Update CHANGELOG.md for v1.5.0-alpha.1.

CHANGELOG.md

@@ -1,22 +1,28 @@
 <!-- BEGIN MUNGE: GENERATED_TOC -->
 
-- [v1.4.2-beta.1](#v142-beta1)
+- [v1.5.0-alpha.1](#v150-alpha1)
   - [Downloads](#downloads)
-  - [Changelog since v1.4.1](#changelog-since-v141)
+  - [Changelog since v1.4.0-alpha.3](#changelog-since-v140-alpha3)
+    - [Experimental Features](#experimental-features)
+    - [Action Required](#action-required)
     - [Other notable changes](#other-notable-changes)
-- [v1.4.1](#v141)
+- [v1.4.2-beta.1](#v142-beta1)
   - [Downloads](#downloads-1)
+  - [Changelog since v1.4.1](#changelog-since-v141)
+    - [Other notable changes](#other-notable-changes-1)
+- [v1.4.1](#v141)
+  - [Downloads](#downloads-2)
   - [Changelog since v1.4.1-beta.2](#changelog-since-v141-beta2)
 - [v1.4.1-beta.2](#v141-beta2)
-  - [Downloads](#downloads-2)
-  - [Changelog since v1.4.0](#changelog-since-v140)
-    - [Other notable changes](#other-notable-changes-1)
-- [v1.3.8](#v138)
   - [Downloads](#downloads-3)
-  - [Changelog since v1.3.7](#changelog-since-v137)
+  - [Changelog since v1.4.0](#changelog-since-v140)
     - [Other notable changes](#other-notable-changes-2)
-- [v1.4.0](#v140)
+- [v1.3.8](#v138)
   - [Downloads](#downloads-4)
+  - [Changelog since v1.3.7](#changelog-since-v137)
+    - [Other notable changes](#other-notable-changes-3)
+- [v1.4.0](#v140)
+  - [Downloads](#downloads-5)
   - [Major Themes](#major-themes)
   - [Features](#features)
   - [Known Issues](#known-issues)
@@ -28,94 +34,94 @@
   - [Action Required Before Upgrading](#action-required-before-upgrading)
   - [Previous Releases Included in v1.4.0](#previous-releases-included-in-v140)
 - [v1.4.0-beta.11](#v140-beta11)
-  - [Downloads](#downloads-5)
+  - [Downloads](#downloads-6)
   - [Changelog since v1.4.0-beta.10](#changelog-since-v140-beta10)
 - [v1.4.0-beta.10](#v140-beta10)
-  - [Downloads](#downloads-6)
-  - [Changelog since v1.4.0-beta.8](#changelog-since-v140-beta8)
-    - [Other notable changes](#other-notable-changes-3)
-- [v1.4.0-beta.8](#v140-beta8)
   - [Downloads](#downloads-7)
+  - [Changelog since v1.4.0-beta.8](#changelog-since-v140-beta8)
+    - [Other notable changes](#other-notable-changes-4)
+- [v1.4.0-beta.8](#v140-beta8)
+  - [Downloads](#downloads-8)
   - [Changelog since v1.4.0-beta.7](#changelog-since-v140-beta7)
 - [v1.4.0-beta.7](#v140-beta7)
-  - [Downloads](#downloads-8)
-  - [Changelog since v1.4.0-beta.6](#changelog-since-v140-beta6)
-    - [Other notable changes](#other-notable-changes-4)
-- [v1.4.0-beta.6](#v140-beta6)
   - [Downloads](#downloads-9)
-  - [Changelog since v1.4.0-beta.5](#changelog-since-v140-beta5)
+  - [Changelog since v1.4.0-beta.6](#changelog-since-v140-beta6)
     - [Other notable changes](#other-notable-changes-5)
-- [v1.4.0-beta.5](#v140-beta5)
+- [v1.4.0-beta.6](#v140-beta6)
   - [Downloads](#downloads-10)
-  - [Changelog since v1.4.0-beta.3](#changelog-since-v140-beta3)
+  - [Changelog since v1.4.0-beta.5](#changelog-since-v140-beta5)
     - [Other notable changes](#other-notable-changes-6)
-- [v1.3.7](#v137)
+- [v1.4.0-beta.5](#v140-beta5)
   - [Downloads](#downloads-11)
-  - [Changelog since v1.3.6](#changelog-since-v136)
+  - [Changelog since v1.4.0-beta.3](#changelog-since-v140-beta3)
     - [Other notable changes](#other-notable-changes-7)
-- [v1.4.0-beta.3](#v140-beta3)
+- [v1.3.7](#v137)
   - [Downloads](#downloads-12)
+  - [Changelog since v1.3.6](#changelog-since-v136)
+    - [Other notable changes](#other-notable-changes-8)
+- [v1.4.0-beta.3](#v140-beta3)
+  - [Downloads](#downloads-13)
   - [Changelog since v1.4.0-beta.2](#changelog-since-v140-beta2)
   - [Behavior changes caused by enabling the garbage collector](#behavior-changes-caused-by-enabling-the-garbage-collector)
     - [kubectl rolling-update](#kubectl-rolling-update)
     - [kubectl delete](#kubectl-delete)
     - [DELETE operation in REST API](#delete-operation-in-rest-api-1)
 - [v1.4.0-beta.2](#v140-beta2)
-  - [Downloads](#downloads-13)
-  - [Changelog since v1.4.0-beta.1](#changelog-since-v140-beta1)
-    - [Other notable changes](#other-notable-changes-8)
-- [v1.4.0-beta.1](#v140-beta1)
   - [Downloads](#downloads-14)
-  - [Changelog since v1.4.0-alpha.3](#changelog-since-v140-alpha3)
+  - [Changelog since v1.4.0-beta.1](#changelog-since-v140-beta1)
-    - [Action Required](#action-required)
     - [Other notable changes](#other-notable-changes-9)
-- [v1.3.6](#v136)
+- [v1.4.0-beta.1](#v140-beta1)
   - [Downloads](#downloads-15)
-  - [Changelog since v1.3.5](#changelog-since-v135)
+  - [Changelog since v1.4.0-alpha.3](#changelog-since-v140-alpha3-1)
-    - [Other notable changes](#other-notable-changes-10)
-- [v1.4.0-alpha.3](#v140-alpha3)
-  - [Downloads](#downloads-16)
-  - [Changelog since v1.4.0-alpha.2](#changelog-since-v140-alpha2)
     - [Action Required](#action-required-1)
+    - [Other notable changes](#other-notable-changes-10)
+- [v1.3.6](#v136)
+  - [Downloads](#downloads-16)
+  - [Changelog since v1.3.5](#changelog-since-v135)
     - [Other notable changes](#other-notable-changes-11)
-- [v1.3.5](#v135)
+- [v1.4.0-alpha.3](#v140-alpha3)
   - [Downloads](#downloads-17)
-  - [Changelog since v1.3.4](#changelog-since-v134)
+  - [Changelog since v1.4.0-alpha.2](#changelog-since-v140-alpha2)
-    - [Other notable changes](#other-notable-changes-12)
-- [v1.3.4](#v134)
-  - [Downloads](#downloads-18)
-  - [Changelog since v1.3.3](#changelog-since-v133)
-    - [Other notable changes](#other-notable-changes-13)
-- [v1.4.0-alpha.2](#v140-alpha2)
-  - [Downloads](#downloads-19)
-  - [Changelog since v1.4.0-alpha.1](#changelog-since-v140-alpha1)
     - [Action Required](#action-required-2)
+    - [Other notable changes](#other-notable-changes-12)
+- [v1.3.5](#v135)
+  - [Downloads](#downloads-18)
+  - [Changelog since v1.3.4](#changelog-since-v134)
+    - [Other notable changes](#other-notable-changes-13)
+- [v1.3.4](#v134)
+  - [Downloads](#downloads-19)
+  - [Changelog since v1.3.3](#changelog-since-v133)
     - [Other notable changes](#other-notable-changes-14)
-- [v1.3.3](#v133)
+- [v1.4.0-alpha.2](#v140-alpha2)
   - [Downloads](#downloads-20)
-  - [Changelog since v1.3.2](#changelog-since-v132)
+  - [Changelog since v1.4.0-alpha.1](#changelog-since-v140-alpha1)
+    - [Action Required](#action-required-3)
     - [Other notable changes](#other-notable-changes-15)
+- [v1.3.3](#v133)
+  - [Downloads](#downloads-21)
+  - [Changelog since v1.3.2](#changelog-since-v132)
+    - [Other notable changes](#other-notable-changes-16)
   - [Known Issues](#known-issues-1)
 - [v1.3.2](#v132)
-  - [Downloads](#downloads-21)
-  - [Changelog since v1.3.1](#changelog-since-v131)
-    - [Other notable changes](#other-notable-changes-16)
-- [v1.3.1](#v131)
   - [Downloads](#downloads-22)
-  - [Changelog since v1.3.0](#changelog-since-v130)
+  - [Changelog since v1.3.1](#changelog-since-v131)
     - [Other notable changes](#other-notable-changes-17)
-- [v1.2.6](#v126)
+- [v1.3.1](#v131)
   - [Downloads](#downloads-23)
-  - [Changelog since v1.2.5](#changelog-since-v125)
+  - [Changelog since v1.3.0](#changelog-since-v130)
     - [Other notable changes](#other-notable-changes-18)
-- [v1.4.0-alpha.1](#v140-alpha1)
+- [v1.2.6](#v126)
   - [Downloads](#downloads-24)
-  - [Changelog since v1.3.0](#changelog-since-v130-1)
+  - [Changelog since v1.2.5](#changelog-since-v125)
-    - [Experimental Features](#experimental-features)
-    - [Action Required](#action-required-3)
     - [Other notable changes](#other-notable-changes-19)
-- [v1.3.0](#v130)
+- [v1.4.0-alpha.1](#v140-alpha1)
   - [Downloads](#downloads-25)
+  - [Changelog since v1.3.0](#changelog-since-v130-1)
+    - [Experimental Features](#experimental-features-1)
+    - [Action Required](#action-required-4)
+    - [Other notable changes](#other-notable-changes-20)
+- [v1.3.0](#v130)
+  - [Downloads](#downloads-26)
   - [Highlights](#highlights)
   - [Known Issues and Important Steps before Upgrading](#known-issues-and-important-steps-before-upgrading)
       - [ThirdPartyResource](#thirdpartyresource)
@@ -126,72 +132,72 @@
   - [Provider-specific Notes](#provider-specific-notes)
   - [Previous Releases Included in v1.3.0](#previous-releases-included-in-v130)
 - [v1.3.0-beta.3](#v130-beta3)
-  - [Downloads](#downloads-26)
-  - [Changelog since v1.3.0-beta.2](#changelog-since-v130-beta2)
-    - [Action Required](#action-required-4)
-    - [Other notable changes](#other-notable-changes-20)
-- [v1.2.5](#v125)
   - [Downloads](#downloads-27)
-  - [Changes since v1.2.4](#changes-since-v124)
+  - [Changelog since v1.3.0-beta.2](#changelog-since-v130-beta2)
-    - [Other notable changes](#other-notable-changes-21)
-- [v1.3.0-beta.2](#v130-beta2)
-  - [Downloads](#downloads-28)
-  - [Changes since v1.3.0-beta.1](#changes-since-v130-beta1)
-    - [Experimental Features](#experimental-features-1)
-    - [Other notable changes](#other-notable-changes-22)
-- [v1.3.0-beta.1](#v130-beta1)
-  - [Downloads](#downloads-29)
-  - [Changes since v1.3.0-alpha.5](#changes-since-v130-alpha5)
     - [Action Required](#action-required-5)
+    - [Other notable changes](#other-notable-changes-21)
+- [v1.2.5](#v125)
+  - [Downloads](#downloads-28)
+  - [Changes since v1.2.4](#changes-since-v124)
+    - [Other notable changes](#other-notable-changes-22)
+- [v1.3.0-beta.2](#v130-beta2)
+  - [Downloads](#downloads-29)
+  - [Changes since v1.3.0-beta.1](#changes-since-v130-beta1)
+    - [Experimental Features](#experimental-features-2)
     - [Other notable changes](#other-notable-changes-23)
-- [v1.3.0-alpha.5](#v130-alpha5)
+- [v1.3.0-beta.1](#v130-beta1)
   - [Downloads](#downloads-30)
-  - [Changes since v1.3.0-alpha.4](#changes-since-v130-alpha4)
+  - [Changes since v1.3.0-alpha.5](#changes-since-v130-alpha5)
     - [Action Required](#action-required-6)
     - [Other notable changes](#other-notable-changes-24)
-- [v1.3.0-alpha.4](#v130-alpha4)
+- [v1.3.0-alpha.5](#v130-alpha5)
   - [Downloads](#downloads-31)
-  - [Changes since v1.3.0-alpha.3](#changes-since-v130-alpha3)
+  - [Changes since v1.3.0-alpha.4](#changes-since-v130-alpha4)
     - [Action Required](#action-required-7)
     - [Other notable changes](#other-notable-changes-25)
-- [v1.2.4](#v124)
+- [v1.3.0-alpha.4](#v130-alpha4)
   - [Downloads](#downloads-32)
-  - [Changes since v1.2.3](#changes-since-v123)
+  - [Changes since v1.3.0-alpha.3](#changes-since-v130-alpha3)
-    - [Other notable changes](#other-notable-changes-26)
-- [v1.3.0-alpha.3](#v130-alpha3)
-  - [Downloads](#downloads-33)
-  - [Changes since v1.3.0-alpha.2](#changes-since-v130-alpha2)
     - [Action Required](#action-required-8)
+    - [Other notable changes](#other-notable-changes-26)
+- [v1.2.4](#v124)
+  - [Downloads](#downloads-33)
+  - [Changes since v1.2.3](#changes-since-v123)
     - [Other notable changes](#other-notable-changes-27)
-- [v1.2.3](#v123)
+- [v1.3.0-alpha.3](#v130-alpha3)
   - [Downloads](#downloads-34)
-  - [Changes since v1.2.2](#changes-since-v122)
+  - [Changes since v1.3.0-alpha.2](#changes-since-v130-alpha2)
     - [Action Required](#action-required-9)
     - [Other notable changes](#other-notable-changes-28)
-- [v1.3.0-alpha.2](#v130-alpha2)
+- [v1.2.3](#v123)
   - [Downloads](#downloads-35)
-  - [Changes since v1.3.0-alpha.1](#changes-since-v130-alpha1)
+  - [Changes since v1.2.2](#changes-since-v122)
-    - [Other notable changes](#other-notable-changes-29)
-- [v1.2.2](#v122)
-  - [Downloads](#downloads-36)
-  - [Changes since v1.2.1](#changes-since-v121)
-    - [Other notable changes](#other-notable-changes-30)
-- [v1.2.1](#v121)
-  - [Downloads](#downloads-37)
-  - [Changes since v1.2.0](#changes-since-v120)
-    - [Other notable changes](#other-notable-changes-31)
-- [v1.3.0-alpha.1](#v130-alpha1)
-  - [Downloads](#downloads-38)
-  - [Changes since v1.2.0](#changes-since-v120-1)
     - [Action Required](#action-required-10)
+    - [Other notable changes](#other-notable-changes-29)
+- [v1.3.0-alpha.2](#v130-alpha2)
+  - [Downloads](#downloads-36)
+  - [Changes since v1.3.0-alpha.1](#changes-since-v130-alpha1)
+    - [Other notable changes](#other-notable-changes-30)
+- [v1.2.2](#v122)
+  - [Downloads](#downloads-37)
+  - [Changes since v1.2.1](#changes-since-v121)
+    - [Other notable changes](#other-notable-changes-31)
+- [v1.2.1](#v121)
+  - [Downloads](#downloads-38)
+  - [Changes since v1.2.0](#changes-since-v120)
     - [Other notable changes](#other-notable-changes-32)
-- [v1.2.0](#v120)
+- [v1.3.0-alpha.1](#v130-alpha1)
   - [Downloads](#downloads-39)
+  - [Changes since v1.2.0](#changes-since-v120-1)
+    - [Action Required](#action-required-11)
+    - [Other notable changes](#other-notable-changes-33)
+- [v1.2.0](#v120)
+  - [Downloads](#downloads-40)
   - [Changes since v1.1.1](#changes-since-v111)
     - [Major Themes](#major-themes-1)
     - [Other notable improvements](#other-notable-improvements)
-    - [Experimental Features](#experimental-features-2)
+    - [Experimental Features](#experimental-features-3)
-    - [Action required](#action-required-11)
+    - [Action required](#action-required-12)
     - [Known Issues](#known-issues-2)
       - [Docker Known Issues](#docker-known-issues)
         - [1.9.1](#191)
@@ -205,6 +211,177 @@
 <!-- NEW RELEASE NOTES ENTRY -->
 
 
+# v1.5.0-alpha.1
+
+[Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/master/examples)
+
+## Downloads
+
+binary | sha256 hash
+------ | -----------
+[kubernetes.tar.gz](https://storage.googleapis.com/kubernetes-release/release/v1.5.0-alpha.1/kubernetes.tar.gz) | `86bfcfffaa210ddf18983ff066470ef9c06ee00449b2238043e2777aac2c906d`
+
+## Changelog since v1.4.0-alpha.3
+
+### Experimental Features
+
+* `kubeadm` (alpha) provides an easy way to securely bootstrap Kubernetes on Linux, see http://kubernetes.io/docs/kubeadm/ ([#33262](https://github.com/kubernetes/kubernetes/pull/33262), [@errordeveloper](https://github.com/errordeveloper))
+* Alpha JWS Discovery API for locating an apiserver securely ([#32203](https://github.com/kubernetes/kubernetes/pull/32203), [@dgoodwin](https://github.com/dgoodwin))
+
+### Action Required
+
+* kube-apiserver learned the '--anonymous-auth' flag, which defaults to true. When enabled, requests to the secure port that are not rejected by other configured authentication methods are treated as anonymous requests, and given a username of 'system:anonymous' and a group of 'system:unauthenticated'.  ([#32386](https://github.com/kubernetes/kubernetes/pull/32386), [@liggitt](https://github.com/liggitt))
+    * Authenticated users are decorated with a 'system:authenticated' group.
+    * NOTE: anonymous access is enabled by default. If you rely on authentication alone to authorize access, change to use an authorization mode other than AlwaysAllow, or or set '--anonymous-auth=false'.
+* The NamespaceExists and NamespaceAutoProvision admission controllers have been removed. ([#31250](https://github.com/kubernetes/kubernetes/pull/31250), [@derekwaynecarr](https://github.com/derekwaynecarr))
+    * All cluster operators should use NamespaceLifecycle.
+* Federation binaries and their corresponding docker images - `federation-apiserver` and `federation-controller-manager` are now folded in to the `hyperkube` binary. If you were using one of these binaries or docker images, please switch to using the `hyperkube` version. Please refer to the federation manifests - `federation/manifests/federation-apiserver.yaml` and `federation/manifests/federation-controller-manager-deployment.yaml` for examples. ([#29929](https://github.com/kubernetes/kubernetes/pull/29929), [@madhusudancs](https://github.com/madhusudancs))
+
+### Other notable changes
+
+* The kube-apiserver --service-account-key-file option can be specified multiple times, or can point to a file containing multiple keys, to enable rotation of signing keys. ([#34029](https://github.com/kubernetes/kubernetes/pull/34029), [@liggitt](https://github.com/liggitt))
+* The apiserver now uses addresses reported by the kubelet in the Node object's status for apiserver->kubelet communications, rather than the name of the Node object. The address type used defaults to `InternalIP`, `ExternalIP`, and `LegacyHostIP` address types, in that order. ([#33718](https://github.com/kubernetes/kubernetes/pull/33718), [@justinsb](https://github.com/justinsb))
+* Federated deployment controller that supports the same api as the regular kubernetes deployment controller. ([#34109](https://github.com/kubernetes/kubernetes/pull/34109), [@mwielgus](https://github.com/mwielgus))
+* Match GroupVersionKind against specific version ([#34010](https://github.com/kubernetes/kubernetes/pull/34010), [@soltysh](https://github.com/soltysh))
+* fix yaml decode issue ([#34297](https://github.com/kubernetes/kubernetes/pull/34297), [@AdoHe](https://github.com/AdoHe))
+* kubectl annotate now supports --dry-run ([#34199](https://github.com/kubernetes/kubernetes/pull/34199), [@asalkeld](https://github.com/asalkeld))
+* kubectl: Add external ip information to node when '-o wide' is used ([#33552](https://github.com/kubernetes/kubernetes/pull/33552), [@floreks](https://github.com/floreks))
+* Update GCI base image: ([#34156](https://github.com/kubernetes/kubernetes/pull/34156), [@adityakali](https://github.com/adityakali))
+        * Enabled VXLAN and IP_SET config options in kernel to support some networking tools (ebtools)
+        * OpenSSL CVE fixes
+* ContainerVm/GCI image: try to use ifdown/ifup if available ([#33595](https://github.com/kubernetes/kubernetes/pull/33595), [@freehan](https://github.com/freehan))
+* Use manifest digest (as `docker-pullable://`) as ImageID when available (exposes a canonical, pullable image ID for containers). ([#33014](https://github.com/kubernetes/kubernetes/pull/33014), [@DirectXMan12](https://github.com/DirectXMan12))
+* Add kubelet awareness to taint tolerant match caculator. ([#26501](https://github.com/kubernetes/kubernetes/pull/26501), [@resouer](https://github.com/resouer))
+* Fix nil pointer issue when getting metrics from volume mounter ([#34251](https://github.com/kubernetes/kubernetes/pull/34251), [@jingxu97](https://github.com/jingxu97))
+* Enforce Disk based pod eviction with GCI base image in Kubelet ([#33520](https://github.com/kubernetes/kubernetes/pull/33520), [@vishh](https://github.com/vishh))
+* Remove headers that are unnecessary for proxy target ([#34076](https://github.com/kubernetes/kubernetes/pull/34076), [@mbohlool](https://github.com/mbohlool))
+* Add missing argument to log message in federated ingress controller. ([#34158](https://github.com/kubernetes/kubernetes/pull/34158), [@quinton-hoole](https://github.com/quinton-hoole))
+* The kubelet --eviction-minimum-reclaim option can now take precentages as well as absolute values for resources quantities ([#33392](https://github.com/kubernetes/kubernetes/pull/33392), [@sjenning](https://github.com/sjenning))
+* The implicit registration of Prometheus metrics for workqueue has been removed, and a plug-able interface was added. If you were using workqueue in your own binaries and want these metrics, add the following to your imports in the main package: "k8s.io/pkg/util/workqueue/prometheus". ([#33792](https://github.com/kubernetes/kubernetes/pull/33792), [@caesarxuchao](https://github.com/caesarxuchao))
+* Add kubectl --node-port option for specifying the service nodeport ([#33319](https://github.com/kubernetes/kubernetes/pull/33319), [@juanvallejo](https://github.com/juanvallejo))
+* To reduce memory usage to reasonable levels in smaller clusters, kube-apiserver now sets the deserialization cache size based on the target memory usage. ([#34000](https://github.com/kubernetes/kubernetes/pull/34000), [@wojtek-t](https://github.com/wojtek-t))
+* use service accounts as clients for controllers ([#33310](https://github.com/kubernetes/kubernetes/pull/33310), [@deads2k](https://github.com/deads2k))
+* Add a new option "--local" to the `kubectl annotate` ([#34074](https://github.com/kubernetes/kubernetes/pull/34074), [@asalkeld](https://github.com/asalkeld))
+* Add a new option "--local" to the `kubectl label` ([#33990](https://github.com/kubernetes/kubernetes/pull/33990), [@asalkeld](https://github.com/asalkeld))
+* Initialize podsWithAffinity to avoid scheduler panic ([#33967](https://github.com/kubernetes/kubernetes/pull/33967), [@xiang90](https://github.com/xiang90))
+* Fix base image pinning during upgrades via cluster/gce/upgrade.sh ([#33147](https://github.com/kubernetes/kubernetes/pull/33147), [@vishh](https://github.com/vishh))
+* Remove the flannel experimental overlay ([#33862](https://github.com/kubernetes/kubernetes/pull/33862), [@luxas](https://github.com/luxas))
+* CRI: Remove the mount name and port name. ([#33970](https://github.com/kubernetes/kubernetes/pull/33970), [@yifan-gu](https://github.com/yifan-gu))
+* Enable kubectl describe rs to work when apiserver does not support pods ([#33794](https://github.com/kubernetes/kubernetes/pull/33794), [@nikhiljindal](https://github.com/nikhiljindal))
+* Heal the namespaceless ingresses in federation e2e. ([#33977](https://github.com/kubernetes/kubernetes/pull/33977), [@quinton-hoole](https://github.com/quinton-hoole))
+* Fix issue in updating device path when volume is attached multiple times ([#33796](https://github.com/kubernetes/kubernetes/pull/33796), [@jingxu97](https://github.com/jingxu97))
+* ECDSA keys can now be used for signing and verifying service account tokens. ([#33565](https://github.com/kubernetes/kubernetes/pull/33565), [@liggitt](https://github.com/liggitt))
+* OnlyLocal nodeports ([#33587](https://github.com/kubernetes/kubernetes/pull/33587), [@bprashanth](https://github.com/bprashanth))
+* Remove flannel because now everything here is upstreamed ([#33860](https://github.com/kubernetes/kubernetes/pull/33860), [@luxas](https://github.com/luxas))
+* Use patched golang1.7.1 for cross-builds targeting darwin ([#33803](https://github.com/kubernetes/kubernetes/pull/33803), [@ixdy](https://github.com/ixdy))
+* Bump up addon kube-dns to v20 for graceful termination ([#33774](https://github.com/kubernetes/kubernetes/pull/33774), [@MrHohn](https://github.com/MrHohn))
+* Creating LoadBalancer Service with "None" ClusterIP is no longer possible ([#33274](https://github.com/kubernetes/kubernetes/pull/33274), [@nebril](https://github.com/nebril))
+* Increase timeout for federated ingress test. ([#33610](https://github.com/kubernetes/kubernetes/pull/33610), [@quinton-hoole](https://github.com/quinton-hoole))
+* Use UpdateStatus, not Update, to add LoadBalancerStatus to Federated Ingress.  ([#33605](https://github.com/kubernetes/kubernetes/pull/33605), [@quinton-hoole](https://github.com/quinton-hoole))
+* add anytoken authenticator ([#33378](https://github.com/kubernetes/kubernetes/pull/33378), [@deads2k](https://github.com/deads2k))
+* Fixes in HPA: consider only running pods; proper denominator in avg request calculations. ([#33735](https://github.com/kubernetes/kubernetes/pull/33735), [@jszczepkowski](https://github.com/jszczepkowski))
+* When CORS Handler is enabled, we now add a new HTTP header named "Access-Control-Expose-Headers" with a value of "Date". This allows the "Date" HTTP header to be accessed from XHR/JavaScript. ([#33242](https://github.com/kubernetes/kubernetes/pull/33242), [@dims](https://github.com/dims))
+* promote contrib/mesos to incubator ([#33658](https://github.com/kubernetes/kubernetes/pull/33658), [@deads2k](https://github.com/deads2k))
+* MinReadySeconds / AvailableReplicas for ReplicaSets ([#32771](https://github.com/kubernetes/kubernetes/pull/32771), [@kargakis](https://github.com/kargakis))
+* Kubectl drain will now drain finished Pods ([#31763](https://github.com/kubernetes/kubernetes/pull/31763), [@fraenkel](https://github.com/fraenkel))
+* Adds the -deployment option to e2e.go, adds the ability to run e2e.go using a `kops` deployment. ([#33518](https://github.com/kubernetes/kubernetes/pull/33518), [@zmerlynn](https://github.com/zmerlynn))
+* Tune down initialDelaySeconds for readinessProbe. ([#33146](https://github.com/kubernetes/kubernetes/pull/33146), [@MrHohn](https://github.com/MrHohn))
+* kube-proxy: Add a lower-bound for conntrack (128k default) ([#33051](https://github.com/kubernetes/kubernetes/pull/33051), [@thockin](https://github.com/thockin))
+* local-up-cluster.sh: add SERVICE_CLUSTER_IP_RANGE as option ([#32921](https://github.com/kubernetes/kubernetes/pull/32921), [@aanm](https://github.com/aanm))
+* Default HTTP2 on, post fixes from [#29001](https://github.com/kubernetes/kubernetes/pull/29001) ([#32231](https://github.com/kubernetes/kubernetes/pull/32231), [@timothysc](https://github.com/timothysc))
+* Split dns healthcheck into two different urls ([#32406](https://github.com/kubernetes/kubernetes/pull/32406), [@MrHohn](https://github.com/MrHohn))
+* Remove kubectl namespace command ([#33275](https://github.com/kubernetes/kubernetes/pull/33275), [@maciaszczykm](https://github.com/maciaszczykm))
+* Automatic generation of man pages ([#33277](https://github.com/kubernetes/kubernetes/pull/33277), [@mkumatag](https://github.com/mkumatag))
+* Fixes memory/goroutine leak in Federation Service controller. ([#33359](https://github.com/kubernetes/kubernetes/pull/33359), [@shashidharatd](https://github.com/shashidharatd))
+* Switch k8s on GCE to use GCI by default ([#33353](https://github.com/kubernetes/kubernetes/pull/33353), [@vishh](https://github.com/vishh))
+* Move HighWaterMark to the top of the struct in order to fix arm, second time ([#33376](https://github.com/kubernetes/kubernetes/pull/33376), [@luxas](https://github.com/luxas))
+* Fix race condition in setting node statusUpdateNeeded flag  ([#32807](https://github.com/kubernetes/kubernetes/pull/32807), [@jingxu97](https://github.com/jingxu97))
+* Fix the DOCKER_OPTS appending bug. ([#33163](https://github.com/kubernetes/kubernetes/pull/33163), [@DjangoPeng](https://github.com/DjangoPeng))
+* Send recycle events from pod to pv. ([#27714](https://github.com/kubernetes/kubernetes/pull/27714), [@jsafrane](https://github.com/jsafrane))
+* Add port forwarding for rkt with kvm stage1 ([#32126](https://github.com/kubernetes/kubernetes/pull/32126), [@jjlakis](https://github.com/jjlakis))
+* The value of the `versioned.Event` object (returned by watch APIs) in the Swagger 1.2 schemas has been updated from `*versioned.Event` which was not expected by many client tools. The new value is consistent with other structs returned by the API. ([#33007](https://github.com/kubernetes/kubernetes/pull/33007), [@smarterclayton](https://github.com/smarterclayton))
+* Remove cpu limits for dns pod to avoid CPU starvation ([#33227](https://github.com/kubernetes/kubernetes/pull/33227), [@vishh](https://github.com/vishh))
+* Allow secure access to apiserver from Admission Controllers ([#31491](https://github.com/kubernetes/kubernetes/pull/31491), [@dims](https://github.com/dims))
+* Resolves x509 verification issue with masters dialing nodes when started with --kubelet-certificate-authority ([#33141](https://github.com/kubernetes/kubernetes/pull/33141), [@liggitt](https://github.com/liggitt))
+* Fix possible panic in PodAffinityChecker ([#33086](https://github.com/kubernetes/kubernetes/pull/33086), [@ivan4th](https://github.com/ivan4th))
+* Upgrading Container-VM base image for k8s on GCE. Brief changelog as follows: ([#32738](https://github.com/kubernetes/kubernetes/pull/32738), [@Amey-D](https://github.com/Amey-D))
+    *     - Fixed performance regression in veth device driver
+    *     - Docker and related binaries are statically linked
+    *     - Fixed the issue of systemd being oom-killable
+* Move HighWaterMark to the top of the struct in order to fix arm ([#33117](https://github.com/kubernetes/kubernetes/pull/33117), [@luxas](https://github.com/luxas))
+* kubenet: SyncHostports for both running and ready to run pods. ([#31388](https://github.com/kubernetes/kubernetes/pull/31388), [@yifan-gu](https://github.com/yifan-gu))
+* Limit the number of names per image reported in the node status ([#32914](https://github.com/kubernetes/kubernetes/pull/32914), [@yujuhong](https://github.com/yujuhong))
+* Support Quobyte as StorageClass ([#31434](https://github.com/kubernetes/kubernetes/pull/31434), [@johscheuer](https://github.com/johscheuer))
+* Use a patched go1.7.1 for building linux/arm ([#32517](https://github.com/kubernetes/kubernetes/pull/32517), [@luxas](https://github.com/luxas))
+* Add line break after events in kubectl describe ([#31463](https://github.com/kubernetes/kubernetes/pull/31463), [@fabianofranz](https://github.com/fabianofranz))
+* Specific error message on failed rolling update issued by older kubectl against 1.4 master ([#32751](https://github.com/kubernetes/kubernetes/pull/32751), [@caesarxuchao](https://github.com/caesarxuchao))
+* Make the informer library available for the go client library. ([#32718](https://github.com/kubernetes/kubernetes/pull/32718), [@mikedanese](https://github.com/mikedanese))
+* Added --log-facility flag to enhance dnsmasq logging ([#32422](https://github.com/kubernetes/kubernetes/pull/32422), [@MrHohn](https://github.com/MrHohn))
+* Set Dashboard UI to final 1.4 version ([#32666](https://github.com/kubernetes/kubernetes/pull/32666), [@bryk](https://github.com/bryk))
+* Fix audit_test regex for iso8601 timestamps ([#32593](https://github.com/kubernetes/kubernetes/pull/32593), [@johnbieren](https://github.com/johnbieren))
+* Docker digest validation is too strict ([#32627](https://github.com/kubernetes/kubernetes/pull/32627), [@smarterclayton](https://github.com/smarterclayton))
+* Bumped Heapster to v1.2.0. ([#32649](https://github.com/kubernetes/kubernetes/pull/32649), [@piosz](https://github.com/piosz))
+    * More details about the release https://github.com/kubernetes/heapster/releases/tag/v1.2.0
+* add local subject access review API ([#32407](https://github.com/kubernetes/kubernetes/pull/32407), [@deads2k](https://github.com/deads2k))
+* make --runtime-config=api/all=true|false work ([#32582](https://github.com/kubernetes/kubernetes/pull/32582), [@jlowdermilk](https://github.com/jlowdermilk))
+* Added new kubelet flags `--cni-bin-dir` and `--cni-conf-dir` to specify where CNI files are located. ([#32151](https://github.com/kubernetes/kubernetes/pull/32151), [@bboreham](https://github.com/bboreham))
+    * Fixed CNI configuration on GCI platform when using CNI.
+* Move push-ci-build.sh to kubernetes/release repo ([#32444](https://github.com/kubernetes/kubernetes/pull/32444), [@david-mcmahon](https://github.com/david-mcmahon))
+* Generate separate OpenAPI spec for each API GroupVersion on /<Group>/<Version>/swagger.json ([#31468](https://github.com/kubernetes/kubernetes/pull/31468), [@mbohlool](https://github.com/mbohlool))
+* vendor: update github.com/coreos/go-oidc client package ([#31564](https://github.com/kubernetes/kubernetes/pull/31564), [@ericchiang](https://github.com/ericchiang))
+* Fixed an issue that caused a credential error when deploying federation control plane onto a GKE cluster. ([#31747](https://github.com/kubernetes/kubernetes/pull/31747), [@madhusudancs](https://github.com/madhusudancs))
+* NONE ([#32229](https://github.com/kubernetes/kubernetes/pull/32229), [@errordeveloper](https://github.com/errordeveloper))
+* Error if a contextName is provided but not found in the kubeconfig. ([#31767](https://github.com/kubernetes/kubernetes/pull/31767), [@asalkeld](https://github.com/asalkeld))
+* Use a Deployment for kube-dns ([#32018](https://github.com/kubernetes/kubernetes/pull/32018), [@MrHohn](https://github.com/MrHohn))
+* NONE ([#32067](https://github.com/kubernetes/kubernetes/pull/32067), [@erikh](https://github.com/erikh))
+* Support graceful termination in kube-dns ([#31894](https://github.com/kubernetes/kubernetes/pull/31894), [@MrHohn](https://github.com/MrHohn))
+* When prompting for passwords, don't echo to the terminal ([#31586](https://github.com/kubernetes/kubernetes/pull/31586), [@brendandburns](https://github.com/brendandburns))
+* add group prefix matching for kubectl usage ([#32140](https://github.com/kubernetes/kubernetes/pull/32140), [@deads2k](https://github.com/deads2k))
+* Stick to 2.2.1 etcd ([#32404](https://github.com/kubernetes/kubernetes/pull/32404), [@caesarxuchao](https://github.com/caesarxuchao))
+* Fix a bug in kubelet hostport logic which flushes KUBE-MARK-MASQ iptables chain ([#32413](https://github.com/kubernetes/kubernetes/pull/32413), [@freehan](https://github.com/freehan))
+* Make sure finalizers prevent deletion on storage that supports graceful deletion ([#32351](https://github.com/kubernetes/kubernetes/pull/32351), [@caesarxuchao](https://github.com/caesarxuchao))
+* AWS: Change default networking for kube-up to kubenet ([#32239](https://github.com/kubernetes/kubernetes/pull/32239), [@zmerlynn](https://github.com/zmerlynn))
+* Use etcd 2.3.7 ([#32359](https://github.com/kubernetes/kubernetes/pull/32359), [@wojtek-t](https://github.com/wojtek-t))
+* Allow missing keys in jsonpath ([#31714](https://github.com/kubernetes/kubernetes/pull/31714), [@smarterclayton](https://github.com/smarterclayton))
+* Changes 'kubectl rollout status' to wait until all updated replicas are available before finishing. ([#31499](https://github.com/kubernetes/kubernetes/pull/31499), [@areed](https://github.com/areed))
+* add selfsubjectaccessreview API ([#31271](https://github.com/kubernetes/kubernetes/pull/31271), [@deads2k](https://github.com/deads2k))
+* Add kubectl describe cmd support for vSphere volume ([#31045](https://github.com/kubernetes/kubernetes/pull/31045), [@abrarshivani](https://github.com/abrarshivani))
+* Enable kubelet eviction whenever inodes free is < 5% on GCE ([#31545](https://github.com/kubernetes/kubernetes/pull/31545), [@vishh](https://github.com/vishh))
+* Use federated namespace instead of the bootstrap cluster's namespace in Ingress e2e tests. ([#32105](https://github.com/kubernetes/kubernetes/pull/32105), [@madhusudancs](https://github.com/madhusudancs))
+* Move StorageClass to a storage group ([#31886](https://github.com/kubernetes/kubernetes/pull/31886), [@deads2k](https://github.com/deads2k))
+* Some components like kube-dns and kube-proxy could fail to load the service account token when started within a pod. Properly handle empty configurations to try loading the service account config. ([#31947](https://github.com/kubernetes/kubernetes/pull/31947), [@smarterclayton](https://github.com/smarterclayton))
+* Removed comments in json config when using kubectl edit with -o json ([#31685](https://github.com/kubernetes/kubernetes/pull/31685), [@jellonek](https://github.com/jellonek))
+* fixes invalid null selector issue in sysdig example yaml ([#31393](https://github.com/kubernetes/kubernetes/pull/31393), [@baldwinSPC](https://github.com/baldwinSPC))
+* Rescheduler which ensures that critical pods are always scheduled enabled by default in GCE. ([#31974](https://github.com/kubernetes/kubernetes/pull/31974), [@piosz](https://github.com/piosz))
+* retry oauth token fetch in gce cloudprovider ([#32021](https://github.com/kubernetes/kubernetes/pull/32021), [@mikedanese](https://github.com/mikedanese))
+* Deprecate the old cbr0 and flannel networking modes ([#31197](https://github.com/kubernetes/kubernetes/pull/31197), [@freehan](https://github.com/freehan))
+* AWS: fix volume device assignment race condition ([#31090](https://github.com/kubernetes/kubernetes/pull/31090), [@justinsb](https://github.com/justinsb))
+* The certificates API group has been renamed to certificates.k8s.io ([#31887](https://github.com/kubernetes/kubernetes/pull/31887), [@liggitt](https://github.com/liggitt))
+* Increase Dashboard UI version to v1.4.0-beta2 ([#31518](https://github.com/kubernetes/kubernetes/pull/31518), [@bryk](https://github.com/bryk))
+* Fixed incomplete kubectl bash completion. ([#31333](https://github.com/kubernetes/kubernetes/pull/31333), [@xingzhou](https://github.com/xingzhou))
+* Added liveness probe to Heapster service. ([#31878](https://github.com/kubernetes/kubernetes/pull/31878), [@mksalawa](https://github.com/mksalawa))
+* Adding clusters to the list of valid resources printed by kubectl help ([#31719](https://github.com/kubernetes/kubernetes/pull/31719), [@nikhiljindal](https://github.com/nikhiljindal))
+* Kubernetes server components using `kubeconfig` files no longer default to `http://localhost:8080`.  Administrators must specify a server value in their kubeconfig files. ([#30808](https://github.com/kubernetes/kubernetes/pull/30808), [@smarterclayton](https://github.com/smarterclayton))
+* Update influxdb to 0.12 ([#31519](https://github.com/kubernetes/kubernetes/pull/31519), [@piosz](https://github.com/piosz))
+* Include security options in the container created event ([#31557](https://github.com/kubernetes/kubernetes/pull/31557), [@timstclair](https://github.com/timstclair))
+* Federation can now be deployed using the `federation/deploy/deploy.sh` script. This script does not depend on any of the development environment shell library/scripts. This is an alternative to the current `federation-up.sh`/`federation-down.sh` scripts. Both the scripts are going to co-exist in this release, but the `federation-up.sh`/`federation-down.sh` scripts might be removed in a future release in favor of `federation/deploy/deploy.sh` script. ([#30744](https://github.com/kubernetes/kubernetes/pull/30744), [@madhusudancs](https://github.com/madhusudancs))
+* Add get/delete cluster, delete context to kubectl config ([#29821](https://github.com/kubernetes/kubernetes/pull/29821), [@alexbrand](https://github.com/alexbrand))
+* rkt: Force `rkt fetch` to fetch from remote to conform the image pull policy. ([#31378](https://github.com/kubernetes/kubernetes/pull/31378), [@yifan-gu](https://github.com/yifan-gu))
+* Allow services which use same port, different protocol to use the same nodePort for both ([#30253](https://github.com/kubernetes/kubernetes/pull/30253), [@AdoHe](https://github.com/AdoHe))
+* Handle overlapping deployments gracefully ([#30730](https://github.com/kubernetes/kubernetes/pull/30730), [@janetkuo](https://github.com/janetkuo))
+* Remove environment variables and internal Kubernetes Docker labels from cAdvisor Prometheus metric labels. ([#31064](https://github.com/kubernetes/kubernetes/pull/31064), [@grobie](https://github.com/grobie))
+    * Old behavior:
+    * - environment variables explicitly whitelisted via --docker-env-metadata-whitelist were exported as `container_env_*=*`. Default is zero so by default non were exported
+    * - all docker labels were exported as `container_label_*=*`
+    * New behavior:
+    * - Only `container_name`, `pod_name`, `namespace`, `id`, `image`, and `name` labels are exposed
+    * - no environment variables will be exposed ever via /metrics, even if whitelisted
+* Filter duplicate network packets in promiscuous bridge mode (with ebtables) ([#28717](https://github.com/kubernetes/kubernetes/pull/28717), [@freehan](https://github.com/freehan))
+* Refactor to simplify the hard-traveled path of the KubeletConfiguration object ([#29216](https://github.com/kubernetes/kubernetes/pull/29216), [@mtaufen](https://github.com/mtaufen))
+* Fix overflow issue in controller-manager rate limiter ([#31396](https://github.com/kubernetes/kubernetes/pull/31396), [@foxish](https://github.com/foxish))
+
+
+
 # v1.4.2-beta.1
 
 [Documentation](http://kubernetes.github.io) & [Examples](http://releases.k8s.io/release-1.4/examples)