object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection. By default, node users are authorized for create and patch requests but not delete requests against their node object. Since the NodeRestriction admission controller does not prevent patching OwnerReferences, a compromised node could leverage this vulnerability to delete and then recreate...

## Dependencies

### Added
_Nothing has changed._

### Changed
_Nothing has changed._

### Removed
_Nothing has changed._

  - [Changelog since v1.20.5](#changelog-since-v1205)
  - [Important Security Information](#important-security-information-1)
    - [CVE-2021-25735: Validating Admission Webhook does not observe some previous fields](#cve-2021-25735-validating-admission-webhook-does-not-observe-some-previous-fields)
  - [Changes by Kind](#changes-by-kind-9)
    - [API Change](#api-change-2)
    - [Feature](#feature-5)

// https://www.iana.org/domains/root/db/dhl.html
dhl

// diamonds : Binky Moon, LLC
// https://www.iana.org/domains/root/db/diamonds.html
diamonds

// diet : XYZ.COM LLC
// https://www.iana.org/domains/root/db/diet.html
diet

// digital : Binky Moon, LLC
// https://www.iana.org/domains/root/db/digital.html
digital

// direct : Binky Moon, LLC

dental
dentist
dep.no
deporte.bo
des.br
desa.id
desi
design
design.aero
det.br
deta.app
deta.dev
dev
dev-myqnapcloud.com
dev.br
development.run
devices.resinstaging.io
df.gov.br
df.leg.br
dfirma.pl
dgca.aero
dh.bytemark.co.uk
dhl
diadem.cloud
diamonds
dielddanuorri.no
dienbien.vn
diet
digick.jp
digital
diher.solutions

Gryphon.  `Do you know why it's called a whiting?'

  `I never thought about it,' said Alice.  `Why?'

  `IT DOES THE BOOTS AND SHOES.' the Gryphon replied very
solemnly.

  Alice was thoroughly puzzled.  `Does the boots and shoes!' she
repeated in a wondering tone.

  `Why, what are YOUR shoes done with?' said the Gryphon.  `I
mean, what makes them so shiny?'

  managed by the GLBC Ingress Controller. This can cause the health checks to start failing,
  requiring you to reapply the manual edits.
  * This issue does not affect clusters that were already running Kubernetes v1.6.4 or higher.
  * This issue does not affect Health Checks that were left in the configuration

dental
dentist
dep.no
deporte.bo
des.br
desa.id
desi
design
design.aero
det.br
deta.app
deta.dev
dev
dev-myqnapcloud.com
dev.br
development.run
devices.resinstaging.io
df.gov.br
df.leg.br
dfirma.pl
dgca.aero
dh.bytemark.co.uk
dhl
diadem.cloud
diamonds
dielddanuorri.no
dienbien.vn
diet
digick.jp
digital
diher.solutions