* libvirt-coreos: Download the coreos_production_qemu_image over SSL. ([#34646](https://github.com/kubernetes/kubernetes/pull/34646), [@roberthbailey](https://github.com/roberthbailey))

9b,OAAQF,KACV3E,KAAK6gB,gBAAkB7gB,KAAK4gB,SAASjc,IACxDwP,GAAanU,KAAK2gB,SAAShc,KACM,oBAAzB3E,KAAK2gB,SAAShc,EAAI,IACtBwP,EAAYnU,KAAK2gB,SAAShc,EAAI,KAGpC3E,KAAKiiB,UAAUjiB,KAAK4gB,SAASjc,M,EAKnCsd,UAAA,SAAUxhB,GACRT,KAAK6gB,cAAgBpgB,EAErBT,KAAKkiB,SAEL,IAAMC,EAAUniB,KAAKsM,UAClBlP,MAAM,KACNkkB,KAAI,SAAAhlB,GAAQ,OAAOA,EAAyBmE,mBAAYnE,QAA5C,UAA8DmE,EAA9D,QAET2hB,EAAQtlB,UAAE,GAAG2H,MAAMnG,KAAKpC,SAASwI,iBAAiByd,EAAQrC,KAAK,QAEjEsC,EAAMngB,SApNmB,kBAqN3BmgB,EAAMxgB,QAtMc,aAuMjBwd,KArMwB,oBAsMxB/U,S...

* kubernetes-worker juju charm: Added support for setting the --enable-ssl-chain-completion option on the ingress proxy.  "action required": if your installation relies on supplying incomplete certificate chains and using OCSP to fill them in, you must set "ingress-ssl-chain-completion" to "true" in your juju configuration. ([#63845](https://github.com/kubernetes/kubernetes/pull/63845), [@paulgear](https://github.com/paulgear))...

* - Add PodSecurityPolicies for cluster addons ([#55509](https://github.com/kubernetes/kubernetes/pull/55509), [@tallclair](https://github.com/tallclair))
    * - Remove SSL cert HostPath volumes from heapster addons

properly\n      box-shadow: $input-focus-box-shadow;\n    }\n  }\n  @include deprecate(\"The `form-control-focus()` mixin\", \"v4.4.0\", \"v5\", $ignore-warning);\n}\n\n// This mixin uses an `if()` technique to be compatible with Dart Sass\n// See https://github.com/sass/sass/issues/1873#issuecomment-152293725 for more details\n@mixin form-validation-state-selector($state) {\n  @if ($state == \"valid\" or $state == \"invalid\") {\n    .was-validated #{if(&, \"&\", \"\")}:#{$state},\n    #{if(&, \"&\",...