Project: Kubernetes (Orchestration & Management / Scheduling & Orchestration)
File: CHANGELOG-1.18.md

<!-- BEGIN MUNGE: GENERATED_TOC --> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - <!-- END MUNGE: GENERATED_TOC --> filename | sha512 hash -- | -- | 27832e96511cddd06195e60efaf67f6482c7ee676d27ac5140f6ba9811c65a660a783c1e36ebee709c4b09a2b9169ead7953a032560b9648751f3a98559d13e5 | e25b90c2c089bfa4b501cc53499a9cd176f2ea3acb8ff06f206de6072aaec24c56f51e1ff47eb4900a2437145b8b5c19faab0c7a0f5de0b92266c2af2e5c0af7 filename | sha512 hash -- | -- | 447a105276feadc6002825439d5857057ab4525fae1e91368ae40710e674f3dbc8ac850cc4c75cdf9c8411d4c6346b2d9f37706097b3b4196b94b6eb78cf7e6c | 5272d77274080782d9bebf947e2fabe99c681b4fd097e6e40ac7d7616b5ffce80a76b8f2daa7c7d501798bcfa3c8fe85ed4f31aaf17987bc8a1d25db03533bbf | 0aed488d3f702f60371769932cd67276ac47b9cf6e4d47252eb5fb810b493a2fd4248f21274c6a9b0c9b5ec1c62bf8450af8efa5162f356350fd518c0c91f081 | 59874f72e4793beffb3ae648af979975696aecc6aa25977d45ab65a34e8c57bf9efb72be0a48c7b8ae959013c8d7d7565ecf066a0fa0eb2936bbf165aac03b03 | 4d4387634050a67791e4683f505041f0b2c792a7e8679b53eae414c7175d97e624bf2f1e7470694b4e02c9886a6e3374fe8c1cd60b2ee44643420020639704a3 | 6c0746dfa4439d2f2a74bfe5f1f291ad664ee79de804bee29032723f2e9c3e0ceccb0e7a24dcd4449f1a0416cb54a95ce1c6b990e87645323e84439620064569 | afc2827d2f9f1cc0c79d5f12f371bc0d7c2d600c8ff1b1417f13b816ef861a24ba31b2c9b00745be2296760a0011d9074f4c67c995c6901377efdce66687fd40 | ace98c7050da1113ec57c55c9ce60a3e5cd7e7c7515ae621398f9f0596907c36e77fd19053671dd65f8feaf589dca722973539a7f24a2884678c4b1b0fa65b74 | dd03d983caaa64fa7ab962f58943be66912a002e37f571990afae0a2dc0595074e8146a38c93127c245de6a70b5e337c2104fd822624e54836f261cf195163be | 7290ad6384b85cf82e0821b04e6d0f577cce0acb85715e1e1a3b61c39deba1d7882c7eb7fdad2f32aa5bb5de18a44d24d4f8c492a641c8fc63a74717a1cc41fe filename | sha512 hash -- | -- | 60ee0761646af9f6d9a74c228509c43b18577be7b3b03e72d58ef2ae4078f7bdd1b39375a6e93e3ed8417fa6c2f63b42d74eeaf65588553357585166eaf9e0a6 | 67b46a6d3b5e9d50831fd50ad389ba5e307dee47550bac004dbd7a903340251283e1b85f7bc7659b276c20aa78f1c34c7f65fa7910018592d8624d87dd8bf284 | baaebd56e913ea02760e1274023e00cc86c9a96b5cf729c100848c914167cc6d2df7de10599773733435a13fe2221c87f74d62b7aae93eb72366b3b95c3f83cc | 57c9394f537f65f441b0806fbf6ae412e4a56216d883800b26fa127933576cce6a7826022382b9192afee03a31d303c528c5890b8c2d3ce9c8f05b876e604458 | ade2ff30b3f1ae9ad2f248c3b92c2fbd357d6c0494e4b3697b6e1bfa3ecd2872841fba3c1a31b05a3175e101ba10192a7ec4ac7f4b5cd70a83f338fe394a23e4 filename | sha512 hash -- | -- | 9f4d52317e8ceed178c60a75210a5a00f6548d3c6bb41e6adf2a1b0eee2944de4570be08e4da1bfb982983329bc3c1eeb4ff99dda82352cda8fcd9aeada9c70c | 6c607ef537eab72a3e74c7f42a0b478ecc76a3735c52fa05bb420a004bc9e6f9acafb6483aba98f210cbd0031551bc6b81a55bc14d00ddfd0c383f3241abd9fa | 43445cefc378acc9fbbabf1347612288e0d7454003245c3bc08ea4c039f30fd6b6bba1c34c37a7a4f28f0090fd13c8e3aacf6ace17d804a721ebd12a3dbdd281 | fbdf4114733b09f6068cd6e435d83bdf16b500a99c59bf4a00025f8178ac758dbc3b6dc4b8156df8677132600e38e871d83e127cedbebfa14261241ca8730bb6 | 7c34a2e1f4cd992c35e2dd3265116a7640136b1f50b6aa30cc001c7c2cbe5194d902080fa09306cb145696869e75349cab061feb8492d90732675d8fa2dfda71 | a3a5c7b2f76aa0168b898a1635da5df1b8016968daec30b3f416f0e9da8475ccc115851bae2d64a1c26c37b162077edb46b08be3c98eb1b304cf4a4c9096d1a1 Reverted the previous fix for portforward cleanup because it introduced a kubelet regression which can lead into segmentation faults. (, ) [SIG API Machinery and Node] Nothing has changed. Nothing has changed. Nothing has changed. filename | sha512 hash -- | -- | 017e3f9def09f48756ffdd6655c94eba79941ee0e8ff3a7795ff8333d54a79a7d156a1ee895eaaa27c35fed09f9ec85b59a5b084eb7d292ca006d3bc1a8142a2 | 5387ef0f8d3e95906484d8ec388e993a013864b74a484871786b8ed21aa5e43ecbc5accca8ea95b363568551fca5df079e03f0cb6dc6d27aafb8ce968ef669cf filename | sha512 hash -- | -- | 73357e069e633cc190aeeaf75457196f9c860ba08b778bc79011ccc2f0547bbcd12aa92f37b6c071039f5898c068743c704da77a717d872fe1b790fd231b7f69 | 73becd4ad77677712d4f1244eefe4d31d098bced2d110c138de8fff15e250a32f2e2e7e09486fd968d3f51fea9ce12ba2970add586b881f7a1ce35a93e1412ec | 1ac451b90a30b9fc05e6d88d69e28fd61a0447bf7b586f20559b49f3e9fe844655ba5f9c97aeba1edf74828c2fab7f30b6a2a2bb35f12ec342007d2edf27ae6b | c930d399f96da2b8e7f5425366d5015f668d9754b889ba13beb55516a65ec05241c5a760ad3f72da0d982498d0e52d82151ca62f910b655a82aa2622a1c9d341 | 021c046e2c36194b9d9b7484e07cdd966fd4c54388c28cc86f089ddbf3dd9a1998a5f8ece19ba66b1596823f7a90dcc3b7f654627ba53c06f48a3dac5d3d1efe | 79c58be1cd5d1723495d642e10e497fcd2112abd9ef6ec435eac46adbe651dbad7b21ca6b67fdc8e43cad10ff9820128e4a17b9d37785875892dec402b8c7142 | c0011327736df2a5deeac06b9ca3c6bbbbc96f7430bde3f7617eb3b8cc3362c906e6d78d18e2fb783449f27aab1bd26b1a96ddca4b527b5268dd5cac9c886a5b | 9e62e19f99564619c94f707c79594a81bf10d652671800b36337bc424e78fd7a1c1bb222c9c9441b80450c8c79de37cf6c966e1799bb5f20f6382a3f5fa02a59 | e91f490679c0d6a2a437d69f89b3e634b618f077abca26d9d60ae0e53aecf204f907926095a1e75fb572b606469aacbeaa910ad69278d5c1ea14d52f188a286b | 0d498ac15eb54d54fefc62b24b3bd5ae6185a6e67508f1745ebdb23f378e226e343ce8d93e54c1c233ee0b00669e8309637e13c0cd222a1d9f694151c8a879e5 filename | sha512 hash -- | -- | fdec300fc91ab8f723ed5bc4ef368ecfeff12e9148513837afbcde195c951808a3dce5b9b4933dd1e6fa5a73f550a1daa45ea392afc56cb961752ec2981398bc | fea5f3bf9ed8f9c215e2abc005f1138b66d1b66aa06b9a48a5f1b7dbbe2390becac172cefb55ee9e1847e98d4bdd78815421ea928e5998f1265c1245e2eeec58 | 329703893834d55d2d9e91e769f2d3212d0551b8be95d97a843f774d49393795b0a7e30cecd3d1279f7fc88bb7ab00de8479569c6f3fe3cbe2fe11093ff3c834 | 22138d1ff9bcfda8912a5b451d66ffe1941492bca95c54cd07441fdc497855c7931cfc32c13a8d4f41e106c75d7d6fcd96aecee3139bebac7e58d4b45886e4e0 | e8d1c5530c36262a72a96cf0243311e1bc5e8e4175388ec77be5d6eaebba7643aefcd8d459dfcb1ac5d27c7904dd3ca6fe85f8796b81e940a1000d089f219eaf filename | sha512 hash -- | -- | 0e5bc9a463b51747c8c3aee220ae7f9bcf97c45fb14c192d46aeb64d7f3b24d5841b2a084cffac65d628ddada00b6ab8d115a62999f92e07c684d7eb491e32f4 | 51ab0435d8f2ef28483db32567194a1503207030d7b8162c04f9984c85e08ba0734201cf84841c8d6e8188599f56b14f4ab24e53e38cf1e405a180b99ebea279 | c405b61e79ae391bbb7c11fbfdfc4ecd66b713ea6fed182ce96453b8663bcf2a768cee6cba49898902683c0f7d73f137a799b946a1a86ade1c81112f87a68267 | ab530723991f84541db918b18a4d327f2b288f2e013e418bd9b4040c554512629b2daa76cb0ae6a328d68c1f29c0b8469ea4a181de6fa16f34ae9550cf67c997 | a3b42d1048b38e9b46288d1085e09878d0f54e0cee8f183dc0e86493dcec061f94624615ef787479e5b02d67bfcfcd5fc6d8b4a6aff5a5e8c6e508e126ee7f87 | 665cf1bad93ebb749a47aee162f3c76b5168ca09b30b9c610274795d756bf6e36c0600ca51e6c343697ebf6c02e29f92c3fb5bdcfd1ef317c02be05e766b19ca We have added a new Priority & Fairness rule that exempts all probes (/readyz, /healthz, /livez) to prevent restarting of "healthy" kube-apiserver instance(s) by kubelet. (, ) [SIG API Machinery] EndpointSlice IP validation now matches Endpoints IP validation. (, ) [SIG Apps and Network] Fixed a bug where startupProbe stopped working after a container's first restart (, ) [SIG Node] Fixed port-forward memory leak for long-running and heavily used connections. (, ) [SIG API Machinery and Node] Kubelet: improve the performance when waiting for a synchronization of the node list with the kube-apiserver (, ) [SIG Node] Nothing has changed. sigs.k8s.io/structured-merge-diff/v3: v3.0.0 v3.0.1 Nothing has

filename | sha512 hash -- | -- | 36e254401fae0ddcf05aa57a76a8ea9772f6a61492a898af48c3689132edf77bd2f551b7c93043ff78f48d5c5543b0957c8768db2422347fea1d4033f3337b7d | 67529f55775315fa3833af881327f719322e4922cb04707a28fc799b23bd70b2e543861732ef09356d481b9f47e59b7b94050c838629440dc337230780f53d4b filename | sha512 hash -- | -- | 5c28609f86a6715bd2561b2015188ae829a7a9423a5ecf22d4336d17ff333269438fc1d194f61346ce98710cc02f0e9060cabeceff17ff219fb840470732e77a | 18ad76c92e7d9b8180622615965bbafe84ef04d56eef1d5e41a5e00ef92bdc309486ea954e9a38bc0c91c4e0449c46c6c95a79f0a9b8c96d665ea355e1e2e747 | bc04952b308f604018c655557e9d69ce03a36e15c6677b56079eb032d6ddfbe74514ab9c69b42f12e59c2e9df582382b1de326ed6dad2cf0aeb7ccfd9e9b62b6 | 5be25836a0d4ce7a1d4e01a1b08235bf1854e543860997c120cce8200c9a63a4f41a60f5edc2a9024494e2cc9444190c568f1305ce9a380daaa16a5ffcaf0ad0 | ab86ac1769abfdf8200a5503ea27c0b84c3f76734171a4829a90e36b1a3075634edd763b7e3fb89a70fd8dc4208fa1dc2ae4f69fbc30a8ac60ccc123029b4de2 | d2f902af195d29cc9cc7c10ebc5cfd02c1ff74ca6437da737e831e0fe8560aa4a466b2c4931e341275e526b0a67ced1d7ab63052293d38a2d134cacf2c61d7f5 | 3db21a0cb0dbe742184b580adf8ed91e5375b49a054e13656272e47290f284ba0add502ea0f373d07eb762bc1009e804fb0b11b479ef62a6980b243f19bb5db1 | c363266d6ffeea25839ffdba6d550bc16262c3c4f6b218d8ba21feb5b9f0cebf9644d5e3fbf8ddfa3324fe1a01a3791966ae777ab83a9d398f4c613fbe0fb431 | 47928786033666d5476fa39d914c2dd8a8ec73e6046a84675ac04ec5969913d714cb4eebbf1530aac689a16610ca6d476440115f427274a3a3c7a4efdefc7e8a | 5d859ccac89951d2b25b32f211a59524f71340a17ef2895892238e568690634b661c541af694bc9db883e7d577328bb70ea8fffc8dace7fc5850ade11f00bb18 filename | sha512 hash -- | -- | 3ea7c124dace05fcebe12f0998183199cf5288163407fd764606888a0851bcdc5afd7dd1dff518363f1bdf0f017f8d0e97e473ebf0a17a5e92ccf5e4f4d94e3a | e63d9298f3ff34b7c7dbd29153398eb4658108a6993637f06497a256e695a61a659f2a01a1520a570cdba9ba381699a1f6b4852921c3f003e110f42bca44f5f4 | a5a3d967e4fd85163514ab291ce6b4143a09aa0a673bcd1aa6d9132cc937c75347396376d22daa32429f602c67a217c87607baabde4ed6b6473b6ac5e9798268 | 0ecb2aaa0aeee9f2babf077b91163083362c9a4d1e2a29d1c3b6da2dc160e33231bac6e836d2155b0b8308fbd54f9b14347a853125e23ab216e9a6f8efa5efda | 16fdf6c9c2797ce2a9e15907a9aeed46070498c1f5f2c56dd6593f860f758980b00228a045ab16a0726c2e4e2bce6b858cc254cb327c4038ab36c81c92fd2697 filename | sha512 hash -- | -- | 7ba4bf9da2274ee9cc8745a309d09652e7e721500e32d92e9e21047c264d39c1cb69c4b9f213788aba91cf4150d790f97697d117eee9ce748e3188417813d731 | a3b28d39bd282d47e7b7f91576bda2d4dc26df1b3a92e975890be0513dfdb151215324b086937150c185919f9264c02d2c1047829be22f67c4a2f6c3d40d6693 | 7944af04e1a7907953ce81ea8406bbc13ec2c41f497986f2bb2f883473c2dc3064d00fb9b180ce20f82ed559da5845383f26c8e25253ef4e59e894c6ca608c47 | 327e2e42011e6c32aec8ffad416c1166a4975141c715babe1d97c4b1103d269c69c60d1ce60459298ebfe6de51cc5281ab1e41dbf95da4f0491b35df7ea3ae41 | 6a421f85770b47fdbb1fe084617ff46b539e90290d8d567e5ebd0021a97049e0c0450b78c75a2e3df5ea7223104fb445d8b59718af12f3508af22b5fe02fa36e | e4866005bc8663e66dd3e16468ce82c2d551bfe11d401f3d71abd68e739c992381e582ce98cf416eea8f99f7a01d257b8d65fdcfad9ed952879cefc335161072 This release contains changes that address the following vulnerabilities: A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. You are only affected by this vulnerability if you run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Note: This only impacts validating admission plugins that rely on old values in certain fields, and does not impact calls from kubelets that go through the built-in NodeRestriction admission plugin. Affected Versions: kube-apiserver v1.20.0 - v1.20.5 kube-apiserver v1.19.0 - v1.19.9 kube-apiserver <= v1.18.17 Fixed Versions: kube-apiserver v1.21.0 kube-apiserver v1.20.6 kube-apiserver v1.19.10 kube-apiserver v1.18.18 This vulnerability was reported by Rogerio Bastos & Ari Lima from RedHat CVSS Rating: Medium (6.5) Fixes using server-side apply with APIService resources (, ) [SIG API Machinery, Apps, CLI and Testing] Regenerate protobuf code to fix CVE-2021-3121 (, ) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node] AWS cloudprovider will ignore provisioning load balancers if the annotation service.beta.kubernetes.io/aws-load-balancer-type is external or nlb-ip (, ) [SIG Cloud Provider] Fixed a bug where a high churn of events was causing master instability by reducing the maximum number of objects (events) attached to a single etcd lease. (, ) [SIG API Machinery and Instrumentation] Fixed a race condition on API server startup ensuring previously created webhook configurations are effective before the first write request is admitted. (, ) [SIG API Machinery] Fixes a data race issue in the priority and fairness API server filter (, ) [SIG API Machinery] HTTP/2 connection health check is enabled by default in all Kubernetes clients to fix persistently broken connections (https://github.com/kubernetes/client-go/issues/374). If needed, users can tune the feature via the HTTP2READIDLETIMEOUTSECONDS and HTTP2PINGTIMEOUTSECONDS environment variables. The feature is disabled if HTTP2READIDLETIMEOUT_SECONDS is set to 0. (, ) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node] Reverts breaking change to inline AzureFile volumes in v1.18.15-v1.18.17; referenced secrets are now correctly searched for in the same namespace as the pod as in previous releases. (, ) [SIG Cloud Provider and Storage] The maximum number of ports allowed in EndpointSlices has been increased from 100 to 20,000 (, ) [SIG Network] Nothing has changed. github.com/gogo/protobuf: github.com/kisielk/errcheck: golang.org/x/net: 13f9640 69a7880 golang.org/x/sys: fde4db3 5cba982 Nothing has changed. filename | sha512 hash -- | -- | bb0fba64db46587c549c471b80f8734b899126784a9f34669dbb585ed593155a03150dd3a6d81ca77f76cdedbbe38653e8a45c7ef115bd052f3c380e9fa30728 | 35fc1388535d9d5e4778eeaff375e1a60d9ae344a91f06106c5e342a04a814751f9f73647c5dd017589b89e5829bc4c3c2688aa520c5fe5eb3426f7eadcc890f filename | sha512 hash -- | -- | 59a76ab77cc0f068b5e52b8e091e5a3b09718d57d4c9cc7c4b2823ead618844ec49b02bca40a0a59eeb6b36e87a9e845e2bc364c393e043c340ce77995dff0d7 | cff748a737c04b75d112386acb67a47d4589785f0b95643b8e77771a163bb52f5d6c5a979ca78adbc533255a923d919fdd5e83f12705a517769c2aed677ffae7 | f013f9f307a163984f6d3806089782c6a359dfb6386d089eb5d8adb18bad81a7b7829ee0a6b005d901689fe569dc2d683485a987887964f6c778e4f33d0554ea | a9a6873bcd77c305956e17730e29ae5454b81be8238c911a5d0a3d3d4ab1a65194d3cb1b1f7c1d364fa90db306dab0cf867e891206749bff32091d789792d532 | f80d5773a0d7a8c2548d00e2e1afc359b8eaa13235d2d3b706f4a900ad9f85f63665b0390df2b953fdc151aacb3fda57f6eaae9cca0f366aa751da2469a66605 | 84418d8931c64a05bc1e14f87b15aef284127d7f5888fd0e258a1e93fdb0d149dc961edd901dbbb1e3c7c61a2d3bcabaf9144092dce9be9bc23fe051345e3ae9 | e6b1f850b7aa04026bec2fb12699200efb65b9dc8935a9ceb975e99e5b802775dd11a19127243c3d09668926614004b69a3d927dc5492cb4df90e6d7befad62c | c59ebfe82ce5e9174c0698aadcb5fa5ccd07eddc9bca6fbe9b42863730817fe14b44e754a3db398798c8656ac73ac7ecee46b14daf384b9fc8342637db7cf23f | 00023660a2fdf71770986e903ab7eeb92b6ee9a76f74e46ffe2012bcaac53f985abce126a2457c913d842a9dd1303ce4dc02c5907edd8b4b039ae26bedb5d8a6 | 61eb57ab6b3f5c73a2d4b0f5239657c3bbf11b9375b8214417cfacb012b94b139296347193846cf02cbe074bb20d87392cba5b3075f42423ec633f9792504594 filename | sha512 hash -- | -- | 2eadde763fb318a4e3786ce7e30a36a423ad2e19fdd221472e0788b562cfd9745f41d0071e4e6533bc65db062c69941b6b4fb21604cd4e8199e3f0095f6b633c | c4d8a67ae2e15242bb19e58cf08e7287e80ba4d5566340ed84e19f0e6526d22e29aa5d030666fdf8122e05f06aea94d5d13d0549e41a662ae9696857ff3253cf | 93161854604f71d46f8742bc4f99b3791827329987d251a3d2df5d84fd6d51f6355407f04e8cf7e6a52c84de69b9e8a08e1ee6eca20eb2b7e2609cda1d670492 | 24050177e19d4fc568a0f664aea31270dcc297ff7d6069642566fa2ef7b5013109d61752563f08fe07700df8d947b5ee42c17c54cba69a665d7527ba8d65d255 | e5e10913757c0a47f7ec2d49a3ac9149174e9a9d3b4c0bd4133da102f094d11df0cfc87b8f97c7ebc556621f5b339a2ddb5fcfc90e94b1a0561e34b4b29193bc filename | sha512 hash -- | -- | 425d64644aedfcd08058fc7704fc74ae90e59038798be7cf51fb5ff09d91eecf798942f9fe1346c5abfbe585a2a22b834a2a9502c3c3df4bf653f70e5ea78f41 | 37aeacdfec512bdb9b228867b0b3e2005a74a5953f9c5e01eedeaa5367e98e4a47e4cf92f1e60dce3ac20b522725b45df56c5c97260d0336d7a1e084e33305dc | 7bad714287c3fa834d190672e57add0633d36df3099040045e4c98d6b1a7382a03d96a3ad3ea0da846a75fa097b82b7b6ff9d7ec6a06196330746887a02dd02e | 81e85d9b062623bb743c49dc552e5627b344ab3a22aba140712068760228a247b18e92b3f44b61a7b6c1ac6c9e40f3f0383fa8bb60c22d79dd9d0b2bb42f5cf0 | 44021b37c10de94b4ed40cf742877063e6bce55fd79d428e6ca73793b001a37fdebed5793dc88a7fbd42b736bae9132c6e2afefb02cf0a9ad612fac4d82eac7a | fd6400a5a8cddc305b13b0fbc6e8316347d1297c24cb2b28eb5e62aab9e45ca990278c0fcb25569d091aa7fe59e9ed12dc7e050ba01be2dd8e2a4cd20c8a9f6f Fix handing special characters in the volume path on Windows (, ) [SIG Storage] Count pod overhead against an entity's ResourceQuota (, ) [SIG API Machinery and Node] EndpointSlice controller is now less likely to emit FailedToUpdateEndpointSlices events. (, ) [SIG Apps and Network] Fixing a bug where a failed node may not have the NoExecute taint set correctly (, ) [SIG Apps and Node] Kubelet now cleans up orphaned volume directories automatically (, ) [SIG Node and Storage] Resolves spurious `Failed to list v1.Secret` or `Failed to list v1.ConfigMap` messages in kubelet logs. (, ) [SIG Auth and Node] We will no longer automatically delete all data when a failure is detected during creation of the volume data file on a CSI volume. Now we will only remove the data file and volume path. (, ) [SIG Storage] Nothing has changed. Nothing has changed. Nothing has

filename | sha512 hash -- | -- | e332bf943044108bea2b08498cf5a20f07d71ad8cdfe59df03f0b4fb4a883422bd5d337180be70ce6e314ce1bf5233355357f30d4a669035a191a24305373937 | 3f47f180ad5f27827b1d821ff65b80d4920235ad02f3091fc7f8378434ef50f9b3f0def1aa3d677c78923301b376c7fb9f19dd74faecb25193276d767783e810 filename | sha512 hash -- | -- | e7475d17c3cfcdc11178060f6941aedf3f6f88a56c3e9c412adcd9422fcfbde40f54cb6ad93c4f2ae4a79d89dbe3b941b072da74a4c768aeead455375a91388d | 9070e8a26c975c41634e564597e7739fde5d550489e7432c4f90a2ebb8d31f36a4ef47ede793ad555545d952dee390cf2c651406e42d7404c3ea73a4efa36dff | 6813bb8614cbf99867c8b411bbcf608dd0b91e3baf3a419d3bed95d0bc26e676658a1777cc25e3027856ac7ffbe1044e13a27e8b550681dc7e03e15fc3ed0f44 | 29d0a6c27b2c41c104c209e93bd4b903e45d09c8c930528b1f9dcb27f78c7fd6a665dd773ddd78568e4f4256e8d7536f3cdedd55edb4c87b6c3a83782d685d1c | b7f07bc9b933abbe1cd0680c45ea06f9ad4f530855a14bb6271fc23a193cc36442933f7b4473935a73a5759fb95ec73f709c01e063253352d7ca3ef10ea7caca | 9ad241c3ca277567e1a403a65721169e0095bd35ca866a82eaccd5ddc89fb0fd9d5c839c857de6d518b261eac96e9eccbbaa0390a0c12fe771aa7efbfc63b51c | 932020c4cbb6160cac2de1c1799e1f0a362663eb93ac179d6a4f25a5a91ee382f364d21df1870a71e9c5f12db88dbbc1f1554b7606b6302ba188a412743f7f41 | 88b5343418e3689586a7c1802f88a51bad1bbb32068d349fee4b1862db9f180b7df7c24e46c1d3d3a8f80f235893dc76c2f766d8302113934bc5783fb2023745 | b5a7e5e63bfb82831107b73e73896fa88da4161dbb101c7712859acc6997b27bc97948da6c762f7b80e6a61c0432679b4766485b906c0ed9252fe518855be5d0 | a2eea07ef8ccdf20de6c69ce9babe652ba842d0984f07cb399242d45fe46d936a8fa3baf36076df19d4a8b22524020224f64a0304381d785df2b8d5a875a7526 filename | sha512 hash -- | -- | d1ad19da387ff05fde67eb5e227a6b0e3c0a059abc212d018d6ae9e3596d08a9602f5a471afbfdebad9204b09e207eb59c7dec0ff0f805a3e6ef089314c07400 | 85710005290a32712b08542753a81e8179137ce424e26a8e4e7c46532417c43731ca482bd5aee348ac39402a3323227c1a0e519998b6915a37f114cb5379a079 | e610502c45db800d4daef5279aa8571fa2f2dac2437ea059c075b0645827c01b8aefe581089aff3eaea4465b33a0d63f8b45d4fbfaba8eb404460de50b9003d9 | 9a9bda1998633c5879196e2389168c91021ec46f4ee462a2c64a4a319ea315f7b545c6623f98b12be7c559073e22c22d86a104c980fb47acf744c633cf084bcb | 2fda00e910ae2fcb40967e8ebd8c6aaa8eeaad506bc755445bc3f30b4acdb9039c0b22e9cb8c2cf995a7329b744ca12e8d1f216cb4af9aca206bf0e9eca3bea5 filename | sha512 hash -- | -- | f816429591b3eb996dba9b6bf63934815f94b61b6c2289e142fdcbd9d26a69606584da8f1137e52e57b7322f48e445d4570195f397997c478291996fb6cbab15 | 99b7f0f78e6b9156303448468fd4ba86da89cbfa12e4b19edd087d70ade5c56a73b52eae4492c91822a31b01b1e280807916474792b47e62b53d9fa48494027e | 90c91ea55655bc0fecbd6c04fc10a3ed49172e507f0f9d7b6a27d0657d57cdd3aea26417bdbce80ae1e4c4fe15ced159d474a66779d9c6fa3a70448df32ef536 | e675b40c87a1c8f507d59bdd002f8db4a1b939828d552bbed796c2e6031b29b171e02fa4ff556d96eba215441ec5487e97e48ec3d311e89a1676f8abf9f26b3b | c7e14cc886131f207b7ab8c167e7571ad45cbbbe3310a3dbeb1b907d1e41a00f6b193508ccf608f8fc0d1f9ba6d0876f45b8cb5269be6b55ec13a2d71662027c | 9722b61d98bee7680e1ca17be37e68a37a3bc3bfd9f1f55088efa2001e39040b704c13238d0c870b88b90b21d7982e0fedecd1b8c3a916616aa6081980a917e8 Avoid marking node as Ready until node has synced with API servers at least once (, ) [SIG Node] Cleanup subnet in frontend IP configs to prevent huge subnet request bodies in some scenarios. (, ) [SIG Cloud Provider] Fix CSI-migrated inline EBS volumes failing to mount if their volumeID is prefixed by aws:// (, ) [SIG Storage] Fix azure file migration issue (, ) [SIG Auth, Cloud Provider and Storage] Fix to recover CSI volumes from certain dangling attachments (, ) [SIG Apps and Storage] Fixed a bug where aggregatorunavailableapiservice metrics were reported for deleted apiservices. (, ) [SIG API Machinery and Instrumentation] Fixed provisioning of Cinder volumes migrated to CSI when StorageClass with AllowedTopologies was used. (, ) [SIG Storage] Fixes a panic in the disruption budget controller for PDB objects with invalid selectors (, ) [SIG Apps] Kubeadm: get k8s CI version markers from k8s infra bucket (, ) [SIG Cluster Lifecycle and Release] Kubelet should ignore cgroup driver check on Windows node. (, ) [SIG Node] TerminationGracePeriodSeconds from pod spec is respected for the mirror pod Static pods will be deleted gracefully (, ) [SIG Node and Testing] Truncates a message if it hits the NoteLengthLimit when the scheduler records an event for the pod that indicates the pod has failed to schedule. (, ) [SIG Scheduling] Warning about using a deprecated volume plugin is logged only once. (, ) [SIG Storage] Kubeadm: change the default image repository for CI images from 'gcr.io/kubernetes-ci-images' to 'gcr.io/k8s-staging-ci-images' (, ) [SIG Cluster Lifecycle] Nothing has changed. Nothing has changed. Nothing has changed. filename | sha512 hash -- | -- | b4cc40d35873704332a2076f8f52bf3724146d71faa0a699e0154d9e41ece441160d080e8244063e9c2fd804d7e00ba7925c13ec0cf1b6ffe0fc2fe83ec46b4e | 22d1e30771afec60f6b96790e685407d854dd7ed46399057e4cc4dc2c20c897aff35c00d4aedc82a9e86f02aa8607c0966bf96745b060b20772079133b6af8af filename | sha512 hash -- | -- | 3b50f0bcc4673c98a2b8b636665633191825b477dd254f2eb6274aeb44eaefa6645461a3c1928574dabad49eff3eba9b4ead5a92e81ee969e0a36d5f3d92f8bb | 95d68f85cb202627421810196fe62f59ce2530077e1ba4acae975cf089b283d9df90535a6304c4035f5734b210c0a8a9e7607a77a06f5098077c141fc5291f78 | 507009680f1d6fc0f87ffe88020a4e00e90e3b98b01ca771f336ee81af26b35ced3c99702a900815537351eb6fdc66e8c5b2c19d9e95fba1d50ecdbb2ae67012 | 76fef1f61703f19f95bc14508b86b039a695226e637224588fb99398b52c15de20d898fe25644bb5e4019ab488dd8b51c3bf5894c6b2e2ebc5aef08daa65a9cc | 49d2a44fd02a202159618fb199495f24e5d6a999b4d1812c0b524db827cc41d739c3c9cb558955846ca4a4237082d4ef1d58ce620d67dcf6206527f3406cafd3 | 2791b3ff81727178a1d8ae14430f81d48aa1fe9c2fed52d6a4067cfae919df6d46a463ac2c834bd713e0ba00351bff31e03d0b8deef0a2645e5326ab609d380f | ebeca3ad6e87cbb2be8a8f3a40a46eeb5a15977e815553ae11be58166378aa00c6625455faf2de545463e65f6ba4825448525628e2d58ad4589528befc09f991 | 729cccf3981cab87a66dacfd97b2ae52b712bbe9ebd85cf2ce93b2f0975603bfa9699a0a467a8401dfadf961d388bfffc03d8dec9958d0edf87a5ef8fb519e03 | 3b3c65e04feed754c556e5d29518ef4fe51bd2eb678255ef720090332fbcb0f9516b7d31e111473fa5c4922efd02a33d59d0ed57f0718646231849795afdb027 | 6f17654031abfdb8ab57c532290fe2264912cbc4880aa1ee9c501815acb1154712e2bb2d0002c5087a0d729299657645205aea10b27503dfbe4148b7c62d5fca filename | sha512 hash -- | -- | 43ecb31c1e8a7faca370f1a37c63ec57532274c9ffa01f2c85a0147e411ac5967aef83343a06fcd3e823db4859e1c66e6f0c125c85dc6dc85eaf1b1fa3deed3d | 4070b0cee6c49c580dc26f2cfd2ea639fd442293bc94b7eb7856cda122a95b702286326531d61f3b9e45ae51240bb4f98c1cebfd1436d607c86718ff3a7e4ba2 | 8773d5f764b8ec840166709f96a1cfe06f6f24ff6fe63dcd6ac0954ca43476b88515893a6d849ac0ec9f4900b1dbd41db19cee37788cd59da7fc972846713ade | 1665a60f6b559661cd96aa8938285ccf685ead86853716ee0112c4f5eca0cb9400512954f49959ef9752d9f5d63a521f6de759d6aabd21ba986ab46e36b1406d | 9f6c4d759cdd0ee6c6da7c721e888b73e8a3ac44556362d3e33aefda78445631c8b485f0696a5efc4056c5f82c2419612ed36d6f6fadaa10b1fb3dbe9e5996dd filename | sha512 hash -- | -- | 2b2a97ec3dc49eb6a8612126919de7137dfa790a2d59587a108114ec5944dfdd6b461228c89661443f8103787d624b9c88c4c42075369f6e14d787fc761ee1eb | c7a44673e0d4385362f4c9c6877c18fff5d0f71d0ee8170fcdbc084b613c3fad8a84c109c0b2ae64fc2278de58fb162bb196be3fd8fcc006b529c7938b1078cd | e5f09372d232df4fea344550381a582d6cbb50d477c2561469f474485576e382cb43c4809be8a84c6b0f3d0b1084dc963967540249ea7d18d17878575455ce09 | 91231ec9072b7a45971f37cfe393767007b06cdc2b246c5328fed831bc41d078fdabaedb5e4836c83444868158a1ff475b2144fb905e5d01655ebe422bba426d | 3e9fae4d5fef90e0f5881c86302f922dd5999629fda0894f70060c2225d013cbe36e436b76a8f3d0be2154d665fe77013cac245b3e22208d40e4c354f8a822f0 | 2f0951f557884d6a37923b628b1971d299dd3276449adfbf6732931e1a1a51dd39af7a3618b482cc7c0878f0a6ee67c257960554163c1cf2b291fdc0b1264f7a Fix Azure file share not deleted issue when the namespace is deleted (, ) [SIG Cloud Provider and Storage] Fix counting error in service/nodeport/loadbalancer quota check (, ) [SIG API Machinery and Network] Fix: azure file latency issue for metadata-heavy workloads (, ) [SIG Cloud Provider and Storage] Fixed bug in CPUManager with race on container map access (, ) [SIG Node] GCE Internal LoadBalancer sync loop will now release the ILB IP address upon sync failure. An error in ILB forwarding rule creation will no longer leak IP addresses. (, ) [SIG Cloud Provider and Network] Kubeadm: avoid detection of the container runtime for commands that do not need it (, ) [SIG Cluster Lifecycle] Nothing has changed. Nothing has changed. Nothing has

filename | sha512 hash -- | -- | 2be5783e92b2e7d361d90bf28c6753bab7939e73cb06712559a9c1e5702acd57d2a4a86e39e02a1c764cef5a3e254b7e892fb74bd41ffdf2d8ad82ac772870fb | f498f9a7dfd40f41707880c070024082acf2417c333d989cfd4694e4b46891cb4bb051467591c8d3cc3cabfb31ffc9ee114a3ef439e8f5b223bd8d5fe46b574a filename | sha512 hash -- | -- | eba82b1fab3f15b451efdc3ba2d2b0bdf8c30a86610a79c255a56f9b8fe00baa2d0ace3b6f7f1ee3849f9191e54b7cc9e8bd083477b4fd10cc3c2f00275fb3e3 | cf2ff104e67b4261c223ce9b3ad983aa51577470a103a626249b3b5aa3001add0899c829c852d2cc1dad10c4f09b53b6463646f090daef592e82d35a234d350d | fb737061bc4e9792962ea0cf0ea2b58ee14cf42a8f1e7d60a49f81935964599090d745652dee32aeb4bfce32bcf34a480f486766288c44e2200665feae86b4cb | fd6b2ef4dda119ff1341f297b0628edb49c834f49c3c636af89ed7b25863e3b86b58d0cb7da439738fc1544cb580e2d49d97b0ca079f11dcd358f243d43a161e | c34a29db961c3f66c92e558c8b1c0d953e7e6b3854464aca3d2ba4817b76bac92660a9535fe08ff1480e5b22620afd1acf05c1d843c208b5d3200d3926acb34b | 407d2549c60ef9ccb1ffaa66a9ea0d117933d7fc65da37df25d1336a727dccc6d84708399565bf692278974d19984532a0f498fdaec24976e46347f146ceb19c | 711e6754b8b7e349c0766fc044283e2067556e0c6e33cc10891cf03105ce6f9d759e30e49fc19fdb5b2fbc00c467061f276cef427d3444d6e4b4ea9492475a3c | f69ad7b037d954f3d1fd7e3577ef61748b8e2b5897cdf929f6bf1c498b2ec73e263b8bebc36262d88bfade1da656fe4fb85a092a9f308dad5ff61ebb505fbd1c | 32baf31eb58fe649e2eea6bdaf69b340f0e95f0ecc233d7ea08d64424dfb4a600a8042d909e936ac993a7a65379830d94aa65f2a8b31bb85458748485e5224a3 | bd834c1b97b71359ae33e5627a77aca00e260e0eadf061a37ebf2f8b0f66a736c2670644fd54a06ae766653a973cd3d2d67eeee7273e5e7d979fca6a0da0b602 filename | sha512 hash -- | -- | dd161166ead3464ad29fa25ec56a9fc4d1c6b311fb86578132e786ff876e0d86d1ec8ec9d8e764f9a30c869dc8674075e0492e2f9e439ae012c301ec2ca2692b | 641b0a12d0ab3ff3824a1296b7f15a1078bf69e19715369effa456955d62a34a6ec608929aebb35ce54650e2429ff53b5711dccf943cb55f5629bedb455f1c65 | 473a431b5c692a71321bc80d4590225fd5f7b6722513b5527966f0e72b2a3323a6a183850858bebaadd6b3aecef72e3e425356f9bcb30d0e1393c3cde4eb0784 | 4abc55a66fbd90e8f02106dcdd6b2ffba9fe995a9f6b20bd1ab8694b8f641ac0cf3949c7f06e47f3d821eed9f5e5c83379434e605b01e52a149f8baa5b48c9f1 | 9cc8aeef0fcfac521e1ab0e2c58b90e6e60b4b578af5b1b8c2d072948ca0be01f56545742bbf61f53ecf37b421b99e9b67cf196ca70514544153185560061afa filename | sha512 hash -- | -- | 09248f9daf9217db6a3b4e06fd7e8603f87da15af94bb748715a003f6f7df9bb19caf73ad09746dcd4122384f1672744d424ee79b198924bd48f167ec8cf38e9 | 26c52c2c45b6f4c25a89a5f9995ae8790bdf5ff98d985d88071b6e21f01d5cb3033c955ac12ce381d6a6f3422ce9087caa5af3dad1094d5e24e3287c12afc294 | 7e639cbbe8bbdd502c66513a003a38d4bb76392ac6f28984b49590e91cf3195f560ac6799a91d1854d0aafb8032d8dc90f0c35427d393f01e0d9d1c44c68b34a | 2b791c67d5c34ed1e2644b72ad38693944873767e5c1db21ec794240994923c13a74f30f12ceffb9bfd0ed61597e53697c5ce373f5bcaeb2a2beb3d30ddaf7e1 | 16106a1beb0dbb7d03b3fb896677c526339a34f68fee923614d6410ffe9bfe48ba06e8ebb82b2ed1a471890e081e47f9c0d858949087bba11aa08d800a34757f | 22dc0245759a22aceb5958d2315278b5f16b86a97bf95cedc062b5a94f33d15ee5ee6c4b6eb781f8bdc2f8c0ef8d2675de8f69f8026f0932ca48e7da8c16528e Add a new flag to set priority for the kubelet on Windows nodes so that workloads cannot overwhelm the node there by disrupting kubelet process. (, ) [SIG Node] Cordoned nodes are now deregistered from AWS target groups. (, ) [SIG Cloud Provider] Fixed FibreChannel volume plugin corrupting filesystems on detach of multipath volumes. (, ) [SIG Storage] Remove ready file and its directory (which is created during volume SetUp) during emptyDir volume TearDown. (, ) [SIG Storage] Client-go header logging (at verbosity levels >= 9) now masks `Authorization` header contents (, ) [SIG API Machinery] Nothing has changed. Nothing has changed. Nothing has changed. filename | sha512 hash -- | -- | 4691c25c211500977d91d2ef4e57ff7990c3329066b86bb63f6433fe642b541733a66f759840505c5a80c8121ad8e7299bc1130b0e0931843c946653e2332efd | 307968bcbcc86803b414b3124d8e5088e175429622f42a5147d151a8e92279163fed577fb1e917619ee434a80716ef7eeb66afb002f0282d283efafeb89198fc filename | sha512 hash -- | -- | 9ad360da95eecf7c7982a981501d9ad42cd60fdc28934b68b4e6d12d18f0d9955c9e2ca4e3b4824c33eaea2b343d0c6ca267c62a1ffa601ab0aa97cc034cf4be | 4b0e5f7aebbe23877a8dd92c4c1ea2b51ef7ebe2579bcedc1ff9a30bd5cb783e7fec4dcc47590045c7d4a77a56b0f0f873d2831ebfbab5b458942ee7491a4857 | ba1418ac5b066835e0ca767fa564cd878a0111fa547140c18e9807f1e895171e87709300793bdcd09c888e35dda47e775ca901ab82a3bc7e35d58f5f8357b547 | 6fb96d361943fd7b8a8afe89e99cfdc694959665ba9d48bf0c71915876c47c0200cacf9246298af914ded546718c7f10817bb9ab942bda9f02c94cec4eb8a033 | ebe4aab71aba73fcba497ea9e468556e64afc3ef98f3b0f5258e90db8f31f4c20915420daf81c0c3026f05bdf77c294b519d0dda06e554a82d34fb68a9678279 | d63b44bcea907cefd8a0dd8f2880bac3becf0babbcd847555be1459e0edbe6d47c0669ae8699e0d79a567461c58b25f1952eb8471bd48a22b94844440adcac5a | 58001c628d4927d77dafaad6f32ddf95e653eb7afd03efe49a23bf90bf27bf7ea04c046e56640ed099f946b63684b341f887ab31ce823351b0cd76336dde33e4 | 8e1165c77b3fe5d12fbe1aeaf8b77a2243909bed48fded83b0e9e59052355c3a61865e977a99dc527bbabdabdd062a851cef28008b337bed5e7ca8e9a0bf89d9 | 611a88d020765a9f859981172f924e5a718b1ca5fc4a06415a5ab20e333dc591fa4630db47bc6c84e5cb26f58afc3bed259e62407a81cadc1307bc24a6d2d415 | 74105b1badf2fd3e781c02fd7b02c05d9e300a7aa275b4effae618637ba1aa6056a6270c58bbe47a2345b1d9fd7868b361996a8b5bb03db2b35d02793024b48e filename | sha512 hash -- | -- | 6d5903b3e80ea95b2f99205f0c21598cf64e39025481e7773a7fe01688c9204a47c7a635829f70c93dbdc8f327d442e6627672fed1cde12b641a0303cffafc4e | b59bf2f37d54d8e3869f7e4f15712b11a333785ec6807f8f958b96dd377548cb18cdf914a19e40c2528504fd54d2710abdd14a1afaa024ac2fddf45e55f6de63 | b67c3d04db7e4f24e64977110e81db8c1a8961539b8c2c9cb3df648efe9e1d575e5fb2c4b6c6630c16bbf1756bf98d432f77d482537eee613ea3c781653007dd | d42936956019070f271dc80e96bdbd49f1fb2109247025c86473aff94303e7269d4cef971c5e6db9817d5094782b94e94eb7bd27425a89a8dad134aa4c7e0849 | 2b67f35dd18b0814c6442470d41cafe3b68668db01964d309b09de17a9bef2d012c2bf32d61f98fb72f6bc73f56627bac40e509417f6666de8a7e214bb015d71 filename | sha512 hash -- | -- | ae21747aab7086155cc76ae6a5f0f6d4f822d2bb290937376cd8d77dfea5766ab0a07148590e70119b347a05984ee11c7c822bd5e09fb12d1fe0307e82fd8339 | 1ee2ed32606a1f607a58e38d71aca0a0a58812272ac037df5b5be80821db25872954a426babcb27c41460c326021b1085db667b300fa77493bb74abf0cfda3bb | 19605b3942e6a38c0bc5149319e84af78f511cdfe716921ae995976704bd34a8a090c2280f35326d9c7bd1761256ea1eb8de6f224251f926ba713a3a5d06400b | ff9504714af14fbdb8435462cd012f03721fd0b24064d06e569bd6361954b11ab767e7f993658d0ac8feccec2c3d52183e318b5c2b469cef3e4178fb988036bc | f7e886e48dcd1d6b921fd6d7cb7f0d832cfcef7505265de79bd173e4d05891433e5e111e59c97ad59e2cfca3078aebf0570653a2dc96878d4e352f42c628c734 | fda8828e170a0465f5e368ddcfccd67b7c8e5078eec31bce309cd6e1e252d4d3e8bd07231bbf27ba4a712a3dd4ee692c35bf0386f48bd52b3fd42ae95b0f7211 Add a new flag to set priority for the kubelet on Windows nodes so that workloads cannot overwhelm the node there by disrupting kubelet process. (, ) [SIG Node] Avoid GCE API calls when initializing GCE CloudProvider for Kubelets. Avoid unnecessary GCE API calls when adding IP alises or reflecting them in Node object in GCE cloud provider. (, ) [SIG Apps, Cloud Provider and Network] Bump node-problem-detector version to v0.8.5 to fix OOM detection in with Linux kernels 5.1+ (, ) [SIG Cloud Provider, Scalability and Testing] Exposes and sets a default timeout for the SubjectAccessReview client for DelegatingAuthorizationOptions (, ) [SIG API Machinery and Cloud Provider] Fix memory leak in kube-apiserver when underlying time goes forth and back. (, ) [SIG API Machinery] Fix pull image error from multiple ACRs using azure managed identity (, ) [SIG Cloud Provider] Fix: resize Azure disk issue when it's in attached state (, ) [SIG Cloud Provider] Fixed a bug that prevents kubectl to validate CRDs with schema using x-kubernetes-preserve-unknown-fields on object fields. Fix kubectl SchemaError on CRDs with schema using x-kubernetes-preserve-unknown-fields on array types. (, ) [SIG API Machinery and Testing] Fixed kubelet creating extra sandbox for pods with RestartPolicyOnFailure after all containers succeeded (, ) [SIG Node and Testing] Metric names for CSI and flexvolume drivers will include the driver name as well as the CSI plugin name. (, ) [SIG Instrumentation and Storage] New Azure instance types do now have correct max data disk count information. (, ) [SIG Cloud Provider and Storage] Nothing has changed. Nothing has changed. Nothing has changed. filename | sha512 hash -- | -- | 29a844663c1afec7f555b781a152e7892878b13f6f9438d8064b6cbe771451da7b314b4aaee2817780c626099d265239f3fea6ff0cffbd7653d7fd43e5c03269 | 296226cf9b7ded361d43d91a422a836e53465778f6d63b613037b8cbb73329dfbb7011925cbfd0b849634ce572572c7dcbfd8f5e9d36384c433192c447e738c8 filename | sha512 hash -- | -- | 447896d03e9fbde2b8d8f55553eccaf2859eb97ae96dc270391811dae46531af292920da58324bc2812402f1b1c2a15408301ef9a761bd406e9ce9783b630d82 | 8252110e2f991f21d4f15c33b8ed40366be7bb45e61c5c10dbea85bb13342d4468e775f8b9d744b487462f133f8c03b2c239cccb187a208a729243903848deeb | d0abf4561ed7b80f63e962718908fd2dcca7442e3d20cbf026d3dc69897393994847e11c29dad2958b57df4bfb6d7712a5d0a5fef33cd17bcdb8e1742ba7c3f4 | 1735cb106c4cd06ddfc6cdbb1cef42f0ad9b5fba4c893a6bba7a4264e9ea8779dc650b3b9c80cdf92b28c79df076f2db3416349635aab9d5ef67ae1f65075e82 | fc09e3af998b471352c058635cfea202a1704b31a3560e302a9c34904be65d06b40da854c6abf7e74b080d1e3f299d8df459b9dae17c4e7981a90a4477655280 | 91ba6052aa7e6d4e69017a65c829dfc820e846b29fdf8a575cc371ba87484853cb492c0dd2d190aee7c0d945749d266785ce935eebe5d8d09bbe96e760493727 | 4f3d7a8ecdca73afe9844ab55296c56fe807dd92c1f901e35cd0bc82f9da5396d7aec7c6b65a138b574e87785e6d64ead11fd2d12d9c12ccfae18c73eb979528 | f3ff6b7fdf07d3aaefcaef06868b1a7642b8893c065496740c70dffb5ae6805ffbb2798238a9a275dd63c75927f3998e144926aeeb9e9e348d6aff3154231237 | 2b1b93b3a120d884a5c77225495feefca419cd03b6a5e1d251431c190da5376441b683832fb2f5bfe5d6a4ac56670599e72babdf975e3d6754d6fed28685f6e1 | f84907f8719acd5fb185f58dfc4deb6befaa650db7bf02de1d7f9a0668cb61f0e1feb0cb2b8f41058dd2f3d6ffda696eea11b8ababbe9332ec54b2e81a806d43 filename | sha512 hash -- | -- | cf0134d189ab17483fbd4a4013621c13184eacf980f7111f50a88ab7685325d1d95fe0c3fd335ca12d6834688a127e76498f25ad324b684eb671baa521a976a2 | 1f1adc26f4d8dcab7031a762f78508570c3be3be4c6368402a5374d4402529107519cc7f14e08a80701e7c83d36a1a47504096b186ed36f32ec6ed66b531d5ac | 7a5e4cfc5752fc054654cc53fbf98f70de48c09f278ae8a9b0f7f0730ffa561ee4b30a38deef0efb8c3b3a1b43712a4d64792cf4b799862f17f808d093d50d8c | 5f0460e5bb273ce4839dee6f1b24de3051d2f7d5789d7823a8e15998bb31501d7c7adc13667863eee999da70ec6a8e94bab0c36948fd1d05eae7ecca07e324c2 | 89104db6650f5d545cf30118a6e07f52a3a9d4b9b5b6dce0c4c41addc98b06f2f824bc6619ad96772db19492d45696e897879b2b957018d021ee13647b2ef614 filename | sha512 hash -- | -- | 3874d18d1013fb38a8e2ea029dee717c5c65394513b74de87f340338f8cec4162739b8d060ca0bf2f3101403406e67bcf43560d54d74d30b85a7f701bc8d0e61 | b66beba8d4a1ed57ae80e8bf182ba14b9dc62815d43826ebc175a79cb7dea247b55407cd251f9995c2d60cca04d58399252a7948f159f03e20c25c0bf38de7ba | 77decabac76b6e474311516f6502483adb8b7d0a36ec045a64e3a9138d936195d955086f05dda6c7164b17cc5e71802f90b1bf108250533e1b658caae1f94054 | dd73c3504af924751260154f6b2952fb4a00006f92f313b54a60d59348850f553ba8ff90696ba291a9a8a928488ee28ed5ad9e272a75d4ed928035f2080a6b72 | 188526e8ba71bb1ee102007b50839888a723341af37a556c24780c3ffa767617e7208b970f9a66d5989ad386b9808996f3e2829955a5e5c4d1b9286ffa4d4b92 | eba4977e6b5cd70f33b6656e0d5689c0eee3f24a2de199b811a97deb0c5acb0e6849ef0e5e113e394c09c6b2ee90212c766d9bc0902493af30f9754a60756481 Nothing has changed. Nothing has changed. Nothing has changed. No artifacts for v1.18.11 were released. An issues preventing volume expand controller to annotate the PVC with `volume.kubernetes.io/storage-resizer` when the PVC StorageClass is already updated to the out-of-tree provisioner is now fixed. (, ) [SIG API Machinery, Apps and Storage] Disable watchcache for

resource for compatibility with core/Event. (, ) [SIG Scalability] Disabled `LocalStorageCapacityIsolation` feature gate is honored during scheduling. (, ) [SIG Scheduling] Fix a bug that Pods with topologySpreadConstraints get scheduled to nodes without required labels. (, ) [SIG Scheduling] Fix azure disk attach failure for disk size bigger than 4TB (, ) [SIG Cloud Provider] Fix azure disk data loss issue on Windows when unmount disk (, ) [SIG Cloud Provider and Storage] Fix azure file migration panic (, ) [SIG Cloud Provider] Fixed a bug in client-go where new clients with customized `Dial`, `Proxy`, `GetCert` config may get stale HTTP transports. (, ) [SIG API Machinery] Fixes high CPU usage in kubectl drain (, ) [SIG CLI] If we set SelectPolicy MinPolicySelect on scaleUp behavior or scaleDown behavior,Horizontal Pod Autoscaler doesn't automatically scale the number of pods correctly (, ) [SIG Apps and Autoscaling] Kube-apiserver: multiple comma-separated protocols in a single X-Stream-Protocol-Version header are now recognized, in addition to multiple headers, complying with RFC2616 (, ) [SIG API Machinery] Kube-proxy now trims extra spaces found in loadBalancerSourceRanges to match Service validation. (, ) [SIG Network] Nothing has changed. Nothing has changed. Nothing has changed. filename | sha512 hash -- | -- | 3072f903a1e37f3d56fd3de2b81c9fcd0e53d438ff7497065c3a9cca2d9aeed6a36bcaed11761c162087020edde8b0b7fab3b86736e0b5a7599ef50b0064ac33 | d15aa86a091c30259f9a833117690c58c3c975b7da0fc441e8783c3d195e851153fb99f9901fc3b22ecadd29b0733643bd5630689cd4d3db088b430d520bbe8c filename | sha512 hash -- | -- | 3105648ffaf0f207fde5418e5ecfa5f2b00166044e511bc30f4b47a10f3a2d33a831aa10457c83bff7a64651865a6896cad63109b0a556021b367490971611e0 | dde2e6b34edf7e5e1c8ad57c617eef8a5b5efd19b36afe6da1a769874acd71df141f93f7c8adb3a566458642feb26e3af4d07930a24422341aacf6f72b6e8d9b | 91fa0c54248e1edf7f29baef0ca98e57078b44483ec2b1f3b95fd93b6db3a244f350e4a3de1ba9ff72d7f53ba4768ca9143287bac28370ff1267e4ab73162802 | 02e33b1e97f481bd7ee213493bbda8701caf3d46e51837a9fc1e874df33c9685fd6017f0c67c6b02e3aacda1351e17f12eba44a18c39e049b4acef0d59e2b431 | c6368d80aa0f38e5562427b93c761cef7d167b4c79b11e243c02259271e85fab75fcf89c9327c384e7236a6eff19ebbc2ae4540557fc5104107e3df0e94b7506 | 0423134985d2169267d47ad41c159520be8af3906a9c485caccf577f25aaeb6f22759a57cc611fd55670758f21a03f6eca7e9d391b1dc628774b397e91c59bd4 | 613f94fc450bedec23a5a825e33672a0429fb8d88a91fced0945d071e1b67d093bc86061454cd26be4909299b50fc7472e441e83ed0d90b10c19ded29947e63f | 3a9775f2893f16f2355f47b4360d8f66b2658134db81ed9cd635051814d319d619ccd06e2c78c86813792ea4325b87c3b8ae33a3bc76f38bc8469c3b60b4d108 | 9b8c7e4ebfbba6dd54e74527f95b543716a5f17c2e155b1922bab42859278b5a5ab6e00e21509b6bde594391896c212d23c998d2c73c8b5b78ca90bce453e773 | b642b4b15a7c2abe10cc33ad5a7a294a249b1f78d55a1fe3117954d00129307539a9bbc91e11711f56fe7b6b71973a62cfadc60d15259d9aefb4346790c857c9 filename | sha512 hash -- | -- | 69d60733d208521cd18e05f5caea13b79f3869c008912398da2b3203d1f8665156b97af87a86159c4b23f960ae7219d16a47d454625fa91f022efd788fd2ddc2 | f38e415908a4dc4284713e9ba09499e9e8df429cd1cd11e8693c272d48b753583566005340811fbe4b603943929775a33fcdc454d6a95967bae6e27c3defc04e | d69d5b0155addfbfa73af8d5336a015cdf217680fd0801b6b8a8264f8504f92db2c475011bff17307b10f451223bd2d347aae2cb0276d50c8ba5131e257f903a | daa02b0c3785d8bf8ece1391aaab71e28dfbd84fafd9c8d5d491d10b901a36557e9d138c6beb7fe486f14be66545a2e9efe6f75502079f4abb7c351e1b9c1a29 | f390ff8a359a98f39e625a16d86d1c859b165abb0c338fc3af131f2c09969d5d01a3ce3ded9c1a2a8e305f09399548051f2e62a6aea29bb28328f207f6e2cad7 filename | sha512 hash -- | -- | 6d3e79370eb9353d84a033854174ef0e578a1fa3854e39ef146437adf673c9d6a46156e66c560c05d4b90401f2e1a69e02246a008cbff239deec5621b50d0066 | 0f7f69b1b5525a62cc4cc30703e50b297b41a306796d987525a091b136a2808527c2d2d00a9eb49041caa563cd2e4784c1d4d5925f9ddbdd3b75c48642584848 | 8c6b7957490616e2b731e058ddc2af10c79cdd54175aea2c68dc0b2c595c8afd0a6b14fb72df4297180a026507785a264f3f8269896b14b11ecd0a5c2ef5f791 | 8afebd302693f8ca839f699514efd499a15e5e2b7cc9d3514e1169d84f70036989d7621b71bca4a2f9ea7db52e22e4b33d8a0e440e1bbac6a02ab62484be8f8a | 4773f5be2035585d5944e9fae24c15288865ae722628c1b3fc45f89c467320a673644aa86fe510a79b6cfef7cb28bff2c88036e9e52180015473ad3f5bff5851 | 994d73bde304b7c1cd37a0de3ff0fd5988f4b74c5836c3a86f359aa4e535d8a8219bfd02ffb3d03e62bc4886d7e40faa49e73b8bc21005d9c8ee32feef06c9de Prevent logging of docker config contents if file is malformed (, ) [SIG Auth and Node] Do not fail sorting empty elements. (, ) [SIG CLI] Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null (, ) [SIG Cloud Provider] Fix bug where loadbalancer deletion gets stuck because of missing resource group (, ) [SIG Cloud Provider] Fix detach azure disk issue when vm not exist (, ) [SIG Cloud Provider] Fix etcdobjectcounts metric reported by kube-apiserver (, ) [SIG API Machinery] Fix networkprogramminglatency metric reporting for Endpoints/EndpointSlice deletions, where we don't have correct timestamp (, ) [SIG Network and Scalability] Fix scheduler cache snapshot when a Node is deleted before its Pods (, ) [SIG Scheduling] Fix the `cloudproviderazureapirequestduration_seconds` metric buckets to correctly capture the latency metrics. Previously, the majority of the calls would fall in the "+Inf" bucket. (, ) [SIG Cloud Provider and Instrumentation] Fix: azure disk resize error if source does not exist (, ) [SIG Cloud Provider] Fix: detach azure disk broken on Azure Stack (, ) [SIG Cloud Provider] Fixed a bug where improper storage and comparison of endpoints led to excessive API traffic from the endpoints controller (, ) [SIG Apps, Network and Testing] Gracefully delete nodes when their parent scale set went missing (, ) [SIG Cloud Provider] Kubeadm: warn but do not error out on missing "ca.key" files for root CA, front-proxy CA and etcd CA, during "kubeadm join --control-plane" if the user has provided all certificates, keys and kubeconfig files which require signing with the given CA keys. (, ) [SIG Cluster Lifecycle] Masks ceph RBD adminSecrets in logs when logLevel >= 4 (, ) [SIG Storage] Nothing has changed. Nothing has changed. Nothing has

filename | sha512 hash -- | -- | b0c98d0876673c72a71f8f55c66bf8a9168e6f5f8e4890bf326d2dd74041cc068b1da03167010fcf2dc9f5cd6fb6eb57631378c4dc416b4cba1f55682d98e6cb | 67042a766344b5e35251bd1e070003966b57ec7dfb5ab96e280ef81d4e4805661bac4b47a2509ac8607ff752eca09ee4fb605e4b493841a4dd61da1498e21bca filename | sha512 hash -- | -- | fcd559bec419543ef7847e09d9db329e3e6890acc42ed006fdbedef251c51fc57232a573738c9154312d211e64cf9039ad4e9cee064bd04525951af2014ec276 | 485defc9db7847f1bcca5c054202f192e1a1e4d0cdd08182f85466d8c776bd4c9d53934e052992286c5f764879d4c5d169c603387ac334b2c8c994c819b61975 | d19ac83e616516b1b35ba6885b39a041d14d5b51752c4fdc7c8a93edde99639bc484aaa3ef03648fd893775fe101a98d853d78cb7e9b4b7c7f992cb56d5cb555 | e3a5cb14ac277959254dd64bfa0f5d6f09ce338d3bef9865bd5fa1cf828d56468de4d92a03b538042b6d13703403e1f54a54df574f2a12e9800da19939445eb0 | ccad978695621a924053845e2f34c222e556f642310c6851094f75b70807e08a0d72d5fa95f54dc7a9b28b595c308c196c7a515f62d792cfe67f278fcbc05fdf | 938dc3b603234bf76da08a2b29fd6e58d2effccc91139afb2ce33afff75f42fe62e430eab5a1e5a239d20eb817cf2ca13251e9dff4ac7d4efdece412b0b72e31 | ed46b16bd790f7feef92637b082f16054eb6ff15ede0a51c4c039ffb716b74f25ae01e41f2773c4d83fff5543cdaf65151a646f2c0ffeaaab5c911fcf182d7fa | 369b1b0f36aad42eec43530ab031eb3f677a16510a3c15141f3e4ef6c8d86624e897faf28fa729e44831cc7cf3e1f683bc53aaf1403d07b75b469e93714c477f | 1ccd65a373899278aabc33014f2cf2a96ef2a0311d84939b3c04210d20813197fea4c811b695694c2924e2db6abd16ca47f4e22408de544493a4365cc4675498 | 413ec6b8047d7ca102c8a4b340401d179102ce47530bbbe17945bffcce41efd8784d4860b9aecbfe3b614dd6f7062418620c10c4ffb5851db1009b2401b44bc5 filename | sha512 hash -- | -- | fbd2dfe4d92224d2912894ccfe9229d898ffce1a9b18486cf1a9ed7f4a0e78c23f57ea0c686d6e1bb1339ccf3332e8803ef3d59dbd6d73c9a354a29ba92a2383 | 28852cdbb100be11d9c822059701ad29b75516356ffedc63d819580655e403354f814aaa3c09d51dce04593248b14df1d541457bfc18841446d70ad3badfb450 | 482ab26fcd641a7dcae044aa5c38b3e6e2486c5a8f6ae84101dc665e8feb4b0f6a42cb018b0e1283964fab9fc4e15d1fda21fb44b92c1f5b0bb29882817ecaac | ca109cbe10eb15224b77b2c35ab54cc0168ffdc9fc68949d5bfe572125dfdd958db3ce55c8c0797686a97276e246249f6cc1c839a08e46972e564b36b8edbc91 | 3db03e3ebac7e2277fff962c4bd7588639cfb1d6f99f7641e85eb793a23dba513ef481ad5562381f99d543b68ef263742c6c9341e6d72f52937fbc12bda2db07 filename | sha512 hash -- | -- | 2064978434d28658eec7d64497a94bb672452f358f460fb6cf85fcd02284ded0a4e2948bcea7e972e4a9642c31bbf2f617c68c67cac36541bb7eda8ca0262b28 | 9932d727b3a81cde9fa506ad82780d72acbcca9353aaa33146b2aede590dba1194c84835759fdf042c6893e8952a808d68ea8ec37fe2b233104b1313b7927063 | 542728b9ff7473cdd30afceb4c6216ac1b26eedef950cd09c2f07c1d04b8188d36efde657aa470bb3134dc0072419f9cec42691f0b0bc7ac9c686c9ac82abc61 | b3e5f99c07d5502940e849f695077f9335f2e9964254301545ab93a220e8c5dbad5e3a205f3487312d8de669f1168dbffb3302ed34cd40ff7246f960aaeffc5a | 833a7df0a49e2461e2b4bfd58f6aaf92b5f7a605ccdbc9cad2e2e31bd6136d7b4a5c5ec78bef8f4fec422eae4488e71d42be512b07767b1cf417651ba5226efa | 36cf26e98cd93cd180c876796fb384ec66ecd313ea71b99fa6e862ffef23eb6e6c912500e4411c1f2afd45f45810c13e0a16514c5d3f00b039ee162b5efceb90 "unbound immediate PersistentVolumeClaims" causes UnschedulableAndUnresolvable status rather than an Error in the scheduler. (, ) [SIG Apps and Storage] Fix kubectl printer to correctly handle timestamps of events emitted using events.k8s.io API (, ) [SIG CLI] ```sh $ kubectl get event LAST SEEN TYPE REASON OBJECT MESSAGE <unknown> Normal Scheduled pod/nginx-6c975b59f8-gvmjr Successfully assigned default/nginx-6c975b59f8-gvmjr to minikube $ kubectl describe pod xxx ...... Events: Type Reason Age From Message - - - Normal Scheduled <unknown> default-scheduler Successfully assigned default/nginx-6c975b59f8-gvmjr to minikube ...... Azure: fix a bug that kube-controller-manager would panic if wrong Azure VMSS name is configured (, ) [SIG Cloud Provider] Fix a concurrent map writes error in kubelet (, ) [SIG Node] Fix calling AttachDisk on a previously attached EBS volume (, ) [SIG Cloud Provider, Storage and Testing] Fix: incorrect max azure disk max count (, ) [SIG Cloud Provider and Storage] Fixed bug in reflector that couldn't recover from "Too large resource version" errors with API servers 1.17.0-1.18.5 (, ) [SIG API Machinery] Fixed the EndpointSliceController to correctly create endpoints for IPv6-only pods. Fixed the EndpointController to allow IPv6 headless services, if the IPv6DualStack feature gate is enabled, by specifying `ipFamily: IPv6` on the service. (This already worked with the EndpointSliceController.) (, ) [SIG Apps and Network] Fixes a bug evicting pods after a taint with a limited tolerationSeconds toleration is removed from a node (, ) [SIG Apps and Node] Fixes an issue that can result in namespaced custom resources being orphaned when their namespace is deleted, if the CRD defining the custom resource is removed concurrently with namespaces being deleted, then recreated. (, ) [SIG API Machinery and Apps] Fixing race condition with EndpointSlice controller garbage collection. (, ) [SIG Apps, Network and Testing] If firstTimestamp is not set use eventTime when printing event (, ) [SIG CLI] Kube-apiserver: fixed a bug returning inconsistent results from list requests which set a field or label selector and set a paging limit (, ) [SIG API Machinery] Pod Affinity/AntiAffinity label selectors are now validated in the pod affinity score plugin (, ) [SIG Scheduling] Scheduler bugfix: Scheduler doesn't lose pod information when nodes are quickly recreated. This could happen when nodes are restarted or quickly recreated reusing a nodename. (, ) [SIG Scheduling and Testing] The EndpointSlice controller now waits for EndpointSlice and Node caches to be synced before starting. (, ) [SIG Apps and Network] Upon successful authorization check, an impersonated user is added to the system:authenticated group. system:anonymous when impersonated is added to the system:unauthenticated group. (, ) [SIG API Machinery and Testing] Use NLB Subnet CIDRs instead of VPC CIDRs in Health Check SG Rules (, ) [SIG Cloud Provider] Fixes the flooding warning messages about setting volume ownership for configmap/secret volumes (, ) [SIG Instrumentation, Node and Storage] Update CNI plugins to v0.8.7 (, ) [SIG Cloud Provider, Network, Node, Release and Testing] Nothing has changed. github.com/evanphx/json-patch:

filename | sha512 hash -- | -- | 48dd9909e06b12e015c0b785ab528e700e4e319c942800ec82af42837ecaf6e692b6502e7ff786f4ecc1e47f6402f47a3b399ec17fe044042bf52a840da6cb88 | c81ef7c31d8e34e3edc0983bb59e9d18bb1c6613439d4c52d29f6c26bddd3c1795e499c89ee4c53572cec76255e0323701c97a03d7a6430ce7864e326ef4e8ca filename | sha512 hash -- | -- | 7328660c2a67d214d8d49e93194e1c51b51b7f91b3182dea9688676567f6f00598eca14b322ed675eeaccb691bfe038e0ca5510928534e41bf909bf06e7272ad | 2c700d683bc732cd4e353d31528bb6996cbf0f6d7e5dc93fbf45b4d457d5598cfd92762aa2106af8300d3fa39596c6710a3ea5248424bc28eddd53354bd9b0a6 | 02c5026b522226ceeb1b032337562039fa30b2a77b27dea26a0854d31a4492bcc5f80faf0ab98c0fbf595f577dbef602a4e13599d6bbaded2eaaea041bffb7fe | 041dd919f7bf530e6fb6881bc475dbd34cec340eae62193cba1174a0fa0b9d30435b74b0a130db4cdabf35dc59c1bf6bc255e4f91c8ec9a839fb541735e3861e | 539f0eea80d52ba079fa4793acee57a9adeb37e78be300ebc2d34a25a7a09146c3bf10a978960b25cfcd33e4d430ee822e43fd510afb04adec0cc3e6a792be28 | 437c20e6d115d1e3ab5a47a10a0df4cb919ba6e139e2115aff2d70cc483bf7c4e9ae455cd40eaf4a4e237f799ee8e7c3d5597f3b3e55e62ef6b6e89b4aab1288 | 3b167e40bc19e3999503c8edbe867cfa64358129173a9c64e8ad668cbf312a66fe83f39f62cfd2763a60d27a8e644f583c5819f3548ae0dabff13b2d486bba14 | 1c732c60efe80030f9fb2cc1d680a850f96dc6e13451dbc88e302617cf32e781f3ac1944f42a3e918f0e04da9e43e024af3945447420df3ac02e4c5dd3972dca | aa194063f4f784aee3da7a3b7d738bd7a48288d8cfae40209a0ae7b1a2ca93e6fe9d54933ce42ce5e21ed660d97b209e16dc049144e8e26aceb778f1b5f6f9a9 | ea40da56b2950c68c28f4d96bb8bbba6c24a73a382cd20ffc5d75155a3b62b1a3e8b47fb6a7988123885d052751cf7c305b8192705d7472c91cdbdaa8b81c44a filename | sha512 hash -- | -- | 608020f5882e0f1e374e0125f13e28ac756f057e034557bfd65658d21de666cd13bd1c1664f590d0036c215258561d75d5802bbf7558bb7d5d6611f17d53e4ae | e05b251f3bb17ee38031195ab8f14860966415c45383263c12b26f4b44902d75bca624b55885bab0c77bda441813d760737de9df4abd3c257f6c5fdfff155bcf | 27415f005fcaf3b6a93cb62ec784a949a64ec23ffece74e26d9e86e45e45dfd39d5fbff2ca1ad8f937ac51f02822368d8208e58874c9e12f5ce6b7db28175c80 | 3c4a93ff3418f630361114545cf18f9f22000e511876d2687a7482a0959aa634b672ed742b963c5b063c7fcb2d2de79d8483057c08dcc7569f1c6864c3c42f85 | 38d976cdac09b0e94fbdba885df5149d65b71d803758eff5ce23d5ad641d13ce4e96fac849267c00624ca00cecf8e221319ac6679913cc4aa03cb460cb14891e filename | sha512 hash -- | -- | be40764df0f10e379c6920692d31a2eb5bf11d160ed7dcae7d05d27c232d5553301bec1cefdf6e10fdbb1d947d994d850670638ecac983953316a6223e733c0f | ae74bfabc60c2b3463e29c5dac06ff32314ad4fdcfecfe5fb67f679fcc10ea7e47268d7dd186c13c00bf4bb3c46ece699e3a33077bb192154a2646e48bef25ef | e5e697afde1eec79e9a11143585776d57be55c928a9328ad77ce917868e82259f54dd4633867065784b94f76a0cfb23be9e7751a40a1ab6dde6001e73849d17a | ffc3b5d2bcc490a5fb07c2a9e5e53923903728c69ace143b2e9b46760bfe72be9c4db746319710c44f059e82cb135acfe9d1bcfb50a19e32b582ba77d55ed004 | 656447661f38fed2fac19af4428f35da75fad5db70942722d75717f9d16db1583fcddbe944912a43fa03328453a2a32bd6971e138400de70015353c390b19d36 | fd55152e72ce747a6ab27d4e6e16c2d4cbceaa60b40a1b6a709963bbf87e3ccb757904b8fff36fd1ec6cf1bebd2d03148704d694a520b175f6aad8a05323b5e0 Kubernetes is now built with go1.13.15 (, ) [SIG Release and Testing] Nothing has changed. Nothing has changed. Nothing has changed. Release artifacts for 1.18.7 and 1.17.10 are incomplete. Do not use these releases. Do not add nodes labeled with kubernetes.azure.com/managed=false to backend pool of load balancer. (, ) [SIG Cloud Provider] Fix an issue with container restarts using a modified configmap or secret subpath volume mount. (, ) [SIG Architecture, Storage and Testing] Fix instance not found issues when an Azure Node is recreated in a short time (, ) [SIG Cloud Provider] Fix: initial delay in mounting azure disk & file (, ) [SIG Cloud Provider and Storage] Fixed a bug whereby the allocation of reusable CPUs and devices was not being honored when the TopologyManager was enabled (, ) [SIG Node] Fixed a performance issue applying json patches to deeply nested objects (, ) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation] Fixes a regression in kube-apiserver causing 500 errors from the `/readyz` endpoint (, ) [SIG API Machinery] Build: Update Debian base images debian-base:v2.1.3 debian-iptables:v12.1.2 debian-hyperkube-base:v1.1.3 (, ) [SIG API Machinery, Cluster Lifecycle, Release and Testing] Update Golang to v1.13.14 Update bazel to 2.2.0 Update repo-infra to 0.0.8 (to support go1.14.6 and go1.13.14) Includes: bazelbuild/bazel-toolchains@3.4.0 bazelbuild/rules_go@v0.22.8 (, ) [SIG API Machinery, Release and Testing] github.com/jessevdk/go-flags: github.com/evanphx/json-patch: Nothing has changed. filename | sha512 hash -- | -- | f036e891ff8dd95df33722b4d13ea2dc36fd8cb0a18fe88654919eb180cadba7724da55b96ea9707a11aaa91021bd6478a0c6eae684034e030717beb4c94f018 | 460551dcde2288a7f3b90ad0720cf479cd38d64e386fedf66d580c4cd547a0e1835437437bdfb8b28c6dd707164abf0ddf4ea761d9f110945b80800f71b953b0 filename | sha512 hash -- | -- | 85c4d72f50965a1ecc3e67c02335ec5ae57d8c9617cc79a34a05e1ed3b84e8f80be2901f6f31185a383a85f63ea7fe638b07eb6851a3758b835bf319a5df852d | b01c47bd6a16eed131245fb90abfb8b585c14953f9398f11a1ec402b808305ce1fbcabd215b253d805224f2fb41ddeb502239f67dd0634e648279e449fc0ea63 | 15262c62b8b9bf85c8dd8ead7ed0c384114e09ad3120d7e13956c99d93203b5f9561f923055451e46bcb2a4efa19db43e23ff4d2a9281114bd85a67a6269d841 | d061bc34c0df55e766d72c066ef366864c77eff5d0033d29869fc871d2e674d86322a6c5dc3f05ed2d95971ca0e6ea3dd1dc1f57bf1825c9bf834963385a3de6 | 7eb961bff92146952d9cda2b741c8d349838ef66112c6b296f1426eeb79357b95d4e15d5520e8903a881c21bf629b58ce72d986a88620333120b786c415eba35 | bb863a4bf6d0fd400274536c6571cd35531d92fa40d38703ef126accc94d08a4e381f6c05840806e81d564161ebe08a99aa73d767ddf1a60b7a7062df704b920 | 71e0ac8298dca06be5aed01c3a2f12389405bfd1e3edff63a849b8663a7b118543e960dca0a920a598f649cce76f58ac2664ea1db9fd69e484e843f27bac4664 | 673161c816dfd2369609402461c645a3cc023a09fd9e1418c0fff601c1f5d71f72b43857ef66973af0ee4d8871a52cf914c533fa955f104d327bb28ad6e13ab9 | 017654b27b06afc219dcf5b590a63a917470f698611bd0348e5a27ea8e30c8178b47786a8491c70e1c3ba7559e7831fc77b636c092fb1946db795e9ec679c140 | d2f5bee260a135007185f8b68a11a6ea10f94e548feb4614dca9a428bbb7ad91a6fb4a58efc67b242e6348b5f0eb436f863cadad2e72cdc5fee4c0414ab54db3 filename | sha512 hash -- | -- | 73cfa5e458205ff81cfa6672c0f6ef10aadbad1244c81b259c3cf9c22c6c9e9272a69778b0417e2353fe9970bfeed23de8ad7dee223de7a487ba4bdf94cd8682 | b8723379e26de43ae0bfe5a64d65beb0f79d4820c02a1b9aae4c80f2b1882b952d587fe1fb87cc202b618ec66f5c1392f6bf94acfad44b84f3b6f33994cd0af9 | 47dc425387f98028d32f40610124ecc70162132c339d97f578dbb8a6b7f98f25a20d356d12e6d04b40e62b6f8636bf20617735acddb482f9c4da24c928f31cb4 | b6fbb68288300ef28c710d65a8acd6bceda13ec4c5b156c1395b98310c74babe1dca44ebfccf33eebd8147a7f5f7276930721e1f38854a3b6c2ddbac28c51a83 | c77d6661461b230fe934c100a2eedf295e394d0c818bc5c21e0db496b08e10ada8a101bb9b402c5fed566cff39ca6be6766dcda7f536b7e9f671f2703da589c7 filename | sha512 hash -- | -- | f3d3cc4b38dff84a0c4e1b2364b8f7a000fa86395b7ccab22905f51c7b876c7524a9da61b5447bf761aba0e2015c557715abc573869340e46a616beca33d07c2 | 63d2601741fe159b742141f3ff85293e328808ff056e87f81af502da817e4813e963c61121bce53c4fd19250392808ed36181ccd67c2a18b02317379a0d93c0f | 85d24d99e4408dfa00e306ff90eb4b86260feba40cf8e3770845838f0af319dce674b04b9bf8700d46765e620f84f4bf11463b46cf40ef118c2fd000156c7214 | 1cef745e18704c77f7c31514ca9bf0eb5be676b3fb80affa2cfc482089e7210f14e42c89cd7284f070d6d8a45ba253634294c2db5393d7ac74e8ce28e7395550 | 452fc8743c80e05ca0ad6d9267b6a133497bd7779ee74d5a96195d87e68e3e906dcc5a9d6154a9ecf70cc2a05f4e12ffb4a1d7874e979b2ed204facc0c0ff5b9 | 09113c05a14c34ac07ba4f635e152d983b6822ef95a7034df56a9fca3634388f90416076c6d8d64a02dd2e6188ed6529582b6093e441cef74dd8716f48fbdb16 CVE-2020-8559 (Medium): Privilege escalation from compromised node to cluster. See https://github.com/kubernetes/kubernetes/issues/92914 for more details. The API Server will no longer proxy non-101 responses for upgrade requests. This could break proxied backends (such as an extension API server) that respond to upgrade requests with a non-101 response code. (, ) [SIG API Machinery] Fix bug in reflector that couldn't recover from "Too large resource version" errors (, ) [SIG API Machinery] CVE-2020-8557 (Medium): Node-local denial of service via container /etc/hosts file. See https://github.com/kubernetes/kubernetes/issues/93032 for more details. (, ) [SIG Node] Containers which specify a `startupProbe` but not a `readinessProbe` were previously considered "ready" before the `startupProbe` completed, but are now considered "not-ready". (, ) [SIG Node] Extend kube-apiserver /readyz with new "informer-sync" check ensuring that internal informers are synced. (, ) [SIG API Machinery and Testing] Fix throttling issues when Azure VM computer name prefix is different from VMSS name (, ) [SIG Cloud Provider] Fix: GetLabelsForVolume panic issue for azure disk PV (, ) [SIG Cloud Provider] Fix: don't use docker config cache if it's empty (, ) [SIG Cloud Provider] Fix: use force detach for azure disk (, ) [SIG Cloud Provider] Fixes a problem with 63-second or 1-second connection delays with some VXLAN-based network plugins which was first widely noticed in 1.16 (though some users saw it earlier than that, possibly only with specific network plugins). If you were previously using ethtool to disable checksum offload on your primary network interface, you should now be able to stop doing that. (, ) [SIG Network and Node] Kubeadm: add the deprecated flag --port=0 to kube-controller-manager and kube-scheduler manifests to disable insecure

Without this flag the components by default serve (e.g. /metrics) insecurely on the default node interface (controlled by --address). Users that wish to override this behavior and enable insecure serving can pass a custom --port=X via kubeadm's "extraArgs" mechanic for these components. (, ) [SIG Cluster Lifecycle] Kubeadm: during "join", don't re-add an etcd member if it already exists in the cluster. (, ) [SIG Cluster Lifecycle] hyperkube: Use debian-hyperkube-base@v1.1.1 image Includes iproute2 to fix a regression in hyperkube images when using hyperkube as a kubelet (, ) [SIG Cluster Lifecycle, Network and Release] Nothing has changed. Nothing has changed. Nothing has changed. filename | sha512 hash -- | -- | 1e414d955cdde67e1883be27cb47963a905b73e8454bd1b2e665395348c1a88c444136380584bac97b6e50a1f1eafa7d4e3d3a26c9c0bc6aee63fbbdd261489c | 9ddcd8b517e3cf78113ef977c365d26f0f27fe9b7fd9410f0214fd38cd38c6de6f37d7fbe2bb398587caceb4ae484afc2fe7ae14b80b70fe728405f3d5bd4115 filename | sha512 hash -- | -- | 197583cb641dab50d6ad9f1f9929ce45a59f98a3ebe315cf1d7edef8df7aba1e1838cf1fb9414423d81c8575820c27a0c20183bd6ce5fd5df85bd7692a6aff2a | d0f54e949850c2321081e722367d7baa5c805e0ba1d8b2f651254e0d7b26bbd9c87c7c7f5ac7b8fd55a2a4c1af08f2f18ccef00d2c1c5c89d51b27903f024155 | 6d04e1aad657e60d3c2b28f0c9c5b0a63fff8c4a35f24f96feccd19ce1d1e65a942bbb5a5eb291297020e1334d67a4c6bea9b48510fd7f94aed70af61b7543a5 | 01e9c71d65c4513c03b22b2b036c3e92875fa4ebdb43b4909a6b21608093d280d9f71953f9656b3728019bdc8cb6bbf864de3c6a3eb94d807ec0330dbccfa005 | b33f901d13bae3824938e0d0c98f50a50ec7335979d6f9e56c06209898619c40f49d0380b7101143484de635bee347cedc5b653a21ae0daab4f7f6a6b11d41c0 | ae2f4e5fec58ff47ca2bf91290684c969160ffb89b2574f57f0818fef4d63c4d9b3ea1f8c6a34f4d83acd907b82e3668cdf31dc38042d75ee12afc695a8a2a4a | 9ebc84fa31184a9d07cbc98abb608c4b48414fb80021b4a4431929baf4c34bcccad9a2f9320cebfc7e662c6ab315bd497a56b5dac7954e0ce1727d493b24cbb8 | bbe07152faedb0dc91e6786f4b63eaa79f4bca41b1c9125f70b90e319fda8a7e95033b080f7eb02d55bee39a96192bf3935f935981305340245ab84f3fece4e8 | 2fdf489d8ce8ee5336f953e268e538bfe6748e7afd805031bc3e525e4b823033e8121c119ef23ef3afc73199ece36fc51cb75871c312bb7ccac1ddaf3c1b245f | 4894700a4406273dff08f36012780216b5c822180944c6e7161c8564c07f4a77f0d798f947b2e6f617ae60073834c9ff546045d98dc51c166fbc4c998ea2a00b filename | sha512 hash -- | -- | 40ed152be522f9793d61721f352ab30db072882512fdf7b9c2d42f057cc30b0ae1ca46e52a98da09f4b66b266a04b4bbcf257e3174eba653ca9cef5fbc052ef7 | 8483f12ba4d5263e3029fe658e965da4be62479eb48a6c6d5aa72cf6c344bed3350b3a506a6a23fdf9bf86287930d9329f24b28a3d39628f7224afaf00a2cefa | b7bb94940fcc16f777321289ef865d8689a630311e6fd0ccc945e1195c805e2b32343a7ee11a65a6f49e5c3b3264321cdfbc7c18265e0e39878b660488d6ead2 | 1c82fd55ff1d1496ae2281f9c6df391c3161665e828560efafd3a5269d0745ad14e210b05108e0b32e167a141f58ff08da917ef5eebb47c19d64039a004ed81a | 99f29e8159a79655d8f86b41a89e868127a18086519786a3724fc2bbc83734613716d76fa524f563fd17231496759b224d208dcafdcebf8475b04fb556a5ea8a filename | sha512 hash -- | -- | 3bb05fe8e3f3aa52f7290cc33b606125d4ed666583d3265bac019486e8e7e5956e68a8adba849f5bf57e37ae1f784ecae42b53ae8a0e820575f6ac7553044067 | c16db681b24e3094f09b51971c94bf5f8d8347decf0e6e9fab0902b3f17e5d78f9d0908b840fcc5c29bfa38d0ffdb7ca7dbbe7e48fc3b406e748fe6de9f3f092 | ddccd9b3844bec9d237373c64f27f4e9c065d70ba0633fafb5ffd9abffd510358d08c7f5d70dd0aa9b1ef7d4e0e20e9c94e8e389b968e5d6c18a9f98723ccb10 | f36dd5017eecc6abfdaabf8ec3e91f050a0e5afb82575dbc8f37aa0fdfcb83dab144e649b5381ac8e8ec7e2fd8b50eec1044d8e342b6cbfd2bebcd92cd962171 | 797b1dae35931cc350a500095806980af3ad4381069c80d8a367a62c6e9dda27ffafd7078feafd5f12e1161825cd44fbaa481ef1982a061e25322df6850f5a8d | d784fc4986e03d925a7e855d6f9ce287405133a181a27d12d5495ca6ef3061d106c8eff62a662275d4477a10825fbbf3300c3a77ba8eb499a25a310c12df15c3 Fixed: log timestamps now include trailing zeros to maintain a fixed width (, ) [SIG Apps and Node] Fixes CSI volume attachment scaling issue by using informers. (, ) [SIG API Machinery, Apps, Node, Storage and Testing] Kubeadm increased to 5 minutes its timeout for the TLS bootstrapping process to complete upon join (, ) [SIG Cluster Lifecycle] hyperkube: Use debian-hyperkube-base@v1.1.0 image A previous release built hyperkube using the debian-hyperkube-base@v1.0.0, which was updated to address a CVE in the CNI plugins. A side-effect of using this new image was that the networking packages (namely `iptables`) drifted from the versions used in the kube-proxy images. The following issues were filed on kube-proxy failures when using hyperkube: https://github.com/kubernetes/kubernetes/issues/92275 https://github.com/kubernetes/kubernetes/issues/92272 https://github.com/kubernetes/kubernetes/issues/92250 To address this, the new debian-hyperkube-base image (v1.1.0) uses the debian-iptables base image (v12.1.0), which includes iptables-wrapper, a script used to determine the correct iptables mode to run in. (, ) [SIG Cluster Lifecycle and Release] Nothing has changed. Nothing has changed. Nothing has changed. filename | sha512 hash -- | -- | eab1264657dd76babb4159edb6ff2e85c1e4d2baaea053bd479426c8ee0ad544c4be18e1bbec5948ea4a649adb5f42bc87b15afd5e1818859d4bc61287a7ad08 | 48f16d0a9eada28eacbc90da224d64e2d8a1f1b47dd4be8baaca8a386834a7e0413a40f4938c086c1a17c44e6a87fc16cb7dc8e7ebcfbf7e34e1f71c7deb730b filename | sha512 hash -- | -- | a079b71c22b6b4893aeb9289354872f07c79e823c26a9a89ea4c72608ff5770356f5c6fb4289a72c2ef0d4bc8d835ba96074f4c188566f5aa51b32ea4a13ee4e | 4cb738c285226faa885d92495e7b3a2ad2b89fae70dc617bac7e6e2962f0c0c5fcf42c61efcac5a51b0f1c232b015cead2e3ee7f8237e27659ddedf2fe657481 | 1f9c1bfbb68ffb19297990bc8d186761e0f40714862939a9b511de770e9c2227acd24fd584986d1bf4d7e518ef0ded6dc6b8ebe8cb5e32d81484f1274ec3cfc1 | 70afde567009acc60e2c349096aca1498bbd0b65688ca9cc0e5ef1b847bb297a6c22020a2e7b3ca6832677d1a54be50b5add9b738ba15ef3716a124508517fc8 | 9dbabf46ba83b8ac08511b11685f8dd447b7d649db72315674df1ae31c663ed0f36a1cae1895765e396cfb86b1ee5d719976712d6cc4bd57cba1ff35303e3177 | a8f0ad8429c1e483471e247f79899874f8168ebc316a5b811f9dc74b562c9e227f252177572230a233a852b867f4510d257f61ebc67f0db713aac26c66151715 | 2d81d1eecf2cdb14fe44334271cb53466691948268143b6c22e0b852febbee88d1a06ffadd81a4dfc39a27cbec9781d6e861d5d99b99e2895fe358c10c2811e8 | d8efbc345e7b0833ca010598d915cc3246a01ef940cf5ee7b051929a8e212a530b1a2a27a0bcfa5721cc7823ef286a9ac93c39c005b5d86c4bfd27babc87c4dc | 71a4756ea4c4ccb19ad9103080d724bebc5993f973e5e33a25d3b020b2c3be0e3d06d9b29befc13397220e5815a42e253be12789d3236e9dceef555c85e95d01 | 30d0fb3b83222ad90fb78574b63a2de5438f06d918eff13894d34ac70946f9b06618164c7acc1e1380954f8000b9ad3d114be6c39ba19dae40a61ea8d136c9aa filename | sha512 hash -- | -- | 19c78e05023b9d41acda812f87c2588dc0297583254049324d9cd2c0a2d79997ccfa4e8c54fa19c16bd4f32f943541bedab9d5be974b4078bcf29050d849c2ef | bacec0b0dcbf7d59e78969c22235e0111e95367bd288482110c22a5d41d6a4c31f82ecf81ff09c3746981f9efbaedd3d60fede4d3129a84d9aaedd9e14a63c26 | 05531280837cbd03dc77d9a726ed1543977d96adcd8e2728e3ef6ee3966e1df7ec2dee1118acb9e449ff6a73ec27b85cb34c6f6c9c65a5c71b814726ebbaf83b | 32762d89c48eb851079c9e6c67dcbb02b04bfb7c63b04a50bfac66ea8ee6b53a41424e8f2ddddd377564e81866d10fc568bc7f2853cfd85a50a828e7206d5254 | d28ecd106e103273949e09ab1d15027ccebb6d9540c199fdb11f130c84209c6f7116acc24a34c9169c7786f20f2d0101438c3652a23925a4ed857f148c01ff6d filename | sha512 hash -- | -- | 1b7eeb2374bfdd3e6baff854b834985ea5cb73774322688ccdc1de0e138e64c643e512bf4326f5d772ceb86acbf05f48e06a354a1bbacae945d638aab51bf73e | c5d75e3db341d1a909d6acb14ad7a9c64beaae793d0af80971cd33b1f9b9361f3eceb740f78392cd42d40d7d1989edebab23ec40fb5593ec5300dd2cc72c3d36 | 98b8a5c6b8fa2958c8a63e2cd0fff3f947545c80474ceaa7d696910ab1cfaacb4fc520dd67db094573eb6f40012a947768e48ce709a51d02a657ae8c26e74b16 | ca479f42ae58f614b077f984984de76cfe8105124d7f20f0be9707007a17ba35ea06d92f3de2c4118d94cd7d10e971cd6f1477c164ca0204fcfd527d123be05e | e5c85afdb8d2ffcf80c07b8d53ee2bdd5f559d2b0cb18062c9e63dcfc52ce245e91c7e101bbc79e1cce9010ac0d08d38b6eb286f86dd9bbc495197e4e6ca803b | 929f3e575dc02fa2b229ecb369a07972536811f55823fc743002f503caee7ad2ec7b39bae08b578eb7cd709910666ba0fd345247d79a36ebb3cb99f17d68772d Fixed: log timestamps now include trailing zeros to maintain a fixed width (, ) [SIG Apps and Node] Fixes CSI volume attachment scaling issue by using informers. (, ) [SIG API Machinery, Apps, Node, Storage and Testing] Kubeadm increased to 5 minutes its timeout for the TLS bootstrapping process to complete upon join (, ) [SIG Cluster Lifecycle] hyperkube: Use debian-hyperkube-base@v1.1.0 image A previous release built hyperkube using the debian-hyperkube-base@v1.0.0, which was updated to address a CVE in the CNI plugins. A side-effect of using this new image was that the networking packages (namely `iptables`) drifted from the versions used in the kube-proxy images. The following issues were filed on kube-proxy failures when using hyperkube: https://github.com/kubernetes/kubernetes/issues/92275 https://github.com/kubernetes/kubernetes/issues/92272 https://github.com/kubernetes/kubernetes/issues/92250 To address this, the new debian-hyperkube-base image (v1.1.0) uses the debian-iptables base image (v12.1.0), which includes iptables-wrapper, a script used to determine the correct iptables mode to run in. (, ) [SIG Cluster Lifecycle and Release] Nothing has changed. Nothing has changed. Nothing has

filename | sha512 hash -- | -- | 8d2cec9d026bbed016f004c23e205e234bcd40072cda81e805ecebe6e8cc8e4b5f1685c9dc57640edc3c5c67e09ac362bfa9bae1b654fcf425d3e4e184b5b46f | 04a0180addc8c03815652b2cda14608022f0679466028eae475d88661369441f46d6f7be544d88b461508ca8c89410da1f43f51fde246cb8c8470d9c22973f0f filename | sha512 hash -- | -- | 60e5e7b72570c927915a5d9b29bc06c0efbd1f80fbf2e14ccc8811b2962263de4a22b8fc2d3645888bd56b16f21093d6e8dd346bb62ffac50f6a20ed9e1516db | 189430f4b19cb7a147e9974268874564584ac0e91aa16864e2fe9c2428e5b08f283c7d48d31bb9f05743db979f7414abace2fc4a9d6b8afc04fba2f7874ebd57 | 078cff6c8c5b902fc3326026894c68c9e8db49c1e247dafff73ed53c61547179537e60a6839ca34c4ac8632518988834427d336b71f4cbfc2dd878a6cbe48718 | 69344ab18d8f9608374cd4994ffbd878a9738b14793a41a25dfbedb0bf9a6174605507f92e7032930700c79ccc12ca899570a099d9db624d4c65580aefedbe0c | ae202fa504f9f10a9e6e8d6eb2e5407729dbcc3fbde34ecb7814994a45b7e80446cc81845d4cde661d9937fcd1b6914820ce9f1bdf30a27a72f5f96fa3483dbf | 7ee7d1e493b399e3767e526d5a80b94d099c48798f62fa8e9673f974ea87ec5461a793381d6bbfd461a32ac735f6d66faa223659ddcb825ef0a1f405a482e404 | f8f1c44843584aadacd851f3c33cdd3699ff35cff4503da40e4280586b4281af4a24736cdb6b635e486015b3476106065eb61abe06d8d9c51f70e7e6838e0536 | ff796f22edff24d84a8f8952490db78ea20570dc7752cabb60035e84368256c900d32c926a501fe70781c2bf682cca2daf920c22034c8b4d3f32679d659ea5d3 | aebf17c13b081eeeaf7608e89599441cbeed959f3895dc969beec20e2561b4a89a51d40575f01c9d6fb58d1a1057717349ad668d3bed89de77ab78396ffccad9 | 7eb3201320139379f095c9d425434edbe7e608499b04033a303e6aa3e205d2b6e7d585d2850d3d2431498f34e48c5ff49561b038f309d02439e9d5eb2e809563 filename | sha512 hash -- | -- | e85fbe9aa255cabcf58b4c18fa666d6a85effa0fc9c78d0d150abf3f89bfd13fcd55163caf02188b095310e01f49e1f32464c9e87f43cebe1043868436e0e751 | 6d6befa922522b8c6155cdeea7d56e1f21dc175b71ce2285c87a5ef591abc9590a37a56ae21792c0763ccee690110b5b6db5953aef36d607d6b21920f22e9c7f | 8158bc2fdb3577816f709a15633a1740872083032962ae0cb42a0975b614e6307e3a75fe8e58b8753a162702ef789d9c5e51ba22d754198e55339da811b05889 | d1c799ccebdfce580510cd0c5f61b30e47629cc1f837c8c2fed8408b6289fc7ff27f07a006ca04db023bb8924f963b78e10aa8538f02cf0b5a1bdbc3ed7bf1d0 | 0b8b357757b3e16ca947ff774b89524a8d2a2be94b422483dbe7148891daabdd6a626ab173084dd09854d83fff6d3c1df853fdeaab89ba289d16b7515746f13b filename | sha512 hash -- | -- | b01c34c0303116a2c7a579fec5bcd19d76fa605c6ec9fa7c9885e669437911365cf63c8be381aebab666f833ff9099be024fb139d3ddc50e5f9b6702352b5a3c | 21384a97bea7d4e97a24d660f7c1ba9b5577314f5c6602c6fa29e1501628a513489a1ce8472f6b5d0b4964625d5e9ff786ea2069a5add112eae3d28069ce3758 | 8158b7abd711a42b1ff4eb42ce49d9eeb04d8903f0daa48cd7528516dafaf6693669d8653b1360fe2630c95b78fa3552184423670fd919896411d1d25781d173 | 5fa9d1306790f8cb8b16b7e9521d46f8e56cc619acd90165180c9fb02ac9bf0908130f80a7c0fce046a4f15ab4e366ab0d9f4b18a5da8180607c343e9009433b | ccafa72087fc09e37206e73ff2b2198fd5b2a5d2e56dca31f77c12aabe42d766f877d77c6265ae7a4c180e8926ba53cb4c563bd7a4d3dca85012e7a664fa5762 | ee2f631d619ac436232db9eb4ea377526738a15ad3a88752e7a481e02cd09d848fbdf91ac8dba7905272766a3039cb1cd76afce9cf84352020eefaaaad739bf4 Resolve regression in metadata.managedFields handling in update/patch requests submitted by older API clients (, ) [SIG API Machinery and Testing] Extend AWS azToRegion method to support Local Zones (, ) [SIG Cloud Provider] Azure: set dest prefix and port for IPv6 inbound security rule (, ) [SIG Cloud Provider] Fix public IP not shown issues after assigning public IP to Azure VMs (, ) [SIG Cloud Provider] Fixed a regression preventing garbage collection of RBAC role and binding objects (, ) [SIG Auth] Fixes regression in CPUManager that caused freeing of exclusive CPUs at incorrect times (, ) [SIG Cloud Provider and Node] Fixes regression in CPUManager that had the (rare) possibility to release exclusive CPUs in app containers inherited from init containers. (, ) [SIG Node] Pod Finalizers and Conditions updates are skipped for re-scheduling attempts (, ) [SIG Scheduling] Resolve regression in metadata.managedFields handling in create/update/patch requests not using server-side apply (, ) [SIG API Machinery and Testing] Resolves an issue using `kubectl certificate approve/deny` against a server serving the v1 CSR API (, ) [SIG Auth and CLI] Build: Use debian-hyperkube-base@v1.0.0 image (, ) [SIG Cluster Lifecycle, Network and Release] Content-type and verb for request metrics are now bounded to a known set. (, ) [SIG API Machinery and Instrumentation] Update CNI to v0.8.6 (, ) [SIG Cluster Lifecycle, Network, Release and Testing] Nothing has changed. Nothing has changed. Nothing has changed. filename | sha512 hash -- | -- | 7d511c960f766f76bc087c00d706dc78ed403f661ea62ea6a2e84b9a0498826c0186f8705d18e1101ce148eecf7046f3e96e0a64aff7698a0976414a56056d4d | 93b83acf5d15cab94e1d2866b2613d1aeed67c00a9eed064988c3bc4c700e34bd854fffac730c5ed6d8e138f15ce7750c17952f33bd4918771c7da358fbf5b53 filename | sha512 hash -- | -- | cf6a22a453b88de6be0e09ad67e8bb3e364b702a86c9ba911540d4f4b2ae0872d3802f814cd471ef4ec0b2822b071489d59e21ece01f38fa567d3afd8718158f | bd3c15726d44d083f48dbc1af0f55f2d2d0c82ad020ed583bf05460a4fc9073bdd0395c2e0e4bfc74b705f4427bfe76bee0c77eb4aea83247b6627fc15d8d3f9 | 6cb3d18086e275b78c3019a51de5795f5d112482ea6dc99a58e3985269e948e054a5e38457f837add606b83d86fb1c5b9044903f9dea964d9ea84c564a8ca6e5 | cfcb89a706eb8ddc7aa8225e3f0eb76a0d973faa1c82b1bec0a457cd8b44b7bd5c154b7ed1f7cdabfdee84af8a33fd7fff83970a6ee5a97d661a806b69da968b | adbb0383ab50358e479438831168b6f3187a7cafcad84e8c22ff2ec52300be643bf535ffbe0c6ffc971120afb56703c206a64459db7b485ee67dd05d84393f5e | 32f5e6cc5a811f941faaa92667d236bb08bc245a103a2ab555569a5bf1bfd1926f30ce08635273fbea414f92c8764f8077b3e3be5ea52e90be4ed3ded9253452 | b0b2ade932e17aa4b88b147fcb6aeace81c65e795202e27c780e270a86f50fd7f863f41558b0fc37ece1196fa39047baf47568416ee6faed7946593ad35fba03 | db49113c3e5d727d6c66b17a0a5a3f7d383b7179630fb5680d278f34b35e4f3d5a1086489858a90a5417dafc42222d23ff2aacba7b7d571d3b2d9ced460877de | d2a8e6f6e93a3ce6af473372de1c52e039d14a443d93537001e1bc5e7b237768a25a9a1d891a40d50142c23df1e7d94f767d11adf949439e77328c7aafbc7a23 | 5f2739b862fbbab9f847b61f9373021b92c4d9188ff7f534125dc48d2d1e6ed51bd7bc5c987f26db3bf1d1f05a4c0f4c0ff7a0836a4ca14e56d2b12f406f1a72 filename | sha512 hash -- | -- | 5561483d796b124b8fe0e1cf5778ea03fec1e244ebc29f4b1b6c5ac93ab6bd10808d05da81b5f26426d51a3784c93ddf8b375ff971a78aebfd0ec7acac161365 | 5e0e026fb93ac5452d1ddeb5fc016dbd44276d2340088ef59916bdd264b43ab02889beb645b6b8d9e5ee02bf2fe827327478b158f80b152c073b9ecaaba6fd0e | eb0b72f79e9d0c717995f7e52d24646daa8cbaf0e1502c0b27a15acebcfa5d61495bee49cc6ba4eb4ed8d4e1d9aae29170a86c70240da56f8fb9360dabb9ec7b | 52ef224a68d3ea50f320ca43b2ec98fedc07431b05db6fb00556b870bb8a533aa1ceb5f5ad90ea3d41f611045014a387ae84de5df8c51c6fbf8fa1e0d8c07d31 | eb4581d2419734c4835ebd2a91a40fa7e1180c8b8ff4088c9d1995c11787b7d6b7cb26cedfdce8c53affc648b106fe852ed53f165142f1089c27f9368570025d filename | sha512 hash -- | -- | 1027a6fccadd320f123894dc624db31539333deef0b3d51b4bd3efc9214f2d74a0a50c53dc28e5801426d3c9556f82f4e06042c824151fea9112df795976d158 | 9dfd609692372660152c6fe6d08be082b0d20d4c70546d722ce5aa5565cc6d810bb0cdac6b98d9a9374382b9dcf8819e4e1d263481791e044cfef5d3980d0b13 | d0b0a8ac1f448df7c3bb2254000e0ca8567fafe1fd4e680c75a6c8d40dcc9d4b9ae34648532aef50a953be99d41d62464d704b516c33745fc169337684e7433b | b5f3a0e3b2b26d3ac5b8be808355233787c1d3663268da88096351b39b6ff6e58befff97dab109b6324ad050fe2a361ac6b35dbdab7f2dd85dc013d881baecf9 | 52c9cc8a09c5d5c9150dc023b759ebe77632121a54bf0936b96f4148b7e421964f39bdad4fcd1002f453c012a03d928888cc04520a10a96ea45d798a7cd2ca7b | f83802db06a86edd9ade8e737ed0e8a11ebeeaa69e102f9550b90f0d8a724e7864f6531f7f500ff70d4202168a774c5b328fea1ec0a95b9e275a0233a852f04f An issue preventing GCP cloud-controller-manager running out-of-cluster to initialize new Nodes is now fixed. (, ) [SIG Apps and Cloud Provider] Avoid unnecessary scheduling churn when annotations are updated while Pods are being scheduled. (, ) [SIG Scheduling] Base-images: Update to kube-cross:v1.13.9-5 (, ) [SIG Release and Testing] CSINode initialization does not crash kubelet on startup when APIServer is not reachable or kubelet has not the right credentials yet. (, ) [SIG Storage] Fix IPVS compatibility issue with older kernels (< 3.18) where the netlink address family attribute is not set (, ) [SIG Cluster Lifecycle, Network and Testing] Fix flaws in Azure CSI translation (, ) [SIG Cloud Provider] Fix: Init containers are now considered for the calculation of resource requests when scheduling (, ) [SIG Scheduling] Fix: azure disk dangling attach issue which would cause API throttling (, ) [SIG Cloud Provider] Fix: support removal of nodes backed by deleted non VMSS instances on Azure (, ) [SIG Cloud Provider] Fixed a 1.18 regression in

that skips the backoff period on the first repeat (, ) [SIG API Machinery] Fixed a regression running kubectl commands with --local or --dry-run flags when no kubeconfig file is present (, ) [SIG API Machinery, CLI and Testing] Fixes a bug defining a default value for a replicas field in a custom resource definition that has the scale subresource enabled (, ) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation] Fixes a regression in 1.17 that dropped cache-control headers on API requests (, ) [SIG API Machinery and Testing] Kubeadm: increase robustness for "kubeadm join" when adding etcd members on slower setups (, ) [SIG Cluster Lifecycle] Provides a fix to allow a cluster in a private Azure cloud to authenticate to ACR in the same cloud. (, ) [SIG Cloud Provider] Scheduling failures due to no nodes available are now reported as unschedulable under ```scheduleattemptstotal``` metric. (, ) [SIG Scheduling] base-images: Use debian-base:v2.1.0 (includes CVE fixes) base-images: Use debian-iptables:v12.1.0 (includes CVE fixes) (, ) [SIG API Machinery, Cluster Lifecycle and Release] Nothing has changed. k8s.io/kube-openapi: bf4fb3b 61e04a5 github.com/docker/libnetwork: filename | sha512 hash -- | -- | `2f8e853bd59731410259d5357d9969425fbbbea378bbe6cdd0f7a9ddf5c25924838300924b03ec15d6b9030be86bea9d26bb9b63078bf2c150b0bbc0859419d7` | `0915b658c53b9bad1b3913470cb6728bc51fd49e8ac7778d4653c7271642d56a51ae83e58b9a1829a8df8970e73411f02c5ab277f8a9ba4befc4ba933800a9c5` filename | sha512 hash -- | -- | `0a0c94fe16819eb16ca7ef0110a2a45ad5368a5cb326ca48e1d72ef56488c5c273fcfa15e9704492dfb3188447800cf109bf434b6d646a2c01c833eccaa7ebbe` | `46a056b3bf9936498c1bbb78ca6d882c17271723676ec53409fe6fd67c7f8a9cb0ab00e286f8ab2231216fabbcfec72f943c29827068ab66d6029f585faccfcb` | `58f137f3d13b213a153e7589d82040d5f1aee525368de974c134494c14d0f88526e4b1db9022dd728d47fe13ff1c4c97fba94e3b2ebc746ec537bebf41817d53` | `ed36f49e19d8e0a98add7f10f981feda8e59d32a8cb41a3ac6abdfb2491b3b5b3b6e0b00087525aa8473ed07c0e8a171ad43f311ab041dcc40f72b36fa78af95` | `ae3b7a8f85d2f262b0f24d277602034cd6657aa0a0467768b87c379b821963c10e35cff8131f666038feb2a2e543725c0025ed84a7a254c6e96036b911988530` | `54b10261c354e99d3eeee862461f0c3f99ff0e3b603230da7a48e182fd5890e438ff5bc8daafc74a3be9411a873d9ed611cea99c038fff53aa9e57d8d7140662` | `b9694a0cf9e42bc9299d923de79e61ec52419a1889605cfd2eb5e6f9277191a0a1c6b7ceaf251735e576ad4aa73465c1c6a48b977243e45b6449fe7017dad18b` | `144861c7cfc28b63da11de4b847d68bb4a984b5eeb54ccbccf998bd87e0e2832d38d3610056cf2e5d3a59535a0f8213bebd9369f0f6c1fd947afad41fdcc8837` | `3fa6e6fdf88b7f9ae7dc8f95526977aea6e2fe65fdbb988c2ea40d160ba30342453ee9e0ce022c69d8635405ad92c6672d775e8e477cf3c937c1bbb7217fb279` | `733887310c94e70fb33c6fbea9c5e7d4a74b4c2402735ed7856eb2e009bb0ed2aab3abeb1d13b46681e876df6901bd2be6547a25061a8e8df442301179b82fc9` filename | sha512 hash -- | -- | `f808e85a5e6f8dfed18ee3479691be8283c13c787ad5abb1a06f1c84aa7e7894af9028c6edcc4cdfe2cccf58e9c8394a6958facc92364d388a62ebf6aa9db2e8` | `7ec6d47cda5f8f2cafaa82ac1179dc181d93562d1a2ad7687dca5dba8737498c0488275eb0ba33018c48e684550fa8612d03726251ed24fdebc893286528a401` | `f5341be0c84cbf383662ed333bb2f9a4b83f80b6ebe77526ed2a407e3cd566f643be030c367606da4eb563523119f7bd8a9a7173b91cc5466602b5f9e1c34921` | `1c861320ddd63c9731781079fb00d9b0c80befe9b98103056f3abdd214cdd4974b1d79196491fb7c953d0126343fb6d7b9a6a7ca1684b8d8c5db686e1647106b` | `5e57f536844d606873412a5ca46e85c4a6deae5e5dc415b3fbd0b20a58750cd0360265bc237102a8050db795c1293d6d7530cb5183e0ca25bc8e93f3f5fc650c` filename | sha512 hash -- | -- | `b342dbb9fce1c2667ed255e0b7457063e7f4827a74d4c946087bb471144a552e93e17e624075273fd72b1788fc9219ae46a8d8b1c247b2f26320e932143fef1b` | `d74d6b9a0c05623fb5f3b7423517c3a8c03f6fd18525554cae5704cadc3676d70d42d0537de70f7b7619e31640a8c510b4321e0eeada49300d9c92cac2a9217a` | `d80716155df8ee997b4d81573ab713a04f64e91ec0e7c6c77af2e0031bbbe1f250cc463a7788e548217f6e7071caf458239869f2863737f3007a8cf79abff9cc` | `89fe1dbbbefe36169232b46b564fc46b96cf6987bca8c1f9c61475d07a771c65f63cdf4c66168e9c515ec862f65b83d5a7668425e956a109e1aa60e0988d4a57` | `734e11c10c4e8dea9931ce0e832dac8495808acb7940ca2be4a13cedbea53b537973320e80b9f021c37c10c9510dcf328b0f975c40afebc301ea3d3937a3c36a` | `f121f7893c102ecd491189077ccbddd7aa0625cf2bfe855a7be00cfe615e6d397928cb5448092993626f33b216e89ac11bd0c09255847e1b6ba9a54a933eee53` Client-go: resolves an issue with informers falling back to full list requests when timeouts are encountered, rather than re-establishing a watch. (, ) [SIG API Machinery and Testing] Fix scheduler crash when removing node before its pods (, ) [SIG Scheduling] Fixes conversion error for HorizontalPodAutoscaler objects with invalid annotations (, ) [SIG Autoscaling] Fixes kubectl apply/prune in namespace other than default. (, ) [SIG CLI and Testing] For GCE cluster provider, fix bug of not being able to create internal type load balancer for clusters with more than 1000 nodes in a single zone. (, ) [SIG Cloud Provider, Network and Scalability] Restores priority of static control plane pods in the cluster/gce/manifests control-plane manifests (, ) [SIG Cluster Lifecycle and Node] filename | sha512 hash -- | -- | `460dcc0b27fdfd9b4a574287708c0fef22224bd4c1bc777654a69a76c7dafb37e6a37b028aeaa8d79e202c2265fe4b322af6a95515cd438e44de7d55dac176b3` | `adc6b3ccc9792794b97d2c8c7e5d582ac92aedfa83bb9cdfb782057ce4e80985e940eeb8f3e943b90919927fe8ce65863077e526b56e7675ee1d5d66760d08b6` filename | sha512 hash -- | -- | `fe7c496778172012504839175c48c69337afc7341c8c71d2858bf9319a2bb4673abeb95b1415ae4abaa2364f24b410edaada963beeb614b361f6d412bf4c9352` | `a62a894ae001cb3f245595488a46c8c8c5c52d15eb9eefc7b458df6c93399e58eba52d1ca0dc8df1ee74ea75ecea3ab4853eea4bf830dfb89be3b4d6a5d0d83c` | `4cd898e86510f17d0a34c8721f942d81bdaafbf4d6513efde2710aad7dc44e89b6d986491c444f57ad9f183ac376031ecdb8e6dbee7dea76f7e4df116fb3998a` | `37e664e40bb31765572215cf262a5c9bbc7748d158d0db58dbec2d5e593b54d71586af77296eda1cec2a2230b1d27260c51f6410b83afeeafc3c5354c308b4c4` | `196977d4a09046abb168ea4c6cde261a90226cd391d74877ce1d9907bc8ba670d0365311980422493125a2cde8648ece0035ff1af6d9507975428129de603c83` | `675f27c170eb888f08db834f03b8123d19f0f2dd357c694c6c1cae59067c8d6b0b2db82b9cefc105dd16079ef6f7261e03fe9a73089c03dd3d53b1d68ed1cf68` | `dd317cf29ed7cfa664a0f88651273565ca831138994cb37d8d53f5ba3993a6da529a377ded98d65c31450b31e1647fb87bc708f2aec6b2ef6a2bea9c73fb73fb` | `57db3fcc952ad57d94f3b92022c1881b3852b321535501af7b2dfca9eb0acde03a34c5863aad6fe304fc4aaa922ff538d5dae7bc8c375a05956f892c265fbaf1` | `ad52ae356e9d0156bdaa5ed4c77cd0226610fd715093e2caf7466c1bf87bb9bb2f21a48e9676f265c52de301bc416ce17cda5ac9fd7d379323c977c5f07ee9cd` | `efe66bb5ae58e06c7787b98fc69e191502dadecf719636788f25bff7bd0e50d7d170c5e729611406c304afd159b33b0048c436e823276b0fc9d4c07904ba7974` filename | sha512 hash -- | -- | `2183d1fcfca1370f75146797100801d7fbfec97789d1ca5eef4aff79bf66e01869ddaac51ab76abc073026682fe4d7ee658ffed99b5324ad285019c8dabcfea6` | `8ca77be8dd999e0a31bb9de597f383628941b7d6537cec19ce3a77c8f4fc537c649e9ce0bd43ec4ecb387d224654804f6f4682c80c26ba7e97cab6aff5b57e21` | `b1eacba21d8740bba785f94b66aea1fb9e4529bea9740d938cd52409acc970f0a93ec5c857059d3d3f555f9eb6cd4f799c42266ad493676b3fed7f1deaf5a878` | `dc8426bd333aa2fe703003356a6237df760c6753c142e6fea28cbf13656e53eb26d99b862000813ba94fe2041fc073271217879b7036546a7bd4b848aa569f6b` | `2398638d5724627573326b6820cb268d30d47f18afc913d367f518ba8cde8a419b0dc394b925be310c95aa0f3705f625ff0f628a11da38cdf94da4f493e9bb75` filename | sha512 hash -- | -- | `88a9b68c8cba77fe50751d998117ab632d1e8aa12a45f6bef71a24ee5a8fb6f559d00f129b8682f9d5838671edb6649e3c9caebdf9ce2a37f282f21316a522e0` | `3b558a1743893a994ec061a86aaf343d90e800d7ccd69c771b92d8915fc14217046a2f4817829dbdbe025331fe733ae401dbf671b4345d7a88b0c6470fbd99e8` | `534b3db7e21f247189a484bb57958a3276bf74268d5943d712e68db50806afeeb1253acdc6a4c639c6ac08045e95ac4f9aaf95fa8192c85a19831329068bf5c6` | `0bb1c7ee23ce7dbee0614e2d8fb8d79e0a36615ea4ea39ef97acf4e907ca5a9b57ee3735afc7b5bce8dd5b15f104cf37e1d92168684bb4e5fd053ed3c35802e6` | `e4529b0804696c8bae9430411d5b51087fa6c204bef37a1c6e30d01490c7e996367f1e9aa1d9c10ca2faf9d90c02459fc36c64b1790fa88b703bb134df54c1c1` | `7d976b1b22766cdd65b2b84602053b765e487d947966b4aaa3b169bb462d095e6a794154cd920b2c5e8a2d59695b75435ddb1237bc07404bba1273a0db01539e` deps: Update to Golang 1.13.9 build: Remove kube-cross image building (, ) [SIG Release and Testing] Azure: fix concurreny issue in lb creation (, ) [SIG Cloud Provider] Ensure Azure availability zone is always in lower cases. (, ) [SIG Cloud Provider] Fix kubectl diff so it doesn't actually persist patches (, ) [SIG CLI and Testing] Fix: get attach disk error due to missing item in max count table (, ) [SIG Cloud Provider and Storage] Fixed the EndpointSlice controller to run without error on a cluster with the OwnerReferencesPermissionEnforcement validating admission plugin enabled. (, ) [SIG Auth and Network] Fixes kubectl to apply all validly built objects, instead of stopping on error. (, ) [SIG CLI and Testing] In the kubelet resource metrics endpoint at /metrics/resource, change the names of the following metrics: nodecpuusageseconds --> nodecpuusageseconds_total containercpuusageseconds --> containercpuusageseconds_total This is a partial revert of , which was added in

and initially removed the _total suffix (, ) [SIG Instrumentation and Node] Kubeadm: during join when a check is performed that a Node with the same name already exists in the cluster, make sure the NodeReady condition is properly validated (, ) [SIG Cluster Lifecycle] Kubeadm: fix a bug where post upgrade to 1.18.x, nodes cannot join the cluster due to missing RBAC (, ) [SIG Cluster Lifecycle] Kubectl azure authentication: fixed a regression in 1.18.0 where "spn:" prefix was unexpectedly added to the `apiserver-id` configuration in the kubeconfig file (, ) [SIG API Machinery and Auth] Kubectl: Fixes bug by aggregating 'apply' errors instead of failing after first error (, ) [SIG CLI and Testing] Reduce event spam during a volume operation error. (, ) [SIG Storage] filename | sha512 hash -- | -- | `cd5b86a3947a4f2cea6d857743ab2009be127d782b6f2eb4d37d88918a5e433ad2c7ba34221c34089ba5ba13701f58b657f0711401e51c86f4007cb78744dee7` | `fb42cf133355ef18f67c8c4bb555aa1f284906c06e21fa41646e086d34ece774e9d547773f201799c0c703ce48d4d0e62c6ba5b2a4d081e12a339a423e111e52` filename | sha512 hash -- | -- | `26df342ef65745df12fa52931358e7f744111b6fe1e0bddb8c3c6598faf73af997c00c8f9c509efcd7cd7e82a0341a718c08fbd96044bfb58e80d997a6ebd3c2` | `803a0fed122ef6b85f7a120b5485723eaade765b7bc8306d0c0da03bd3df15d800699d15ea2270bb7797fa9ce6a81da90e730dc793ea4ed8c0149b63d26eca30` | `110844511b70f9f3ebb92c15105e6680a05a562cd83f79ce2d2e25c2dd70f0dbd91cae34433f61364ae1ce4bd573b635f2f632d52de8f72b54acdbc95a15e3f0` | `594ca3eadc7974ec4d9e4168453e36ca434812167ef8359086cd64d048df525b7bd46424e7cc9c41e65c72bda3117326ba1662d1c9d739567f10f5684fd85bee` | `d3627b763606557a6c9a5766c34198ec00b3a3cd72a55bc2cb47731060d31c4af93543fb53f53791062bb5ace2f15cbaa8592ac29009641e41bd656b0983a079` | `ba9056eff1452cbdaef699efbf88f74f5309b3f7808d372ebf6918442d0c9fea1653c00b9db3b7626399a460eef9b1fa9e29b827b7784f34561cbc380554e2ea` | `f80fb3769358cb20820ff1a1ce9994de5ed194aabe6c73fb8b8048bffc394d1b926de82c204f0e565d53ffe7562faa87778e97a3ccaaaf770034a992015e3a86` | `a9b658108b6803d60fa3cd4e76d9e58bf75201017164fe54054b7ccadbb68c4ad7ba7800746940bc518d90475e6c0a96965a26fa50882f4f0e56df404f4ae586` | `18adffab5d1be146906fd8531f4eae7153576aac235150ce2da05aee5ae161f6bd527e8dec34ae6131396cd4b3771e0d54ce770c065244ad3175a1afa63c89e1` | `162396256429cef07154f817de2a6b67635c770311f414e38b1e2db25961443f05d7b8eb1f8da46dec8e31c5d1d2cd45f0c95dad1bc0e12a0a7278a62a0b9a6b` filename | sha512 hash -- | -- | `a92f8d201973d5dfa44a398e95fcf6a7b4feeb1ef879ab3fee1c54370e21f59f725f27a9c09ace8c42c96ac202e297fd458e486c489e05f127a5cade53b8d7c4` | `62fbff3256bc0a83f70244b09149a8d7870d19c2c4b6dee8ca2714fc7388da340876a0f540d2ae9bbd8b81fdedaf4b692c72d2840674db632ba2431d1df1a37d` | `842910a7013f61a60d670079716b207705750d55a9e4f1f93696d19d39e191644488170ac94d8740f8e3aa3f7f28f61a4347f69d7e93d149c69ac0efcf3688fe` | `95c5b952ac1c4127a5c3b519b664972ee1fb5e8e902551ce71c04e26ad44b39da727909e025614ac1158c258dc60f504b9a354c5ab7583c2ad769717b30b3836` | `a46522d2119a0fd58074564c1fa95dd8a929a79006b82ba3c4245611da8d2db9fd785c482e1b61a9aa361c5c9a6d73387b0e15e6a7a3d84fffb3f65db3b9deeb` filename | sha512 hash -- | -- | `f714f80feecb0756410f27efb4cf4a1b5232be0444fbecec9f25cb85a7ccccdcb5be588cddee935294f460046c0726b90f7acc52b20eeb0c46a7200cf10e351a` | `806000b5f6d723e24e2f12d19d1b9b3d16c74b855f51c7063284adf1fcc57a96554a3384f8c05a952c6f6b929a05ed12b69151b1e620c958f74c9600f3db0fcb` | `c207e9ab60587d135897b5366af79efe9d2833f33401e469b2a4e0d74ecd2cf6bb7d1e5bc18d80737acbe37555707f63dd581ccc6304091c1d98dafdd30130b7` | `a542ed5ed02722af44ef12d1602f363fcd4e93cf704da2ea5d99446382485679626835a40ae2ba47a4a26dce87089516faa54479a1cfdee2229e8e35aa1c17d7` | `651e0db73ee67869b2ae93cb0574168e4bd7918290fc5662a6b12b708fa628282e3f64be2b816690f5a2d0f4ff8078570f8187e65dee499a876580a7a63d1d19` | `d726ed904f9f7fe7e8831df621dc9094b87e767410a129aa675ee08417b662ddec314e165f29ecb777110fbfec0dc2893962b6c71950897ba72baaa7eb6371ed` A complete changelog for the release notes is now hosted in a customizable format at . Check it out and please give us your feedback! A beta feature of Kubernetes in release 1.18, the enables NUMA alignment of CPU and devices (such as SR-IOV VFs) that will allow your workload to run in an environment optimized for low-latency. Prior to the introduction of the Topology Manager, the CPU and Device Manager would make resource allocation decisions independent of each other. This could result in undesirable allocations on multi-socket systems, causing degraded performance on latency critical applications. Server-side Apply was promoted to Beta in 1.16, but is now introducing a second Beta in 1.18. This new version will track and manage changes to fields of all new Kubernetes objects, allowing you to know what changed your resources and when. In Kubernetes 1.18, there are two significant additions to Ingress: A new `pathType` field and a new `IngressClass` resource. The `pathType` field allows specifying how paths should be matched. In addition to the default `ImplementationSpecific` type, there are new `Exact` and `Prefix` path types. The `IngressClass` resource is used to describe a type of Ingress within a Kubernetes cluster. Ingresses can specify the class they are associated with by using a new `ingressClassName` field on Ingresses. This new resource and field replace the deprecated `kubernetes.io/ingress.class` annotation. SIG CLI was debating the need for a debug utility for quite some time already. With the development of , it became more obvious how we can support developers with tooling built on top of `kubectl exec`. The addition of the `kubectl debug` (it is alpha but your feedback is more than welcome), allows developers to easily debug their Pods inside the cluster. We think this addition is invaluable. This command allows one to create a temporary container which runs next to the Pod one is trying to examine, but also attaches to the console for interactive troubleshooting. With the release of Kubernetes 1.18, an alpha version of CSI Proxy for Windows is getting released. CSI proxy enables non-privileged (pre-approved) containers to perform privileged storage operations on Windows. CSI drivers can now be supported in Windows by leveraging CSI proxy. SIG Storage made a lot of progress in the 1.18 release. In particular, the following storage features are moving to GA in Kubernetes 1.18: Raw Block Support: Allow volumes to be surfaced as block devices inside containers instead of just mounted filesystems. Volume Cloning: Duplicate a PersistentVolumeClaim and underlying storage volume using the Kubernetes API via

CSIDriver Kubernetes API Object: Simplifies CSI driver discovery and allows CSI Drivers to customize Kubernetes behavior. SIG Storage is also introducing the following new storage features as alpha in Kubernetes 1.18: Windows CSI Support: Enabling containerized CSI node plugins in Windows via new Recursive Volume Ownership OnRootMismatch Option: Add a new OnRootMismatch policy that can help shorten the mount time for volumes that require ownership change and have many directories and files. SIG Network is moving IPv6 to Beta in Kubernetes 1.18, after incrementing significantly the test coverage with new CI jobs. NodeLocal DNSCache is an add-on that runs a dnsCache pod as a daemonset to improve clusterDNS performance and reliability. The feature has been in Alpha since 1.13 release. The SIG Network is announcing the GA graduation of Node Local DNSCache No Known Issues Reported in an `--encryption-provider-config` config file, an explicit `cacheSize: 0` parameter previously silently defaulted to caching 1000 keys. In Kubernetes 1.18, this now returns a config validation error. To disable caching, you can specify a negative cacheSize value in Kubernetes 1.18+. consumers of the 'certificatesigningrequests/approval' API must now have permission to 'approve' CSRs for the specific signer requested by the CSR. More information on the new signerName field and the required authorization can be found at https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests#authorization (, ) [SIG API Machinery, Apps, Auth, CLI, Node and Testing] The following features are unconditionally enabled and the corresponding `--feature-gates` flags have been removed: `PodPriority`, `TaintNodesByCondition`, `ResourceQuotaScopeSelectors` and `ScheduleDaemonSetPods` (, ) [SIG Apps and Scheduling] `--enable-cadvisor-json-endpoints` is now disabled by default. If you need access to the cAdvisor v1 Json API please enable it explicitly in the kubelet command line. Please note that this flag was deprecated in 1.15 and will be removed in 1.19. (, ) [SIG Instrumentation, Node and Testing] Promote CSIMigrationOpenStack to Beta (off by default since it requires installation of the OpenStack Cinder CSI Driver. The in-tree AWS OpenStack Cinder driver "kubernetes.io/cinder" was deprecated in 1.16 and will be removed in 1.20. Users should enable CSIMigration + CSIMigrationOpenStack features and install the OpenStack Cinder CSI Driver (https://github.com/kubernetes/cloud-provider-openstack) to avoid disruption to existing Pod and PVC objects at that time. Users should start using the OpenStack Cinder CSI Driver directly for any new volumes. (, ) [SIG Cloud Provider] `kubectl` and k8s.io/client-go no longer default to a server address of `http://localhost:8080`. If you own one of these legacy clusters, you are strongly encouraged to secure your server. If you cannot secure your server, you can set the `$KUBERNETES_MASTER` environment variable to `http://localhost:8080` to continue defaulting the server address. `kubectl` users can also set the server address using the `--server` flag, or in a kubeconfig file specified via `--kubeconfig` or `$KUBECONFIG`. (, ) [SIG API Machinery, CLI and Testing] `kubectl run` has removed the previously deprecated generators, along with flags unrelated to creating pods. `kubectl run` now only creates pods. See specific `kubectl create` subcommands to create objects other than pods. (, ) [SIG Architecture, CLI and Testing] The deprecated command `kubectl rolling-update` has been removed (, ) [SIG Architecture, CLI and Testing] Signatures on methods in generated clientsets, dynamic, metadata, and scale clients have been modified to accept `context.Context` as a first argument. Signatures of Create, Update, and Patch methods have been updated to accept CreateOptions, UpdateOptions and PatchOptions respectively. Signatures of Delete and DeleteCollection methods now accept DeleteOptions by value instead of by reference. Generated clientsets with the previous interface have been added in new "deprecated" packages to allow incremental migration to the new

The deprecated packages will be removed in the 1.21 release. A tool is available at http://sigs.k8s.io/clientgofix to rewrite method invocations to the new signatures. The following deprecated metrics are removed, please convert to the corresponding metrics: The following replacement metrics are available from v1.14.0: `restclientrequestlatencyseconds` -> `restclientrequestdurationseconds` `schedulerschedulinglatencyseconds` -> `schedulerschedulingdurationseconds ` `dockeroperations` -> `dockeroperations_total` `dockeroperationslatencymicroseconds` -> `dockeroperationsdurationseconds` `dockeroperationserrors` -> `dockeroperationserrors_total` `dockeroperationstimeout` -> `dockeroperationstimeout_total` `networkpluginoperationslatencymicroseconds` -> `networkpluginoperationsdurationseconds` `kubeletpodworkerlatencymicroseconds` -> `kubeletpodworkerdurationseconds` `kubeletpodstartlatencymicroseconds` -> `kubeletpodstartdurationseconds` `kubeletcgroupmanagerlatencymicroseconds` -> `kubeletcgroupmanagerdurationseconds` `kubeletpodworkerstartlatencymicroseconds` -> `kubeletpodworkerstartdurationseconds` `kubeletplegrelistlatencymicroseconds` -> `kubeletplegrelistdurationseconds` `kubeletplegrelistintervalmicroseconds` -> `kubeletplegrelistintervalseconds` `kubeletevictionstatsagemicroseconds` -> `kubeletevictionstatsageseconds` `kubeletruntimeoperations` -> `kubeletruntimeoperations_total` `kubeletruntimeoperationslatencymicroseconds` -> `kubeletruntimeoperationsdurationseconds` `kubeletruntimeoperationserrors` -> `kubeletruntimeoperationserrors_total` `kubeletdevicepluginregistrationcount` -> `kubeletdevicepluginregistrationtotal` `kubeletdevicepluginalloclatencymicroseconds` -> `kubeletdevicepluginallocdurationseconds` `schedulere2eschedulinglatencymicroseconds` -> `schedulere2eschedulingdurationseconds` `schedulerschedulingalgorithmlatencymicroseconds` -> `schedulerschedulingalgorithmdurationseconds` `schedulerschedulingalgorithmpredicateevaluation` -> `schedulerschedulingalgorithmpredicateevaluation_seconds` `schedulerschedulingalgorithmpriorityevaluation` -> `schedulerschedulingalgorithmpriorityevaluation_seconds` `schedulerschedulingalgorithmpreemptionevaluation` -> `schedulerschedulingalgorithmpreemptionevaluation_seconds` `schedulerbindinglatencymicroseconds` -> `schedulerbindingdurationseconds` `kubeproxysyncproxyruleslatencymicroseconds` -> `kubeproxysyncproxyrulesdurationseconds` `apiserverrequestlatencies` -> `apiserverrequestduration_seconds` `apiserverdroppedrequests` -> `apiserverdroppedrequests_total` `etcdrequestlatenciessummary` -> `etcdrequestdurationseconds` `apiserverstoragetransformationlatenciesmicroseconds ` -> `apiserverstoragetransformationdurationseconds` `apiserverstoragedatakeygenerationlatenciesmicroseconds` -> `apiserverstoragedatakeygenerationdurationseconds` `apiserverrequestcount` -> `apiserverrequesttotal` `apiserverrequestlatencies_summary` The following replacement metrics are available from v1.15.0: `apiserverstoragetransformationfailurestotal` -> `apiserverstoragetransformationoperationstotal` (, ) [SIG API Machinery, Cluster Lifecycle, Instrumentation, Network, Node and Scheduling] the following deprecated APIs can no longer be served: All resources under `apps/v1beta1` and `apps/v1beta2` - use `apps/v1` instead `daemonsets`, `deployments`, `replicasets` resources under `extensions/v1beta1` - use `apps/v1` instead `networkpolicies` resources under `extensions/v1beta1` - use `networking.k8s.io/v1` instead `podsecuritypolicies` resources under `extensions/v1beta1` - use `policy/v1beta1` instead (, ) [SIG API Machinery, Apps, Cluster Lifecycle, Instrumentation and Testing] Azure service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset has been deprecated. Its support would be removed in a future release. (, ) [SIG Cloud Provider] The StreamingProxyRedirects feature and `--redirect-container-streaming` flag are deprecated, and will be removed in a future release. The default behavior (proxy streaming requests through the kubelet) will be the only supported option. If you are setting `--redirect-container-streaming=true`, then you must migrate off this configuration. The flag will no longer be able to be enabled starting in v1.20. If you are not setting the flag, no action is necessary. (, ) [SIG API Machinery and Node] resource metrics endpoint `/metrics/resource/v1alpha1` as well as all metrics under this endpoint have been deprecated. Please convert to the following metrics emitted by endpoint `/metrics/resource`: scrapeerror --> scrapeerror nodecpuusagesecondstotal --> nodecpuusage_seconds nodememoryworkingsetbytes --> nodememoryworkingsetbytes containercpuusagesecondstotal --> containercpuusage_seconds containermemoryworkingsetbytes --> containermemoryworkingsetbytes scrapeerror --> scrapeerror (, ) [SIG Node] In a future release, kubelet will no longer create the CSI NodePublishVolume target directory, in accordance with the CSI specification. CSI drivers may need to be updated accordingly to properly create and process the target path. () [SIG Storage] `--healthz-port` and `--metrics-port` flags are deprecated, please use `--healthz-bind-address` and `--metrics-bind-address` instead (, ) [SIG Network] a new `EndpointSliceProxying` feature gate has been added to control the use of EndpointSlices in kube-proxy. The EndpointSlice feature gate that used to control this behavior no longer affects kube-proxy. This feature has been disabled by default. (, ) command line option "kubelet-version" for `kubeadm upgrade node` has been deprecated and will be removed in a future release. (, ) [SIG Cluster Lifecycle] deprecate the usage of the experimental flag '--use-api' under the 'kubeadm alpha certs renew' command. (, ) [SIG Cluster Lifecycle] kube-dns is deprecated and will not be supported in a future version (, ) [SIG Cluster Lifecycle] the `ClusterStatus` struct present in the kubeadm-config ConfigMap is deprecated and will be removed in a future version. It is going to be maintained by kubeadm until it gets removed. The same information can be found on `etcd` and `kube-apiserver` pod annotations, `kubeadm.kubernetes.io/etcd.advertise-client-urls` and `kubeadm.kubernetes.io/kube-apiserver.advertise-address.endpoint` respectively. (, ) [SIG Cluster Lifecycle] the boolean and unset values for the --dry-run flag are deprecated and a value --dry-run=server|client|none will be required in a future

(, ) [SIG CLI] `kubectl apply --server-dry-run` is deprecated and replaced with --dry-run=server (, ) [SIG CLI] Remove cluster-monitoring addon (, ) [SIG Cluster Lifecycle, Instrumentation, Scalability and Testing] The `schedulingdurationseconds` summary metric is deprecated (, ) [SIG Scheduling] The `schedulingalgorithmpredicateevaluationseconds` and `schedulingalgorithmpriorityevaluationseconds` metrics are deprecated, replaced by `frameworkextensionpointdurationseconds, ) [SIG Scheduling] `AlwaysCheckAllPredicates` is deprecated in scheduler Policy API. (, ) [SIG Scheduling] The k8s.io/node-api component is no longer updated. Instead, use the RuntimeClass types located within k8s.io/api, and the generated clients located within k8s.io/client-go (, ) [SIG Node and Release] Removed the 'client' label from apiserverrequesttotal. (, ) [SIG API Machinery and Instrumentation] A new IngressClass resource has been added to enable better Ingress configuration. (, ) [SIG API Machinery, Apps, CLI, Network, Node and Testing] The CSIDriver API has graduated to storage.k8s.io/v1, and is now available for use. (, ) [SIG Storage] autoscaling/v2beta2 HorizontalPodAutoscaler added a `spec.behavior` field that allows scale behavior to be configured. Behaviors are specified separately for scaling up and down. In each direction a stabilization window can be specified as well as a list of policies and how to select amongst them. Policies can limit the absolute number of pods added or removed, or the percentage of pods added or removed. (, ) [SIG API Machinery, Apps, Autoscaling and CLI] Ingress: `spec.ingressClassName` replaces the deprecated `kubernetes.io/ingress.class` annotation, and allows associating an Ingress object with a particular controller. path definitions added a `pathType` field to allow indicating how the specified path should be matched against incoming requests. Valid values are `Exact`, `Prefix`, and `ImplementationSpecific` (, ) [SIG Apps, Cluster Lifecycle and Network] The alpha feature `AnyVolumeDataSource` enables PersistentVolumeClaim objects to use the spec.dataSource field to reference a custom type as a data source (, ) [SIG Apps and Storage] The alpha feature `ConfigurableFSGroupPolicy` enables v1 Pods to specify a spec.securityContext.fsGroupChangePolicy policy to control how file permissions are applied to volumes mounted into the pod. (, ) [SIG Storage] The alpha feature `ServiceAppProtocol` enables setting an `appProtocol` field in ServicePort and EndpointPort definitions. (, ) [SIG Apps and Network] The alpha feature `ImmutableEphemeralVolumes` enables an `immutable` field in both Secret and ConfigMap objects to mark their contents as immutable. (, ) [SIG Apps, CLI and Testing] The beta feature `ServerSideApply` enables tracking and managing changed fields for all new objects, which means there will be `managedFields` in `metadata` with the list of managers and their owned fields. The alpha feature `ServiceAccountIssuerDiscovery` enables publishing OIDC discovery information and service account token verification keys at `/.well-known/openid-configuration` and `/openid/v1/jwks` endpoints by API servers configured to issue service account tokens. (, ) [SIG API Machinery, Auth, Cluster Lifecycle and Testing] CustomResourceDefinition schemas that use `x-kubernetes-list-map-keys` to specify properties that uniquely identify list items must make those properties required or have a default value, to ensure those properties are present for all list items. See https://kubernetes.io/docs/reference/using-api/api-concepts/#merge-strategy for details. (, ) [SIG API Machinery and Testing] CustomResourceDefinition schemas that use `x-kubernetes-list-type: map` or `x-kubernetes-list-type: set` now enable validation that the list items in the corresponding custom resources are unique. (, ) [SIG API Machinery] The `--egress-selector-config-file` configuration file now accepts an apiserver.k8s.io/v1beta1 EgressSelectorConfiguration configuration object, and has been updated to allow specifying HTTP or GRPC connections to the network proxy (, ) [SIG API Machinery, Cloud Provider and Cluster Lifecycle] A kubescheduler.config.k8s.io/v1alpha2 configuration file version is now accepted, with support for multiple scheduling profiles (, ) [SIG Scheduling] HardPodAffinityWeight moved from a top level ComponentConfig parameter to a PluginConfig parameter of InterPodAffinity Plugin in

(, ) [SIG Scheduling and Testing] Kube-scheduler can run more than one scheduling profile. Given a pod, the profile is selected by using its `.spec.schedulerName`. (, ) [SIG Apps, Scheduling and Testing] Scheduler Extenders can now be configured in the v1alpha2 component config (, ) [SIG Release, Scheduling and Testing] The PostFilter of scheduler framework is renamed to PreScore in kubescheduler.config.k8s.io/v1alpha2. (, ) [SIG Scheduling and Testing] Added kube-proxy flags `--ipvs-tcp-timeout`, `--ipvs-tcpfin-timeout`, `--ipvs-udp-timeout` to configure IPVS connection timeouts. (, ) [SIG Cluster Lifecycle and Network] Added optional `--detect-local-mode` flag to kube-proxy. Valid values are "ClusterCIDR" (default matching previous behavior) and "NodeCIDR" (, ) [SIG Cluster Lifecycle, Network and Scheduling] Kube-controller-manager and kube-scheduler expose profiling by default to match the kube-apiserver. Use `--profiling=false` to disable. (, ) [SIG API Machinery, Cloud Provider and Scheduling] Kubelet pod resources API now provides the information about active pods only. (, ) [SIG Node] New flag `--endpointslice-updates-batch-period` in kube-controller-manager can be used to reduce the number of endpointslice updates generated by pod changes. (, ) [SIG API Machinery, Apps and Network] New flag `--show-hidden-metrics-for-version` in kube-proxy, kubelet, kube-controller-manager, and kube-scheduler can be used to show all hidden metrics that are deprecated in the previous minor release. (, ) [SIG Cluster Lifecycle and Network] StartupProbe (, ) [SIG Node, Scalability and Testing] VolumePVCDataSource (, ) [SIG Storage] TaintBasedEvictions (, ) [SIG API Machinery, Apps, Node, Scheduling and Testing] BlockVolume and CSIBlockVolume (, ) [SIG Storage] Windows RunAsUserName (, ) [SIG Apps and Windows] The following feature gates are removed, because the associated features were unconditionally enabled in previous releases: CustomResourceValidation, CustomResourceSubresources, CustomResourceWebhookConversion, CustomResourcePublishOpenAPI, CustomResourceDefaulting (, ) [SIG API Machinery] API request throttling (due to a high rate of requests) is now reported in client-go logs at log level 2. The messages are of the form:`Throttling request took 1.50705208s, request: GET:<URL>` The presence of these messages may indicate to the administrator the need to tune the cluster accordingly. (, ) [SIG API Machinery] Add support for mount options to the FC volume plugin (, ) [SIG Storage] Added a config-mode flag in azure auth module to enable getting AAD token without spn: prefix in audience claim. When it's not specified, the default behavior doesn't change. (, ) [SIG API Machinery, Auth, CLI and Cloud Provider] Allow for configuration of CoreDNS replica count (, ) [SIG Cluster Lifecycle] Allow user to specify resource using --filename flag when invoking kubectl exec (, ) [SIG CLI and Testing] Apiserver added a new flag --goaway-chance which is the fraction of requests that will be closed gracefully(GOAWAY) to prevent HTTP/2 clients from getting stuck on a single apiserver. (, ) [SIG API Machinery] Azure Cloud Provider now supports using Azure network resources (Virtual Network, Load Balancer, Public IP, Route Table, Network Security Group, etc.) in different AAD Tenant and Subscription than those for the Kubernetes cluster. To use the feature, please reference https://kubernetes-sigs.github.io/cloud-provider-azure/install/configs/#host-network-resources-in-different-aad-tenant-and-subscription. (, ) [SIG Cloud Provider] Azure VMSS/VMSSVM clients now suppress requests on throttling (, ) [SIG Cloud Provider] Azure cloud provider cache TTL is configurable, list of the azure cloud provider is as following: "availabilitySetNodesCacheTTLInSeconds" "vmssCacheTTLInSeconds" "vmssVirtualMachinesCacheTTLInSeconds" "vmCacheTTLInSeconds" "loadBalancerCacheTTLInSeconds" "nsgCacheTTLInSeconds" "routeTableCacheTTLInSeconds" (, ) [SIG Cloud Provider] Azure global rate limit is switched to per-client. A set of new rate limit configure options are introduced, including routeRateLimit, SubnetsRateLimit, InterfaceRateLimit, RouteTableRateLimit, LoadBalancerRateLimit, PublicIPAddressRateLimit, SecurityGroupRateLimit, VirtualMachineRateLimit, StorageAccountRateLimit, DiskRateLimit, SnapshotRateLimit, VirtualMachineScaleSetRateLimit and VirtualMachineSizeRateLimit. The original rate limit options would be default values for those new client's rate

(, ) [SIG Cloud Provider] Azure network and VM clients now suppress requests on throttling (, ) [SIG Cloud Provider] Azure storage clients now suppress requests on throttling (, ) [SIG Cloud Provider] Azure: add support for single stack IPv6 (, ) [SIG Cloud Provider] DefaultConstraints can be specified for PodTopologySpread Plugin in the schedulers ComponentConfig (, ) [SIG Scheduling] DisableAvailabilitySetNodes is added to avoid VM list for VMSS clusters. It should only be used when vmType is "vmss" and all the nodes (including control plane nodes) are VMSS virtual machines. (, ) [SIG Cloud Provider] Elasticsearch supports automatically setting the advertise address (, ) [SIG Cluster Lifecycle and Instrumentation] EndpointSlices will now be enabled by default. A new `EndpointSliceProxying` feature gate determines if kube-proxy will use EndpointSlices, this is disabled by default. (, ) [SIG Network] Kube-proxy: Added dual-stack IPv4/IPv6 support to the iptables proxier. (, ) [SIG Network] Kubeadm now supports automatic calculations of dual-stack node cidr masks to kube-controller-manager. (, ) [SIG Cluster Lifecycle] Kubeadm: add a upgrade health check that deploys a Job (, ) [SIG Cluster Lifecycle] Kubeadm: add the experimental feature gate PublicKeysECDSA that can be used to create a cluster with ECDSA certificates from "kubeadm init". Renewal of existing ECDSA certificates is also supported using "kubeadm alpha certs renew", but not switching between the RSA and ECDSA algorithms on the fly or during upgrades. (, ) [SIG API Machinery, Auth and Cluster Lifecycle] Kubeadm: implemented structured output of 'kubeadm config images list' command in JSON, YAML, Go template and JsonPath formats (, ) [SIG Cluster Lifecycle] Kubeadm: on kubeconfig certificate renewal, keep the embedded CA in sync with the one on disk (, ) [SIG Cluster Lifecycle] Kubeadm: reject a node joining the cluster if a node with the same name already exists (, ) [SIG Cluster Lifecycle] Kubeadm: support Windows specific kubelet flags in kubeadm-flags.env (, ) [SIG Cluster Lifecycle and Windows] Kubeadm: support automatic retry after failing to pull image (, ) [SIG Cluster Lifecycle] Kubeadm: upgrade supports fallback to the nearest known etcd version if an unknown k8s version is passed (, ) [SIG Cluster Lifecycle] Kubectl/drain: add disable-eviction option.Force drain to use delete, even if eviction is supported. This will bypass checking PodDisruptionBudgets, and should be used with caution. (, ) [SIG CLI] Kubectl/drain: add skip-wait-for-delete-timeout option. If a pods `DeletionTimestamp` is older than N seconds, skip waiting for the pod. Seconds must be greater than 0 to skip. (, ) [SIG CLI] Option `preConfiguredBackendPoolLoadBalancerTypes` is added to azure cloud provider for the pre-configured load balancers, possible values: `""`, `"internal"`, `"external"`,`"all"` (, ) [SIG Cloud Provider] PodTopologySpread plugin now excludes terminatingPods when making scheduling decisions. (, ) [SIG Scheduling] Provider/azure: Network security groups can now be in a separate resource group. (, ) [SIG Cloud Provider] SafeSysctlWhitelist: add net.ipv4.pinggrouprange (, ) [SIG Auth] Scheduler framework permit plugins now run at the end of the scheduling cycle, after reserve plugins. Waiting on permit will remain in the beginning of the binding cycle. (, ) [SIG Scheduling] Scheduler: Add DefaultBinder plugin (, ) [SIG Scheduling and Testing] Skip default spreading scoring plugin for pods that define TopologySpreadConstraints (, ) [SIG Scheduling] The kubectl --dry-run flag now accepts the values 'client', 'server', and 'none', to support client-side and server-side dry-run strategies. The boolean and unset values for the --dry-run flag are deprecated and a value will be required in a future version. (, ) [SIG CLI] Support server-side dry-run in kubectl with --dry-run=server for commands including apply, patch, create, run, annotate, label, set, autoscale, drain, rollout undo, and

(, ) [SIG API Machinery, CLI and Testing] Add --dry-run=server|client to kubectl delete, taint, replace (, ) [SIG CLI and Testing] The feature PodTopologySpread (feature gate `EvenPodsSpread`) has been enabled by default in 1.18. (, ) [SIG Scheduling and Testing] The kubelet and the default docker runtime now support running ephemeral containers in the Linux process namespace of a target container. Other container runtimes must implement support for this feature before it will be available for that runtime. (, ) [SIG Node] The underlying format of the `CPUManager` state file has changed. Upgrades should be seamless, but any third-party tools that rely on reading the previous format need to be updated. (, ) [SIG Node and Testing] Update CNI version to v0.8.5 (, ) [SIG API Machinery, Cluster Lifecycle, Network, Release and Testing] Webhooks have alpha support for network proxy (, ) [SIG API Machinery, Auth and Testing] When client certificate files are provided, reload files for new connections, and close connections when a certificate changes. (, ) [SIG API Machinery, Auth, Node and Testing] When deleting objects using kubectl with the --force flag, you are no longer required to also specify --grace-period=0. (, ) [SIG CLI] Windows nodes on GCE can use virtual TPM-based authentication to the control plane. (, ) [SIG Cluster Lifecycle] You can now pass "--node-ip ::" to kubelet to indicate that it should autodetect an IPv6 address to use as the node's primary address. (, ) [SIG Cloud Provider, Network and Node] `kubectl` now contains a `kubectl alpha debug` command. This command allows attaching an ephemeral container to a running pod for the purposes of debugging. (, ) [SIG CLI] TLS Server Name overrides can now be specified in a kubeconfig file and via --tls-server-name in kubectl (, ) [SIG API Machinery, Auth and CLI] Add `restclientratelimiterduration_seconds` metric to component-base to track client side rate limiter latency in seconds. Broken down by verb and URL. (, ) [SIG API Machinery, Cluster Lifecycle and Instrumentation] Added two client certificate metrics for exec auth: `restclientcertificateexpirationseconds` a gauge reporting the lifetime of the current client certificate. Reports the time of expiry in seconds since January 1, 1970 UTC. `restclientcertificaterotationage` a histogram reporting the age of a just rotated client certificate in seconds. (, ) [SIG API Machinery, Auth, Cluster Lifecycle and Instrumentation] Controller manager serve workqueue metrics (, ) [SIG API Machinery] Following metrics have been turned off: kubeletpodworkerlatencymicroseconds kubeletpodstartlatencymicroseconds kubeletcgroupmanagerlatencymicroseconds kubeletpodworkerstartlatency_microseconds kubeletplegrelistlatencymicroseconds kubeletplegrelistintervalmicroseconds kubeletevictionstatsagemicroseconds kubeletruntimeoperations kubeletruntimeoperationslatencymicroseconds kubeletruntimeoperations_errors kubeletdevicepluginregistrationcount kubeletdevicepluginalloclatency_microseconds kubeletdockeroperations kubeletdockeroperationslatencymicroseconds kubeletdockeroperations_errors kubeletdockeroperations_timeout networkpluginoperationslatencymicroseconds (, ) [SIG Network and Node] Kube-apiserver metrics will now include request counts, latencies, and response sizes for /healthz, /livez, and /readyz requests. (, ) [SIG API Machinery] Kubelet now exports a `serverexpirationrenewfailure` and `clientexpirationrenewfailure` metric counter if the certificate rotations cannot be performed. (, ) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node and Release] Kubelet: the metric processstarttime_seconds be marked as with the ALPHA stability level. (, ) [SIG API Machinery, Cluster Lifecycle, Instrumentation and Node] New metric `kubeletpleglastseenseconds` to aid diagnosis of PLEG not healthy issues. (, ) [SIG Node] Fixed a regression with clients prior to 1.15 not being able to update podIP in pod status, or podCIDR in node spec, against >= 1.16 API servers (, ) [SIG Apps and Network] Fixed "kubectl describe

printing garbage for rolling update partition (, ) [SIG CLI] Add a event to PV when filesystem on PV does not match actual filesystem on disk (, ) [SIG Storage] Add azure disk WriteAccelerator support (, ) [SIG Cloud Provider and Storage] Add delays between goroutines for vm instance update (, ) [SIG Cloud Provider] Add init containers log to cluster dump info. (, ) [SIG CLI] Addons: elasticsearch discovery supports IPv6 (, ) [SIG Cluster Lifecycle and Instrumentation] Adds "volume.beta.kubernetes.io/migrated-to" annotation to PV's and PVC's when they are migrated to signal external provisioners to pick up those objects for Provisioning and Deleting. (, ) [SIG Storage] All api-server log request lines in a more greppable format. (, ) [SIG API Machinery] Azure VMSS LoadBalancerBackendAddressPools updating has been improved with sequential-sync + concurrent-async requests. (, ) [SIG Cloud Provider] Azure cloud provider now obtains AAD token who audience claim will not have spn: prefix (, ) [SIG Cloud Provider] AzureFile and CephFS use the new Mount library that prevents logging of sensitive mount options. (, ) [SIG Storage] Bind dns-horizontal containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes (, ) [SIG Cluster Lifecycle and Windows] Bind kube-dns containers to linux nodes to avoid Windows scheduling (, ) [SIG Cluster Lifecycle and Windows] Bind metadata-agent containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes (, ) [SIG Cluster Lifecycle, Instrumentation and Windows] Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes (, ) [SIG Cluster Lifecycle, Instrumentation and Windows] Bug fixes: Make sure we include latest packages node #351 (@caseydavenport) (, ) [SIG Cluster Lifecycle] CPU limits are now respected for Windows containers. If a node is over-provisioned, no weighting is used, only limits are respected. (, ) [SIG Node, Testing and Windows] Changed core_pattern on COS nodes to be an absolute path. (, ) [SIG Cluster Lifecycle and Node] Client-go certificate manager rotation gained the ability to preserve optional intermediate chains accompanying issued certificates (, ) [SIG API Machinery and Auth] Cloud provider config CloudProviderBackoffMode has been removed since it won't be used anymore. (, ) [SIG Cloud Provider] Conformance image now depends on stretch-slim instead of debian-hyperkube-base as that image is being deprecated and removed. (, ) [SIG Cluster Lifecycle, Release and Testing] Deprecate --generator flag from kubectl create commands (, ) [SIG CLI] During initialization phase (preflight), kubeadm now verifies the presence of the conntrack executable (, ) [SIG Cluster Lifecycle] EndpointSlice should not contain endpoints for terminating pods (, ) [SIG Apps and Network] Evictions due to pods breaching their ephemeral storage limits are now recorded by the `kubelet_evictions` metric and can be alerted on. (, ) [SIG Node] Filter published OpenAPI schema by making nullable, required fields non-required in order to avoid kubectl to wrongly reject null values. (, ) [SIG API Machinery] Fix /readyz to return error immediately after a shutdown is initiated, before the --shutdown-delay-duration has elapsed. (, ) [SIG API Machinery] Fix API Server potential memory leak issue in processing watch request. (, ) [SIG API Machinery] Fix EndpointSlice controller race condition and ensure that it handles external changes to

(, ) [SIG Apps and Network] Fix IPv6 addresses lost issue in pure ipv6 vsphere environment (, ) [SIG Cloud Provider] Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made (, ) [SIG Cloud Provider] Fix a bug in kube-proxy that caused it to crash when using load balancers with a different IP family (, ) [SIG Network] Fix a bug in port-forward: named port not working with service (, ) [SIG CLI] Fix a bug in the dual-stack IPVS proxier where stale IPv6 endpoints were not being cleaned up (, ) [SIG Network] Fix a bug that orphan revision cannot be adopted and statefulset cannot be synced (, ) [SIG Apps] Fix a bug where ExternalTrafficPolicy is not applied to service ExternalIPs. (, ) [SIG Network] Fix a bug where kubenet fails to parse the tc output. (, ) [SIG Network] Fix a regression in kubenet that prevent pods to obtain ip addresses (, ) [SIG Network and Node] Fix azure file AuthorizationFailure (, ) [SIG Cloud Provider and Storage] Fix bug where EndpointSlice controller would attempt to modify shared objects. (, ) [SIG API Machinery, Apps and Network] Fix handling of aws-load-balancer-security-groups annotation. Security-Groups assigned with this annotation are no longer modified by kubernetes which is the expected behaviour of most users. Also no unnecessary Security-Groups are created anymore if this annotation is used. (, ) [SIG Cloud Provider] Fix invalid VMSS updates due to incorrect cache (, ) [SIG Cloud Provider] Fix isCurrentInstance for Windows by removing the dependency of hostname. (, ) [SIG Cloud Provider] Fix issue #85805 about a resource not found in azure cloud provider when LoadBalancer specified in another resource group. (, ) [SIG Cloud Provider] Fix kubectl annotate error when local=true is set (, ) [SIG CLI] Fix kubectl create deployment image name (, ) [SIG CLI] Fix `kubectl drain ignore` daemonsets and others. (, ) [SIG CLI] Fix missing "apiVersion" for "involvedObject" in Events for Nodes. (, ) [SIG Apps and Node] Fix nil pointer dereference in azure cloud provider (, ) [SIG Cloud Provider] Fix regression in statefulset conversion which prevents applying a statefulset multiple times. (, ) [SIG Apps and Testing] Fix route conflicted operations when updating multiple routes together (, ) [SIG Cloud Provider] Fix that prevents repeated fetching of PVC/PV objects by kubelet when processing of pod volumes fails. While this prevents hammering API server in these error scenarios, it means that some errors in processing volume(s) for a pod could now take up to 2-3 minutes before retry. (, ) [SIG Node and Storage] Fix the bug PIP's DNS is deleted if no DNS label service annotation isn't set. (, ) [SIG Cloud Provider] Fix control plane hosts rolling upgrade causing thundering herd of LISTs on etcd leading to control plane unavailability. (, ) [SIG API Machinery, Node and Testing] Fix: add azure disk migration support for CSINode (, ) [SIG Cloud Provider and Storage] Fix: add non-retriable errors in azure clients (, ) [SIG Cloud Provider] Fix: add remediation in azure disk attach/detach (, ) [SIG Cloud Provider] Fix: azure data disk should use same key as os disk by default (, ) [SIG Cloud Provider] Fix: azure disk could not mounted on Standard_DC4s/DC2s instances (, ) [SIG Cloud Provider and Storage] Fix: azure file mount timeout issue (, ) [SIG Cloud Provider and Storage] Fix: check disk status before disk azure disk (, ) [SIG Cloud Provider] Fix: corrupted mount point in csi driver (, ) [SIG Storage] Fix: get azure disk lun timeout issue (, ) [SIG Cloud Provider and Storage] Fix: update azure disk max count (, ) [SIG Cloud Provider and Storage] Fixed "requested device X but found Y" attach error on AWS. (, ) [SIG Cloud Provider and Storage] Fixed NetworkPolicy validation that `Except` values are accepted when they are outside the CIDR range. (, ) [SIG Network] Fixed a bug in the TopologyManager. Previously, the TopologyManager would only guarantee alignment if container creation was serialized in some

Alignment is now guaranteed under all scenarios of container creation. (, ) [SIG Node] Fixed a bug which could prevent a provider ID from ever being set for node if an error occurred determining the provider ID when the node was added. (, ) [SIG Apps and Cloud Provider] Fixed a data race in the kubelet image manager that can cause static pod workers to silently stop working. (, ) [SIG Node] Fixed a panic in the kubelet cleaning up pod volumes (, ) [SIG Storage] Fixed a regression where the kubelet would fail to update the ready status of pods. (, ) [SIG Node] Fixed an issue that could cause the kubelet to incorrectly run concurrent pod reconciliation loops and crash. (, ) [SIG Node] Fixed block CSI volume cleanup after timeouts. (, ) [SIG Storage] Fixed cleaning of CSI raw block volumes. (, ) [SIG Storage] Fixed AWS Cloud Provider attempting to delete LoadBalancer security group it didnt provision, and fixed AWS Cloud Provider creating a default LoadBalancer security group even if annotation `service.beta.kubernetes.io/aws-load-balancer-security-groups` is present because the intended behavior of aws-load-balancer-security-groups is to replace all security groups assigned to the load balancer. (, ) [SIG Cloud Provider] Fixed two scheduler metrics (pendingpods and scheduleattempts_total) not being recorded (, ) [SIG Scheduling] Fixes an issue with kubelet-reported pod status on deleted/recreated pods. (, ) [SIG Node] Fixes conversion error in multi-version custom resources that could cause metadata.generation to increment on no-op patches or updates of a custom resource. (, ) [SIG API Machinery] Fixes issue where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc. The audience claim before this fix has "spn:" prefix. After this fix, "spn:" prefix is omitted. (, ) [SIG API Machinery, Auth and Cloud Provider] Fixes an issue where you can't attach more than 15 GCE Persistent Disks to c2, n2, m1, m2 machine types. (, ) [SIG Storage] Fixes kube-proxy when EndpointSlice feature gate is enabled on Windows. (, ) [SIG Auth and Network] Fixes kubelet crash in client certificate rotation cases (, ) [SIG API Machinery, Auth and Node] Fixes service account token admission error in clusters that do not run the service account token controller (, ) [SIG Auth] Fixes v1.17.0 regression in --service-cluster-ip-range handling with IPv4 ranges larger than 65536 IP addresses (, ) [SIG Network] Fixes wrong validation result of NetworkPolicy PolicyTypes (, ) [SIG Network] For subprotocol negotiation, both client and server protocol is required now. (, ) [SIG API Machinery and Node] For volumes that allow attaches across multiple nodes, attach and detach operations across different nodes are now executed in parallel. (, ) [SIG Storage] Garbage collector now can correctly orphan ControllerRevisions when StatefulSets are deleted with orphan propagation policy. (, ) [SIG Apps] `Get-kube.sh` uses the gcloud's current local GCP service account for auth when the provider is GCE or GKE instead of the metadata server default (, ) [SIG Cluster Lifecycle] Golang/x/net has been updated to bring in fixes for CVE-2020-9283 (, ) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation] If a serving certificates param specifies a name that is an IP for an SNI certificate, it will have priority for replying to server connections. (, ) [SIG API Machinery] Improved yaml parsing performance (, ) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node] Improves performance of the node authorizer (, ) [SIG Auth] In GKE alpha clusters it will be possible to use the service annotation

Standard` (, ) [SIG Cloud Provider] Includes FSType when describing CSI persistent volumes. (, ) [SIG CLI and Storage] Iptables/userspace proxy: improve performance by getting local addresses only once per sync loop, instead of for every external IP (, ) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Network] Kube-aggregator: always sets unavailableGauge metric to reflect the current state of a service. (, ) [SIG API Machinery] Kube-apiserver: fixed a conflict error encountered attempting to delete a pod with gracePeriodSeconds=0 and a resourceVersion precondition (, ) [SIG API Machinery] Kube-proxy no longer modifies shared EndpointSlices. (, ) [SIG Network] Kube-proxy: on dual-stack mode, if it is not able to get the IP Family of an endpoint, logs it with level InfoV(4) instead of Warning, avoiding flooding the logs for endpoints without addresses (, ) [SIG Network] Kubeadm allows to configure single-stack clusters if dual-stack is enabled (, ) [SIG API Machinery, Cluster Lifecycle and Network] Kubeadm now includes CoreDNS version 1.6.7 (, ) [SIG Cluster Lifecycle] Kubeadm upgrades always persist the etcd backup for stacked (, ) [SIG Cluster Lifecycle] Kubeadm: 'kubeadm alpha kubelet config download' has been removed, please use 'kubeadm upgrade node phase kubelet-config' instead (, ) [SIG Cluster Lifecycle] Kubeadm: Forward cluster name to the controller-manager arguments (, ) [SIG Cluster Lifecycle] Kubeadm: add support for the "ci/k8s-master" version label as a replacement for "ci-cross/*", which no longer exists. (, ) [SIG Cluster Lifecycle] Kubeadm: apply further improvements to the tentative support for concurrent etcd member join. Fixes a bug where multiple members can receive the same hostname. Increase the etcd client dial timeout and retry timeout for add/remove/... operations. (, ) [SIG Cluster Lifecycle] Kubeadm: don't write the kubelet environment file on "upgrade apply" (, ) [SIG Cluster Lifecycle] Kubeadm: fix potential panic when executing "kubeadm reset" with a corrupted kubelet.conf file (, ) [SIG Cluster Lifecycle] Kubeadm: fix the bug that 'kubeadm upgrade' hangs in single node cluster (, ) [SIG Cluster Lifecycle] Kubeadm: make sure images are pre-pulled even if a tag did not change but their contents changed (, ) [SIG Cluster Lifecycle] Kubeadm: remove 'kubeadm upgrade node config' command since it was deprecated in v1.15, please use 'kubeadm upgrade node phase kubelet-config' instead (, ) [SIG Cluster Lifecycle] Kubeadm: remove the deprecated CoreDNS feature-gate. It was set to "true" since v1.11 when the feature went GA. In v1.13 it was marked as deprecated and hidden from the CLI. (, ) [SIG Cluster Lifecycle] Kubeadm: retry `kubeadm-config` ConfigMap creation or mutation if the apiserver is not responding. This will improve resiliency when joining new control plane nodes. (, ) [SIG Cluster Lifecycle] Kubeadm: tolerate whitespace when validating certificate authority PEM data in kubeconfig files (, ) [SIG Cluster Lifecycle] Kubeadm: use bind-address option to configure the kube-controller-manager and kube-scheduler http probes (, ) [SIG Cluster Lifecycle] Kubeadm: uses the api-server AdvertiseAddress IP family to choose the etcd endpoint IP family for non external etcd clusters (, ) [SIG Cluster Lifecycle] Kubectl cluster-info dump --output-directory=xxx now generates files with an extension depending on the output format. (, ) [SIG CLI] `Kubectl describe <type>` and `kubectl top pod` will return a message saying `"No resources found"` or `"No resources found in <namespace> namespace"` if there are no results to display. (, ) [SIG CLI] `Kubectl drain node --dry-run` will list pods that would be evicted or deleted (, ) [SIG CLI] `Kubectl set resources` will no longer return an error if passed an empty change for a

`kubectl set subject` will no longer return an error if passed an empty change for a resource. (, ) [SIG CLI] Kubelet metrics gathered through metrics-server or prometheus should no longer timeout for Windows nodes running more than 3 pods. (, ) [SIG Node, Testing and Windows] Kubelet metrics have been changed to buckets. For example the `exec/{podNamespace}/{podID}/{containerName}` is now just exec. (, ) [SIG Node] Kubelets perform fewer unnecessary pod status update operations on the API server. (, ) [SIG Node and Scalability] Kubernetes will try to acquire the iptables lock every 100 msec during 5 seconds instead of every second. This is especially useful for environments using kube-proxy in iptables mode with a high churn rate of services. (, ) [SIG Network] Limit number of instances in a single update to GCE target pool to 1000. (, ) [SIG Cloud Provider, Network and Scalability] Make Azure clients only retry on specified HTTP status codes (, ) [SIG Cloud Provider] Make error message and service event message more clear (, ) [SIG Cloud Provider] Minimize AWS NLB health check timeout when externalTrafficPolicy set to Local (, ) [SIG Cloud Provider] Pause image contains "Architecture" in non-amd64 images (, ) [SIG Release] Pause image upgraded to 3.2 in kubelet and kubeadm. (, ) [SIG CLI, Cluster Lifecycle, Node and Testing] Plugin/PluginConfig and Policy APIs are mutually exclusive when running the scheduler (, ) [SIG Scheduling] Remove `FilteredNodesStatuses` argument from `PreScore`'s interface. (, ) [SIG Scheduling and Testing] Resolved a performance issue in the node authorizer index maintenance. (, ) [SIG Auth] Resolved regression in admission, authentication, and authorization webhook performance in v1.17.0-rc.1 (, ) [SIG API Machinery and Testing] Resolves performance regression in `kubectl get all` and in client-go discovery clients constructed using `NewDiscoveryClientForConfig` or `NewDiscoveryClientForConfigOrDie`. (, ) [SIG API Machinery] Reverted a kubectl azure auth module change where oidc claim spn: prefix was omitted resulting a breaking behavior with existing Azure AD OIDC enabled api-server (, ) [SIG API Machinery, Auth and Cloud Provider] Shared informers are now more reliable in the face of network disruption. (, ) [SIG API Machinery] Specifying PluginConfig for the same plugin more than once fails scheduler startup. Specifying extenders and configuring .ignoredResources for the NodeResourcesFit plugin fails (, ) [SIG Scheduling] Terminating a restartPolicy=Never pod no longer has a chance to report the pod succeeded when it actually failed. (, ) [SIG Node and Testing] The CSR signing cert/key pairs will be reloaded from disk like the kube-apiserver cert/key pairs (, ) [SIG API Machinery, Apps and Auth] The EventRecorder from k8s.io/client-go/tools/events will now create events in the default namespace (instead of kube-system) when the related object does not have it set. (, ) [SIG API Machinery] The audit event sourceIPs list will now always end with the IP that sent the request directly to the API server. (, ) [SIG API Machinery and Auth] The sample-apiserver aggregated conformance test has updated to use the Kubernetes v1.17.0 sample apiserver (, ) [SIG API Machinery, Architecture, CLI and Testing] To reduce chances of throttling, VM cache is set to nil when Azure node provisioning state is deleting (, ) [SIG Cloud Provider] VMSS cache is added so that less chances of VMSS GET throttling (, ) [SIG Cloud Provider] Wait for kubelet & kube-proxy to be ready on Windows node within 10s (, ) [SIG Cluster Lifecycle] `kubectl apply -f <file> --prune -n <namespace>` should prune all resources not defined in the file in the cli specified namespace. (, ) [SIG CLI] `kubectl create clusterrolebinding` creates

object (, ) [SIG CLI] `kubectl diff` now returns 1 only on diff finding changes, and >1 on kubectl errors. The "exit status code 1" message has also been muted. (, ) [SIG CLI and Testing] Update Calico to v3.8.4 (, )[SIG Cluster Lifecycle] Update aws-sdk-go dependency to v1.28.2 (, )[SIG API Machinery and Cloud Provider] Update CNI version to v0.8.5 (, )[SIG Release, Testing, Network, Cluster Lifecycle and API Machinery] Update cri-tools to v1.17.0 (, )[SIG Release and Cluster Lifecycle] Pause image upgraded to 3.2 in kubelet and kubeadm (, )[SIG CLI, Node, Testing and Cluster Lifecycle] Update CoreDNS version to 1.6.7 in kubeadm (, )[SIG Cluster Lifecycle] Update golang.org/x/crypto to fix CVE-2020-9283 (, )[SIG CLI, Instrumentation, API Machinery, CLuster Lifecycle and Cloud Provider] Update Go to 1.13.8 (, )[SIG Release and Testing] Update Cluster-Autoscaler to 1.18.0 (, )[SIG Autoscaling and Cluster Lifecycle] filename | sha512 hash -- | -- | `c17231d5de2e0677e8af8259baa11a388625821c79b86362049f2edb366404d6f4b4587b8f13ccbceeb2f32c6a9fe98607f779c0f3e1caec438f002e3a2c8c21` | `e84ffad57c301f5d6e90f916b996d5abb0c987928c3ca6b1565f7b042588f839b994ca12c43fc36f0ffb63f9fabc15110eb08be253b8939f49cd951e956da618` filename | sha512 hash -- | -- | `1aea99923d492436b3eb91aaecffac94e5d0aa2b38a0930d266fda85c665bbc4569745c409aa302247df3b578ce60324e7a489eb26240e97d4e65a67428ea3d1` | `07fa7340a959740bd52b83ff44438bbd988e235277dad1e43f125f08ac85230a24a3b755f4e4c8645743444fa2b66a3602fc445d7da6d2fc3770e8c21ba24b33` | `48cebd26448fdd47aa36257baa4c716a98fda055bbf6a05230f2a3fe3c1b99b4e483668661415392190f3eebb9cb6e15c784626b48bb2541d93a37902f0e3974` | `c3a5fedf263f07a07f59c01fea6c63c1e0b76ee8dc67c45b6c134255c28ed69171ccc2f91b6a45d6a8ec5570a0a7562e24c33b9d7b0d1a864f4dc04b178b3c04` | `a6b11a55bd38583bbaac14931a6862f8ce6493afe30947ba29e5556654a571593358278df59412bbeb6888fa127e9ae4c0047a9d46cb59394995010796df6b14` | `9e15331ac8010154a9b64f5488969fc8ee2f21059639896cb84c5cf4f05f4c9d1d8970cb6f9831de6b34013848227c1972c12a698d07aac1ecc056e972fe6f79` | `f828fe6252678de9d4822e482f5873309ae9139b2db87298ab3273ce45d38aa07b6b9b42b76c140705f27ba71e101d58b43e59ac7259d7c08dc647ea809e207c` | `19da4b45f0666c063934af616f3e7ed3caa99d4ee1e46d53efadc7a8a4d38e43a36ced7249acd7ad3dcc4b4f60d8451b4f7ec7727e478ee2fadd14d353228bce` | `775c9afb6cb3e7c4ba53e9f48a5df2cf207234a33059bd74448bc9f177dd120fb3f9c58ab45048a566326acc43bc8a67e886e10ef99f20780c8f63bb17426ebd` | `208d2595a5b57ac97aac75b4a2a6130f0c937f781a030bde1a432daf4bc51f2fa523fca2eb84c38798489c4b536ee90aad22f7be8477985d9691d51ad8e1c4dc` filename | sha512 hash -- | -- | `dcf832eae04f9f52ff473754ef5cfe697b35f4dc1a282622c94fa10943c8c35f4a8777a0c58c7de871c3c428c8973bf72d6bcd8751416d4c682125268b8fcefe` | `a04e34bea28eb1c8b492e8b1dd3c0dd87ebee71a7dbbef72be10a335e553361af7e48296e504f9844496b04e66350871114d20cfac3f3b49550d8be60f324ba3` | `a6af086b07a8c2e498f32b43e6511bf6a5e6baf358c572c6910c8df17cd6cae94f562f459714fcead1595767cb14c7f639c5735f1411173bbd38d5604c082a77` | `5a960ef5ba0c255f587f2ac0b028cd03136dc91e4efc5d1becab46417852e5524d18572b6f66259531ec6fea997da3c4d162ac153a9439672154375053fec6c7` | `0f32c7d9b14bc238b9a5764d8f00edc4d3bf36bcf06b340b81061424e6070768962425194a8c2025c3a7ffb97b1de551d3ad23d1591ae34dd4e3ba25ab364c33` filename | sha512 hash -- | -- | `27d8955d535d14f3f4dca501fd27e4f06fad84c6da878ea5332a5c83b6955667f6f731bfacaf5a3a23c09f14caa400f9bee927a0f269f5374de7f79cd1919b3b` | `0d56eccad63ba608335988e90b377fe8ae978b177dc836cdb803a5c99d99e8f3399a666d9477ca9cfe5964944993e85c416aec10a99323e3246141efc0b1cc9e` | `79bb9be66f9e892d866b28e5cc838245818edb9706981fab6ccbff493181b341c1fcf6fe5d2342120a112eb93af413f5ba191cfba1ab4c4a8b0546a5ad8ec220` | `3e9e2c6f9a2747d828069511dce8b4034c773c2d122f005f4508e22518055c1e055268d9d86773bbd26fbd2d887d783f408142c6c2f56ab2f2365236fd4d2635` | `4f96e018c336fa13bb6df6f7217fe46a2b5c47f806f786499c429604ccba2ebe558503ab2c72f63250aa25b61dae2d166e4b80ae10f6ab37d714f87c1dcf6691` | `ab110d76d506746af345e5897ef4f6993d5f53ac818ba69a334f3641047351aa63bfb3582841a9afca51dd0baff8b9010077d9c8ec85d2d69e4172b8d4b338b0` Removes ConfigMap as suggestion for IngressClass parameters (, ) [SIG Network] EndpointSlice should not contain endpoints for terminating pods (, ) [SIG Apps and Network] Fix a bug where ExternalTrafficPolicy is not applied to service ExternalIPs. (, ) [SIG Network] Fix invalid VMSS updates due to incorrect cache (, ) [SIG Cloud Provider] Fix isCurrentInstance for Windows by removing the dependency of hostname. (, ) [SIG Cloud Provider] Fixed a data race in kubelet image manager that can cause static pod workers to silently stop working. (, ) [SIG Node] Fixed an issue that could cause the kubelet to incorrectly run concurrent pod reconciliation loops and crash. (, ) [SIG Node] Kube-proxy: on dual-stack mode, if it is not able to get the IP Family of an endpoint, logs it with level InfoV(4) instead of Warning, avoiding flooding the logs for endpoints without addresses (, ) [SIG Network] Update Cluster Autoscaler to 1.18.0; changelog: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.18.0 (, ) [SIG Autoscaling and Cluster Lifecycle] filename | sha512 hash -- | -- | `3017430ca17f8a3523669b4a02c39cedfc6c48b07281bc0a67a9fbe9d76547b76f09529172cc01984765353a6134a43733b7315e0dff370bba2635dd2a6289af` | `c5fd60601380a99efff4458b1c9cf4dc02195f6f756b36e590e54dff68f7064daf32cf63980dddee13ef9dec7a60ad4eeb47a288083fdbbeeef4bc038384e9ea` filename | sha512 hash -- | -- | `7e49ede167b9271d4171e477fa21d267b2fb35f80869337d5b323198dc12f71b61441975bf925ad6e6cd7b61cbf6372d386417dc1e5c9b3c87ae651021c37237` | `3f5cdf0e85eee7d0773e0ae2df1c61329dea90e0da92b02dae1ffd101008dc4bade1c4951fc09f0cad306f0bcb7d16da8654334ddee43d5015913cc4ac8f3eda` | `b67b41c11bfecb88017c33feee21735c56f24cf6f7851b63c752495fc0fb563cd417a67a81f46bca091f74dc00fca1f296e483d2e3dfe2004ea4b42e252d30b9` | `1fef2197cb80003e3a5c26f05e889af9d85fbbc23e27747944d2997ace4bfa28f3670b13c08f5e26b7e274176b4e2df89c1162aebd8b9506e63b39b311b2d405` | `84e5f4d9776490219ee94a84adccd5dfc7c0362eb330709771afcde95ec83f03d96fe7399eec218e47af0a1e6445e24d95e6f9c66c0882ef8233a09ff2022420` | `ba613b114e0cca32fa21a3d10f845aa2f215d3af54e775f917ff93919f7dd7075efe254e4047a85a1f4b817fc2bd78006c2e8873885f1208cbc02db99e2e2e25` | `502a6938d8c4bbe04abbd19b59919d86765058ff72334848be4012cec493e0e7027c6cd950cf501367ac2026eea9f518110cb72d1c792322b396fc2f73d23217` | `c24700e0ed2ef5c1d2dd282d638c88d90392ae90ea420837b39fd8e1cfc19525017325ccda71d8472fdaea174762208c09e1bba9bbc77c89deef6fac5e847ba2` | `0d4c5a741b052f790c8b0923c9586ee9906225e51cf4dc8a56fc303d4d61bb5bf77fba9e65151dec7be854ff31da8fc2dcd3214563e1b4b9951e6af4aa643da4` | `841ef2e306c0c9593f04d9528ee019bf3b667761227d9afc1d6ca8bf1aa5631dc25f5fe13ff329c4bf0c816b971fd0dec808f879721e0f3bf51ce49772b38010` filename | sha512 hash -- | -- | `b373df2e6ef55215e712315a5508e85a39126bd81b7b93c6b6305238919a88c740077828a6f19bcd97141951048ef7a19806ef6b1c3e1772dbc45715c5fcb3af` | `b8103cb743c23076ce8dd7c2da01c8dd5a542fbac8480e82dc673139c8ee5ec4495ca33695e7a18dd36412cf1e18ed84c8de05042525ddd8e869fbdfa2766569` | `8f8f05cf64fb9c8d80cdcb4935b2d3e3edc48bdd303231ae12f93e3f4d979237490744a11e24ba7f52dbb017ca321a8e31624dcffa391b8afda3d02078767fa0` | `b313b911c46f2ec129537407af3f165f238e48caeb4b9e530783ffa3659304a544ed02bef8ece715c279373b9fb2c781bd4475560e02c4b98a6d79837bc81938` | `a1b6b06571141f507b12e5ef98efb88f4b6b9aba924722b2a74f11278d29a2972ab8290608360151d124608e6e24da0eb3516d484cb5fa12ff2987562f15964a` filename | sha512 hash -- | -- | `20e02ca327543cddb2568ead3d5de164cbfb2914ab6416106d906bf12fcfbc4e55b13bea4d6a515e8feab038e2c929d72c4d6909dfd7881ba69fd1e8c772ab99` | `ecd817ef05d6284f9c6592b84b0a48ea31cf4487030c9fb36518474b2a33dad11b9c852774682e60e4e8b074e6bea7016584ca281dddbe2994da5eaf909025c0` | `0020d32b7908ffd5055c8b26a8b3033e4702f89efcfffe3f6fcdb8a9921fa8eaaed4193c85597c24afd8c523662454f233521bb7055841a54c182521217ccc9d` | `e065411d66d486e7793449c1b2f5a412510b913bf7f4e728c0a20e275642b7668957050dc266952cdff09acc391369ae6ac5230184db89af6823ba400745f2fc` | `082ee90413beaaea41d6cbe9a18f7d783a95852607f3b94190e0ca12aacdd97d87e233b87117871bfb7d0a4b6302fbc7688549492a9bc50a2f43a5452504d3ce` | `fb5aca0cc36be703f9d4033eababd581bac5de8399c50594db087a99ed4cb56e4920e960eb81d0132d696d094729254eeda2a5c0cb6e65e3abca6c8d61da579e` `kubectl` no longer defaults to `http://localhost:8080`. If you own one of these legacy clusters, you are *strongly- encouraged to secure your server. If you cannot secure your server, you can set `KUBERNETES_MASTER` if you were relying on that behavior and you're a client-go user. Set `--server`, `--kubeconfig` or `KUBECONFIG` to make it work in `kubectl`. (, ) [SIG API Machinery, CLI and Testing] AlgorithmSource is removed from v1alpha2 Scheduler ComponentConfig (, ) [SIG Scheduling] Kube-proxy: deprecate `--healthz-port` and `--metrics-port` flag, please use `--healthz-bind-address` and `--metrics-bind-address` instead (, ) [SIG Network] Kubeadm: deprecate the usage of the experimental flag '--use-api' under the 'kubeadm alpha certs renew' command. (, ) [SIG Cluster Lifecycle] A new IngressClass resource has been added to enable better Ingress

(, ) [SIG API Machinery, Apps, CLI, Network, Node and Testing] Added GenericPVCDataSource feature gate to enable using arbitrary custom resources as the data source for a PVC. (, ) [SIG Apps and Storage] Allow user to specify fsgroup permission change policy for pods (, ) [SIG Apps and Storage] BlockVolume and CSIBlockVolume features are now GA. (, ) [SIG Apps, Node and Storage] CustomResourceDefinition schemas that use `x-kubernetes-list-map-keys` to specify properties that uniquely identify list items must make those properties required or have a default value, to ensure those properties are present for all list items. See https://kubernetes.io/docs/reference/using-api/api-concepts/#merge-strategy for details. (, ) [SIG API Machinery and Testing] Fixes a regression with clients prior to 1.15 not being able to update podIP in pod status, or podCIDR in node spec, against >= 1.16 API servers (, ) [SIG Apps and Network] Ingress: Add Exact and Prefix maching to Ingress PathTypes (, ) [SIG Apps, Cluster Lifecycle and Network] Ingress: Add alternate backends via TypedLocalObjectReference (, ) [SIG Apps and Network] Ingress: allow wildcard hosts in IngressRule (, ) [SIG Network] Kube-controller-manager and kube-scheduler expose profiling by default to match the kube-apiserver. Use `--enable-profiling=false` to disable. (, ) [SIG API Machinery, Cloud Provider and Scheduling] Move TaintBasedEvictions feature gates to GA (, ) [SIG API Machinery, Apps, Node, Scheduling and Testing] New flag --endpointslice-updates-batch-period in kube-controller-manager can be used to reduce number of endpointslice updates generated by pod changes. (, ) [SIG API Machinery, Apps and Network] Scheduler Extenders can now be configured in the v1alpha2 component config (, ) [SIG Release, Scheduling and Testing] The apiserver/v1alph1 #EgressSelectorConfiguration API is now beta. (, ) [SIG API Machinery] The storage.k8s.io/CSIDriver has moved to GA, and is now available for use. (, ) [SIG API Machinery, Apps, Auth, Node, Scheduling, Storage and Testing] VolumePVCDataSource moves to GA in 1.18 release (, ) [SIG Apps, CLI and Cluster Lifecycle] Add `restclientratelimiterduration_seconds` metric to component-base to track client side rate limiter latency in seconds. Broken down by verb and URL. (, ) [SIG API Machinery, Cluster Lifecycle and Instrumentation] Allow user to specify resource using --filename flag when invoking kubectl exec (, ) [SIG CLI and Testing] Apiserver add a new flag --goaway-chance which is the fraction of requests that will be closed gracefully(GOAWAY) to prevent HTTP/2 clients from getting stuck on a single apiserver. After the connection closed(received GOAWAY), the client's other in-flight requests won't be affected, and the client will reconnect. The flag min value is 0 (off), max is .02 (1/50 requests); .001 (1/1000) is a recommended starting point. Clusters with single apiservers, or which don't use a load balancer, should NOT enable this. (, ) [SIG API Machinery] Azure: add support for single stack IPv6 (, ) [SIG Cloud Provider] DefaultConstraints can be specified for the PodTopologySpread plugin in the component config (, ) [SIG Scheduling] Kubeadm: support Windows specific kubelet flags in kubeadm-flags.env (, ) [SIG Cluster Lifecycle and Windows] Kubectl cluster-info dump changed to only display a message telling you the location where the output was written when the output is not standard output. (, ) [SIG CLI] Print NotReady when pod is not ready based on its conditions. (, ) [SIG CLI] Scheduler Extender API is now located under k8s.io/kube-scheduler/extender (, ) [SIG Release, Scheduling and Testing] Signatures on scale client methods have been modified to accept `context.Context` as a first argument. Signatures of Get, Update, and Patch methods have been updated to accept GetOptions, UpdateOptions and PatchOptions respectively. (, ) [SIG API Machinery, Apps, Autoscaling and CLI] Signatures on the dynamic client methods have been modified to accept `context.Context` as a first

Signatures of Delete and DeleteCollection methods now accept DeleteOptions by value instead of by reference. (, ) [SIG API Machinery, Apps, CLI, Cluster Lifecycle, Storage and Testing] Signatures on the metadata client methods have been modified to accept `context.Context` as a first argument. Signatures of Delete and DeleteCollection methods now accept DeleteOptions by value instead of by reference. (, ) [SIG API Machinery, Apps and Testing] Webhooks will have alpha support for network proxy (, ) [SIG API Machinery, Auth and Testing] When client certificate files are provided, reload files for new connections, and close connections when a certificate changes. (, ) [SIG API Machinery, Auth, Node and Testing] When deleting objects using kubectl with the --force flag, you are no longer required to also specify --grace-period=0. (, ) [SIG CLI] `kubectl` now contains a `kubectl alpha debug` command. This command allows attaching an ephemeral container to a running pod for the purposes of debugging. (, ) [SIG CLI] Update Japanese translation for kubectl help (, ) [SIG CLI and Docs] `kubectl plugin` now prints a note how to install krew (, ) [SIG CLI] Azure VMSS LoadBalancerBackendAddressPools updating has been improved with squential-sync + concurrent-async requests. (, ) [SIG Cloud Provider] AzureFile and CephFS use new Mount library that prevents logging of sensitive mount options. (, ) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Storage] Build: Enable kube-cross image-building on K8s Infra (, ) [SIG Release and Testing] Client-go certificate manager rotation gained the ability to preserve optional intermediate chains accompanying issued certificates (, ) [SIG API Machinery and Auth] Conformance image now depends on stretch-slim instead of debian-hyperkube-base as that image is being deprecated and removed. (, ) [SIG Cluster Lifecycle, Release and Testing] Deprecate --generator flag from kubectl create commands (, ) [SIG CLI] FIX: prevent apiserver from panicking when failing to load audit webhook config file (, ) [SIG API Machinery and Auth] Fix /readyz to return error immediately after a shutdown is initiated, before the --shutdown-delay-duration has elapsed. (, ) [SIG API Machinery] Fix a bug where kubenet fails to parse the tc output. (, ) [SIG Network] Fix describe ingress annotations not sorted. (, ) [SIG CLI] Fix handling of aws-load-balancer-security-groups annotation. Security-Groups assigned with this annotation are no longer modified by kubernetes which is the expected behaviour of most users. Also no unnecessary Security-Groups are created anymore if this annotation is used. (, ) [SIG Cloud Provider] Fix kubectl create deployment image name (, ) [SIG CLI] Fix missing "apiVersion" for "involvedObject" in Events for Nodes. (, ) [SIG Apps and Node] Fix that prevents repeated fetching of PVC/PV objects by kubelet when processing of pod volumes fails. While this prevents hammering API server in these error scenarios, it means that some errors in processing volume(s) for a pod could now take up to 2-3 minutes before retry. (, ) [SIG Node and Storage] Fix: azure file mount timeout issue (, ) [SIG Cloud Provider and Storage] Fix: corrupted mount point in csi driver (, ) [SIG Storage] Fixed a bug in the TopologyManager. Previously, the TopologyManager would only guarantee alignment if container creation was serialized in some way. Alignment is now guaranteed under all scenarios of container creation. (, ) [SIG Node] Fixed block CSI volume cleanup after timeouts. (, ) [SIG Node and Storage] Fixes issue where you can't attach more than 15 GCE Persistent Disks to c2, n2, m1, m2 machine

(, ) [SIG Storage] For volumes that allow attaches across multiple nodes, attach and detach operations across different nodes are now executed in parallel. (, ) [SIG Apps, Node and Storage] Hide kubectl.kubernetes.io/last-applied-configuration in describe command (, ) [SIG Auth and CLI] In GKE alpha clusters it will be possible to use the service annotation `cloud.google.com/network-tier: Standard` (, ) [SIG Cloud Provider] Kubelets perform fewer unnecessary pod status update operations on the API server. (, ) [SIG Node and Scalability] Plugin/PluginConfig and Policy APIs are mutually exclusive when running the scheduler (, ) [SIG Scheduling] Specifying PluginConfig for the same plugin more than once fails scheduler startup. Specifying extenders and configuring .ignoredResources for the NodeResourcesFit plugin fails (, ) [SIG Scheduling] Support TLS Server Name overrides in kubeconfig file and via --tls-server-name in kubectl (, ) [SIG API Machinery, Auth and CLI] Terminating a restartPolicy=Never pod no longer has a chance to report the pod succeeded when it actually failed. (, ) [SIG Node and Testing] The EventRecorder from k8s.io/client-go/tools/events will now create events in the default namespace (instead of kube-system) when the related object does not have it set. (, ) [SIG API Machinery] The audit event sourceIPs list will now always end with the IP that sent the request directly to the API server. (, ) [SIG API Machinery and Auth] Update to use golang 1.13.8 (, ) [SIG Release and Testing] Validate kube-proxy flags --ipvs-tcp-timeout, --ipvs-tcpfin-timeout, --ipvs-udp-timeout (, ) [SIG Network] filename | sha512 hash -- | -- | `7c182ca905b3a31871c01ab5fdaf46f074547536c7975e069ff230af0d402dfc0346958b1d084bd2c108582ffc407484e6a15a1cd93e9affbe34b6e99409ef1f` | `d104b8c792b1517bd730787678c71c8ee3b259de81449192a49a1c6e37a6576d28f69b05c2019cc4a4c40ddeb4d60b80138323df3f85db8682caabf28e67c2de` filename | sha512 hash -- | -- | `bc337bb8f200a789be4b97ce99b9d7be78d35ebd64746307c28339dc4628f56d9903e0818c0888aaa9364357a528d1ac6fd34f74377000f292ec502fbea3837e` | `38dfa5e0b0cfff39942c913a6bcb2ad8868ec43457d35cffba08217bb6e7531720e0731f8588505f4c81193ce5ec0e5fe6870031cf1403fbbde193acf7e53540` | `8e63ec7ce29c69241120c037372c6c779e3f16253eabd612c7cbe6aa89326f5160eb5798004d723c5cd72d458811e98dac3574842eb6a57b2798ecd2bbe5bcf9` | `c1be9f184a7c3f896a785c41cd6ece9d90d8cb9b1f6088bdfb5557d8856c55e455f6688f5f54c2114396d5ae7adc0361e34ebf8e9c498d0187bd785646ccc1d0` | `8eab02453cfd9e847632a774a0e0cf3a33c7619fb4ced7f1840e1f71444e8719b1c8e8cbfdd1f20bb909f3abe39cdcac74f14cb9c878c656d35871b7c37c7cbe` | `f7df0ec02d2e7e63278d5386e8153cfe2b691b864f17b6452cc824a5f328d688976c975b076e60f1c6b3c859e93e477134fbccc53bb49d9e846fb038b34eee48` | `36dd5b10addca678a518e6d052c9d6edf473e3f87388a2f03f714c93c5fbfe99ace16cf3b382a531be20a8fe6f4160f8d891800dd2cff5f23c9ca12c2f4a151b` | `5bdbb44b996ab4ccf3a383780270f5cfdbf174982c300723c8bddf0a48ae5e459476031c1d51b9d30ffd621d0a126c18a5de132ef1d92fca2f3e477665ea10cc` | `5dea3d4c4e91ef889850143b361974250e99a3c526f5efee23ff9ccdcd2ceca4a2247e7c4f236bdfa77d2150157da5d676ac9c3ba26cf3a2f1e06d8827556f77` | `db298e698391368703e6aea7f4345aec5a4b8c69f9d8ff6c99fb5804a6cea16d295fb01e70fe943ade3d4ce9200a081ad40da21bd331317ec9213f69b4d6c48f` filename | sha512 hash -- | -- | `c6284929dd5940e750b48db72ffbc09f73c5ec31ab3db283babb8e4e07cd8cbb27642f592009caae4717981c0db82c16312849ef4cbafe76acc4264c7d5864ac` | `6fc9552cf082c54cc0833b19876117c87ba7feb5a12c7e57f71b52208daf03eaef3ca56bd22b7bce2d6e81b5a23537cf6f5497a6eaa356c0aab1d3de26c309f9` | `b794b9c399e548949b5bfb2fe71123e86c2034847b2c99aca34b6de718a35355bbecdae9dc2a81c49e3c82fb4b5862526a3f63c2862b438895e12c5ea884f22e` | `fddaed7a54f97046a91c29534645811c6346e973e22950b2607b8c119c2377e9ec2d32144f81626078cdaeca673129cc4016c1a3dbd3d43674aa777089fb56ac` | `65951a534bb55069c7419f41cbcdfe2fae31541d8a3f9eca11fc2489addf281c5ad2d13719212657da0be5b898f22b57ac39446d99072872fbacb0a7d59a4f74` filename | sha512 hash -- | -- | `992059efb5cae7ed0ef55820368d854bad1c6d13a70366162cd3b5111ce24c371c7c87ded2012f055e08b2ff1b4ef506e1f4e065daa3ac474fef50b5efa4fb07` | `c63ae0f8add5821ad267774314b8c8c1ffe3b785872bf278e721fd5dfdad1a5db1d4db3720bea0a36bf10d9c6dd93e247560162c0eac6e1b743246f587d3b27a` | `47adb9ddf6eaf8f475b89f59ee16fbd5df183149a11ad1574eaa645b47a6d58aec2ca70ba857ce9f1a5793d44cf7a61ebc6874793bb685edaf19410f4f76fd13` | `a3bc4a165567c7b76a3e45ab7b102d6eb3ecf373eb048173f921a4964cf9be8891d0d5b8dafbd88c3af7b0e21ef3d41c1e540c3347ddd84b929b3a3d02ceb7b2` | `109ddf37c748f69584c829db57107c3518defe005c11fcd2a1471845c15aae0a3c89aafdd734229f4069ed18856cc650c80436684e1bdc43cfee3149b0324746` | `a3a75d2696ad3136476ad7d811e8eabaff5111b90e592695e651d6111f819ebf0165b8b7f5adc05afb5f7f01d1e5fb64876cb696e492feb20a477a5800382b7a` The StreamingProxyRedirects feature and `--redirect-container-streaming` flag are deprecated, and will be removed in a future release. The default behavior (proxy streaming requests through the kubelet) will be the only supported option. If you are setting `--redirect-container-streaming=true`, then you must migrate off this configuration. The flag will no longer be able to be enabled starting in v1.20. If you are not setting the flag, no action is necessary. (, ) [SIG API Machinery and Node] Feature Name: Support using network resources (VNet, LB, IP, etc.) in different AAD Tenant and Subscription than those for the cluster. Changes in Pull Request: Add properties `networkResourceTenantID` and `networkResourceSubscriptionID` in cloud provider auth config section, which indicates the location of network resources. Add function `GetMultiTenantServicePrincipalToken` to fetch multi-tenant service principal token, which will be used by Azure VM/VMSS Clients in this feature. Add function `GetNetworkResourceServicePrincipalToken` to fetch network resource service principal token, which will be used by Azure Network Resource (Load Balancer, Public IP, Route Table, Network Security Group and their sub level resources) Clients in this feature. Related unit tests. User Documentation: In PR https://github.com/kubernetes-sigs/cloud-provider-azure/pull/301 (, ) [SIG Cloud Provider] Azure service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset has been deprecated. Its support would be removed in a future release. (, ) [SIG Cloud Provider] API additions to apiserver types (, ) [SIG API Machinery, Cloud Provider and Cluster Lifecycle] Add Scheduling Profiles to kubescheduler.config.k8s.io/v1alpha2 (, ) [SIG Scheduling and Testing] Added support for multiple sizes huge pages on a container level (, ) [SIG Apps, Node and Storage] AppProtocol is a new field on Service and Endpoints resources, enabled with the ServiceAppProtocol feature

(, ) [SIG Apps and Network] Fixed missing validation of uniqueness of list items in lists with `x-kubernetes-list-type: map` or `x-kubernetes-list-type: set` in CustomResources. (, ) [SIG API Machinery] Introduces optional --detect-local flag to kube-proxy. Currently the only supported value is "cluster-cidr", which is the default if not specified. (, ) [SIG Cluster Lifecycle, Network and Scheduling] Kube-scheduler can run more than one scheduling profile. Given a pod, the profile is selected by using its `.spec.SchedulerName`. (, ) [SIG Apps, Scheduling and Testing] Moving Windows RunAsUserName feature to GA (, ) [SIG Apps and Windows] Add --dry-run to kubectl delete, taint, replace (, ) [SIG CLI and Testing] Add huge page stats to Allocated resources in "kubectl describe node" (, ) [SIG CLI] Kubeadm: The ClusterStatus struct present in the kubeadm-config ConfigMap is deprecated and will be removed on a future version. It is going to be maintained by kubeadm until it gets removed. The same information can be found on `etcd` and `kube-apiserver` pod annotations, `kubeadm.kubernetes.io/etcd.advertise-client-urls` and `kubeadm.kubernetes.io/kube-apiserver.advertise-address.endpoint` respectively. (, ) [SIG Cluster Lifecycle] Kubeadm: add the experimental feature gate PublicKeysECDSA that can be used to create a cluster with ECDSA certificates from "kubeadm init". Renewal of existing ECDSA certificates is also supported using "kubeadm alpha certs renew", but not switching between the RSA and ECDSA algorithms on the fly or during upgrades. (, ) [SIG API Machinery, Auth and Cluster Lifecycle] Kubeadm: on kubeconfig certificate renewal, keep the embedded CA in sync with the one on disk (, ) [SIG Cluster Lifecycle] Kubeadm: upgrade supports fallback to the nearest known etcd version if an unknown k8s version is passed (, ) [SIG Cluster Lifecycle] New flag `--show-hidden-metrics-for-version` in kube-scheduler can be used to show all hidden metrics that deprecated in the previous minor release. (, ) [SIG Instrumentation and Scheduling] Scheduler framework permit plugins now run at the end of the scheduling cycle, after reserve plugins. Waiting on permit will remain in the beginning of the binding cycle. (, ) [SIG Scheduling] The kubelet and the default docker runtime now support running ephemeral containers in the Linux process namespace of a target container. Other container runtimes must implement this feature before it will be available in that runtime. (, ) [SIG Node] Add delays between goroutines for vm instance update (, ) [SIG Cloud Provider] Add init containers log to cluster dump info. (, ) [SIG CLI] CPU limits are now respected for Windows containers. If a node is over-provisioned, no weighting is used - only limits are respected. (, ) [SIG Node, Testing and Windows] Cloud provider config CloudProviderBackoffMode has been removed since it won't be used anymore. (, ) [SIG Cloud Provider] Evictions due to pods breaching their ephemeral storage limits are now recorded by the `kubelet_evictions` metric and can be alerted on. (, ) [SIG Node] Fix: add remediation in azure disk attach/detach (, ) [SIG Cloud Provider] Fix: check disk status before disk azure disk (, ) [SIG Cloud Provider] Fixed cleaning of CSI raw block volumes. (, ) [SIG Storage] Get-kube.sh uses the gcloud's current local GCP service account for auth when the provider is GCE or GKE instead of the metadata server default (, ) [SIG Cluster Lifecycle] Golang/x/net has been updated to bring in fixes for CVE-2020-9283 (, ) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation] Kubeadm now includes CoreDNS version

(, ) [SIG Cluster Lifecycle] Kubeadm: fix the bug that 'kubeadm upgrade' hangs in single node cluster (, ) [SIG Cluster Lifecycle] Optimize kubectl version help info (, ) [SIG CLI] Removes the deprecated command `kubectl rolling-update` (, ) [SIG Architecture, CLI and Testing] filename | sha512 hash -- | -- | `6452cac2b80721e9f577cb117c29b9ac6858812b4275c2becbf74312566f7d016e8b34019bd1bf7615131b191613bf9b973e40ad9ac8f6de9007d41ef2d7fd70` | `e41d9d4dd6910a42990051fcdca4bf5d3999df46375abd27ffc56aae9b455ae984872302d590da6aa85bba6079334fb5fe511596b415ee79843dee1c61c137da` filename | sha512 hash -- | -- | `5c95935863492b31d4aaa6be93260088dafea27663eb91edca980ca3a8485310e60441bc9050d4d577e9c3f7ffd96db516db8d64321124cec1b712e957c9fe1c` | `868faa578b3738604d8be62fae599ccc556799f1ce54807f1fe72599f20f8a1f98ad8152fac14a08a463322530b696d375253ba3653325e74b587df6e0510da3` | `76a89d1d30b476b47f8fb808e342f89608e5c1c1787c4c06f2d7e763f9482e2ae8b31e6ad26541972e2b9a3a7c28327e3150cdd355e8b8d8b050a801bbf08d49` | `07ad96a09b44d1c707d7c68312c5d69b101a3424bf1e6e9400b2e7a3fba78df04302985d473ddd640d8f3f0257be34110dbe1304b9565dd9d7a4639b7b7b85fd` | `c04fed9fa370a75c1b8e18b2be0821943bb9befcc784d14762ea3278e73600332a9b324d5eeaa1801d20ad6be07a553c41dcf4fa7ab3eadd0730ab043d687c8c` | `4199147dea9954333df26d34248a1cb7b02ebbd6380ffcd42d9f9ed5fdabae45a59215474dab3c11436c82e60bd27cbd03b3dde288bf611cd3e78b87c783c6a9` | `4f6d4d61d1c52d3253ca19031ebcd4bad06d19b68bbaaab5c8e8c590774faea4a5ceab1f05f2706b61780927e1467815b3479342c84d45df965aba78414727c4` | `e2a454151ae5dd891230fb516a3f73f73ab97832db66fd3d12e7f1657a569f58a9fe2654d50ddd7d8ec88a5ff5094199323a4c6d7d44dcf7edb06cca11dd4de1` | `14b262ba3b71c41f545db2a017cf1746075ada5745a858d2a62bc9df7c5dc10607220375db85e2c4cb85307b09709e58bc66a407488e0961191e3249dc7742b0` | `26353c294755a917216664364b524982b7f5fc6aa832ce90134bb178df8a78604963c68873f121ea5f2626ff615bdbf2ffe54e00578739cde6df42ffae034732` filename | sha512 hash -- | -- | `ba77e0e7c610f59647c1b2601f82752964a0f54b7ad609a89b00fcfd553d0f0249f6662becbabaa755bb769b36a2000779f08022c40fb8cc61440337481317a1` | `45e87b3e844ea26958b0b489e8c9b90900a3253000850f5ff9e87ffdcafba72ab8fd17b5ba092051a58a4bc277912c047a85940ec7f093dff6f9e8bf6fed3b42` | `155e136e3124ead69c594eead3398d6cfdbb8f823c324880e8a7bbd1b570b05d13a77a69abd0a6758cfcc7923971cc6da4d3e0c1680fd519b632803ece00d5ce` | `3fa0fb8221da19ad9d03278961172b7fa29a618b30abfa55e7243bb937dede8df56658acf02e6b61e7274fbc9395e237f49c62f2a83017eca2a69f67af31c01c` | `db3199c3d7ba0b326d71dc8b80f50b195e79e662f71386a3b2976d47d13d7b0136887cc21df6f53e70a3d733da6eac7bbbf3bab2df8a1909a3cee4b44c32dd0b` filename | sha512 hash -- | -- | `addcdfbad7f12647e6babb8eadf853a374605c8f18bf63f416fa4d3bf1b903aa206679d840433206423a984bb925e7983366edcdf777cf5daef6ef88e53d6dfa` | `b2ac54e0396e153523d116a2aaa32c919d6243931e0104cd47a23f546d710e7abdaa9eae92d978ce63c92041e63a9b56f5dd8fd06c812a7018a10ecac440f768` | `7aab36f2735cba805e4fd109831a1af0f586a88db3f07581b6dc2a2aab90076b22c96b490b4f6461a8fb690bf78948b6d514274f0d6fb0664081de2d44dc48e1` | `a579936f07ebf86f69f297ac50ba4c34caf2c0b903f73190eb581c78382b05ef36d41ade5bfd25d7b1b658cfcbee3d7125702a18e7480f9b09a62733a512a18a` | `58fa0359ddd48835192fab1136a2b9b45d1927b04411502c269cda07cb8a8106536973fb4c7fedf1d41893a524c9fe2e21078fdf27bfbeed778273d024f14449` | `9086c03cd92b440686cea6d8c4e48045cc46a43ab92ae0e70350b3f51804b9e2aaae7178142306768bae00d9ef6dd938167972bfa90b12223540093f735a45db` Kubeadm: command line option "kubelet-version" for `kubeadm upgrade node` has been deprecated and will be removed in a future release. (, ) [SIG Cluster Lifecycle] Kubelet podresources API now provides the information about active pods only. (, ) [SIG Node] Remove deprecated fields from .leaderElection in kubescheduler.config.k8s.io/v1alpha2 (, ) [SIG Scheduling] Signatures on generated clientset methods have been modified to accept `context.Context` as a first argument. Signatures of generated Create, Update, and Patch methods have been updated to accept CreateOptions, UpdateOptions and PatchOptions respectively. Clientsets that with the previous interface have been added in new "deprecated" packages to allow incremental migration to the new APIs. The deprecated packages will be removed in the 1.21 release. (, ) [SIG API Machinery, Apps, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Scheduling, Storage, Testing and Windows] The k8s.io/node-api component is no longer updated. Instead, use the RuntimeClass types located within k8s.io/api, and the generated clients located within k8s.io/client-go (, ) [SIG Node and Release] Add indexer for storage cacher (, ) [SIG API Machinery] Add support for mount options to the FC volume plugin (, ) [SIG Storage] Added a config-mode flag in azure auth module to enable getting AAD token without spn: prefix in audience claim. When it's not specified, the default behavior doesn't change. (, ) [SIG API Machinery, Auth, CLI and Cloud Provider] Introduced BackoffManager interface for backoff management (, ) [SIG API Machinery] PodTopologySpread plugin now excludes terminatingPods when making scheduling decisions. (, ) [SIG Scheduling] Promote CSIMigrationOpenStack to Beta (off by default since it requires installation of the OpenStack Cinder CSI Driver) The in-tree AWS OpenStack Cinder "kubernetes.io/cinder" was already deprecated a while ago and will be removed in 1.20. Users should enable CSIMigration + CSIMigrationOpenStack features and install the OpenStack Cinder CSI Driver (https://github.com/kubernetes/cloud-provider-openstack) to avoid disruption to existing Pod and PVC objects at that time. Users should start using the OpenStack Cinder CSI Driver directly for any new volumes. (, ) [SIG Cloud Provider] The scheduler Permit extension point doesn't return a boolean value in its Allow() and Reject() functions. (, ) [SIG Scheduling] Adds "volume.beta.kubernetes.io/migrated-to" annotation to PV's and PVC's when they are migrated to signal external provisioners to pick up those objects for Provisioning and Deleting. (, ) [SIG Apps and Storage] Fix a bug in the dual-stack IPVS proxier where stale IPv6 endpoints were not being cleaned up (, ) [SIG Network] Fix kubectl drain ignore daemonsets and others. (, ) [SIG CLI] Fix: add azure disk migration support for CSINode (, ) [SIG Cloud Provider and Storage] Fix: add non-retriable errors in azure clients (, ) [SIG Cloud Provider] Fixed NetworkPolicy validation that Except values are accepted when they are outside the CIDR

(, ) [SIG Network] Improves performance of the node authorizer (, ) [SIG Auth] Iptables/userspace proxy: improve performance by getting local addresses only once per sync loop, instead of for every external IP (, ) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Network] Kube-aggregator: always sets unavailableGauge metric to reflect the current state of a service. (, ) [SIG API Machinery] Kubeadm allows to configure single-stack clusters if dual-stack is enabled (, ) [SIG API Machinery, Cluster Lifecycle and Network] Kubeadm: 'kubeadm alpha kubelet config download' has been removed, please use 'kubeadm upgrade node phase kubelet-config' instead (, ) [SIG Cluster Lifecycle] Kubeadm: remove 'kubeadm upgrade node config' command since it was deprecated in v1.15, please use 'kubeadm upgrade node phase kubelet-config' instead (, ) [SIG Cluster Lifecycle] Kubectl describe <type> and kubectl top pod will return a message saying "No resources found" or "No resources found in <namespace> namespace" if there are no results to display. (, ) [SIG CLI] Kubelet metrics gathered through metrics-server or prometheus should no longer timeout for Windows nodes running more than 3 pods. (, ) [SIG Node, Testing and Windows] Kubelet metrics have been changed to buckets. For example the exec/{podNamespace}/{podID}/{containerName} is now just exec. (, ) [SIG Node] Limit number of instances in a single update to GCE target pool to 1000. (, ) [SIG Cloud Provider, Network and Scalability] Make Azure clients only retry on specified HTTP status codes (, ) [SIG Cloud Provider] Pause image contains "Architecture" in non-amd64 images (, ) [SIG Release] Pods that are considered for preemption and haven't started don't produce an error log. (, ) [SIG Scheduling] Prevent error message from being displayed when running kubectl plugin list and your path includes an empty string (, ) [SIG CLI] `kubectl create clusterrolebinding` creates rbac.authorization.k8s.io/v1 object (, ) [SIG CLI] Due to a during `v1.18.0-alpha.3`, we needed to push a manual tag (`v1.18.0-alpha.4`). No binaries have been produced or will be provided for `v1.18.0-alpha.4`. The changelog for `v1.18.0-alpha.4` is included as part of the section. filename | sha512 hash -- | -- | `60bf3bfc23b428f53fd853bac18a4a905b980fcc0bacd35ccd6357a89cfc26e47de60975ea6b712e65980e6b9df82a22331152d9f08ed4dba44558ba23a422d4` | `8adf1016565a7c93713ab6fa4293c2d13b4f6e4e1ec4dcba60bd71e218b4dbe9ef5eb7dbb469006743f498fc7ddeb21865cd12bec041af60b1c0edce8b7aecd5` filename | sha512 hash -- | -- | `abb32e894e8280c772e96227b574da81cd1eac374b8d29158b7f222ed550087c65482eef4a9817dfb5f2baf0d9b85fcdfa8feced0fbc1aacced7296853b57e1f` | `5e4b1a993264e256ec1656305de7c306094cae9781af8f1382df4ce4eed48ce030827fde1a5e757d4ad57233d52075c9e4e93a69efbdc1102e4ba810705ccddc` | `68da39c2ae101d2b38f6137ceda07eb0c2124794982a62ef483245dbffb0611c1441ca085fa3127e7a9977f45646788832a783544ff06954114548ea0e526e46` | `dc236ffa8ad426620e50181419e9bebe3c161e953dbfb8a019f61b11286e1eb950b40d7cc03423bdf3e6974973bcded51300f98b55570c29732fa492dcde761d` | `ab0a8bd6dc31ea160b731593cdc490b3cc03668b1141cf95310bd7060dcaf55c7ee9842e0acae81063fdacb043c3552ccdd12a94afd71d5310b3ce056fdaa06c` | `159ea083c601710d0d6aea423eeb346c99ffaf2abd137d35a53e87a07f5caf12fca8790925f3196f67b768fa92a024f83b50325dbca9ccd4dde6c59acdce3509` | `16b0459adfa26575d13be49ab53ac7f0ffd05e184e4e13d2dfbfe725d46bb8ac891e1fd8aebe36ecd419781d4cc5cf3bd2aaaf5263cf283724618c4012408f40` | `d5aa1f5d89168995d2797eb839a04ce32560f405b38c1c0baaa0e313e4771ae7bb3b28e22433ad5897d36aadf95f73eb69d8d411d31c4115b6b0adf5fe041f85` | `374e16a1e52009be88c94786f80174d82dff66399bf294c9bee18a2159c42251c5debef1109a92570799148b08024960c6c50b8299a93fd66ebef94f198f34e9` | `5a94c1068c19271f810b994adad8e62fae03b3d4473c7c9e6d056995ff7757ea61dd8d140c9267dd41e48808876673ce117826d35a3c1bb5652752f11a044d57` filename | sha512 hash -- | -- | `a677bec81f0eba75114b92ff955bac74512b47e53959d56a685dae5edd527283d91485b1e86ad74ef389c5405863badf7eb22e2f0c9a568a4d0cb495c6a5c32f` | `2fb696f86ff13ebeb5f3cf2b254bf41303644c5ea84a292782eac6123550702655284d957676d382698c091358e5c7fe73f32803699c19be7138d6530fe413b6` | `738e95da9cfb8f1309479078098de1c38cef5e1dd5ee1129b77651a936a412b7cd0cf15e652afc7421219646a98846ab31694970432e48dea9c9cafa03aa59cf` | `7a85bfcbb2aa636df60c41879e96e788742ecd72040cb0db2a93418439c125218c58a4cfa96d01b0296c295793e94c544e87c2d98d50b49bc4cb06b41f874376` | `1f1cdb2efa3e7cac857203d8845df2fdaa5cf1f20df764efffff29371945ec58f6deeba06f8fbf70b96faf81b0c955bf4cb84e30f9516cb2cc1ed27c2d2185a6` filename | sha512 hash -- | -- | `4ccfced3f5ba4adfa58f4a9d1b2c5bdb3e89f9203ab0e27d11eb1c325ac323ebe63c015d2c9d070b233f5d1da76cab5349da3528511c1cd243e66edc9af381c4` | `d695a69d18449062e4c129e54ec8384c573955f8108f4b78adc2ec929719f2196b995469c728dd6656c63c44cda24315543939f85131ebc773cfe0de689df55b` | `21df1da88c89000abc22f97e482c3aaa5ce53ec9628d83dda2e04a1d86c4d53be46c03ed6f1f211df3ee5071bce39d944ff7716b5b6ada3b9c4821d368b0a898` | `ff77e3aacb6ed9d89baed92ef542c8b5cec83151b6421948583cf608bca3b779dce41fc6852961e00225d5e1502f6a634bfa61a36efa90e1aee90dedb787c2d2` | `57d75b7977ec1a0f6e7ed96a304dbb3b8664910f42ca19aab319a9ec33535ff5901dfca4abcb33bf5741cde6d152acd89a5f8178f0efe1dc24430e0c1af5b98f` | `63fdbb71773cfd73a914c498e69bb9eea3fc314366c99ffb8bd42ec5b4dae807682c83c1eb5cfb1e2feb4d11d9e49cc85ba644e954241320a835798be7653d61` Remove all the generators from kubectl run. It will now only create pods. Additionally, deprecates all the flags that are not relevant anymore. (, ) [SIG Architecture, SIG CLI, and SIG Testing] kubeadm: kube-dns is deprecated and will not be supported in a future version (, ) [SIG Cluster Lifecycle] Add kubescheduler.config.k8s.io/v1alpha2 (, ) [SIG Scheduling] --enable-cadvisor-json-endpoints is now disabled by default. If you need access to the cAdvisor v1 Json API please enable it explicitly in the kubelet command line. Please note that this flag was deprecated in 1.15 and will be removed in 1.19. (, ) [SIG Instrumentation, SIG Node, and SIG Testing] The following feature gates are removed, because the associated features were unconditionally enabled in previous releases: CustomResourceValidation, CustomResourceSubresources, CustomResourceWebhookConversion, CustomResourcePublishOpenAPI, CustomResourceDefaulting (, ) [SIG API Machinery] The aggregation API will have alpha support for network proxy (, ) [SIG API Machinery] API request throttling (due to a high rate of requests) is now reported in client-go logs at log level 2. The messages are of the form Throttling request took 1.50705208s, request: GET:\<URL\> The presence of these messages, may indicate to the administrator the need to tune the cluster

(, ) [SIG API Machinery] kubeadm: reject a node joining the cluster if a node with the same name already exists (, ) [SIG Cluster Lifecycle] disableAvailabilitySetNodes is added to avoid VM list for VMSS clusters. It should only be used when vmType is "vmss" and all the nodes (including masters) are VMSS virtual machines. (, ) [SIG Cloud Provider] The kubectl --dry-run flag now accepts the values 'client', 'server', and 'none', to support client-side and server-side dry-run strategies. The boolean and unset values for the --dry-run flag are deprecated and a value will be required in a future version. (, ) [SIG CLI] Add support for pre-allocated hugepages for more than one page size (, ) [SIG Apps] Update CNI version to v0.8.5 (, ) [SIG API Machinery, SIG Cluster Lifecycle, SIG Network, SIG Release, and SIG Testing] Skip default spreading scoring plugin for pods that define TopologySpreadConstraints (, ) [SIG Scheduling] Added more details to taint toleration errors (, ) [SIG Apps, and SIG Scheduling] Scheduler: Add DefaultBinder plugin (, ) [SIG Scheduling, and SIG Testing] Kube-apiserver metrics will now include request counts, latencies, and response sizes for /healthz, /livez, and /readyz requests. (, ) [SIG API Machinery] Fix the masters rolling upgrade causing thundering herd of LISTs on etcd leading to control plane unavailability. (, ) [SIG API Machinery, SIG Node, and SIG Testing] `kubectl diff` now returns 1 only on diff finding changes, and >1 on kubectl errors. The "exit status code 1" message as also been muted. (, ) [SIG CLI, and SIG Testing] To reduce chances of throttling, VM cache is set to nil when Azure node provisioning state is deleting (, ) [SIG Cloud Provider] Fix regression in statefulset conversion which prevented applying a statefulset multiple times. (, ) [SIG Apps, and SIG Testing] fixed two scheduler metrics (pendingpods and scheduleattempts_total) not being recorded (, ) [SIG Scheduling] Resolved a performance issue in the node authorizer index maintenance. (, ) [SIG Auth] Removed the 'client' label from apiserverrequesttotal. (, ) [SIG API Machinery, and SIG Instrumentation] `("k8s.io/client-go/rest".Request).{Do,DoRaw,Stream,Watch}` now require callers to pass a `context.Context` as an argument. The context is used for timeout and cancellation signaling and to pass supplementary information to round trippers in the wrapped transport chain. If you don't need any of this functionality, it is sufficient to pass a context created with `context.Background()` to these functions. The `("k8s.io/client-go/rest".Request).Context` method is removed now that all methods that execute a request accept a context directly. (, ) [SIG API Machinery, SIG Apps, SIG Auth, SIG Autoscaling, SIG CLI, SIG Cloud Provider, SIG Cluster Lifecycle, SIG Instrumentation, SIG Network, SIG Node, SIG Scheduling, SIG Storage, and SIG Testing] For volumes that allow attaches across multiple nodes, attach and detach operations across different nodes are now executed in parallel. (, ) [SIG Apps, SIG Node, and SIG Storage] kubeadm: apply further improvements to the tentative support for concurrent etcd member join. Fixes a bug where multiple members can receive the same hostname. Increase the etcd client dial timeout and retry timeout for add/remove/... operations. (, ) [SIG Cluster Lifecycle] Reverted a kubectl azure auth module change where oidc claim spn: prefix was omitted resulting a breaking behavior with existing Azure AD OIDC enabled api-server (, ) [SIG API Machinery, SIG Auth, and SIG Cloud Provider] Update cri-tools to v1.17.0 (, ) [SIG Cluster Lifecycle, and SIG Release] kubeadm: remove the deprecated CoreDNS feature-gate. It was set to "true" since v1.11 when the feature went GA. In v1.13 it was marked as deprecated and hidden from the CLI. (, ) [SIG Cluster Lifecycle] Shared informers are now more reliable in the face of network

(, ) [SIG API Machinery] the CSR signing cert/key pairs will be reloaded from disk like the kube-apiserver cert/key pairs (, ) [SIG API Machinery, SIG Apps, and SIG Auth] "kubectl describe statefulsets.apps" prints garbage for rolling update partition (, ) [SIG CLI] <!-- NEW RELEASE NOTES ENTRY --> filename | sha512 hash -- | -- | `7af83386b4b35353f0aa1bdaf73599eb08b1d1ca11ecc2c606854aff754db69f3cd3dc761b6d7fc86f01052f615ca53185f33dbf9e53b2f926b0f02fc103fbd3` | `a14b02a0a0bde97795a836a8f5897b0ee6b43e010e13e43dd4cca80a5b962a1ef3704eedc7916fed1c38ec663a71db48c228c91e5daacba7d9370df98c7ddfb6` filename | sha512 hash -- | -- | `427f214d47ded44519007de2ae87160c56c2920358130e474b768299751a9affcbc1b1f0f936c39c6138837bca2a97792a6700896976e98c4beee8a1944cfde1` | `861fd81ac3bd45765575bedf5e002a2294aba48ef9e15980fc7d6783985f7d7fcde990ea0aef34690977a88df758722ec0a2e170d5dcc3eb01372e64e5439192` | `7d59b05d6247e2606a8321c72cd239713373d876dbb43b0fb7f1cb857fa6c998038b41eeed78d9eb67ce77b0b71776ceed428cce0f8d2203c5181b473e0bd86c` | `7cdefb4e32bad9d2df5bb8e7e0a6f4dab2ae6b7afef5d801ac5c342d4effdeacd799081fa2dec699ecf549200786c7623c3176252010f12494a95240dd63311d` | `6212bbf0fa1d01ced77dcca2c4b76b73956cd3c6b70e0701c1fe0df5ff37160835f6b84fa2481e0e6979516551b14d8232d1c72764a559a3652bfe2a1e7488ff` | `1f0d9990700510165ee471acb2f88222f1b80e8f6deb351ce14cf50a70a9840fb99606781e416a13231c74b2bd7576981b5348171aa33b628d2666e366cd4629` | `77e00ba12a32db81e96f8de84609de93f32c61bb3f53875a57496d213aa6d1b92c09ad5a6de240a78e1a5bf77fac587ff92874f34a10f8909ae08ca32fda45d2` | `a39ec2044bed5a4570e9c83068e0fc0ce923ccffa44380f8bbc3247426beaff79c8a84613bcb58b05f0eb3afbc34c79fe3309aa2e0b81abcfd0aa04770e62e05` | `1a0ab88f9b7e34b60ab31d5538e97202a256ad8b7b7ed5070cae5f2f12d5d4edeae615db7a34ebbe254004b6393c6b2480100b09e30e59c9139492a3019a596a` | `1966eb5dfb78c1bc33aaa6389f32512e3aa92584250a0164182f3566c81d901b59ec78ee4e25df658bc1dd221b5a9527d6ce3b6c487ca3e3c0b319a077caa735` filename | sha512 hash -- | -- | `f814d6a3872e4572aa4da297c29def4c1fad8eba0903946780b6bf9788c72b99d71085c5aef9e12c01133b26fa4563c1766ba724ad2a8af2670a24397951a94d` | `56aa08225e546c92c2ff88ac57d3db7dd5e63640772ea72a429f080f7069827138cbc206f6f5fe3a0c01bfca043a9eda305ecdc1dcb864649114893e46b6dc84` | `fb87128d905211ba097aa860244a376575ae2edbaca6e51402a24bc2964854b9b273e09df3d31a2bcffc91509f7eecb2118b183fb0e0eb544f33403fa235c274` | `6d21fbf39b9d3a0df9642407d6f698fabdc809aca83af197bceb58a81b25846072f407f8fb7caae2e02dc90912e3e0f5894f062f91bcb69f8c2329625d3dfeb7` | `ddcda4dc360ca97705f71bf2a18ddacd7b7ddf77535b62e699e97a1b2dd24843751313351d0112e238afe69558e8271eba4d27ab77bb67b4b9e3fbde6eec85c9` filename | sha512 hash -- | -- | `78915a9bde35c70c67014f0cea8754849db4f6a84491a3ad9678fd3bc0203e43af5a63cfafe104ae1d56b05ce74893a87a6dcd008d7859e1af6b3bce65425b5d` | `3218e811abcb0cb09d80742def339be3916db5e9bbc62c0dc8e6d87085f7e3d9eeed79dea081906f1de78ddd07b7e3acdbd7765fdb838d262bb35602fd1df106` | `fa22de9c4440b8fb27f4e77a5a63c5e1c8aa8aa30bb79eda843b0f40498c21b8c0ad79fff1d841bb9fef53fe20da272506de9a86f81a0b36d028dbeab2e482ce` | `bbda9b5cc66e8f13d235703b2a85e2c4f02fa16af047be4d27a3e198e11eb11706e4a0fbb6c20978c770b069cd4cd9894b661f09937df9d507411548c36576e0` | `b2ed1eda013069adce2aac00b86d75b84e006cfce9bafac0b5a2bafcb60f8f2cb346b5ea44eafa72d777871abef1ea890eb3a2a05de28968f9316fa88886a8ed` | `bd8eb23dba711f31b5148257076b1bbe9629f2a75de213b2c779bd5b29279e9bf22f8bde32f4bc814f4c0cc49e19671eb8b24f4105f0fe2c1490c4b78ec3c704` Bump golang/mock version to v1.3.1 (, ) fix a bug that orphan revision cannot be adopted and statefulset cannot be synced (, ) Azure storage clients now suppress requests on throttling (, ) Introduce Alpha field `Immutable` in both Secret and ConfigMap objects to mark their contents as immutable. The implementation is hidden behind feature gate `ImmutableEphemeralVolumes` (currently in Alpha stage). (, ) EndpointSlices will now be enabled by default. A new `EndpointSliceProxying` feature gate determines if kube-proxy will use EndpointSlices, this is disabled by default. (, ) kubeadm upgrades always persist the etcd backup for stacked (, ) Fix the bug PIP's DNS is deleted if no DNS label service annotation isn't set. (, ) New flag `--show-hidden-metrics-for-version` in kube-controller-manager can be used to show all hidden metrics that deprecated in the previous minor release. (, ) Azure network and VM clients now suppress requests on throttling (, ) `kubectl apply -f <file> --prune -n <namespace>` should prune all resources not defined in the file in the cli specified namespace. (, ) Fixes service account token admission error in clusters that do not run the service account token controller (, ) CustomResourceDefinition status fields are no longer required for client validation when submitting manifests. (, ) All apiservers log request lines in a more greppable format. (, ) provider/azure: Network security groups can now be in a separate resource group. (, ) Cleaned up the output from `kubectl describe CSINode <name>`. (, ) Fixed the following (, ) AWS Cloud Provider attempts to delete LoadBalancer security group it didnt provision AWS Cloud Provider creates default LoadBalancer security group even if annotation [service.beta.kubernetes.io/aws-load-balancer-security-groups] is present kubelet: resource metrics endpoint `/metrics/resource/v1alpha1` as well as all metrics under this endpoint have been deprecated. (, ) Please convert to the following metrics emitted by endpoint `/metrics/resource`: scrapeerror --> scrapeerror nodecpuusagesecondstotal --> nodecpuusage_seconds nodememoryworkingsetbytes --> nodememoryworkingsetbytes containercpuusagesecondstotal --> containercpuusage_seconds containermemoryworkingsetbytes --> containermemoryworkingsetbytes scrapeerror --> scrapeerror You can now pass "--node-ip ::" to kubelet to indicate that it should autodetect an IPv6 address to use as the node's primary address. (, ) kubeadm: support automatic retry after failing to pull image (, ) TODO (, ) Improved yaml parsing performance (, ) Fixed a bug which could prevent a provider ID from ever being set for node if an error occurred determining the provider ID when the node was

(, ) fix a regression in kubenet that prevent pods to obtain ip addresses (, ) Bind kube-dns containers to linux nodes to avoid Windows scheduling (, ) The following features are unconditionally enabled and the corresponding `--feature-gates` flags have been removed: `PodPriority`, `TaintNodesByCondition`, `ResourceQuotaScopeSelectors` and `ScheduleDaemonSetPods` (, ) Bind dns-horizontal containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes (, ) fix kubectl annotate error when local=true is set (, ) Bug fixes: (, ) Make sure we include latest packages node #351 () fix kuebctl apply set-last-applied namespaces error (, ) Add VolumeBinder method to FrameworkHandle interface, which allows user to get the volume binder when implementing scheduler framework plugins. (, ) elasticsearch supports automatically setting the advertise address (, ) If a serving certificates param specifies a name that is an IP for an SNI certificate, it will have priority for replying to server connections. (, ) kube-proxy: Added dual-stack IPv4/IPv6 support to the iptables proxier. (, ) Azure VMSS/VMSSVM clients now suppress requests on throttling (, ) New metric kubeletpleglastseenseconds to aid diagnosis of PLEG not healthy issues. (, ) For subprotocol negotiation, both client and server protocol is required now. (, ) kubeadm: use bind-address option to configure the kube-controller-manager and kube-scheduler http probes (, ) Marked scheduler's metrics schedulingalgorithmpredicateevaluationseconds and (, ) schedulingalgorithmpriorityevaluationseconds as deprecated. Those are replaced by frameworkextensionpointdurationseconds[extenstionpoint="Filter"] and frameworkextensionpointdurationseconds[extenstionpoint="Score"] respectively. Marked scheduler's schedulingdurationseconds Summary metric as deprecated (, ) Add instructions about how to bring up e2e test cluster (, ) If a required flag is not provided to a command, the user will only see the required flag error message, instead of the entire usage menu. (, ) kubeadm: tolerate whitespace when validating certificate authority PEM data in kubeconfig files (, ) kubeadm: add support for the "ci/k8s-master" version label as a replacement for "ci-cross/", which no longer exists. (, ) Fix EndpointSlice controller race condition and ensure that it handles external changes to EndpointSlices. (, ) Fix nil pointer dereference in azure cloud provider (, ) fix: azure disk could not mounted on Standard_DC4s/DC2s instances (, ) Fixes v1.17.0 regression in --service-cluster-ip-range handling with IPv4 ranges larger than 65536 IP addresses (, ) Adds back support for AlwaysCheckAllPredicates flag. (, ) Azure global rate limit is switched to per-client. A set of new rate limit configure options are introduced, including routeRateLimit, SubnetsRateLimit, InterfaceRateLimit, RouteTableRateLimit, LoadBalancerRateLimit, PublicIPAddressRateLimit, SecurityGroupRateLimit, VirtualMachineRateLimit, StorageAccountRateLimit, DiskRateLimit, SnapshotRateLimit, VirtualMachineScaleSetRateLimit and VirtualMachineSizeRateLimit. (, ) The original rate limit options would be default values for those new client's rate limiter. Fix issue about resource not found in azure cloud provider when lb specified in other resource group. (, ) `AlwaysCheckAllPredicates` is deprecated in scheduler Policy API. (, ) Kubernetes KMS provider for data encryption now supports disabling the in-memory data encryption key (DEK) cache by setting cachesize to a negative value. (, ) option `preConfiguredBackendPoolLoadBalancerTypes` is added to azure cloud provider for the pre-configured load balancers, possible values: `""`, `"internal"`, `"external"`, `"all"` (, ) Promote StartupProbe to beta for 1.18 release (, ) Fixes issue where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc. (, ) The audience claim before this fix has "spn:" prefix. After this fix, "spn:" prefix is

change CounterVec to Counter about PLEGDiscardEvent (, ) hollow-node do not use remote CRI anymore (, ) hollow-node use fake CRI (, ) filename | sha512 hash -- | -- | `0c4904efc7f4f1436119c91dc1b6c93b3bd9c7490362a394bff10099c18e1e7600c4f6e2fcbaeb2d342a36c4b20692715cf7aa8ada6dfac369f44cc9292529d7` | `0a50fc6816c730ca5ae4c4f26d5ad7b049607d29f6a782a4e5b4b05ac50e016486e269dafcc6a163bd15e1a192780a9a987f1bb959696993641c603ed1e841c8` filename | sha512 hash -- | -- | `c6d75f7f3f20bef17fc7564a619b54e6f4a673d041b7c9ec93663763a1cc8dd16aecd7a2af70e8d54825a0eecb9762cf2edfdade840604c9a32ecd9cc2d5ac3c` | `ca1f19db289933beace6daee6fc30af19b0e260634ef6e89f773464a05e24551c791be58b67da7a7e2a863e28b7cbcc7b24b6b9bf467113c26da76ac8f54fdb6` | `af2e673653eb39c3f24a54efc68e1055f9258bdf6cf8fea42faf42c05abefc2da853f42faac3b166c37e2a7533020b8993b98c0d6d80a5b66f39e91d8ae0a3fb` | `9009032c3f94ac8a78c1322a28e16644ce3b20989eb762685a1819148aed6e883ca8e1200e5ec37ec0853f115c67e09b5d697d6cf5d4c45f653788a2d3a2f84f` | `afba9595b37a3f2eead6e3418573f7ce093b55467dce4da0b8de860028576b96b837a2fd942f9c276e965da694e31fbd523eeb39aefb902d7e7a2f169344d271` | `04fc3b2fe3f271807f0bc6c61be52456f26a1af904964400be819b7914519edc72cbab9afab2bb2e2ba1a108963079367cedfb253c9364c0175d1fcc64d52f5c` | `04c7edab874b33175ff7bebfff5b3a032bc6eb088fcd7387ffcd5b3fa71395ca8c5f9427b7ddb496e92087dfdb09eaf14a46e9513071d3bd73df76c182922d38` | `499287dbbc33399a37b9f3b35e0124ff20b17b6619f25a207ee9c606ef261af61fa0c328dde18c7ce2d3dfb2eea2376623bc3425d16bc8515932a68b44f8bede` | `cf84aeddf00f126fb13c0436b116dd0464a625659e44c84bf863517db0406afb4eefd86807e7543c4f96006d275772fbf66214ae7d582db5865c84ac3545b3e6` | `69f20558ccd5cd6dbaccf29307210db4e687af21f6d71f68c69d3a39766862686ac1333ab8a5012010ca5c5e3c11676b45e498e3d4c38773da7d24bcefc46d95` filename | sha512 hash -- | -- | `3f29df2ce904a0f10db4c1d7a425a36f420867b595da3fa158ae430bfead90def2f2139f51425b349faa8a9303dcf20ea01657cb6ea28eb6ad64f5bb32ce2ed1` | `4a21073b2273d721fbf062c254840be5c8471a010bcc0c731b101729e36e61f637cb7fcb521a22e8d24808510242f4fff8a6ca40f10e9acd849c2a47bf135f27` | `7f1cb6d721bedc90e28b16f99bea7e59f5ad6267c31ef39c14d34db6ad6aad87ee51d2acdd01b6903307c1c00b58ff6b785a03d5a491cc3f8a4df9a1d76d406c` | `8f2b552030b5274b1c2c7c166eacd5a14b0c6ca0f23042f4c52efe87e22a167ba4460dcd66615a5ecd26d9e88336be1fb555548392e70efe59070dd2c314da98` | `8d9f2c96f66edafb7c8b3aa90960d29b41471743842aede6b47b3b2e61f4306fb6fc60b9ebc18820c547ee200bfedfe254c1cde962d447c791097dd30e79abdb` filename | sha512 hash -- | -- | `84194cb081d1502f8ca68143569f9707d96f1a28fcf0c574ebd203321463a8b605f67bb2a365eaffb14fbeb8d55c8d3fa17431780b242fb9cba3a14426a0cd4a` | `0091e108ab94fd8683b89c597c4fdc2fbf4920b007cfcd5297072c44bc3a230dfe5ceed16473e15c3e6cf5edab866d7004b53edab95be0400cc60e009eee0d9d` | `b7e85682cc2848a35d52fd6f01c247f039ee1b5dd03345713821ea10a7fa9939b944f91087baae95eaa0665d11857c1b81c454f720add077287b091f9f19e5d3` | `cd1f0849e9c62b5d2c93ff0cebf58843e178d8a88317f45f76de0db5ae020b8027e9503a5fccc96445184e0d77ecdf6f57787176ac31dbcbd01323cd0a190cbb` | `e1e697a34424c75d75415b613b81c8af5f64384226c5152d869f12fd7db1a3e25724975b73fa3d89e56e4bf78d5fd07e68a709ba8566f53691ba6a88addc79ea` | `c725a19a4013c74e22383ad3fb4cb799b3e161c4318fdad066daf806730a89bc3be3ff0f75678d02b3cbe52b2ef0c411c0639968e200b9df470be40bb2c015cc` action required (, ) Currently, if users were to explicitly specify CacheSize of 0 for KMS provider, they would end-up with a provider that caches up to 1000 keys. This PR changes this behavior. Post this PR, when users supply 0 for CacheSize this will result in a validation error. CacheSize type was changed from int32 to *int32. This allows defaulting logic to differentiate between cases where users explicitly supplied 0 vs. not supplied any value. KMS Provider's endpoint (path to Unix socket) is now validated when the EncryptionConfiguration files is loaded. This used to be handled by the GRPCService. fix: azure data disk should use same key as os disk by default (, ) New flag `--show-hidden-metrics-for-version` in kube-proxy can be used to show all hidden metrics that deprecated in the previous minor release. (, ) Remove cluster-monitoring addon (, ) Changed core_pattern on COS nodes to be an absolute path. (, ) Track mount operations as uncertain if operation fails with non-final error (, ) add kube-proxy flags --ipvs-tcp-timeout, --ipvs-tcpfin-timeout, --ipvs-udp-timeout to configure IPVS connection timeouts. (, ) The sample-apiserver aggregated conformance test has updated to use the Kubernetes v1.17.0 sample apiserver (, ) The underlying format of the `CPUManager` state file has changed. Upgrades should be seamless, but any third-party tools that rely on reading the previous format need to be updated. (, ) kubernetes will try to acquire the iptables lock every 100 msec during 5 seconds instead of every second. This specially useful for environments using kube-proxy in iptables mode with a high churn rate of services. (, ) Fixed a panic in the kubelet cleaning up pod volumes (, ) azure cloud provider cache TTL is configurable, list of the azure cloud provider is as following: (, ) "availabilitySetNodesCacheTTLInSeconds" "vmssCacheTTLInSeconds" "vmssVirtualMachinesCacheTTLInSeconds" "vmCacheTTLInSeconds" "loadBalancerCacheTTLInSeconds" "nsgCacheTTLInSeconds" "routeTableCacheTTLInSeconds" Fixes kube-proxy when EndpointSlice feature gate is enabled on Windows. (, ) Fixes wrong validation result of NetworkPolicy PolicyTypes (, ) Fixes an issue with kubelet-reported pod status on deleted/recreated pods. (, ) kube-apiserver no longer serves the following deprecated APIs: (, ) All resources under `apps/v1beta1` and `apps/v1beta2` - use `apps/v1` instead `daemonsets`, `deployments`, `replicasets` resources under `extensions/v1beta1` - use `apps/v1` instead `networkpolicies` resources under `extensions/v1beta1` - use `networking.k8s.io/v1` instead `podsecuritypolicies` resources under `extensions/v1beta1` - use `policy/v1beta1` instead kubeadm: fix potential panic when executing "kubeadm reset" with a corrupted kubelet.conf file (, ) Fix a bug in port-forward: named port not working with service (, ) kube-proxy no longer modifies shared EndpointSlices. (, ) allow for configuration of CoreDNS replica count (, ) Fixed a regression where the kubelet would fail to update the ready status of pods. (, ) Resolves performance regression in client-go discovery clients constructed using `NewDiscoveryClientForConfig` or `NewDiscoveryClientForConfigOrDie`. (, ) Make error message and service event message more clear (, ) e2e-test-framework: add e2e test namespace dump if all tests succeed but the cleanup fails. (, ) SafeSysctlWhitelist: add net.ipv4.pinggrouprange (, ) kubelet: the metric processstarttime_seconds be marked as with the ALPHA stability level. (, ) API request throttling (due to a high rate of requests) is now reported in the kubelet (and other component) logs by default. The messages are of the form (, ) Throttling request took 1.50705208s, request: GET:\<URL\> The presence of large numbers of these messages, particularly with long delay times, may indicate to the administrator the need to tune the cluster accordingly. Fix API Server potential memory leak issue in processing watch request. (, ) Verify kubelet & kube-proxy can recover after being killed on Windows nodes (, ) Fixed an issue that the scheduler only returns the first failure reason. (, ) kubectl/drain: add skip-wait-for-delete-timeout

(, ) If pod DeletionTimestamp older than N seconds, skip waiting for the pod. Seconds must be greater than 0 to skip. Following metrics have been turned off: (, ) kubeletpodworkerlatencymicroseconds kubeletpodstartlatencymicroseconds kubeletcgroupmanagerlatencymicroseconds kubeletpodworkerstartlatency_microseconds kubeletplegrelistlatencymicroseconds kubeletplegrelistintervalmicroseconds kubeletevictionstatsagemicroseconds kubeletruntimeoperations kubeletruntimeoperationslatencymicroseconds kubeletruntimeoperations_errors kubeletdevicepluginregistrationcount kubeletdevicepluginalloclatency_microseconds kubeletdockeroperations kubeletdockeroperationslatencymicroseconds kubeletdockeroperations_errors kubeletdockeroperations_timeout networkpluginoperationslatencymicroseconds Kubelet cert TTL via GaugeFunc: (, ) Renamed Kubelet metric certificatemanagerserverexpirationseconds to certificatemanagerserverttlseconds and changed to report the second until expiration at read time rather than absolute time of expiry. Improved accuracy of Kubelet metric restclientexecpluginttl_seconds. Bind metadata-agent containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes (, ) Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes (, ) During initialization phase (preflight), kubeadm now verifies the presence of the conntrack executable (, ) VMSS cache is added so that less chances of VMSS GET throttling (, ) Update go-winio module version from 0.4.11 to 0.4.14 (, ) Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made (, ) kubectl drain node --dry-run will list pods that would be evicted or deleted (, ) Windows nodes on GCE can use TPM-based authentication to the master. (, ) kubectl/drain: add disable-eviction option. (, ) Force drain to use delete, even if eviction is supported. This will bypass checking PodDisruptionBudgets, and should be used with caution. kubeadm now errors out whenever a not supported component config version is supplied for the kubelet and kube-proxy (, ) Fixed issue with addon-resizer using deprecated extensions APIs (, ) Includes FSType when describing CSI persistent volumes. (, ) kubelet now exports a "serverexpirationrenewfailure" and "clientexpirationrenewfailure" metric counter if the certificate rotations cannot be performed. (, ) kubeadm: don't write the kubelet environment file on "upgrade apply" (, ) fix azure file AuthorizationFailure (, ) Resolved regression in admission, authentication, and authorization webhook performance in v1.17.0-rc.1 (, ) kubeadm: uses the apiserver AdvertiseAddress IP family to choose the etcd endpoint IP family for non external etcd clusters (, ) kubeadm: Forward cluster name to the controller-manager arguments (, ) Fixed "requested device X but found Y" attach error on AWS. (, ) addons: elasticsearch discovery supports IPv6 (, ) kubeadm: retry `kubeadm-config` ConfigMap creation or mutation if the apiserver is not responding. This will improve resiliency when joining new control plane nodes. (, ) Update Cluster Autoscaler to 1.17.0; changelog: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.17.0 (, ) Filter published OpenAPI schema by making nullable, required fields non-required in order to avoid kubectl to wrongly reject null values. (, ) kubectl set resources will no longer return an error if passed an empty change for a resource. (, ) kubectl set subject will no longer return an error if passed an empty change for a resource. kube-apiserver: fixed a conflict error encountered attempting to delete a pod with gracePeriodSeconds=0 and a resourceVersion precondition (, ) kubeadm: add a upgrade health check that deploys a Job (, ) kubeadm: make sure images are pre-pulled even if a tag did not change but their contents changed (, ) kube-apiserver: Fixes a bug that hidden metrics can not be enabled by the command-line option `--show-hidden-metrics-for-version`. (, ) kubeadm now supports automatic calculations of dual-stack node cidr masks to kube-controller-manager. (, ) Fix bug where EndpointSlice controller would attempt to modify shared objects. (, ) Use context to check client closed instead of http.CloseNotifier in processing watch request which will reduce 1 goroutine for each request if proto is HTTP/2.x . (, ) kubeadm: reset raises warnings if it cannot delete folders (, ) Wait for