Extended resources cannot be overcommitted, so make sure that request and limit are equal
 if both are present in a container spec.

 - The default Bootstrap Token created with `kubeadm init` v1.8 expires
 and is deleted after 24 hours by default to limit the exposure of the
 valuable credential. You can create a new Bootstrap Token with
 `kubeadm token create` or make the default token permanently valid by specifying

* Native support for token based bootstrap flow.  This includes signing a well known ConfigMap in the `kube-public` namespace and cleaning out expired tokens. ([#36101](https://github.com/kubernetes/kubernetes/pull/36101), [@jbeda](https://github.com/jbeda))

### ConfigMap

- Allow ImageReview backend to return annotations to be added to the created pod. ([#64597](https://github.com/kubernetes/kubernetes/pull/64597), [@wteiken](https://github.com/wteiken))

- Fixed an issue blocking azure auth to prompt to device code authentication flow when refresh token expires. ([#102063](https://github.com/kubernetes/kubernetes/pull/102063), [@tdihp](https://github.com/tdihp))

- Kube-apiserver now deletes expired kube-apiserver Lease objects:
  - The feature is under feature gate `APIServerIdentity`.

pkg syscall (darwin-arm64), type RoutingMessage interface, unexported methods
pkg syscall (darwin-arm64), type RtMetrics struct
pkg syscall (darwin-arm64), type RtMetrics struct, Expire int32
pkg syscall (darwin-arm64), type RtMetrics struct, Filler [4]uint32
pkg syscall (darwin-arm64), type RtMetrics struct, Hopcount uint32
pkg syscall (darwin-arm64), type RtMetrics struct, Locks uint32

pkg syscall (netbsd-arm64-cgo), type RoutingMessage interface, unexported methods
pkg syscall (netbsd-arm64-cgo), type RtMetrics struct
pkg syscall (netbsd-arm64-cgo), type RtMetrics struct, Expire int64
pkg syscall (netbsd-arm64-cgo), type RtMetrics struct, Hopcount uint64
pkg syscall (netbsd-arm64-cgo), type RtMetrics struct, Locks uint64
pkg syscall (netbsd-arm64-cgo), type RtMetrics struct, Mtu uint64

Certificate management has become more robust in 1.15, with kubeadm now seamlessly rotating all your certificates (on upgrades) before they expire. Check the [kubeadm documentation](https://github.com/kubernetes/website/blob/dev-1.15/content/en/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md) for information on how to manage your certificates.