## Action Required

### Certificates API
* Users of the alpha certificates API should delete v1alpha1 CSRs from the API before upgrading and recreate them as v1beta1 CSR after upgrading. ([#39772](https://github.com/kubernetes/kubernetes/pull/39772), [@mikedanese](https://github.com/mikedanese))

### Cluster Autoscaler

* `kubectl certificate approve|deny` will not modify an already approved or denied CSR unless the `--force` flag is provided. ([#61971](https://github.com/kubernetes/kubernetes/pull/61971), [@smarterclayton](https://github.com/smarterclayton))

- The DynamicKubeletConfig and SelfHosting functionality was moved outside of `kubeadm init` and feature gates and is now exposed under `kubeadm alpha`.
- Kubeadm init phase certs now support the `--csr-only` option, simplifying custom CA creation.
- `kubeadm join --experimental-control-plane` now automatically adds a new etcd member for `local etcd` mode, further simplifying required tasks for HA clusters setup.

- Kubeadm: fixed the bug that `kubeadm certs generate-csr` command does not remove duplicated SANs ([#107982](https://github.com/kubernetes/kubernetes/pull/107982), [@SataQiu](https://github.com/SataQiu))

* Start translations for Italian. PR [#1557](https://github.com/tiangolo/fastapi/pull/1557) by [@csr](https://github.com/csr).

## 0.56.0

* Add support for ASGI `root_path`:
    * Use `root_path` internally for mounted applications, so that OpenAPI and the docs UI works automatically without extra configurations and parameters.

- Resolves an issue using `kubectl certificate approve/deny` against a server serving the v1 CSR API ([#91691](https://github.com/kubernetes/kubernetes/pull/91691), [@liggitt](https://github.com/liggitt)) [SIG Auth and CLI]

### Other (Cleanup or Flake)

- Update CNI to v0.8.6

X�0���LC�OE?��l�oj�>��Ah��Uh��h�S�5$X�Dn���'tT�ReI�� ��"����ڊiS&��MSU2}!u�J�X�C�����aVNU&r�L*�ʤ�RɅY9T��Y0�'*�9K&d�Rg)d¬��L�,�U��I��� �r�3��aVNU&r�L*���넦\"�����z���ON�==�j��E0�z)�Qz��h��b��M)�b��J��m��eI�'uPʓ*O�_^�������i �V���`�cPKR������ �r�3��aVNU&r�L*�ʤ�RɅY9T��Y0�'*�9K&d�Rg)d¬9T��Y0�.U&r�L*˕I��� �!}������G�(V�h���=F������觢�TA�*�����jT����|L*��b��)��-��m��ʓ*N� �>8B� � ��B���ɔ�>��ʢ��I}MJS��ąz�Q����c��˜S���q=q:�q= S�1MI��m�T�ReI�&����B�B�����ɔ���M�=���u222221�cXS...

	MountMtlsCerts *wrapperspb.BoolValue `protobuf:"bytes,60,opt,name=mountMtlsCerts,proto3" json:"mountMtlsCerts,omitempty"`
	// The address of the CA for CSR.
	CaAddress string `protobuf:"bytes,61,opt,name=caAddress,proto3" json:"caAddress,omitempty"`
	// Controls whether one external istiod is enabled.