue or on Slack if it appears to be blocked on something out of your control.

If you've already spoken to me individually about PRs that are not yet merged or listed below, don't worry, I'm tracking them.

Branch release-1.8

Documentation & Examples

Changelog since v1.8.0

Action Required

• PodSecurityPolicy: Fixes a compatibility issue that caused policies that previously allowed privileged pods to start forbidding them, due to an incorrect default value for allowPrivilegeEscalation. PodSecurityPolicy objects defined using a 1.8.0 client or server that intended to set allowPrivilegeEscalation to false must be reapplied after upgrading to 1.8.1. (#53443, @liggitt)

Other notable changes

• GCE: Fix issue deleting internal load balancers when the firewall resource may not exist. (#53450, @nicksardo)
  
• GCE: Fixes ILB sync on legacy networks and auto networks with unique subnet names (#53410, @nicksardo)
  
• Fix the bug that query Kubelet's stats summary with CRI stats enabled results in error. (#53107, @Random-Liu)
  

• kubelet: --cert-dir now defaults to /var/lib/kubelet/pki, in order to ensure bootstrapped and rotated certificates persist beyond a reboot. (#53317, @liggitt)

  • kubeadm: resolves an issue with false-positive /var/lib/kubelet is not empty message during pre-flight checks
    
• Fix permissions for Metrics Server. (#53330, @kawych)
  
• Fixes a performance issue (#51899) identified in large-scale clusters when deleting thousands of pods simultaneously across hundreds of nodes, by actively removing containers of deleted pods, rather than waiting for periodic garbage collection and batching resulting pod API deletion requests. (#53233, @dashpole)
  
• Fixes an issue with RBAC reconciliation that could cause duplicated subjects in some bootstrapped rolebindings on each restart of the API server. (#53239, @enj)
  
• Change ImageGCManage to consume ImageFS stats from StatsProvider (#53094, @yguo0905)
  
• Fixes an issue with kubectl set commands encountering conversion errors for ReplicaSet and DaemonSet objects (#53158, @liggitt)
  

• NONE (#53110, @feiskyer)

---

PENDING PRs on the release-1.8 branch

PR	Milestone	User	Date	Commit Message
#53610	v1.8	@ixdy	2017-10-09 13:28	Automated cherry pick of #52679 #53209 #53599
#53605	v1.8	@jiayingz	2017-10-09 13:05	Automated cherry pick of #53547
#53550	v1.8	@jiayingz	2017-10-09 12:02	Automated cherry pick of #53353
#53540	v1.8	@jbeda	2017-10-06 13:51	Automated cherry pick of #53512
#53449	v1.8	@sttts	2017-10-09 01:32	Automated cherry pick of #52186
#53377	v1.8	@loburm	2017-10-09 14:23	Bumped Heapster version to 1.4.3
#53338	null	@kad	2017-10-09 12:45	Don't try to migrate to new roles and rolebinding within 1.7 upgrades
#53325	v1.8	@kad	2017-10-09 12:45	Automated cherry pick of #53252
#53277	null	@rbitia	2017-10-04 09:26	Add a label which prevents a node from being added to a cloud load ba…
#53275	v1.8	@crassirostris	2017-10-09 14:23	Automated cherry pick of #53225