This release note is WIP.

Changelog since v0.9.8

Please see our roadmap for details on upcoming releases.

Component versions

Kubernetes: v1.7.8
Etcd: v3.2.9
Calico: v2.6.1
Helm/Tiller: v2.6.2

#885: Dedicated worker CA and Etcd trusted CA bundle(Thanks to @redbaron)
#889: Enable RBAC by default
#938: Handle worker-ca correctly when TLSBootstarpping is enabled(Thanks to @redbaron)
#945: Add initial support for NLB API endpoints(Thanks to @danielfm)
#951: Fixes #946 Support drop-ins in customSystemdUnits(Thanks to @jeremyd)
#963: Support deployment to AWS GovCloud(Thanks to @amdonov)
#964: Add in missing ASG IAM permission for experimental.nodeDrainer.(Thanks to @tyrannasaurusbanks)
#966: Convert kube-proxy to a DaemonSet(Thanks to @danielfm)
#969: Remove bashisms from kube autosaver, makes it work with posix SH(Thanks to @redbaron)
#971: Kubernetes Dashboard 1.7 with RBAC and authentication.(Thanks to @camilb)
#975: Rollback to 1.7.7 hyperkube image, as 1.7.8 is actually 1.9.0 alpha(Thanks to @redbaron)

#882: Do not encrypt certificate files, dont' load fingerprints if no raw file available(Thanks to @redbaron)
#904: Fix too permissive IAM policy for CA associated to controller nodes
#905: Fix the scheduling and permissions issue of CA
#916: Bump default k8s to 1.7.5(Thanks to @c-knowles)
#924: Remove experimental.plugins.rbac from cluster.yaml
#927: Drop the deprecated key workerCount in cluster.yaml
#934: Remove mapPublicIPs and routeTableId in the top-level of cluster.yaml
#936: Remove createRecordSet to help newcomers bring up their first clusters
#944: Bump default k8s to 1.7.6(Thanks to @Vrtak-CZ)
#959: Update kubedns(Thanks to @danielfm)
#962: Update various components version.(Thanks to @camilb)
#981: Bump the default Kubernetes version to v1.7.8-coreos.1

#877: Fix the existing TLS CA support
#888: Fix a potential YAML parsing error in cluster.yaml
#894: Fix test timeouts in CI
#895: Fix the hard-coded duration until an etcd cert generated by kube-aws expires
#902: Add spot fleet support for the awsNodeLabels feature
#904: Fix too permissive IAM policy for CA associated to controller nodes
#905: Fix the scheduling and permissions issue of CA
#926: Emit errors when unknown keys are specified under worker.nodePools[]
#943: Fixes #942 etcdadm cannot find ca.pem(Thanks to @jeremyd)
#951: Fixes #946 Support drop-ins in customSystemdUnits(Thanks to @jeremyd)