* Assume volume is detached if node doesn't exist ([#29485](https://github.com/kubernetes/kubernetes/pull/29485), [@saad-ali](https://github.com/saad-ali))
* kube-up: increase download timeout for kubernetes.tar.gz ([#29426](https://github.com/kubernetes/kubernetes/pull/29426), [@justinsb](https://github.com/justinsb))

domains
donetsk.ua
dongnai.vn
dongthap.vn
donna.no
dontexist.com
dontexist.net
dontexist.org
doomdns.com
doomdns.org
dopaas.com
doshi.yamanashi.jp
dot
dovre.no
download
dp.ua
dr.in
dr.tr
drammen.no
drangedal.no
dray-dns.de
drayddns.com
draydns.de
dreamhosters.com
drive
drobak.no
drr.ac
drud.io
drud.us
drøbak.no

  manager. ([#114095](https://github.com/kubernetes/kubernetes/pull/114095), [@aimuz](https://github.com/aimuz))

### Other (Cleanup or Flake)

- Added automatic download of the CNI binary in `local-up-cluster.sh`, facilitating local debugging. ([#120312](https://github.com/kubernetes/kubernetes/pull/120312), [@HirazawaUi](https://github.com/HirazawaUi))

* Since `kubernetes.tar.gz` no longer includes client or server binaries, `cluster/kube-{up,down,push}.sh` now automatically download released binaries if they are missing. ([#38730](https://github.com/kubernetes/kubernetes/pull/38730), [@ixdy](https://github.com/ixdy))

- kubeadm now includes the ability to specify certificate encryption and decryption keys for the upload and download certificate phases as part of the new v1beta2 kubeadm config format. ([#77012](https://github.com/kubernetes/kubernetes/pull/77012), [@rosti](https://github.com/rosti))

* Hermetic CUDA support is added.

  Hermetic CUDA uses a specific downloadable version of CUDA instead of the user’s locally installed CUDA. Bazel will download CUDA, CUDNN and NCCL distributions, and then use CUDA libraries and tools as dependencies in various Bazel targets. This enables more reproducible builds for Google ML projects and supported CUDA versions.

- Kubeadm: removed the EXPERIMENTAL tag from the phase "kubeadm join control-plane-prepare download-certs". ([#124374](https://github.com/kubernetes/kubernetes/pull/124374), [@neolit123](https://github.com/neolit123))

domains
donetsk.ua
dongnai.vn
dongthap.vn
donna.no
dontexist.com
dontexist.net
dontexist.org
doomdns.com
doomdns.org
dopaas.com
doshi.yamanashi.jp
dot
dovre.no
download
dp.ua
dr.in
dr.tr
drammen.no
drangedal.no
dray-dns.de
drayddns.com
draydns.de
dreamhosters.com
drive
drobak.no
drr.ac
drud.io
drud.us
drøbak.no

- Kubeadm: fix a bug where `kubeadm join` for control plane nodes would download certificates and keys from the cluster, but would not write publicly readable certificates and public keys with mode `0644` and instead use mode `0600`. ([#103313](https://github.com/kubernetes/kubernetes/pull/103313), [@neolit123](https://github.com/neolit123))...