v1.15.6

• Kubernetes: 1.15.6
• podman: 1.6.3
• buildah: 1.11.6
• CNI/plugins: 0.8.3
• Weave Net: 2.6.0
• Configure the Aggregation Layer
• skopeo: 0.1.40

v1.16.2: kubernetes 1.16

• Kubernetes: 1.16.2
• FeatureGates: VolumeSubpathEnvExpansion is beta now and enabled by default
• Kubelet: --cni-cache-dir option, which defaults to /var/lib/cni/cache
• podman: 1.6.2

v1.15.5: long time no CVE

Kubernetes CVE fixes:

• CVE-2019-11253

Cookbook improvements:

• Kubernetes: 1.15.5
• podman: 1.6.0
• buildah: 1.11.3
• CoreDNS: 1.6.4

v1.15.4

• Kubernetes: 1.15.4
• cri-o: 1.15.2
• buildah: 1.11.2
• CoreDNS: 1.6.3

v1.15.3: CVE, CVE, CVE again

Kubernetes CVE fixes:

• CVE-2019-9512
• CVE-2019-9514

Cookbook improvements:

• Kubernetes: 1.15.3
• podman: 1.5.1
• Etcd: 3.3.15
• CoreDNS: 1.6.2
• CNI/plugins: 0.8.2
• buildah: 1.10.1

v1.15.2: CVE, CVE, CVE!

Kubernetes CVE fixes:

• Fix CVE-2019-11249: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal
• Fix CVE-2019-11247: API server allows access to custom resources via wrong scope

Cookbook improvements:

• Kubernetes: 1.15.2
• Addon manager: 9.0.2
• CoreDNS: 1.6.1
• skopeo: 0.1.39
• buildah: 1.10.0

v1.15.1

• Kubernetes: 1.15.1
• CoreDNS: 1.6.0
• DockerCE: pin cli version with daemon version
• Haproxy: 2.0
• Docker CE: 18.09.8
• podman: 1.4.4
• buildah: 1.9.2
• cri-o: 1.15.0

v1.15.0: kubernetes-1.15!

• Kubernetes: 1.15.0
• kubelet: remove flag --allow_privileged
• Docker CE: 18.09.7
• cri-o: 1.14.5
• CoreDNS: 1.5.1
• skopeo: 0.1.37
• podman: 1.4.3
• buildah: 1.8.4

v1.14.3

• runc: 1.0-rc8
• Kubernetes: 1.14.3
• CNI/plugins: 0.8.1
• cri-o: 1.14.2
• podman: 1.3.2
• buildah: 1.8.3

v1.14.2: make cookbook bionic compatible!

• Etcd: 3.3.13
• Kubernetes: 1.14.2
• buildah: 1.8.2
• podman: 1.3.1
• skopeo: 0.1.36
• cri-o: 1.14.1
• Weave Net: 2.5.2
• KubeProxy: make bionic compatible
• CNI: binaries cnitool and noop are not needed on production hosts
• Docker CE: 18.09.6
• docker version: dynamic codename
• make dns bionic compatible
• docker: remove ancient jpetazzo/nsenter
• CNI/plugins: 0.8.0