v1.21.0

v1.21.0

• Kubernetes v1.21.0
  • Enable tokencleaner controller (#969)
  • Enable kube-scheduler and kube-controller-manager separate authn/z kubeconfig
  • Change CNI config location from /etc/kubernetes/cni/net.d to /etc/cni/net.d (#965)
  • Change kube-controller-manager to mount /var/lib/kubelet/volumeplugins directly
  • Remove unused cloud-provider flags
• Update Fedora CoreOS Config version from v1.1.0 to v1.2.0 (#970)
  • Require poseidon/ct Terraform provider v0.8+ (notes)
  • Require any snippets customizations to update to v1.2.0

AWS

• Allow setting custom initial node taints on worker pools (#968)
  • Add node_taints variable to internal workers pool module to set initial node taints
  • Add daemonset_tolerations so kube-system DaemonSets can tolerate custom taints

Azure

• Allow setting custom initial node taints on worker pools (#968)
  • Add node_taints variable to internal workers pool module to set initial node taints
  • Add daemonset_tolerations so kube-system DaemonSets can tolerate custom taints
• Remove deprecated azurerm_lb_backend_address_pool field resource_group_name (#972)

Google Cloud

• Allow setting custom initial node taints on worker pools (#968)
  • Add node_taints variable to internal workers pool module to set initial node taints
  • Add daemonset_tolerations so kube-system DaemonSets can tolerate custom taints

Addons

• Update nginx-ingress from v0.44.0 to v0.45.0
• Update kube-state-metrics from v2.0.0-rc.0 to v2.0.0-rc.1
• Update Grafana from v7.4.5 to v7.5.3

v1.20.5

• Kubernetes v1.20.5
• Update etcd from v3.4.14 to v3.4.15
• Update Cilium from v1.9.4 to v1.9.5
• Update Calico from v3.17.3 to v3.18.1
• Update CoreDNS from v1.7.0 to v1.8.0
• Mark bootstrap token as sensitive in Terraform plans (#949)

Fedora CoreOS

AWS

• Set Kubelet provider-id (#951)

Flatcar Linux

AWS

• Set Kubelet provider-id (#951)
• Remove os_image option flatcar-edge (#943)

Azure

• Remove os_image option flatcar-edge (#943)

Bare-Metal

• Remove os_channel option flatcar-edge (#943)

Addons

• Update Prometheus from v2.25.0 to v2.25.2
• Update kube-state-metrics from v2.0.0-alpha.3 to v2.0.0-rc.0
  • Switch image from quay.io to k8s.gcr.io (#946)
• Update node-exporter from v1.1.1 to v1.1.2
• Update Grafana from v7.4.2 to v7.4.5

v1.20.4

• Kubernetes v1.20.4
• Update Cilium from v1.9.1 to v1.9.4
• Update Calico from v3.17.1 to v3.17.3
• Update flannel-cni from v0.4.1 to v0.4.2

Addons

• Update nginx-ingress from v0.43.0 to v0.44.0
• Update Prometheus from v2.24.0 to v2.25.0
  • Update node-exporter from v1.0.1 to v1.1.1
• Update Grafana from v7.3.7 to v7.4.2

Thank you to our Github Sponsors!

v1.20.2

Poseidon is now setup with Github Sponsors. If you use Typhoon, please consider helping to support this project's infrastructure costs if you are able. Many thanks!

• Kubernetes v1.20.2
• Support Terraform v0.13.x and v0.14.4+ (#924)

Addons

• Update nginx-ingress from v0.41.2 to v0.43.0
• Update Prometheus from v2.23.0 to v2.24.0
• Update Grafana from v7.3.6 to v7.3.7

v1.20.1

• Kubernetes v1.20.1

Fedora CoreOS

• Fedora CoreOS 33 has stronger crypto defaults (notice, #915)
  • Use a non-RSA SSH key or add the workaround provided in upstream Fedora docs as a snippet (action required)

Addons

• Update Grafana from v7.3.5 to v7.3.6

v1.20.0

• Kubernetes v1.20.0
• Add service account token volume projection (#897)
• Scope kube-scheduler and kube-controller-manager permissions (#898)
• Update etcd from v3.4.12 to v3.4.14
• Update Calico from v3.16.5 to v3.17.1 (#890)
  • Enable Calico MTU auto-detection
  • Remove workaround to Calico cni-plugin issue
• Update Cilium from v1.9.0 to v1.9.1
• Add Terraform input variable validations (#880)
  • Require Terraform v0.13+ (migration guide)
• Set Terraform output sensitive to suppress console display for some cases (#885)
• Relax poseidon/ct version constraint to v0.6+ (#893)
  • Allow upgrading poseidon/ct to v0.7.x (warn)

AWS

• Enable Network Load Balancer (NLB) dualstack (#883)
  • NLB subnets assigned both IPv4 and IPv6 addresses
  • NLB DNS name has both A and AAAA records
  • NLB to target node traffic is IPv4 (no change)

Bare-Metal

• Remove iSCSI /etc/iscsi and iscsadm mounts from Kubelet (#912)

Fedora CoreOS

AWS

• Fix AMI query for which could fail in some regions (#887)

Bare-Metal

• Promote Fedora CoreOS to stable
• Use initramfs and rootfs images as initrd's (#889)
  • Requires Fedora CoreOS version with rootfs images (e.g. 32.20200923.3.0+)

Addons

• Update Prometheus from v2.22.2 to v2.23.0
• Update kube-state-metrics from v2.0.0-alpha.2 to v2.0.0-alpha.3
• Update Grafana from v7.3.2 to v7.3.5

v1.19.4

• Kubernetes v1.19.4
• Update Cilium from v1.8.4 to v1.9.0
• Update Calico from v3.16.3 to v3.16.5
• Remove asset_dir variable (defaulted off in v1.17.0, deprecated in v1.18.0)

Fedora CoreOS

• Improve etcd-member.service systemd unit (#868)
  • Allow a snippet with a systemd dropin to set an alternate image (e.g. mirror)
• Fix local node delete oneshot on node shutdown (#856)

AWS

• Add experimental Fedora CoreOS arm64 support (docs, #875)
  • Allow arm64 full-cluster or mixed/hybrid cluster with worker pools
  • Add arch variable to cluster module
  • Add daemonset_tolerations variable to cluster module
  • Add node_taints variable to workers module
  • Requires flannel CNI provider and use of experimental AMI (see docs)

Flatcar Linux

• Rename container-linux modules to flatcar-linux (#858) (action required)
• Change on-host system containers from rkt to docker
  • Change etcd-member.service container runnner from rkt to docker (#867)
  • Change kubelet.service container runner from rkt-fly to docker (#855)
  • Change bootstrap.service container runner from rkt to docker (#873)
  • Change delete-node.service to use docker and an inline ExecStart (#855)
• Fix local node delete oneshot on node shutdown (#855)
• Remove CoreOS Container Linux Matchbox profiles (#859)

Addons

• Update nginx-ingress from v0.40.2 to v0.41.2
• Update Prometheus from v2.22.0 to v2.22.1
• Update kube-state-metrics from v2.0.0-alpha.1 to v2.0.0-alpha.2
• Update Grafana from v7.2.1 to v7.3.2

v1.19.3

• Kubernetes v1.19.3
• Update Cilium from v1.8.3 to v1.8.4
• Update Calico from v1.15.3 to v1.16.3 (#851)
• Update flannel from v0.13.0-rc2 to v0.13.0 (#219)

Flatcar Linux

• Remove references to CoreOS Container Linux (#839)
  • Fix error querying for coreos AMI on AWS (#838)

Addons

• Update nginx-ingress from v0.35.0 to v0.40.2
• Update Grafana from v7.1.5 to v7.2.1
• Update Prometheus from v2.21.0 to v2.22.0
  • Update kube-state-metrics from v1.9.7 to v2.0.0-alpha.1

v1.19.2

• Kubernetes v1.19.2
• Update flannel from v0.12.0 to v0.13.0-rc2 (#216)
  • Update flannel-cni from v0.4.0 to v0.4.1
  • Update CNI plugins from v0.8.6 to v0.8.7

Addons

• Refresh Prometheus rules/alerts and Grafana dashboards (#831)
• Reduce apiserver metrics cardinality for non-core APIs (#830)

v1.19.1

• Kubernetes v1.19.1
  • Change control plane seccomp annotations to GA seccompProfile (#822)
• Update Cilium from v1.8.2 to v1.8.3
  • Promote Cilium from experimental to general availability (#827)
• Update Calico from v1.15.2 to v1.15.3

Fedora CoreOS

• Update Fedora CoreOS Config version from v1.0.0 to v1.1.0
  • Require any snippets customizations to update to v1.1.0

Addons

• Update IngressClass resources to networking.k8s.io/v1 (#824)
• Update Prometheus from v2.20.0 to v2.21.0
  • Remove Kubernetes node name labelmap relabel_config from etcd, Kubelet, and CAdvisor scrape config (#828)