Kubernetes v1.3.0 发布开源容器集群管理系统

Kubernetes v1.3.0 发布了，Kubernetes 是来自 Google 云平台的开源容器集群管理系统。基于 Docker 构建一个容器的调度服务。该系统可以自动在一个容器集群中选择一个工作容器供使用。其核心概念是 Container Pod。

改进记录：

Authorization:
- Alpha RBAC authorization API group
Federation
- federation api group is now beta
- Services from all federated clusters are now registered in Cloud DNS (AWS and GCP).
Stateful Apps:
- alpha PetSets manage stateful apps
- alpha Init containers provide one-time setup for stateful containers
Updating:
- Retry Pod/RC updates in kubectl rolling-update.
- Stop ‘kubectl drain’ deleting pods with local storage.
- Add kubectl rollout status
Security/Auth
- L7 LB controller and disk attach controllers run on master, so nodes do not need those privileges.
- Setting TLS1.2 minimum
- kubectl create secret tls command
- Webhook Token Authenticator
- beta PodSecurityPolicy objects limits use of security-sensitive features by pods.
Kubectl
- Display line number on JSON errors
- Add flag -t as shorthand for –tty
Resources
- alpha: NVIDIA GPU support (#24836, @therc)
- Adding loadBalancer services and nodeports services to quota system