* kubeadm: When certificates are present joining a new control plane make sure that they match at least the required SANs ([#73093](https://github.com/kubernetes/kubernetes/pull/73093), [@ereslibre](https://github.com/ereslibre))

  - [Known Issues](#known-issues)
  - [Before Upgrading](#before-upgrading)
      - [New Deprecations](#new-deprecations)
      - [Removed Deprecations](#removed-deprecations)
      - [Graduated to Stable/GA](#graduated-to-stablega)
      - [Graduated to Beta](#graduated-to-beta)
    - [New alpha features](#new-alpha-features)
  - [Other Notable Changes](#other-notable-changes-10)

* Add new Prometheus metric that monitors the remaining lifetime of certificates used to authenticate requests to the API server. ([#50387](https://github.com/kubernetes/kubernetes/pull/50387), [@jcbsmpsn](https://github.com/jcbsmpsn))

* ConfigMap objects now support binary data via a new `binaryData` field. When using `kubectl create configmap --from-file`, files containing non-UTF8 data will be placed in this new field in order to preserve the non-UTF8 data. Use of this feature requires 1.10+ apiserver and kubelets. ([#57938](https://github.com/kubernetes/kubernetes/pull/57938), [@dims](https://github.com/dims))

## Changelog since v1.7.0

### Other notable changes

* Added new flag to `kubeadm init`: --node-name, that lets you specify the name of the Node object that will be created ([#48594](https://github.com/kubernetes/kubernetes/pull/48594), [@GheRivero](https://github.com/GheRivero))

      - [add-ons:](#add-ons)
      - [kube-scheduler:](#kube-scheduler)
      - [Other deprecations:](#other-deprecations)
    - [API Change](#api-change-6)
      - [New API types/versions:](#new-api-typesversions)
      - [New API fields:](#new-api-fields)
      - [Other API changes:](#other-api-changes)
      - [Configuration file changes:](#configuration-file-changes)
      - [kube-apiserver:](#kube-apiserver-2)

- Introduced a new boolean kubelet flag `--fail-cgroupv1`. ([#126031](https://github.com/kubernetes/kubernetes/pull/126031), [@harche](https://github.com/harche)) [SIG API Machinery and Node]

Extensibility. SIG API Machinery added a new class of admission control webhooks (mutating), and brought the admission control webhooks to beta.

### Apps

The core workloads API, which is composed of the DaemonSet, Deployment, ReplicaSet, and StatefulSet kinds, has been promoted to GA stability in the apps/v1 group version. As such, the apps/v1beta2 group version is deprecated, and all new code should use the kinds in the apps/v1 group version.

    - [SIG Service Catalog](#sig-service-catalog)
    - [SIG Storage](#sig-storage)
    - [SIG UI](#sig-ui)
    - [SIG VMWare](#sig-vmware)
    - [SIG Windows](#sig-windows)
  - [New Features](#new-features)
  - [Release Notes From SIGs](#release-notes-from-sigs)
    - [SIG API Machinery](#sig-api-machinery-1)
    - [SIG Auth](#sig-auth-1)
    - [SIG Autoscaling](#sig-autoscaling)
    - [SIG AWS](#sig-aws-1)

    - [Client Binaries](#client-binaries-14)
    - [Server Binaries](#server-binaries-14)
    - [Node Binaries](#node-binaries-14)
  - [Changelog since v1.20.0](#changelog-since-v1200)
  - [What's New (Major Themes)](#whats-new-major-themes)
    - [Deprecation of PodSecurityPolicy](#deprecation-of-podsecuritypolicy)
    - [Kubernetes API Reference Documentation](#kubernetes-api-reference-documentation)