Kubernetes 1.11.8-beta.0 和 1.11.7 发布，容器编排工具

Kubernetes 是一个开源的、用于管理云平台中多个主机上的容器化的应用，Kubernetes 的目标是让部署容器化的应用简单并且高效，Kubernetes 提供了应用部署、规划、更新与维护的一种机制。

Kubernetes 1.11.7 更新内容如下：

• Allow for watching objects larger than 1MB given etcd accepts objects of size up to 1.5MB ( #72053 ,  @wojtek-t )

• Fix AWS NLB security group updates where valid security group ports were incorrectly removed ( #68422 ,  @kellycampbell )

• when updating a service or when node changes occur.

• kubectl: fixed an issue with "too old resource version" errors continuously appearing when calling kubectl delete ( #72825 ,  @liggitt )

• Fixes issue where subpath volume content was deleted during orphaned pod cleanup for Local volumes that are directories (and not mount points) on the root filesystem. ( #72291 ,  @msau42 )

• Fixes spurious 0-length API responses. ( #72856 ,  @liggitt )

• Do not detach volume if mount in progress ( #71145 ,  @gnufied )

• Improve efficiency of preemption logic in clusters with many pending pods. ( #72895 ,  @bsalamat )

• Fix scheduling starvation of pods in cluster with large number of unschedulable pods. ( #72619 ,  @everpeace )

• change azure disk host cache to ReadOnly by default ( #72229 ,  @andyzhangx )

• Fixes issue with cleaning up stale NFS subpath mounts ( #71804 ,  @msau42 )

• Update Cluster Autoscaler to version 1.3.5. Release notes: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.3.5 ( #72579 ,  @MaciekPytel )

• Fix kube-proxy PodSecurityPolicy binding on GCE & GKE. This was only an issue when running kube-proxy as a DaemonSet, with PodSecurityPolicy enabled. ( #72761 ,  @tallclair )

• Scheduler only activates unschedulable pods if node's scheduling related properties change. ( #71551 ,  @mlmhl )

• Fix a race condition in the scheduler preemption logic that could cause nominatedNodeName of a pod not to be considered in one or more scheduling cycles. ( #72504 ,  @bsalamat )

• fix race condition when attach azure disk in vmss ( #71992 ,  @andyzhangx )

• Fixed kubelet reporting "resource name may not be empty" when mounting a volume very quickly after unmount. ( #71074 ,  @jsafrane )

• Fix race condition introduced by graceful termination which can lead to a deadlock in kube-proxy ( #72361 ,  @lbernail )

• Fixes an issue where Portworx volumes cannot be mounted if 9001 port is already in use on the host and users remap 9001 to another port. ( #70392 ,  @harsh-px )

• kube-proxy in IPVS mode will stop initiating connections to terminating pods for services with sessionAffinity set. ( #71834 ,  @lbernail )

• Update to use go1.10.7 with fix for CVE-2018-16875 ( #72074 ,  @ixdy )

更新日志