Update release notes draft to version v1.26.0-rc.0

releases/release-1.26/release-notes/maps/pr-103177-map.yaml

@@ -0,0 +1,4 @@
+pr: 103177
+releasenote:
+  text: Added a method `StreamWithContext` to `remotecommand.Executor` to support
+    cancelable SPDY executor stream.

releases/release-1.26/release-notes/maps/pr-108250-map.yaml

@@ -0,0 +1,5 @@
+pr: 108250
+releasenote:
+  text: 'Added a `kube-proxy` flag (`--iptables-localhost-nodeports`, default true)
+    to allow disabling `NodePort` services on loopback addresses. Note: this only applies
+    to iptables mode and ipv4.'

releases/release-1.26/release-notes/maps/pr-109189-map.yaml

@@ -0,0 +1,4 @@
+pr: 109189
+releasenote:
+  text: '`kubectl config view` now automatically redacts any secret fields marked
+    with a `datapolicy` tag.'

releases/release-1.26/release-notes/maps/pr-109505-map.yaml

@@ -0,0 +1,4 @@
+pr: 109505
+releasenote:
+  text: Removed raising an error when setting an annotation with the same value,
+    just ignore it.

releases/release-1.26/release-notes/maps/pr-110268-map.yaml

@@ -0,0 +1,5 @@
+pr: 110268
+releasenote:
+  text: |-
+    'The iptables kube-proxy backend now process service/endpoint changes
+    more efficiently in very large clusters.'

releases/release-1.26/release-notes/maps/pr-110618-map.yaml

@@ -0,0 +1,4 @@
+pr: 110618
+releasenote:
+  text: Dropped support for the Container Runtime Interface (CRI) version `v1alpha2`,
+    which means that container runtimes just have to implement `v1`.

releases/release-1.26/release-notes/maps/pr-110907-map.yaml

@@ -0,0 +1,6 @@
+pr: 110907
+releasenote:
+  text: |
+    '`kubectl apply`: Added a warning that "`kubectl apply` will no longer prune
+    non-namespaced resources by default when used with the --namespace flag in
+    a future release".'

releases/release-1.26/release-notes/maps/pr-111023-map.yaml

@@ -0,0 +1,8 @@
+pr: 111023
+releasenote:
+  text: |-
+    'Added a `ResourceClaim` API (in the `resource.k8s.io/v1alpha1` API group and
+    behind the `DynamicResourceAllocation` feature gate).
+    The new API is now more flexible than the existing Device Plugins feature of Kubernetes because it
+    allows Pods to request (claim) special kinds of resources, which can be available at node level, cluster
+    level, or following any other model you implement.'

releases/release-1.26/release-notes/maps/pr-111384-map.yaml

@@ -0,0 +1,3 @@
+pr: 111384
+releasenote:
+  text: Added support for Evented PLEG feature gate.

releases/release-1.26/release-notes/maps/pr-111930-map.yaml

@@ -0,0 +1,3 @@
+pr: 111930
+releasenote:
+  text: Added the metric `pod_start_sli_duration_seconds` to kubelet.

releases/release-1.26/release-notes/maps/pr-112011-map.yaml

@@ -0,0 +1,7 @@
+pr: 112011
+releasenote:
+  text: |
+    'Added selector validation to `HorizontalPodAutoscaler`: when multiple HPAs
+    select the same set of Pods, scaling now will be disabled for those HPAs with
+    the reason `AmbiguousSelector`. This change also covers a case when multiple HPAs
+    point to the same deployment.'

releases/release-1.26/release-notes/maps/pr-112127-map.yaml

@@ -0,0 +1,3 @@
+pr: 112127
+releasenote:
+  text: Fixed `DaemonSet` to update the status even if it fails to create a pod.

releases/release-1.26/release-notes/maps/pr-112261-map.yaml

@@ -0,0 +1,5 @@
+pr: 112261
+releasenote:
+  text: 'Deprecated the following kubectl run flags, which are ignored if set: `--cascade`,
+    `--filename`, `--force`, `--grace-period`, `--kustomize`, `--recursive`, `--timeout`,
+    `--wait`.'

releases/release-1.26/release-notes/maps/pr-112360-map.yaml

@@ -0,0 +1,5 @@
+pr: 112360
+releasenote:
+  text: |-
+    'kubelet: Added the following Pod failure conditions:
+    - `DisruptionTarget` (graceful node shutdown, node pressure eviction)'

releases/release-1.26/release-notes/maps/pr-112679-map.yaml

@@ -0,0 +1,5 @@
+pr: 112679
+releasenote:
+  text: Deprecated the `apiserver_request_slo_duration_seconds` metric for v1.27 in
+    favor of `apiserver_request_sli_duration_seconds` for naming consistency purposes
+    with other SLI-specific metrics and to avoid any confusion between SLOs and SLIs.

releases/release-1.26/release-notes/maps/pr-112744-map.yaml

@@ -0,0 +1,4 @@
+pr: 112744
+releasenote:
+  text: Added a feature that allows a `StatefulSet` to start numbering replicas from
+    an arbitrary non-negative ordinal, using the `.spec.ordinals.start` field.

releases/release-1.26/release-notes/maps/pr-112838-map.yaml

@@ -0,0 +1,4 @@
+pr: 112838
+releasenote:
+  text: The `LegacyServiceAccountTokenNoAutoGeneration` feature gate was promoted
+    to GA.

releases/release-1.26/release-notes/maps/pr-112895-map.yaml

@@ -0,0 +1,3 @@
+pr: 112895
+releasenote:
+  text: Moved `MixedProtocolLBService` from beta to GA.

releases/release-1.26/release-notes/maps/pr-112905-map.yaml

@@ -0,0 +1,6 @@
+pr: 112905
+releasenote:
+  text: For `kubectl`, `--server-side` now migrates ownership of all fields used by
+    client-side-apply to the specified `--fieldmanager`. This prevents fields previously
+    specified using kubectl from being able to live outside of server-side-apply's
+    management and become undeleteable.

releases/release-1.26/release-notes/maps/pr-112914-map.yaml

@@ -0,0 +1,6 @@
+pr: 112914
+releasenote:
+  text: Added a `--topology-manager-policy-options` flag to the kubelet to support
+    fine tuning the topology manager policies. The first policy option, `prefer-closest-numa-nodes`,
+    allows these policies to favor sets of NUMA nodes with shorter distance between
+    nodes when making admission decisions.

releases/release-1.26/release-notes/maps/pr-112961-map.yaml

@@ -0,0 +1,3 @@
+pr: 112961
+releasenote:
+  text: Added alpha support for `WindowsHostNetworking` feature.

releases/release-1.26/release-notes/maps/pr-112980-map.yaml

@@ -0,0 +1,3 @@
+pr: 112980
+releasenote:
+  text: Graduated Kubelet Device Manager to GA.

releases/release-1.26/release-notes/maps/pr-113008-map.yaml

@@ -0,0 +1,6 @@
+pr: 113008
+releasenote:
+  text: |-
+    'Promoted `cronjob_job_creation_skew` metric to stable to follow the cronjob v2 controller,
+    the following metrics had their name updated to match metrics API guidelines:
+      - `cronjob_job_creation_skew_duration_seconds` -> `job_creation_skew_duration_seconds`.'

releases/release-1.26/release-notes/maps/pr-113010-map.yaml

@@ -0,0 +1,6 @@
+pr: 113010
+releasenote:
+  text: |-
+    'Promoted job-related metrics to stable to follow IndexedJobs GA. The following metrics have their name updated to match metrics API guidelines:
+    - `job_sync_total` -> `job_syncs_total`
+    - `job_finished_total` -> `jobs_finished_total`'

releases/release-1.26/release-notes/maps/pr-113018-map.yaml

@@ -0,0 +1,3 @@
+pr: 113018
+releasenote:
+  text: Graduated Kubelet CPU Manager to GA.

releases/release-1.26/release-notes/maps/pr-113021-map.yaml

@@ -0,0 +1,3 @@
+pr: 113021
+releasenote:
+  text: 'kubelet: Fixed a startup crash in devicemanager.'

releases/release-1.26/release-notes/maps/pr-113116-map.yaml

@@ -0,0 +1,5 @@
+pr: 113116
+releasenote:
+  text: Added a `--prune-allowlist` flag that can be used with `kubectl apply --prune`.
+    This flag now replaces and functions the same as the `--prune-whitelist` flag,
+    which has been deprecated.

releases/release-1.26/release-notes/maps/pr-113160-map.yaml

@@ -0,0 +1,3 @@
+pr: 113160
+releasenote:
+  text: Azure File CSI migration is now GA.

releases/release-1.26/release-notes/maps/pr-113171-map.yaml

@@ -0,0 +1,4 @@
+pr: 113171
+releasenote:
+  text: Aggregated discovery will be alpha and can be toggled with the `AggregatedDiscoveryEndpoint`
+    feature flag.

releases/release-1.26/release-notes/maps/pr-113186-map.yaml

@@ -0,0 +1,4 @@
+pr: 113186
+releasenote:
+  text: Added a new namespace alpha field to `DataSourceRef` field in `PersistentVolumeClaim`
+    API.

releases/release-1.26/release-notes/maps/pr-113206-map.yaml

@@ -0,0 +1,4 @@
+pr: 113206
+releasenote:
+  text: Fixed cost estimation of token creation request for service account in Priority
+    and Fairness.

releases/release-1.26/release-notes/maps/pr-113217-map.yaml

@@ -0,0 +1,4 @@
+pr: 113217
+releasenote:
+  text: API Server tracing now includes the latency of authorization, priorityandfairness,
+    impersonation, audit, and authentication filters.

releases/release-1.26/release-notes/maps/pr-113225-map.yaml

@@ -0,0 +1,4 @@
+pr: 113225
+releasenote:
+  text: |
+    '`DelegateFSGroupToCSIDriver` feature is GA.'

releases/release-1.26/release-notes/maps/pr-113274-map.yaml

@@ -0,0 +1,4 @@
+pr: 113274
+releasenote:
+  text: New Pod API field `.spec.schedulingGates` was introduced to enable users to
+    control when to mark a Pod as scheduling ready.

releases/release-1.26/release-notes/maps/pr-113275-map.yaml

@@ -0,0 +1,5 @@
+pr: 113275
+releasenote:
+  text: |
+    'A new `preEnqueue` extension point was added to scheduler's component config
+    `v1beta2/v1beta3/v1`.'

releases/release-1.26/release-notes/maps/pr-113291-map.yaml

@@ -0,0 +1,4 @@
+pr: 113291
+releasenote:
+  text: Fixed the `PodAndContainerStatsFromCRI` feature, instead of supplementing
+    with stats from cAdvisor.

releases/release-1.26/release-notes/maps/pr-113307-map.yaml

@@ -0,0 +1,4 @@
+pr: 113307
+releasenote:
+  text: Updated the Lease identity naming format for the `APIServerIdentity` feature
+    to use a persistent name.

releases/release-1.26/release-notes/maps/pr-113314-map.yaml

@@ -0,0 +1,6 @@
+pr: 113314
+releasenote:
+  text: 'Introduced `v1alpha1` API for validating admission policies, enabling extensible
+    admission control via CEL expressions (KEP  3488: CEL for Admission Control).
+    To use, enable the `ValidatingAdmissionPolicy` feature gate and the `admissionregistration.k8s.io/v1alpha1`
+    API via `--runtime-config`.'

releases/release-1.26/release-notes/maps/pr-113329-map.yaml

@@ -0,0 +1,4 @@
+pr: 113329
+releasenote:
+  text: |
+    '`RetroactiveDefaultStorageClass` feature is now beta.'

releases/release-1.26/release-notes/maps/pr-113336-map.yaml

@@ -0,0 +1,6 @@
+pr: 113336
+releasenote:
+  text: |
+    '`CSIMigrationvSphere` was upgraded to GA and locked to true. Do not upgrade to K8s
+    1.26 if you need Windows, or XFS, or raw block support until vSphere CSI Driver
+    adds support for them in a version post v2.7.x.'

releases/release-1.26/release-notes/maps/pr-113340-map.yaml

@@ -0,0 +1,4 @@
+pr: 113340
+releasenote:
+  text: If `ComponentSLIs` feature gate is enabled, then `/metrics/slis` now becomes
+    available on cloud-controller-manager allowing you to scrape health check metrics.

releases/release-1.26/release-notes/maps/pr-113351-map.yaml

@@ -0,0 +1,4 @@
+pr: 113351
+releasenote:
+  text: The `EndpointSliceTerminatingCondition` feature gate was graduated to GA.
+    The gate is now locked and will be removed in v1.28.

releases/release-1.26/release-notes/maps/pr-113360-map.yaml

@@ -0,0 +1,4 @@
+pr: 113360
+releasenote:
+  text: Enabled the "Retriable and non-retriable pod failures for jobs" feature into
+    beta.

releases/release-1.26/release-notes/maps/pr-113363-map.yaml

@@ -0,0 +1,6 @@
+pr: 113363
+releasenote:
+  text: The `ProxyTerminatingEndpoints` feature is now Beta and enabled by default.
+    When enabled, kube-proxy will attempt to route traffic to terminating pods when
+    the traffic policy is `Local` and there are only terminating pods remaining on
+    a node.

releases/release-1.26/release-notes/maps/pr-113369-map.yaml

@@ -0,0 +1,4 @@
+pr: 113369
+releasenote:
+  text: The `ResourceVersion` returned in objects from delete responses is now consistent
+    with the `ResourceVersion` contained in the delete watch event.

releases/release-1.26/release-notes/maps/pr-113375-map.yaml

@@ -0,0 +1,8 @@
+pr: 113375
+releasenote:
+  text: |
+    '`PodDisruptionBudget` now adds an alpha `spec.unhealthyPodEvictionPolicy` field.
+    When the `PDBUnhealthyPodEvictionPolicy` feature-gate is enabled in `kube-apiserver`,
+    setting this field to `"AlwaysAllow"` allows pods to be evicted if they do not
+    have a ready condition, regardless of whether the PodDisruptionBudget is currently
+    healthy.'

releases/release-1.26/release-notes/maps/pr-113476-map.yaml

@@ -0,0 +1,3 @@
+pr: 113476
+releasenote:
+  text: Promoting `WindowsHostProcessContainers` to stable.

releases/release-1.26/release-notes/maps/pr-113481-map.yaml

@@ -0,0 +1,3 @@
+pr: 113481
+releasenote:
+  text: Pod logs using `--timestamps` are not broken up with timestamps anymore.

releases/release-1.26/release-notes/maps/pr-113485-map.yaml

@@ -0,0 +1,20 @@
+pr: 113485
+releasenote:
+  text: |-
+    'Priority and Fairness has introduced a new feature called _borrowing_ that allows an API priority level
+    to borrow a number of seats from other priority level(s). As a cluster operator, you can enable borrowing
+    for a certain priority level configuration object via the two newly introduced fields `lendablePercent`, and
+    `borrowingLimitPercent` located under the `.spec.limited` field of the designated priority level.
+    This change added the following metrics:
+    - `apiserver_flowcontrol_nominal_limit_seats`: Nominal number of execution seats configured for each priority level
+    - `apiserver_flowcontrol_lower_limit_seats`: Configured lower bound on number of execution seats available to each priority level
+    - `apiserver_flowcontrol_upper_limit_seats`: Configured upper bound on number of execution seats available to each priority level
+    - `apiserver_flowcontrol_demand_seats`: Observations, at the end of every nanosecond, of (the number of seats each priority level could use) / (nominal number of seats for that level)
+    - `apiserver_flowcontrol_demand_seats_high_watermark`: High watermark, over last adjustment period, of demand_seats
+    - `apiserver_flowcontrol_demand_seats_average`: Time-weighted average, over last adjustment period, of demand_seats
+    - `apiserver_flowcontrol_demand_seats_stdev`: Time-weighted standard deviation, over last adjustment period, of demand_seats
+    - `apiserver_flowcontrol_demand_seats_smoothed`: Smoothed seat demands
+    - `apiserver_flowcontrol_target_seats`: Seat allocation targets
+    - `apiserver_flowcontrol_seat_fair_frac`: Fair fraction of server's concurrency to allocate to each priority level that can use it
+    - `apiserver_flowcontrol_current_limit_seats`: current derived number of execution seats available to each priority level
+    The possibility of borrowing means that the old metric `apiserver_flowcontrol_request_concurrency_limit` can no longer mean both the configured concurrency limit and the enforced concurrency limit. Henceforth it means the configured concurrency limit.'

releases/release-1.26/release-notes/maps/pr-113491-map.yaml

@@ -0,0 +1,5 @@
+pr: 113491
+releasenote:
+  text: |
+    'Pod Security admission: the pod-security `warn` level will now default to
+    the `enforce` level.'

releases/release-1.26/release-notes/maps/pr-113496-map.yaml

@@ -0,0 +1,3 @@
+pr: 113496
+releasenote:
+  text: Graduated `ServiceInternalTrafficPolicy` feature to GA.

releases/release-1.26/release-notes/maps/pr-113500-map.yaml

@@ -0,0 +1,4 @@
+pr: 113500
+releasenote:
+  text: |
+    '`NodeInclusionPolicy` in `podTopologySpread` plugin is now enabled by default.'

releases/release-1.26/release-notes/maps/pr-113501-map.yaml

@@ -0,0 +1,3 @@
+pr: 113501
+releasenote:
+  text: 'kubelet: fixed nil pointer in reflector start for standalone mode.'

releases/release-1.26/release-notes/maps/pr-113510-map.yaml

@@ -0,0 +1,9 @@
+pr: 113510
+releasenote:
+  text: |-
+    'Graduated `JobTrackingWithFinalizers` to stable.
+    Jobs created before the feature was enabled are still tracked without finalizers.
+    Jobs tracked with finalizers have the annotation batch.kubernetes.io/job-tracking.
+    If the annotation is present and the user attempts to remove it, the control plane adds it back.
+    The annotation `batch.kubernetes.io/job-tracking` is now deprecated.
+    The control plane will ignore it and stop adding it for new Jobs in v1.27.'

releases/release-1.26/release-notes/maps/pr-113511-map.yaml

@@ -0,0 +1,4 @@
+pr: 113511
+releasenote:
+  text: |
+    '`NodeOutOfServiceVolumeDetach` is now beta.'

releases/release-1.26/release-notes/maps/pr-113521-map.yaml

@@ -0,0 +1,3 @@
+pr: 113521
+releasenote:
+  text: Resolved an issue that caused winkernel proxier to treat stale VIPs as valid.

releases/release-1.26/release-notes/maps/pr-113529-map.yaml

@@ -0,0 +1,7 @@
+pr: 113529
+releasenote:
+  text: A new API server flag `--encryption-provider-config-automatic-reload` was
+    added to control when the encryption config should be automatically reloaded without
+    needing to restart the server.  All KMS plugins are now merged into a single healthz
+    check at `/healthz/kms-providers` when reload is enabled, or when only KMS v2
+    plugins are used.

releases/release-1.26/release-notes/maps/pr-113544-map.yaml

@@ -0,0 +1,3 @@
+pr: 113544
+releasenote:
+  text: Added publishing events when enabling/disabling `TopologyAwareHints`.

releases/release-1.26/release-notes/maps/pr-113550-map.yaml

@@ -0,0 +1,3 @@
+pr: 113550
+releasenote:
+  text: Kubernetes is now built with Go `1.19.3`.

releases/release-1.26/release-notes/maps/pr-113580-map.yaml

@@ -0,0 +1,4 @@
+pr: 113580
+releasenote:
+  text: Fixed that disruption controller used to change the status of a stale disruption
+    condition after 2 min when the `PodDisruptionConditions` feature gate is enabled.

releases/release-1.26/release-notes/maps/pr-113596-map.yaml

@@ -0,0 +1,5 @@
+pr: 113596
+releasenote:
+  text: Added reconstruction of SELinux mount context after kubelet restart. Feature
+    `SELinuxMountReadWriteOncePod` is now fully implemented and kubelet does not lose
+    its cache of SELinux contexts after kubelet process restart.

releases/release-1.26/release-notes/maps/pr-113609-map.yaml

@@ -0,0 +1,4 @@
+pr: 113609
+releasenote:
+  text: Added alpha support for returning container and pod metrics from CRI, instead
+    of cAdvsior.

releases/release-1.26/release-notes/maps/pr-113629-map.yaml

@@ -0,0 +1,7 @@
+pr: 113629
+releasenote:
+  text: |
+    'Promoted the `APIServerIdentity` feature to Beta. By default, each `kube-apiserver`
+    will now create a Lease in the `kube-system` namespace. These lease objects can
+    be used to identify the number of active API servers in the cluster, and may also
+    be used for future features such as the Storage Version API.'

releases/release-1.26/release-notes/maps/pr-113636-map.yaml

@@ -0,0 +1,3 @@
+pr: 113636
+releasenote:
+  text: kubectl shell completions for the bash shell now include descriptions.

releases/release-1.26/release-notes/maps/pr-113697-map.yaml

@@ -0,0 +1,6 @@
+pr: 113697
+releasenote:
+  text: 'KMS: added validation for duplicate kms config name when auto reload is enabled.
+    If you enabled automatic reload of encryption configuration with API server flag
+    `--encryption-provider-config-automatic-reload`, ensure all the KMS provider names
+    (v1 and v2) in the encryption configuration are unique.'

releases/release-1.26/release-notes/maps/pr-113699-map.yaml

@@ -0,0 +1,7 @@
+pr: 113699
+releasenote:
+  text: |
+    '`metav1.LabelSelectors` specified in API objects are now validated to ensure
+    they do not contain invalid label values that will error at time of use. Existing
+    invalid objects can be updated, but new objects are required to contain valid
+    label selectors.'

releases/release-1.26/release-notes/maps/pr-113710-map.yaml

@@ -0,0 +1,4 @@
+pr: 113710
+releasenote:
+  text: CLI flag `pod-eviction-timeout` is deprecated and will be removed together
+    with `enable-taint-manager` in `v1.27`.

releases/release-1.26/release-notes/maps/pr-113711-map.yaml

@@ -0,0 +1,3 @@
+pr: 113711
+releasenote:
+  text: 'apiserver: used the correct error when logging errors updating managedFields.'

releases/release-1.26/release-notes/maps/pr-113719-map.yaml

@@ -0,0 +1,3 @@
+pr: 113719
+releasenote:
+  text: bumped `runc` to `v1.1.4`.