* Fix CVE-2019-11247: API server allows access to custom resources via wrong scope ([#80750](https://github.com/kubernetes/kubernetes/pull/80750))

See also the [security announcement for this release](https://groups.google.com/forum/#!topic/kubernetes-security-announce/vUtEcSEY6SM).

# v1.13.8

[Documentation](https://docs.k8s.io)

## Downloads for v1.13.8


filename | sha512 hash
-------- | -----------

* Fix CVE-2019-11247: API server allows access to custom resources via wrong scope ([#80750](https://github.com/kubernetes/kubernetes/pull/80750))

See also the [security announcement for this release](https://groups.google.com/forum/#!topic/kubernetes-security-announce/vUtEcSEY6SM).

# v1.14.4

[Documentation](https://docs.k8s.io)

## Downloads for v1.14.4


filename | sha512 hash
-------- | -----------

* Fix CVE-2019-11247: API server allows access to custom resources via wrong scope ([#80750](https://github.com/kubernetes/kubernetes/pull/80750))

See also the [security announcement for this release](https://groups.google.com/forum/#!topic/kubernetes-security-announce/vUtEcSEY6SM).

# v1.15.1

[Documentation](https://docs.k8s.io)

## Downloads for v1.15.1


filename | sha512 hash
-------- | -----------

    For more information on deprecating auto-detecting cloud providers in kubelet, see PR [#51312](https://github.com/kubernetes/kubernetes/pull/51312) and [announcement](https://groups.google.com/forum/#!topic/kubernetes-dev/UAxwa2inbTA).

- The `PersistentVolumeLabel` admission controller in the API server is deprecated.

### SIG Node

SIG-Node advanced several features and made incremental improvements in a few key topic areas this release.

    provides a big compile-time speedup, and effectively raises the minimum
    supported MSVC version to 16.4 (current: 16.8).

    *   See:
        https://groups.google.com/a/tensorflow.org/d/topic/build/SsW98Eo7l3o/discussion

*   TensorRT

    *   Removed the deprecated `session_config` parameter for the TF1-TRT
        converter `TrtGraphConverter`. Previously, we issued a warning when the

This release also contains a number of bug fixes to the feature set. Aspiring plugin authors can look at [sample-exec-plugin](https://github.com/ankeesler/sample-exec-plugin) as a way to get started.

Related to this topic, the in-tree Azure and GCP authentication plugins have been [deprecated](https://github.com/kubernetes/kubernetes/pull/102181) in favor of out-of-tree implementations.

### Server-side Apply graduates to GA

BlockSize (16). // //go:noescape func cryptBlocks(c code, key, dst, src *byte, length int) var supportsAES = cpu.S390XHasAES && cpu.S390XHasAESCBC func init() { // CP Assist for Cryptographic Functions (CPACF) // https://www.ibm.com/docs/en/zos/3.1.0?topic=icsf-cp-assist-cryptographic-functions-cpacf impl.Register("aes", "CPACF", &supportsAES) } func checkGenericIsExpect() { if supportsAES { panic("crypto/aes: internal error: using generic implementation despite hardware support") } } func newBlock(c...

BlockSize (16). // //go:noescape func cryptBlocks(c code, key, dst, src *byte, length int) var supportsAES = cpu.S390XHasAES && cpu.S390XHasAESCBC func init() { // CP Assist for Cryptographic Functions (CPACF) // https://www.ibm.com/docs/en/zos/3.1.0?topic=icsf-cp-assist-cryptographic-functions-cpacf impl.Register("aes", "CPACF", &supportsAES) } func checkGenericIsExpect() { if supportsAES { panic("crypto/aes: internal error: using generic implementation despite hardware support") } } func newBlock(c...