- Move configurable fsgroup change policy for pods to beta ([#96376](https://github.com/kubernetes/kubernetes/pull/96376), [@gnufied](https://github.com/gnufied)) [SIG Apps and Storage]

if interrupted XOR R0, R0 RET // func cryptBlocksChain(c code, iv, key, dst, src *byte, length int) TEXT ·cryptBlocksChain(SB),NOSPLIT,$48-48 LA params-48(SP), R1 MOVD iv+8(FP), R8 MOVD key+16(FP), R9 MVC $16, 0(R8), 0(R1) // move iv into params MVC $32, 0(R9), 16(R1) // move key into params MOVD dst+24(FP), R2 MOVD src+32(FP), R4 MOVD length+40(FP), R5 MOVD c+0(FP), R0 loop: KMC R2, R4 // cipher message with chaining (KMC) BVS loop // branch back if interrupted XOR R0, R0 MVC $16, 0(R1), 0(R8) //...

          <type>String</type>
        </field>
        <field>
          <name>message</name>
          <version>4.0.0+</version>
          <description>An additional message to show the user about the move, such as the reason.</description>
          <type>String</type>
        </field>
      </fields>
    </class>
    <class>
      <name>Extension</name>
      <version>4.0.0+</version>

* CDK nginx ingress is now handled via a daemon set. ([#57530](https://github.com/kubernetes/kubernetes/pull/57530), [@hyperbolic2346](https://github.com/hyperbolic2346))

* Move local PV negative scheduling tests to integration ([#57570](https://github.com/kubernetes/kubernetes/pull/57570), [@sbezverk](https://github.com/sbezverk))

bound to `system:masters` Group, which was undesired. Executing `kubeadm init phase kubeconfig all` or just `kubeadm init` will now generate the new `super-admin.conf` file. The cluster admin can then decide to keep the file present on a node host or move it to a safe location. `kubadm certs renew` will renew the certificate in `super-admin.conf` to one year if the file exists; if it does not exist a "MISSING" note will be printed. `kubeadm upgrade apply` for this release will migrate this particular...

if interrupted XOR R0, R0 RET // func cryptBlocksChain(c code, iv, key, dst, src *byte, length int) TEXT ·cryptBlocksChain(SB),NOSPLIT,$48-48 LA params-48(SP), R1 MOVD iv+8(FP), R8 MOVD key+16(FP), R9 MVC $16, 0(R8), 0(R1) // move iv into params MVC $32, 0(R9), 16(R1) // move key into params MOVD dst+24(FP), R2 MOVD src+32(FP), R4 MOVD length+40(FP), R5 MOVD c+0(FP), R0 loop: KMC R2, R4 // cipher message with chaining (KMC) BVS loop // branch back if interrupted XOR R0, R0 MVC $16, 0(R1), 0(R8) //...

- Move CSI volume expansion to beta. ([#81467](https://github.com/kubernetes/kubernetes/pull/81467), [@bertinatto](https://github.com/bertinatto))

- Mark ipvs mode in kube-proxy as deprecated. ipvs mode in kube-proxy is deprecated and will be removed in a future version of Kubernetes. Users are encouraged to move to nftables. ([#134539](https://github.com/kubernetes/kubernetes/pull/134539), [@adrianmoisey](https://github.com/adrianmoisey)) [SIG Network]

### API Change

- Move TaintBasedEvictions feature gates to GA ([#87487](https://github.com/kubernetes/kubernetes/pull/87487), [@skilxn-go](https://github.com/skilxn-go)) [SIG API Machinery, Apps, Node, Scheduling and Testing]

- Move Recover from volume expansion failure GA ([#132662](https://github.com/kubernetes/kubernetes/pull/132662), [@gnufied](https://github.com/gnufied)) [SIG Apps, Auth, Node, Storage and Testing]