* This more closely aligns rest client as a generic RESTful client, while preserving the special Kube API extended error handling for the `Get` and `Into` methods (which most Kube clients use).

A security issue was discovered in Kubernetes that could allow  Windows workloads to run as `ContainerAdministrator` even when those workloads set the `runAsNonRoot` option to `true `.

This issue has been rated low and assigned CVE-2021-25749

### Am I vulnerable?

All Kubernetes clusters with following versions, running Windows workloads with `runAsNonRoot` are impacted

#### Affected Versions

- kubelet v1.20 - v1.21

  name of controllers that can be turned on/off that are passed to the `--controllers`
  flag (e.g., `pod-garbage-collector-controller`). The old names (eg `podgc`) are
  also accepted and aliased to the new names. ([#115813](https://github.com/kubernetes/kubernetes/pull/115813), [@atiratree](https://github.com/atiratree))
- `kubeadm`: Introduced a new feature gate `UpgradeAddonsBeforeControlPlane` to

pkg debug/macho, type FatArch struct, embedded *File
pkg debug/macho, type FatArch struct, embedded FatArchHeader
pkg debug/macho, type FatArchHeader struct
pkg debug/macho, type FatArchHeader struct, Align uint32
pkg debug/macho, type FatArchHeader struct, Cpu Cpu
pkg debug/macho, type FatArchHeader struct, Offset uint32
pkg debug/macho, type FatArchHeader struct, Size uint32
pkg debug/macho, type FatArchHeader struct, SubCpu uint32

* Remove unnecessary metrics (http/process/go) from being exposed by etcd-version-monitor ([#41807](https://github.com/kubernetes/kubernetes/pull/41807), [@shyamjvs](https://github.com/shyamjvs))
* Align the hyperkube image to support running binaries at /usr/local/bin/ like the other server images ([#41017](https://github.com/kubernetes/kubernetes/pull/41017), [@luxas](https://github.com/luxas))

- Addressed an issue where a JWT authenticator set up via `--authentication-config` would encounter failures in verifying tokens not signed with RS256. ([#123282](https://github.com/kubernetes/kubernetes/pull/123282), [@enj](https://github.com/enj))

* To allow the userspace proxy to work correctly on multi-interface hosts when using the non-default-route interface, you may now set the `bindAddress` configuration option to an IP address assigned to a network interface.  The proxy will use that IP address for any required NAT operations instead of the IP address of the interface which has the default route. ([#48613](https://github.com/kubernetes/kubernetes/pull/48613), [@dcbw](https://github.com/dcbw))...

  <mime-type type="multipart/header-set"/>
  <mime-type type="multipart/mixed"/>
  <mime-type type="multipart/parallel"/>
  <mime-type type="multipart/report"/>
  <mime-type type="multipart/signed"/>
  <mime-type type="multipart/voice-message"/>

  <mime-type type="application/dif+xml">
    <root-XML localName="DIF"/>
    <root-XML localName="DIF" namespaceURI="http://gcmd.gsfc.nasa.gov/Aboutus/xml/dif/"/>

pkg debug/elf, type Prog struct
pkg debug/elf, type Prog struct, embedded ProgHeader
pkg debug/elf, type Prog struct, embedded io.ReaderAt
pkg debug/elf, type Prog32 struct
pkg debug/elf, type Prog32 struct, Align uint32
pkg debug/elf, type Prog32 struct, Filesz uint32
pkg debug/elf, type Prog32 struct, Flags uint32
pkg debug/elf, type Prog32 struct, Memsz uint32
pkg debug/elf, type Prog32 struct, Off uint32

- Fix handling of aws-load-balancer-security-groups annotation. Security-Groups assigned with this annotation are no longer modified by kubernetes which is the expected behaviour of most users. Also no unnecessary Security-Groups are created anymore if this annotation is used. ([#88690](https://github.com/kubernetes/kubernetes/pull/88690),...