- Ensured that the Node Admission plugin to reject CSR requests created by a node identity for the signers `kubernetes.io/kubelet-serving` or `kubernetes.io/kube-apiserver-client-kubelet` with a CN starting with `system:node:`, but where the CN is not `system:node:${node-name}`. The feature gate `AllowInsecureKubeletCertificateSigningRequests` defaults to `false`, but can be enabled to revert to the previous behavior. This feature gate will be removed in Kubernetes v1.33....

AuEQ,aAxDV,YAAA,EAwDU,aAxDV,YAAA,YAwDU,aAxDV,YAAA,aAwDU,aAxDV,YAAA,IAwDU,aAxDV,YAAA,aAwDU,aAxDV,YAAA,aAwDU,aAxDV,YAAA,IAwDU,aAxDV,YAAA,aAwDU,aAxDV,YAAA,aAwDU,aAxDV,YAAA,IAwDU,cAxDV,YAAA,aAwDU,cAxDV,YAAA,aAmEM,Qbk/CN,Sah/CQ,cAAA,EAGF,Qbi/CN,Sa/+CQ,cAAA,EAPF,Qb0/CN,Sax/CQ,cAAA,QAGF,Qby/CN,Sav/CQ,cAAA,QAPF,QbkgDN,SahgDQ,cAAA,OAGF,QbigDN,Sa//CQ,cAAA,OAPF,Qb0gDN,SaxgDQ,cAAA,KAGF,QbygDN,SavgDQ,cAAA,KAPF,QbkhDN,SahhDQ,cAAA,OAGF,QbihDN,Sa/gDQ,cAAA,OAPF,Qb0hDN,SaxhDQ,cAAA,KAGF,QbyhDN,SavhDQ,cAAA,MF1DN,0B...

* Improve Azure instance metadata handling by adding caches. ([#70353](https://github.com/kubernetes/kubernetes/pull/70353), [@feiskyer](https://github.com/feiskyer))
* adding cn-northwest-1 for AWS China Ningxia region ([#70155](https://github.com/kubernetes/kubernetes/pull/70155), [@pahud](https://github.com/pahud))

    * Action required:
    * Anyone who generated server cert for admission webhooks need to regenerate the cert. Previously, when generating server cert for the admission webhook, the CN value doesn't matter. Now you must set it to the DNS name of the webhook service, i.e., `<service.Name>.<service.Namespace>.svc`.

    * kubeadm - Ensure that the etcd certificates are generated using a proper CN
    * kubeadm - Update generated etcd peer certificate to include localhost addresses for the default configuration.
    * kubeadm - Increase the manifest update timeout to make upgrades a bit more reliable.

AA,MAAA,QAIJ,iDAGM,QAAA,KAHN,uDASM,QAAA,MATN,oDAeM,OAAA,2CAfN,2DAkBM,OAAA,OACA,QAAA,OAAA,MAnBN,mCAgCI,OAAA,uBAAA,OAAA,eAAA,OAAA,YAAA,OAAA,QAhCJ,4CAwBM,OAAA,qCAxBN,mDA4BM,OAAA,KACA,QAAA,OAAA,MA7BN,+CAqCM,OAAA,qCArCN,sDAyCM,OAAA,KAzCN,+CA+CM,OAAA,qCA/CN,sDAmDM,OAAA,KAnDN,8CtFg8YA,iDACA,iDsFt4YM,SAAA,SACA,MAAA,MAKN,8BtFs4YA,4DsFn4YI,QAAA,eAHJ,iCtF24YA,6BACA,+DACA,2DsFt4YI,YAAA,YEjpCA,yExF4hbJ,0EwF3hbM,iBAAA,QACA,MAAA,KAKF,oFxF2hbJ,qFwF1hbM,aAAA,QARF,2ExFuibJ,4EwFtibM,iBAAA,QACA,MAAA,KAKF,sFxFsibJ,u...