acquiring certificates ensure the corresponding domain names are set as per the standard [DNS naming conventions](https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#pod-identity) in a Kubernetes StatefulSet (for a distributed MinIO setup). Then create a secret using ```bash kubectl create secret generic tls-ssl-minio --from-file=path/to/private.key --from-file=path/to/public.crt ``` Then install the chart, specifying that you want to use the TLS secret: ```bash helm install --set ...

                     * is like changing the rug out from underneath our feet.
                     */
                    /* Technically we should also try to authenticate here but that means doing the session setup and tree connect separately. For now a simple connect will at least tell us if the host is alive. That should be sufficient for 99% of the cases. We can revisit this again for 2.0.
                     */

- Kubernetes is now built with go 1.21.7
  - update setcap/debian-base to bookworm-v1.0.1
  - update distroless-iptables to v0.4.5 ([#123228](https://github.com/kubernetes/kubernetes/pull/123228), [@cpanato](https://github.com/cpanato)) [SIG API Machinery, Architecture, Release and Testing]

## Changelog since v1.33.5

## Changes by Kind

### Feature

- Kubernetes is now built using Go 1.24.9
  - update setcap and debian-base to bookworm-v1.0.6 ([#134613](https://github.com/kubernetes/kubernetes/pull/134613), [@cpanato](https://github.com/cpanato)) [SIG Architecture, Cloud Provider, Etcd, Release, Storage and Testing]

### Bug or Regression

- Kubernetes is now built with go 1.21.7
  - update setcap/debian-base to bookworm-v1.0.1

## Changelog since v1.32.9

## Changes by Kind

### Feature

- Kubernetes is now built using Go 1.24.9
  - update setcap and debian-base to bookworm-v1.0.6 ([#134617](https://github.com/kubernetes/kubernetes/pull/134617), [@cpanato](https://github.com/cpanato)) [SIG Architecture, Auth, Cloud Provider, Etcd, Release, Storage and Testing]

## Changelog since v1.31.13

## Changes by Kind

### Feature

- Kubernetes is now built using Go 1.24.9
  - update setcap and debian-base to bookworm-v1.0.6 ([#134618](https://github.com/kubernetes/kubernetes/pull/134618), [@cpanato](https://github.com/cpanato)) [SIG API Machinery, Architecture, Cloud Provider, Etcd, Release, Storage and Testing]

   ([#123343](https://github.com/kubernetes/kubernetes/pull/123343), [@haircommander](https://github.com/haircommander))
- Updated `distroless-iptables` to `v0.5.0`, debian-base to `bookworm-v1.0.1`, and setcap to `bookworm-v1.0.1`.
   ([#123170](https://github.com/kubernetes/kubernetes/pull/123170), [@cpanato](https://github.com/cpanato))
- `NewVolumeManagerReconstruction` feature is now GA.

- Updates the following images to pick up CVE fixes:
  - `debian` to v1.8.0
  - `debian-iptables` to v1.6.5
  - `setcap` to v2.0.3 ([#103235](https://github.com/kubernetes/kubernetes/pull/103235), [@thejoycekung](https://github.com/thejoycekung)) [SIG API Machinery, Release and Testing]

### Bug or Regression

- Updates the following images to pick up CVE fixes:
  - `debian` to v1.9.0
  - `debian-iptables` to v1.6.6
  - `setcap` to v2.0.4 ([#104142](https://github.com/kubernetes/kubernetes/pull/104142), [@mengjiao-liu](https://github.com/mengjiao-liu))