- kube-controller-manager currently needs a writable `--cert-dir` (default is `/var/run/kubernetes`) for generating self-signed certificates, when no `--tls-cert-file` or `--tls-private-key-file` are provided.

      the following properties: "federations".
    * --federations flag is now deprecated. Prefer to set federations via the config-map.
      Federations can be configured by settings the "federations" field to the value currently
      set in the command line.
    * Example:
      ```yaml
      kind: ConfigMap
      apiVersion: v1
      metadata:
        name: kube-dns
        namespace: kube-system
      data:

### Ephemeral Containers Graduate to Stable

## Known Issues

### Summary API in kubelet doesn't have accelerator metrics

### Scheduling
* **Multiple schedulers**
  * Modify your PodSpecs that currently use the `scheduler.alpha.kubernetes.io/name` annotation on Pod, to instead use the `schedulerName` field in the PodSpec.

   * **NOTE:** This command is currently staged under `kubeadm alpha phase` and will be graduated to top level in a future release.

#### kops

  
  - kind: StorageClass
  - apiVersion: storage.k8s.io/v1
  - metadata:
    - name: shared-disk
  - provisioner: kubernetes.io/azure-disk
  - parameters:
    - skuname: Premium_LRS  # Currently only available with premium SSDs.
    - cachingMode: None # ReadOnly host caching is not available for premium SSDs with maxShares>1

-...

### Bug or Regression

- Currently, NodeAdded QueueingHint could not always be called because of the internal feature called preCheck.
  It's definitely not something expected for plugin developers,

- This PR added tracing support to the kubelet's read-only endpoint, which currently
  does not have tracing. It makes use of the `WithPublicEndpoint` option to prevent callers