- Added option to create CSRs instead of certificates for kubeadm init phase certs and kubeadm alpha certs renew ([#70809](https://github.com/kubernetes/kubernetes/pull/70809), [@liztio](https://github.com/liztio))

- The commands `kubeadm certs renew` and `kubeadm certs check-expiration` now honor the `cert-dir` flag on a running Kubernetes cluster. ([#110709](https://github.com/kubernetes/kubernetes/pull/110709), [@chendave](https://github.com/chendave))

    <glob pattern="*.unityweb"/>
  </mime-type>
  <mime-type type="application/vnd.uoml+xml">
    <glob pattern="*.uoml"/>
  </mime-type>
  <mime-type type="application/vnd.uplanet.alert"/>
  <mime-type type="application/vnd.uplanet.alert-wbxml"/>
  <mime-type type="application/vnd.uplanet.bearer-choice"/>
  <mime-type type="application/vnd.uplanet.bearer-choice-wbxml"/>
  <mime-type type="application/vnd.uplanet.cacheop"/>

Kulkarni, Abolfazl Shahbazi, Adam Hillier, Aditya Kane, Ag Ramesh, ahmedsabie,
Albert Villanova Del Moral, Aleksey Vitebskiy, Alex Hoffman, Alexander Bayandin,
Alfie Edwards, Aman Kishore, Amogh Joshi, andreABbauer, Andrew Goodbody, Andrzej
Pomirski, Artemiy Ryabinkov, Ashish Jha, ather, Ayan Moitra, Bairen Yi, Bart
Ribbers, Bas Aarts, Behzad Abghari, Ben Arnao, Ben Barsdell, Benjamin Klimczak,

aridagawa.wakayama.jp
arita.saga.jp
arkhangelsk.su
armenia.su
army
arna.no
arpa
arq.br
art
art.br
art.do
art.dz
art.ht
art.pl
art.sn
arte
arte.bo
arts.nf
arts.ro
arts.ve
arvanedge.ir
arvo.network
as
as.sh.cn
as.us
asago.hyogo.jp
asahi.chiba.jp
asahi.ibaraki.jp
asahi.mie.jp
asahi.nagano.jp
asahi.toyama.jp
asahi.yamagata.jp

- Added CEL runtime cost calculation into ValidatingAdmissionPolicy, matching the evaluation cost
  restrictions that already apply to CustomResourceDefinition.
  If rule evaluation uses more compute than the limit, the API server aborts the evaluation and the
  admission check that was being performed is aborted; the `failurePolicy` for the ValidatingAdmissionPolicy

tes/pull/57902), [@kawych](https://github.com/kawych))

* On cluster provision or upgrade, kubeadm now generates certs and secures all connections to the etcd static-pod with mTLS. This includes the etcd serving cert, the etcd peer cert, and the apiserver etcd client cert. Flags and hostMounts are added to the etcd and apiserver static-pods to load these certs. For connections to etcd, https is now used in favor of http. ([#57415](https://github.com/kubernetes/kubernetes/pull/57415),...

pkg log/syslog (darwin-386), func New(Priority, string) (*Writer, error)
pkg log/syslog (darwin-386), func NewLogger(Priority, int) (*log.Logger, error)
pkg log/syslog (darwin-386), method (*Writer) Alert(string) error
pkg log/syslog (darwin-386), method (*Writer) Close() error
pkg log/syslog (darwin-386), method (*Writer) Crit(string) error
pkg log/syslog (darwin-386), method (*Writer) Debug(string) error

- It is now possible to upload certificates required to join a new control-plane to kubeadm-certs secret using the flag `--experimental-upload-certs` on `init` or upload-certs phase. ([#73907](https://github.com/kubernetes/kubernetes/pull/73907), [@yagonobre](https://github.com/yagonobre))

pkg log/syslog (netbsd-arm64-cgo), func NewLogger(Priority, int) (*log.Logger, error)
pkg log/syslog (netbsd-arm64-cgo), func New(Priority, string) (*Writer, error)
pkg log/syslog (netbsd-arm64-cgo), method (*Writer) Alert(string) error
pkg log/syslog (netbsd-arm64-cgo), method (*Writer) Close() error
pkg log/syslog (netbsd-arm64-cgo), method (*Writer) Crit(string) error
pkg log/syslog (netbsd-arm64-cgo), method (*Writer) Debug(string) error