* AWS: Allow cross-region image pulling with ECR ([#24369](https://github.com/kubernetes/kubernetes/pull/24369), [@therc](https://github.com/therc))
* Automatically add node labels beta.kubernetes.io/{os,arch} ([#23684](https://github.com/kubernetes/kubernetes/pull/23684), [@luxas](https://github.com/luxas))

          int scale = theUnsafe.arrayIndexScale(byte[].class);

          // Use Unsafe only if we're in a 64-bit JVM with an 8-byte aligned field offset.
          if (Objects.equals(System.getProperty("sun.arch.data.model"), "64")
              && (offset % 8) == 0
              // sanity check - this should never fail
              && scale == 1) {
            return offset;
          }

            <li>Property check: {@code ${my.property} != 'some-value'}</li>
            <li>Regex matching: {@code matches(${os.version}, '.*aws')}</li>
            <li>Complex condition: {@code ${os.name} == 'windows' && ${os.arch} != 'amd64' && inrange(${os.version}, '[10,)')}</li>
            <li>String length check: {@code length(${user.name}) > 5}</li>
            <li>Substring with version: {@code substring(${java.version}, 0, 3) == '1.8'}</li>

        * `kubernetes.io/hostname`
        * `kubernetes.io/instance-type`
        * `kubernetes.io/os`
        * `kubernetes.io/arch`
        * `beta.kubernetes.io/instance-type`
        * `beta.kubernetes.io/os`
        * `beta.kubernetes.io/arch`
        * `failure-domain.kubernetes.io/zone`
        * `failure-domain.kubernetes.io/region`
        * `failure-domain.beta.kubernetes.io/zone`

- The deprecated mondo `kubernetes-test` tarball is no longer built. Users running Kubernetes e2e tests should use the `kubernetes-test-portable` and `kubernetes-test-{OS}-{ARCH}` tarballs instead. ([#83093](https://github.com/kubernetes/kubernetes/pull/83093), [@ixdy](https://github.com/ixdy))

### Scheduling

* GC pod ips ([#35572](https://github.com/kubernetes/kubernetes/pull/35572), [@bprashanth](https://github.com/bprashanth))
* Stop including arch-specific binaries in kubernetes.tar.gz ([#35737](https://github.com/kubernetes/kubernetes/pull/35737), [@ixdy](https://github.com/ixdy))

- kubelet
  - The `beta.kubernetes.io/os` and `beta.kubernetes.io/arch` labels, deprecated since v1.14, are targeted for removal in v1.18.
  - The `--containerized` flag, deprecated since v1.14, will be removed in a future release.

hear oneself speak--and they don't seem to have any rules in
particular; at least, if there are, nobody attends to them--and
you've no idea how confusing it is all the things being alive;
for instance, there's the arch I've got to go through next
walking about at the other end of the ground--and I should have
croqueted the Queen's hedgehog just now, only it ran away when it
saw mine coming!'

// Code generated by 'instgen -o=$GOROOT # from go install golang.org/x/arch/arm64/instgen@latest'. DO NOT EDIT.

#include "../../../../../runtime/textflag.h"

TEXT asmtest(SB),DUPOK|NOSPLIT,$-8
	PAND P4.B, P2.B, P1.Z, P14.B                      // 4e440425
	PANDS P4.B, P2.B, P1.Z, P14.B                     // 4e444425
	PBIC P4.B, P2.B, P1.Z, P14.B                      // 5e440425
	PBICS P4.B, P2.B, P1.Z, P14.B                     // 5e444425

hear oneself speak--and they don't seem to have any rules in
particular; at least, if there are, nobody attends to them--and
you've no idea how confusing it is all the things being alive;
for instance, there's the arch I've got to go through next
walking about at the other end of the ground--and I should have
croqueted the Queen's hedgehog just now, only it ran away when it
saw mine coming!'