### (No, really, you MUST read this before you upgrade)

- ACTION REQUIRED: Switch core master base images (kube-controller-manager) from debian to distroless. If you need Flex Volumes support using scripts, please build your own image with required packages (like bash) ([#91329](https://github.com/kubernetes/kubernetes/pull/91329), [@dims](https://github.com/dims)) [SIG Cloud Provider, Release, Storage and Testing]

    * The body size limit does not apply to subresources like pods/proxy that proxy request content to another server.
* Kustomize is developed in its own repo https://github.com/kubernetes-sigs/kustomize ([#73033](https://github.com/kubernetes/kubernetes/pull/73033), [@Liujingfang1](https://github.com/Liujingfang1))
    * This PR added a new subcommand `kustomize` in kubectl. 

otsuki.kochi.jp
otsuki.yamanashi.jp
ott
ouchi.saga.jp
ouda.nara.jp
oum.gov.pl
oumu.hokkaido.jp
outsystemscloud.com
overhalla.no
ovh
ovre-eiker.no
owani.aomori.jp
owariasahi.aichi.jp
own.pm
ownip.net
ownprovider.com
ox.rs
oxa.cloud
oy.lc
oya.to
oyabe.toyama.jp
oyama.tochigi.jp
oyamazaki.kyoto.jp
oyer.no
oygarden.no
oyodo.nara.jp
oystre-slidre.no

- Updated pause image to version 3.5, which now runs per default as pseudo user and group `65535:65535`. This does not have any effect on remote container runtimes like CRI-O and containerd, which setup the pod sandbox user and group on their own. ([#100292](https://github.com/kubernetes/kubernetes/pull/100292), [@saschagrunert](https://github.com/saschagrunert))

* Bump version of all prometheus-to-sd images to v0.2.2. ([#54635](https://github.com/kubernetes/kubernetes/pull/54635), [@loburm](https://github.com/loburm))
* [fluentd-gcp addon] Fluentd now runs in its own network, not in the host one. ([#54395](https://github.com/kubernetes/kubernetes/pull/54395), [@crassirostris](https://github.com/crassirostris))

priv.d) p = appendBlock(p, blockSize, k.Bytes(c.N)) // Convert verify function code into a sign function code by adding 8. // We also need to set the 'deterministic' bit in the function code, by // adding 128, in order to stop the instruction using its own random number // generator in addition to the random number we supply. switch kdsa(functionCode+136, &params) { case 0: // success elementSize := (c.N.BitLen() + 7) / 8 r, err := trimBlock(params[:blockSize], elementSize) if err != nil { return nil,...

  - Deprecate the default service IP CIDR. The previous default was `10.0.0.0/24` which will be removed in 6 months/2 releases. Cluster admins must specify their own desired value, by using `--service-cluster-ip-range` on kube-apiserver. ([#81668](https://github.com/kubernetes/kubernetes/pull/81668), [@darshanime](https://github.com/darshanime))

- kube-proxy

*.hosting.ovh.net
*.webpaas.ovh.net

// OwnProvider GmbH: http://www.ownprovider.com
// Submitted by Jan Moennich <******@****.***>
ownprovider.com
own.pm

// OwO : https://whats-th.is/
// Submitted by Dean Sheather <******@****.***>
*.owo.codes

// OX : http://www.ox.rs
// Submitted by Adam Grand <******@****.***>
ox.rs

### Cloud Controller Manager now exclusively shipped by Cloud Provider