#### Auth

- The Rancher credential provider has now been removed. This only affects you if you are using the downstream Rancher distro. ([#77099](https://github.com/kubernetes/kubernetes/pull/77099), [@dims](https://github.com/dims))


#### AWS

  - [alpha] Kubelet launches container in a per pod cgroup hierarchy based on quality of service tier ([kubernetes/features#126](https://github.com/kubernetes/enhancements/issues/126))

	* Avoid panic if route53 fields are nil ([#44380](https://github.com/kubernetes/kubernetes/pull/44380), [@justinsb](https://github.com/justinsb))


#### Credential provider
* add rancher credential provider ([#40160](https://github.com/kubernetes/kubernetes/pull/40160), [@wlan0](https://github.com/wlan0))

#### Information for Kubernetes clients (openapi, swagger, client-go)
* Features:

* **[alpha]** New Bootstrap Token authentication and management method. Works well with kubeadm. kubeadm now supports managing tokens, including time based expiration, after the cluster is launched.  See [kubeadm reference docs](https://kubernetes.io/docs/admin/kubeadm/#manage-tokens) for details.
* **[alpha]** Adds a new cloud-controller-manager binary that may be used for testing the new out-of-core cloudprovider flow.

*.lclstage.dev *.linodeobjects.com *.magentosite.cloud *.migration.run *.mm *.moonscale.io *.nagoya.jp *.nodebalancer.linode.com *.nom.br *.northflank.app *.np *.oci.customer-oci.com *.ocp.customer-oci.com *.ocs.customer-oci.com *.on-acorn.io *.on-k3s.io *.on-rancher.cloud *.on-rio.io *.otap.co *.owo.codes *.paywhirl.com *.pg *.platformsh.site *.quipelements.com *.r.appspot.com *.rss.my.id *.s5y.io *.sapporo.jp *.sch.uk *.sendai.jp *.sensiosite.cloud *.spectrum.myjino.ru *.statics.cloud *.stg-builder.code.com...