- [Introducing <code>RootCAConfigMap</code>](#introducing-rootcaconfigmap)
    - [<code>kubectl debug</code> graduates to Beta](#kubectl-debug-graduates-to-beta)
    - [Removing deprecated flags in kubeadm](#removing-deprecated-flags-in-kubeadm)
    - [Pod Hostname as FQDN graduates to Beta](#pod-hostname-as-fqdn-graduates-to-beta)

 - Kubeadm does not set the deprecated '--cgroup-driver' flag in /var/lib/kubelet/kubeadm-flags.env, it will be set in the kubelet config.yaml. If you have this flag in /var/lib/kubelet/kubeadm-flags.env or /etc/default/kubelet (/etc/sysconfig/kubelet for RPMs) please remove it and set the value using KubeletConfiguration ([#90513](https://github.com/kubernetes/kubernetes/pull/90513),...

* The following deprecated flags were removed from `kube-controller-manager`:

  * `replication-controller-lookup-cache-size`
  * `replicaset-lookup-cache-size`
  * `daemonset-lookup-cache-size`

  Don't use these flags. Using deprecated flags causes the server to print a warning. Using a removed flag causes the server to abort the startup.

* The following deprecated flags were removed from `kubelet`:

- Kubeadm: only enable the klog flags that are still supported for kubeadm, rather than hiding the unwanted flags. This means that the previously unrecommended hidden flags about klog (including `--alsologtostderr`, `--log-backtrace-at`, `--log-dir`, `--logtostderr`, `--log-file`, `--log-file-max-size`, `--one-output`, `--skip-log-headers`, `--stderrthreshold`...

  - The deprecated `--etcd-quorum-read` flag has been removed. Quorum reads are now always enabled when fetching data from etcd. Remove the `--etcd-quorum-read` flag from kube-apiserver invocations before upgrading.
- kube-controller-manager
  - The deprecated `--insecure-experimental-approve-all-kubelet-csrs-for-group` flag has been removed.
- kubelet

* Make ThirdPartyResource a root scoped object ([#25006](https://github.com/kubernetes/kubernetes/pull/25006), [@liggitt](https://github.com/liggitt))
* mark container-port flag as deprecated ([#25072](https://github.com/kubernetes/kubernetes/pull/25072), [@AdoHe](https://github.com/AdoHe))
* Provide flags to use etcd3 backed storage ([#24455](https://github.com/kubernetes/kubernetes/pull/24455), [@hongchaodeng](https://github.com/hongchaodeng))

### Other notable changes

         * @return the lease key
         */
        public Smb2LeaseKey getLeaseKey() {
            return leaseKey;
        }

        /**
         * Gets the current lease state flags for this entry
         * @return the current lease state
         */
        public int getLeaseState() {
            return leaseState;
        }

        /**

        SMBUtil.writeInt4(aceCount, buffer, offset + 4); // ACE count
    }

    private void prepareSimpleAce(byte[] buffer, int offset) {
        buffer[offset] = 0x00; // Allow ACE
        buffer[offset + 1] = 0x00; // flags
        SMBUtil.writeInt2(32, buffer, offset + 2); // size
        SMBUtil.writeInt4(0x001200A9, buffer, offset + 4); // access mask

        // Simple SID
        buffer[offset + 8] = 0x01; // revision

- Kubelet now exposes `/debug/flags/v` to allow dynamically setting glog logging level.  For example, to change glog level to 3, you only have to send a PUT request like `curl -X PUT http://127.0.0.1:8080/debug/flags/v -d "3"`. ([#64601](https://github.com/kubernetes/kubernetes/pull/64601), [@hzxuzhonghu](https://github.com/hzxuzhonghu))

### SIG OpenStack

		return "SHA256"
	case c.Is(ChecksumCRC64NVME):
		return "CRC64NVME"
	case c.Is(ChecksumNone):
		return ""
	}
	return "invalid"
}

// StringFull returns the type and all flags as a string.
func (c ChecksumType) StringFull() string {
	out := []string{c.String()}
	if c.Is(ChecksumMultipart) {
		out = append(out, "MULTIPART")
	}
	if c.Is(ChecksumIncludesMultipart) {