* Fix a scalability issue where high rates of event writes degraded etcd performance. ([#64539](https://github.com/kubernetes/kubernetes/pull/64539), [@ccding](https://github.com/ccding))
* Properly manage security groups for loadbalancer services on OpenStack. ([#65373](https://github.com/kubernetes/kubernetes/pull/65373), [@multi-io](https://github.com/multi-io))

  - [beta] In order to preserve safety guarantees the cluster no longer force deletes pods on un-responsive nodes and users are now warned if they try to force delete pods via the CLI. ([docs](http://kubernetes.io/docs/tasks/manage-stateful-set/scale-stateful-set/)) ([kubernetes/features#119](https://github.com/kubernetes/enhancements/issues/119))
- **Auth**

        },
        "danish_keywords": {
          "type":       "keyword_marker",
          "keywords": ["Hej", "verden", "Søg"]
        },

        },
        "danish_keywords": {
          "type":       "keyword_marker",
          "keywords": ["Hej", "verden", "Søg"]
        },

* DaemonSets [can now be updated by a rolling update](https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set).

## Action Required

### Certificates API

AIA,IAAM/N,EAAQ5H,EAAAA,QAAE,QACIoT,aAAaK,QAAb,WAAgC2B,MAEhChR,GACd1C,KAAKkC,SAASgS,wBAChBhO,EAAMtC,SAAS,mBAAmBA,SAASlB,IAAsB+B,MAAM,IAAIC,OAAM,WAC/EpG,EAAAA,QAAE0B,MAAMgE,YAAY,mBACpB1F,EAAAA,QAAE0B,MAAM4E,aAGVsB,EAAMtC,SAASlB,IAER1C,KAAKkC,SAASgS,wBACvBhO,EAAMtC,SAAS,mBAAmBI,YAAYtB,IAAsB+B,MAAM,IAAIC,OAAM,WAClFpG,EAAAA,QAAE0B,MAAMgE,YAAY,mBACpB1F,EAAAA,QAAE0B,MAAM4E,aAGVsB,EAAMlC,YAAYtB,QAMtBd,MAAA,WAAQ,IAAAC,EAAA7B,KACNA,KAAKsU,WACLtU,KAAKqU,eAEL/V,EAAAA,QAAEwI,QAAQC,QAAO,WACflF,EAAKwS,cAAa,SA...

cookie.search.parameter.secure=
# Max-Age (in seconds) for the search parameter cookie. Use -1 for session-only cookies.
cookie.search.parameter.max_age=60
# Domain attribute for the search parameter cookie. Set to the domain scope you want the cookie to be available on (e.g., example.com).
cookie.search.parameter.domain=

EAAK4Q,eAAiB,GAEhBmQ,OAOXvhB,GAAOsB,KAAM,CAAE,QAAS,YAAc,WACrCtB,GAAOg8B,SAAUj/B,MAAS,CACzBqhB,IAAK,SAAU5d,EAAMsE,GACpB,GAAKhC,MAAMC,QAAS+B,GACnB,OAAStE,EAAK0Q,SAA2D,EAAjDlR,GAAOkE,QAASlE,GAAQQ,GAAOrB,MAAO2F,KAI3D3G,GAAQ+7B,UACbl6B,GAAOg8B,SAAUj/B,MAAOgE,IAAM,SAAUP,GACvC,OAAwC,OAAjCA,EAAKjB,aAAc,SAAqB,KAAOiB,EAAKsE,UAS9D,IAAI0L,GAAW1T,GAAO0T,SAElB5R,GAAQ,CAAEmG,KAAMkjB,KAAKC,OAErBgU,GAAS,KAKbl8B,GAAOm8B,SAAW,SAAU9d,GAC3B,IAAInP,EAAKktB,EACT,IAAM/d,GAAwB,iBAATA,EACpB,OAAO,KAKR,IACCnP,GAAM,IAAMpS,G...

    String COOKIE_SEARCH_PARAMETER_SECURE = "cookie.search.parameter.secure";

    /** The key of the configuration. e.g. 60 */
    String COOKIE_SEARCH_PARAMETER_max_age = "cookie.search.parameter.max_age";

    /** The key of the configuration. e.g.  */
    String COOKIE_SEARCH_PARAMETER_DOMAIN = "cookie.search.parameter.domain";

    /** The key of the configuration. e.g. / */

### CSIDriver policy for FSGroup graduates to Beta

The FSGroup's CSIDriver Policy is now beta in 1.20. This allows CSIDrivers to explicitly indicate if they want Kubernetes to manage permissions and ownership for their volumes via `fsgroup`. 

### Security Improvements for CSI Drivers (Alpha)