- Increased pod-level security granularity (eg: Container Image Policies, AppArmor and `sysctl` support)
  - Increased cluster-level security granularity (eg: Access Review API)

## Features

This is the first release tracked via the use of the [kubernetes/features](https://github.com/kubernetes/features) issues repo.  Each Feature issue is owned by a Special Interest Group from [kubernetes/community](https://github.com/kubernetes/community)

  |
  | o i18n: would be good to be able to have names/descriptions/specifications
  |   in as many languages as possible. (see MNG-3626)
  |
  | o annotation mechanism so that changes to the model can be accurately tracked.
  |
  | o need to clean up all the descriptions, matching anything to the current project-descriptor.xml file and
  |   improving on that
  |
  | o use enums where appropriate (eg dependency scope)
  |

- Pod resource checkpointing is now tracked by the `allocated_pods_state` and `actuated_pods_state` files, replacing the previously used `pod_status_manager_state`. ([#130599](https://github.com/kubernetes/kubernetes/pull/130599), [@tallclair](https://github.com/tallclair))

cprapid.com
cpserver.com
cq.cn
cr
cr.it
cr.ua
craft.me
cranky.jp
crap.jp
crd.co
credit
creditcard
creditunion
cremona.it
crew.aero
cri.br
cri.nz
cricket
crimea.ua
crotone.it
crown
crs
cruise
cruises
cs.in
cs.it
cs.keliweb.cloud
csb.app
csx.cc
ct.it
ct.us
ctfcloud.net
cu
cuiaba.br
cuisinella

* APIserver backed by etcdv3 exports metric shows number of resources per kind. ([#59757](https://github.com/kubernetes/kubernetes/pull/59757), [@gmarek](https://github.com/gmarek))

  <mime-type type="application/vnd.tao.intent-module-archive">
    <glob pattern="*.tao"/>
  </mime-type>

  <mime-type type="application/vnd.tcpdump.pcap">
    <_comment>TCPDump pcap packet capture</_comment>
    <magic priority="60">
      <match value="0xa1b2c3d4" type="big32" offset="0" />
      <match value="0xd4c3b2a1" type="big32" offset="0" />
    </magic>
    <glob pattern="*.pcap"/>

In addition, support for NVMe disks has been added to Kubernetes, and a service of type LoadBalancer can now be backed with an NLB instead of an ELB (alpha).

### Azure

SIG Azure worked on improvements in the cloud provider, including significant work on the Azure Load Balancer implementation.

### Cluster Lifecycle

cprapid.com
cpserver.com
cq.cn
cr
cr.it
cr.ua
craft.me
cranky.jp
crap.jp
crd.co
credit
creditcard
creditunion
cremona.it
crew.aero
cri.br
cri.nz
cricket
crimea.ua
crotone.it
crown
crs
cruise
cruises
cs.in
cs.it
cs.keliweb.cloud
csb.app
csx.cc
ct.it
ct.us
ctfcloud.net
cu
cuiaba.br
cuisinella

## Notable Features

  - false/ignore - perform no validation, silently dropping invalid fields from the object. ([#108350](https://github.com/kubernetes/kubernetes/pull/108350), [@kevindelgado](https://github.com/kevindelgado))