12.3.1

Increase number of watches

Temporal workaround for https://github.com/kubernetes/kubernetes/issues/69015

(cherry picked from commit b6d1341d7b4e97bca965a88d09921ba3bde99a68)

12.3.0

• default kubernetes 1.12/clean feature gates [c99b027]
• kubelet disable anon auth [f81f1e0]
• disable kubelet read-only port [9265769]

12.2.1

sys: Retry certificate fetching (#57)

* sys: Retry certificate fetching

* sys: cert-fetch wait for network

12.2.0

Update default hyperkube image version to 1.11.5

12.1.1

sys: etcd 3.3.10

https://github.com/etcd-io/etcd/releases/tag/v3.3.10

12.1.0

Enable advanced auditing (#55)

12.0.0

Kubelet certs (#54)

Differences in kubelet config:

```
+      "x509": {
+        "clientCAFile": "/etc/kubernetes/ssl/ca.pem"
+      },
```

and

```
+    "featureGates": {
+      "AdvancedAuditing": false,
+      "ExpandPersistentVolumes": true,
+      "PodShareProcessNamespace": true
+    },
```

And the only warning we get from kubelet logs is:

```
Oct 03 14:57:41 ip-10-66-23-108 docker[1252]: Flag --allow-privileged has been deprecated, will be removed in a future version
```

which we can't do anything about currently: https://trello.com/c/LtXvyQuZ/486-remove-allow-privileged-from-kubelet

11.2.0

• Add flag to explicitly set feature gates

11.1.2 - etcd cert reload

Etcd cert reload (#49)

* sys: no longer need to restart svc, reloads certs on req

https://github.com/coreos/etcd/commit/4e21f87e3d014d606bb3ba2a89731a7d24806611

11.1.1

Add support for custom configuration to be passed to kube-controller-manager