Important: kubernetes kubeadm-ha-setup kubeadm-upgrade security update (Oracle Linux 7)

kubernetes
[1.12.10-1.0.11]
- [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads

[1.12.10-1.0.10]
- [CVE-2019-16276] Kubernetes Vulnerabilities Allow Authentication Bypass, DoS

[1.12.10-1.0.9]
- Define rolling update for flannel

[1.12.10-1.0.8]
- Modify flannel/dashboard image tags to use images that have the cve fix

[1.12.10-1.0.7]
- [CVE-2019-11253] Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack

[1.12.10-1.0.6]
- [CVE-2019-16276] bump golang to 1.12.10

[1.12.10-1.0.5]
- added THIRD_PARTY_LICENSES.txt file

[1.12.10-1.0.4]
- fix for CVE-2019-11251

[1.12.10-1.0.3]
- replacing references to kubernetes-dashboard-amd64 with kubernetes-dashboard

[1.12.10-1.0.2]
- Added Oracle specific build files for Kubernetes

kubeadm-ha-setup
[0.0.2-1.0.69]
- [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads

[0.0.2-1.0.68]
- Pull image prior to update and fix image repo for addons

[0.0.2-1.0.67]
- Bump golang build version

[0.0.2-1.0.66]
- [CVE-2019-16276] Support patching flannel/dashboard on upgrade

[0.0.2-1.0.65]
- [CVE 2019-16276] Support deploygin 1.12 and 1.13 with CVE patched

[0.0.2-1.0.64]
- [CVE-2019-16276] Support patching etcd on upgrade

[0.0.2-1.0.63]
- [CVE-2019-16276] while upgrading a cluster patch the coredns image

[0.0.2-1.0.62]
- CVE-2019-16276 : Update flannel , etcd coredns and dashboard images.

[0.0.2-1.0.61]
- Added Support for 1.13.11 and removed support for 1.13.10

[0.0.2-1.0.59]
- Remove Support for 1.14.6

[0.0.2-1.0.58]
- Replacing reference to kubernetes-dashboard-amd64 with kubernetes-dashboard

[0.0.2-1.0.57]
- Support 1.12.10

[0.0.2-1.0.56]
- Support 1.14.6

[0.0.2-1.0.55]
- Support 1.13.10

[0.0.2-1.0.54]
- Support 1.13.9

[0.0.2-1.0.53]
- Mark 1.14 as a developer build

[0.0.2-1.0.52]
- Restore fails when trying to restore after a failed update

[0.0.2-1.0.51]
- Minor version update doesn't update kubeadm on all master nodes

[0.0.2-1.0.50]
- Make k8s 1.14 specific changes

[0.0.2-1.0.49]
- Remove 1.10 and 1.11 version since they are incompatable

[0.0.2-1.0.48]
- Support deploying 5 master nodes

[0.0.2-1.0.47]
- Only update/upgrade the controlplane images if they changed in the Release object

[0.0.2-1.0.46]
- Fix version comparison function during upgrade

[0.0.2-1.0.45]
- Fix rpm version compare
- Allow kubernetes updates for patch version

[0.0.2-1.0.44]
- Allow assume yes to deploy a single master without the prompt

[0.0.2-1.0.43]
- Post cluster creation should check only for master nodes

[0.0.2-1.0.42]
- Update keepalived check api server to ensure we are grepping the correct IP

[0.0.2-1.0.41]
- Make ha.yaml an optional argument in the cli for single master cluster

[0.0.2-1.0.40]
- Add pod cidr default and refactor ha.yaml example

[0.0.2-1.0.39]
- Remove features: feature1_13=true from config

[0.0.2-1.0.38]
- Default kubernetes version to latest production version

[0.0.2-1.0.37]
- Fix keepalived issue when firewalld is disable

[0.0.2-1.0.36]
- Default kubernetes version to latest production version

[0.0.2-1.0.35]
- Add addons template and config files

[0.0.2-1.0.34]
- Enhance tests

[0.0.2-1.0.33]
- fix regression of previous firewall fix

[0.0.2-1.0.32]
- Fix firewall issues during restore

[0.0.2-1.0.31]
- Fix firewall issues

[0.0.2-1.0.30]
- Enhance output while validating the system

[0.0.2-1.0.29]
- Fix DR in 1.13

[0.0.2-1.0.28]
- Fix apiserver_cert_extra_sans for 1.13 clusters

[0.0.2-1.0.27]
- Fix update/upgrade output message

[0.0.2-1.0.26]
- Fix major upgrade

[0.0.2-1.0.25]
- Add registry migration

[0.0.2-1.0.24]
- Return stdout and stderr from Run function to allow the caller decided what to display

[0.0.2-1.0.23]
- Proxy variable is inherited in remote master

[0.0.2-1.0.22]
- The Trim function doesn't work for replacing strings
- Upgrade should use the pause container instead of pause-amd64

[0.0.2-1.0.21]
- Include 1.12.7 image and update 1.13 and metric servers info

[0.0.2-1.0.20]
- Support new registries and allow for password to have a colon

[0.0.2-1.0.19]
- --force flag for full restore

[0.0.2-1.0.18]
- Change update help message

[0.0.2-1.0.17]
- Change update message, add ha install command and ask for confirmation

[0.0.2-1.0.16]
- Change upgrade command name to update

[0.0.2-1.0.15]
- Fix upgrade for point release

[0.0.2-1.0.14]
- Move file.go to config.go

[0.0.2-1.0.13]
- Feature Flag 1.13 code

[0.0.2-1.0.12]
- Add support of upgrading HA master nodes

[0.0.2-1.0.11]
- Support deploying Kubernetes version 1.13.2

[0.0.2-1.0.10]
- CVE-2018-16875

[0.0.2-1.0.9]
- Add timeout to Run() (gitlab issues #3)
- Rename path to linux-git.us.oracle.com/Kubernetes

[0.0.2-1.0.8]
- Remove releases.json dependency

[0.0.2-1.0.7]
- Pin dependent kubernetes packages

[0.0.2-1.0.6]
- Update deps for kube 1.13

[0.0.2-1.0.5]
- Add test runner in makefile and execute it in CI/CD

[0.0.2-1.0.4]
- Fix backup path issue again found by Tom Cocozzello

[0.0.2-1.0.3]
- [Orabug 29152516] Backup and restore /var/lib/kubelet/kubeadm-flags.env too
- Cleanup kube-ipvs0 interface too
- More code cleanup
- Use map for checking kernel module
- Fix client joining errors
- Addressing Tom Cocozzello's review
- Enabling IPVS in HA

[0.0.2-1.0.2]
- Update dashboard image (CVE-2018-18264)

[0.0.2-1.0.1]
- Allow Oracle certified addons to be installed via cli

[0.0.1-2.0.9]
- Use 'dep ensure' to clean up symlinks in the vendor directory

[0.0.1-2.0.5]
- Clean up un-used build scripts

[0.0.1-2.0.4]
- Add Makefile for building and testing code

[0.0.1-2.0.3]
- Fix file restore issue when it contains './'

[0.0.1-2.0.2]
- Resolve the full filepath when '.' is passed in
- Addressing review by Muminul Islam

[0.0.1-2.0.1]
- Remove 'firewall-cmd --reload' as it can hangs OCI
- Fix some errors reported by Shubham
- Error out if options is not currently supported in HandleEtcdOps
- Fix down issue
- Dump log output to /var/log/kubeadm-