Add Kubernetes Dashboard warning and improve changelog

CHANGES.md

@@ -4,12 +4,21 @@ Notable changes between versions.
 
 ## Latest
 
-* Kubernetes v1.8.5
+* Kubernetes [v1.8.5](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.8.md#v185)
-* Recommend Docker 17.09 and validate against it
+* Recommend Container Linux [images](https://coreos.com/releases/) with Docker 17.09
   * Container Linux stable, beta, and alpha now provide Docker 17.09 (instead
   of 1.12). Recommend images which provide 17.09.
   * Older clusters (with CLUO addon) auto-update node's Container Linux version
   and will begin using Docker 17.09.
+* Fix race where `etcd-member.service` could fail to resolve peers ([#69](https://github.com/poseidon/typhoon/pull/69)) 
+
+#### Bare-Metal
+
+* Add kubelet `--volume-plugin-dir` flag to allow flexvolume providers ([#61](https://github.com/poseidon/typhoon/pull/61))
+
+#### Addons
+
+* Deploying the Kubernetes Dashboard is discouraged
 
 ## v1.8.4
 

docs/addons/dashboard.md

@@ -1,5 +1,8 @@
 # Kubernetes Dashboard
 
+!!! warning
+    The Kubernetes Dashboard takes [unusual approaches](https://github.com/kubernetes/dashboard/wiki/Access-control#authorization-header) to security and is often a point of security escalations. We recommend you do don't deploy it and get familiar with `kubectl`, if possible.
+
 The Kubernetes [Dashboard](https://github.com/kubernetes/dashboard) provides a web UI to manage a Kubernetes cluster for those who prefer an alternative to `kubectl`.
 
 ## Create