Release Notes draft for k/k v1.30.0-alpha.3

releases/release-1.30/release-notes/maps/pr-114301-map.yaml

@@ -0,0 +1,7 @@
+pr: 114301
+releasenote:
+  text: Enabled a mechanism for concurrent log rotatation via `kubelet` using a configuration
+    entity of `containerLogMaxWorkers` which controls the maximum number of concurrent
+    rotation that can be performed and an interval configuration of `containerLogMonitorInterval`
+    that can aid in configuring the monitoring duration to best suite your cluster's
+    log generation standards.

releases/release-1.30/release-notes/maps/pr-117046-map.yaml

@@ -0,0 +1,3 @@
+pr: 117046
+releasenote:
+  text: Informers now support adding Indexers after the informer starts.

releases/release-1.30/release-notes/maps/pr-119200-map.yaml

@@ -1,3 +1,3 @@
 pr: 119200
 releasenote:
-  text: 'kubectl debug: added sysadmin profile'
+  text: 'kubectl debug: added sysadmin profile.'

releases/release-1.30/release-notes/maps/pr-119923-map.yaml

@@ -1,4 +1,4 @@
 pr: 119923
 releasenote:
-  text: 'fix: Mount point may become local without calling `NodePublishVolume` after
-    node rebooting.'
+  text: Fixed an issue where mount point may become local without calling `NodePublishVolume` after
+    node rebooting.

releases/release-1.30/release-notes/maps/pr-120246-map.yaml

@@ -1,4 +1,4 @@
 pr: 120246
 releasenote:
-  text: 'kubectl: removed deprecated flag `prune-whitelist` for apply, use flag `prune-allowlist`.
+  text: 'kubectl: removed deprecated flag `prune-whitelist` for apply, use flag `prune-allowlist`
     instead.'

releases/release-1.30/release-notes/maps/pr-120344-map.yaml

@@ -0,0 +1,5 @@
+pr: 120344
+releasenote:
+  text: |-
+    Added the following CLI option for `kube-controller-manager`:
+    - `disable-force-detach` (defaults to `false`): Prevent force detaching volumes based on maximum unmount time and node status. If enabled, the non-graceful node shutdown feature must be used to recover from node failure (see https://kubernetes.io/blog/2023/08/16/kubernetes-1-28-non-graceful-node-shutdown-ga/). If enabled and a pod must be forcibly terminated at the risk of corruption, then the appropriate VolumeAttachment object (see here: https://kubernetes.io/docs/reference/kubernetes-api/config-and-storage-resources/volume-attachment-v1/) must be deleted.

releases/release-1.30/release-notes/maps/pr-120642-map.yaml

@@ -0,0 +1,4 @@
+pr: 120642
+releasenote:
+  text: Added consistent vanity import to files and provided tooling for verifying
+    and updating them.

releases/release-1.30/release-notes/maps/pr-120902-map.yaml

@@ -0,0 +1,4 @@
+pr: 120902
+releasenote:
+  text: 'Added an optimization to reduce stack memory usage for watch requests. It 
+  can be disabled with the feature gate: `APIServingWithRoutine=false`'

releases/release-1.30/release-notes/maps/pr-121669-map.yaml

@@ -0,0 +1,3 @@
+pr: 121669
+releasenote:
+  text: Fixed an issue to ignore unnecessary node events and improve daemonset controller performance.

releases/release-1.30/release-notes/maps/pr-121719-map.yaml

@@ -0,0 +1,6 @@
+pr: 121719
+releasenote:
+  text: A new kubelet metric `image_pull_duration_seconds` was added. The metric tracks
+    the duration (in seconds) it takes for an image to be pulled, including the time
+    spent in the waiting queue of image puller. The metric is broken down by bucketed
+    image size.

releases/release-1.30/release-notes/maps/pr-121720-map.yaml

@@ -0,0 +1,5 @@
+pr: 121720
+releasenote:
+  text: "Added a new internal metric `kubelet_first_network_pod_start_sli_duration_second`
+    in the kubelet that allow developers to understand the source of the latency
+    problems on node startups."

releases/release-1.30/release-notes/maps/pr-121778-map.yaml

@@ -0,0 +1,3 @@
+pr: 121778
+releasenote:
+  text: Added kubelet metrics to track the memory manager allocation and pinning.

releases/release-1.30/release-notes/maps/pr-121815-map.yaml

@@ -0,0 +1,3 @@
+pr: 121815
+releasenote:
+  text: Made decoding etcd's response respect the timeout context.

releases/release-1.30/release-notes/maps/pr-122293-map.yaml

@@ -0,0 +1,5 @@
+pr: 122293
+releasenote:
+  text: "kube-controller-manager: increased the global level for broadcaster's
+    logging to 3 so that users can ignore event messages by lowering the logging
+    level. It reduces information noise."

releases/release-1.30/release-notes/maps/pr-122296-map.yaml

@@ -1,3 +1,3 @@
 pr: 122296
 releasenote:
-  text: '`kube-proxy` nftables mode is now compatible with kernel `5.4`'
+  text: '`kube-proxy` nftables mode is now compatible with kernel `5.4`.'

releases/release-1.30/release-notes/maps/pr-122346-map.yaml

@@ -1,3 +1,3 @@
 pr: 122346
 releasenote:
-  text: Fixed an issue where kubectl apply could panic when imported as a library
+  text: Fixed an issue where kubectl apply could panic when imported as a library.

releases/release-1.30/release-notes/maps/pr-122422-map.yaml

@@ -0,0 +1,4 @@
+pr: 122422
+releasenote:
+  text: |
+    'PodSpec API: removed note that hostAliases are not supported on hostNetwork Pods. The feature has been supported since v1.8.'

releases/release-1.30/release-notes/maps/pr-122468-map.yaml

@@ -1,3 +1,3 @@
 pr: 122468
 releasenote:
-  text: Removed GA featuregate `RemoveSelfLink`.
+  text: Removed GA feature gate `RemoveSelfLink`.

releases/release-1.30/release-notes/maps/pr-122475-map.yaml

@@ -1,3 +1,3 @@
 pr: 122475
 releasenote:
-  text: fixed panic of Evented PLEG during kubelet start-up.
+  text: Fixed panic of Evented PLEG during kubelet start-up.

releases/release-1.30/release-notes/maps/pr-122874-map.yaml

@@ -0,0 +1,4 @@
+pr: 122874
+releasenote:
+  text: Fixed node lifecycle controller panic when conditionType ready is been patch
+    `nil` by mistake.

releases/release-1.30/release-notes/maps/pr-122883-map.yaml

@@ -0,0 +1,4 @@
+pr: 122883
+releasenote:
+  text: Fixed bug where health check could pass while APIServices are missing from
+    aggregated discovery.

releases/release-1.30/release-notes/maps/pr-122999-map.yaml

@@ -0,0 +1,3 @@
+pr: 122999
+releasenote:
+  text: Fixed an issue calculating total CPU usage reported for Windows nodes.

releases/release-1.30/release-notes/maps/pr-123011-map.yaml

@@ -0,0 +1,5 @@
+pr: 123011
+releasenote:
+  text: Setting `--cidr-allocator-type` to `CloudAllocator` for `kube-controller-manager`
+    will be removed in a future release. Please switch to and explore the options
+    available in your external cloud provider.

releases/release-1.30/release-notes/maps/pr-123023-map.yaml

@@ -0,0 +1,3 @@
+pr: 123023
+releasenote:
+  text: Fixed `kubectl explain` to show enum for field types if they were defined.

releases/release-1.30/release-notes/maps/pr-123135-map.yaml

@@ -0,0 +1,5 @@
+pr: 123135
+releasenote:
+  text: |-
+    Embed Node information into Pod-bound service account tokens as additional metadata.
+    Set the 'JTI' field in issued service account tokens, and embed this information as `authentication.kubernetes.io/credential-id` in user's ExtraInfo.

releases/release-1.30/release-notes/maps/pr-123165-map.yaml

@@ -0,0 +1,6 @@
+pr: 123165
+releasenote:
+  text: |-
+    Added audienceMatchPolicy field to AuthenticationConfiguration and support for configuring multiple audiences.
+    The "audienceMatchPolicy" can be empty (or unset) when a single audience is specified in the "audiences" field.
+    The "audienceMatchPolicy" must be set to "MatchAny" when multiple audiences are specified in the "audiences" field.

releases/release-1.30/release-notes/maps/pr-123215-map.yaml

@@ -0,0 +1,3 @@
+pr: 123215
+releasenote:
+  text: 'Graduated "Forensic Container Checkpointing" (KEP #2008) from Alpha to Beta.'

releases/release-1.30/release-notes/maps/pr-123261-map.yaml

@@ -0,0 +1,3 @@
+pr: 123261
+releasenote:
+  text: Restored --verify-only function in code generation wrappers.

releases/release-1.30/release-notes/maps/pr-123272-map.yaml

@@ -0,0 +1,3 @@
+pr: 123272
+releasenote:
+  text: 'cri-api: KEP-3857: Recursive Read-only (RRO) mounts.'

releases/release-1.30/release-notes/maps/pr-123281-map.yaml

@@ -0,0 +1,7 @@
+pr: 123281
+releasenote:
+  text: |-
+    Feature gates for RemoteCommand (kubectl exec, cp, and attach) over WebSockets are now enabled by default (Beta).
+    - Server-side feature gate: `TranslateStreamCloseWebsocketRequests`
+    - Client-side (kubectl) feature gate: `KUBECTL_REMOTE_COMMAND_WEBSOCKETS`
+    - To turn off RemoteCommand over WebSockets for kubectl, the environment variable feature gate must be explicitly set `KUBECTL_REMOTE_COMMAND_WEBSOCKETS=false`.

releases/release-1.30/release-notes/maps/pr-123282-map.yaml

@@ -0,0 +1,4 @@
+pr: 123282
+releasenote:
+  text: Fixed an issue where a JWT authenticator configured via `--authentication-config`
+    would fail to verify tokens that were not signed using RS256.

releases/release-1.30/release-notes/maps/pr-123310-map.yaml

@@ -0,0 +1,3 @@
+pr: 123310
+releasenote:
+  text: Updated kubedns and nodelocaldns to v1.23.0

releases/release-1.30/release-notes/maps/pr-123341-map.yaml

@@ -0,0 +1,11 @@
+pr: 123341
+releasenote:
+  text: 'kubeadm: added the WaitForAllControlPlaneComponents feature gate. It can
+    be used to tell kubeadm to wait for all control plane components to be ready when
+    running "kubeadm init" or "kubeadm join --control-plane". Currently kubeadm only
+    waits for the kube-apiserver. The "kubeadm join" workflow now includes a new experimental
+    phase called "wait-control-plane". This phase will be marked as non-experimental
+    when WaitForAllControlPlaneComponents becomes GA. Accordingly a "kubeadm init"
+    phase "wait-control-plane" will also be available once WaitForAllControlPlaneComponents
+    becomes GA. These phases can be skipped if the user prefers to not wait for the
+    control plane components.'

releases/release-1.30/release-notes/maps/pr-123343-map.yaml

@@ -0,0 +1,4 @@
+pr: 123343
+releasenote:
+  text: Updated ImageGCMaxAge behavior in the kubelet to wait the MaxAge duration
+    after the kubelet has restarted before garbage collecting

releases/release-1.30/release-notes/maps/pr-123345-map.yaml

@@ -0,0 +1,4 @@
+pr: 123345
+releasenote:
+  text: Added "reason" field to image_garbage_collected_total metric, so admins can
+    differentiate images that were collected for reason "age" vs "space".

releases/release-1.30/release-notes/maps/pr-123372-map.yaml

@@ -0,0 +1,8 @@
+pr: 123372
+releasenote:
+  text: 'kubeadm: added support for machine readable output with "-o yaml" and "-o
+    json" to the command "kubeadm certs check-expiration". This change is added in
+    a new API "kind": "CertificateExpirationInfo",  "apiVersion": "output.kubeadm.k8s.io/v1alpha3".
+    The existing non structured formatting is preserved. The output API version v1alpha2
+    is now deprecated and will be removed in a future release. Please migrate to using
+    v1alpha3.'

releases/release-1.30/release-notes/maps/pr-123384-map.yaml

@@ -0,0 +1,3 @@
+pr: 123384
+releasenote:
+  text: Improved scheduler performance when no scoring plugins are defined.

releases/release-1.30/release-notes/maps/pr-123406-map.yaml

@@ -0,0 +1,5 @@
+pr: 123406
+releasenote:
+  text: 'kubeadm: fixed a bug during kubeadm upgrade, where it is not possible to
+    mount a new device and create a symbolic link for /etc/kubernetes (or a sub-directory)
+    so that kubeadm stores its information on the mounted device.'

releases/release-1.30/release-notes/maps/pr-123418-map.yaml

@@ -0,0 +1,3 @@
+pr: 123418
+releasenote:
+  text: LoadBalancerIPMode feature is now marked as Beta.

releases/release-1.30/release-notes/maps/pr-123425-map.yaml

@@ -0,0 +1,4 @@
+pr: 123425
+releasenote:
+  text: Added feature gate `MutatingAdmissionPolicy` for enabling mutation policy
+    in admission chain.

releases/release-1.30/release-notes/maps/pr-123442-map.yaml

@@ -0,0 +1,3 @@
+pr: 123442
+releasenote:
+  text: '`NewVolumeManagerReconstruction` feature is now GA.'

releases/release-1.30/release-notes/maps/pr-123461-map.yaml

@@ -0,0 +1,5 @@
+pr: 123461
+releasenote:
+  text: 'kubeadm: in the new output API "output.kubeadm.k8s.io/v1alpha3" modified
+    the UpgradePlan structure that is used when calling "kubeadm upgrade plan ...
+    -o yaml|json", to include a list of multiple available upgrades.'

releases/release-1.30/release-notes/maps/pr-123464-map.yaml

@@ -0,0 +1,6 @@
+pr: 123464
+releasenote:
+  text: 'kubeadm: the `bridge-nf-call-iptables=1` and `bridge-nf-call-ip6tables=1`
+    preflight checks are removed since not all the network implementations require
+    this setting, network plugins are responsible for setting this correctly depending
+    on whether or not they connect containers to Linux bridges or use some other mechanism.'

releases/release-1.30/release-notes/maps/pr-123475-map.yaml

@@ -0,0 +1,5 @@
+pr: 123475
+releasenote:
+  text: Fixed bug where providing a FieldPath to a CRD Validation Rule would erroneously
+    affect the reported field path of other unrelated CRD Validation Rules on the
+    same schema.

releases/release-1.30/release-notes/maps/pr-123479-map.yaml

@@ -0,0 +1,3 @@
+pr: 123479
+releasenote:
+  text: sample-apiserver manifest example now has correct RBAC.

releases/release-1.30/release-notes/maps/pr-123492-map.yaml

@@ -0,0 +1,4 @@
+pr: 123492
+releasenote:
+  text: 'kubeadm: fixed a bug where "kubeadm upgrade plan -o yaml|json" includes unneeded
+    output and was missing component config information.'

releases/release-1.30/release-notes/maps/pr-123504-map.yaml

@@ -0,0 +1,3 @@
+pr: 123504
+releasenote:
+  text: Upgraded metrics server to v0.7.0.

releases/release-1.30/release-notes/maps/pr-123517-map.yaml

@@ -0,0 +1,4 @@
+pr: 123517
+releasenote:
+  text: Patched a leak of a discovery document that would occur when an Aggregated
+    APIService changed its Spec.Service field and did not change it back.