30 May 2018

#### Bug fixes

 - The install-cni container now maintains the original mode on certificates copied from Kubernetes secrets. [cni-plugin #532](https://github.com/projectcalico/cni-plugin/pull/532) (@caseydavenport)
 - The install-cni container now writes the calico-kubeconfig file with mode 600 by default. It can be configured by setting the KUBECONFIG_MODE option. [cni-plugin #532](https://github.com/projectcalico/cni-plugin/pull/532) (@caseydavenport)
 - The install-cni container now only writes the calico-kubeconfig file when running as a Kubernetes pod. [cni-plugin #532](https://github.com/projectcalico/cni-plugin/pull/532) (@caseydavenport)
 - Fix etcd cert file existence check in calico/cni [cni-plugin #532](https://github.com/projectcalico/cni-plugin/pull/532) (@bjhaid)
 - When run as a pod the Calico CNI plugin will be configured with the k8s CA for tls verification. [cni-plugin #532](https://github.com/projectcalico/cni-plugin/pull/532) (@tmjd)
 - The libnetwork plugin IPAM driver now allocates addresses when the docker network was created with an explicit subnet. [libnetwork-plugin #181](https://github.com/projectcalico/libnetwork-plugin/pull/181) (@jsok)
