<!-- BEGIN MUNGE: GENERATED_TOC -->
- [v1.6.13](#v1613)
  - [Downloads for v1.6.13](#downloads-for-v1613)
    - [Client Binaries](#client-binaries)
    - [Server Binaries](#server-binaries)
    - [Node Binaries](#node-binaries)
  - [Changelog since v1.6.12](#changelog-since-v1612)
    - [Other notable changes](#other-notable-changes)
- [v1.6.12](#v1612)
  - [Downloads for v1.6.12](#downloads-for-v1612)
    - [Client Binaries](#client-binaries-1)

<!-- BEGIN MUNGE: GENERATED_TOC -->

- [v1.23.17](#v12317)
  - [Downloads for v1.23.17](#downloads-for-v12317)
    - [Source Code](#source-code)
    - [Client Binaries](#client-binaries)
    - [Server Binaries](#server-binaries)
    - [Node Binaries](#node-binaries)
    - [Container Images](#container-images)
  - [Changelog since v1.23.16](#changelog-since-v12316)
  - [Changes by Kind](#changes-by-kind)
    - [Feature](#feature)

<!-- BEGIN MUNGE: GENERATED_TOC -->

- [v1.28.11](#v12811)
  - [Downloads for v1.28.11](#downloads-for-v12811)
    - [Source Code](#source-code)
    - [Client Binaries](#client-binaries)
    - [Server Binaries](#server-binaries)
    - [Node Binaries](#node-binaries)
    - [Container Images](#container-images)
  - [Changelog since v1.28.10](#changelog-since-v12810)
  - [Changes by Kind](#changes-by-kind)
    - [API Change](#api-change)

<!-- BEGIN MUNGE: GENERATED_TOC -->

- [v1.22.17](#v12217)
  - [Downloads for v1.22.17](#downloads-for-v12217)
    - [Source Code](#source-code)
    - [Client Binaries](#client-binaries)
    - [Server Binaries](#server-binaries)
    - [Node Binaries](#node-binaries)
    - [Container Images](#container-images)
  - [Changelog since v1.22.16](#changelog-since-v12216)
  - [Changes by Kind](#changes-by-kind)
    - [Feature](#feature)

message NodeSpec {
  // PodCIDR represents the pod IP range assigned to the node.
  // +optional
  optional string podCIDR = 1;

  // podCIDRs represents the IP ranges assigned to the node for usage by Pods on that node. If this
  // field is specified, the 0th entry must match the podCIDR field. It may contain at most 1 value for
  // each of IPv4 and IPv6.
  // +optional

- PodSecurityPolicy objects now support a `MayRunAs` rule for `fsGroup` and `supplementalGroups` options. This allows specifying ranges of allowed GIDs for pods/containers without forcing a default GID the way `MustRunAs` does. This means that a container to which such a policy applies to won't use any fsGroup/supplementalGroup GID if not explicitly specified, yet a specified GID...

* Added InterPodAffinity unit test case with Namespace. ([#45152](https://github.com/kubernetes/kubernetes/pull/45152), [@k82cn](https://github.com/k82cn))
* Use munged semantic version for side-loaded docker tag ([#44981](https://github.com/kubernetes/kubernetes/pull/44981), [@ixdy](https://github.com/ixdy))

* Allow for configuring etcd hostname in the manifest ([#54403](https://github.com/kubernetes/kubernetes/pull/54403), [@wojtek-t](https://github.com/wojtek-t))
* - kubeadm  will warn users if access to IP ranges for Pods or Services will be done via HTTP proxy. ([#52792](https://github.com/kubernetes/kubernetes/pull/52792), [@kad](https://github.com/kad))

<!-- BEGIN MUNGE: GENERATED_TOC -->

- [v1.30.2](#v1302)
  - [Downloads for v1.30.2](#downloads-for-v1302)
    - [Source Code](#source-code)
    - [Client Binaries](#client-binaries)
    - [Server Binaries](#server-binaries)
    - [Node Binaries](#node-binaries)
    - [Container Images](#container-images)
  - [Changelog since v1.30.1](#changelog-since-v1301)
  - [Changes by Kind](#changes-by-kind)
    - [API Change](#api-change)

<!-- BEGIN MUNGE: GENERATED_TOC -->
- [v1.8.15](#v1815)
  - [Downloads for v1.8.15](#downloads-for-v1815)
    - [Client Binaries](#client-binaries)
    - [Server Binaries](#server-binaries)
    - [Node Binaries](#node-binaries)
  - [Changelog since v1.8.14](#changelog-since-v1814)
    - [Action Required](#action-required)
    - [Other notable changes](#other-notable-changes)
- [v1.8.14](#v1814)
  - [Downloads for v1.8.14](#downloads-for-v1814)