- Update to version 1.21.14:
* Release commit for Kubernetes v1.21.14
* Reject proxy requests to 0.0.0.0 as well
* etcd-client starts retrying transient errors from the etcd cluster
* authn: fix cache mutation by AuthenticatedGroupAdder
* Fix OpenAPI loading error caused by empty APIService
* Correct event registration for multiple scheduler plugins.
* Fix: abort nominating a pod that was already scheduled to a node
* cpu manager policy set to none, no one remove container id from container map, lead memory leak
* kube-up: use registry.k8s.io for containerd-related jobs
* Skip updating Endpoints and EndpointSlice if no relevant fields change
* ipvs: remove port opener
* iptables: remove port opener
* Extract containerID from systemd-style cgroupPath in cri_stats_provider And fix test to generate UUID without dash
* update go.mod for golang.org/x/crypto to v0.0.0-20211202192323-5770296d904e
* azure_file: try to get secret namespace from ClaimRef
* azure_file: add namespace tests for InTree to CSI conversion
* Update Go to 1.16.15
* cluster/gce: update konnectivity image tags to v0.0.30
* bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
* fix dryrun when ca file exists
* fix regression introduced by PR 100320
* bump k8s.io/utils for inotify fix
* cronjob_controllerv2: do not filter jobs to be reconciled by labels
* fix: remove outdated ipv4 route when the corresponding node is deleted
* Updating EndpointSlice strategy to retain node name in topology until field is set
* Add PDB selector patch integration test
* Revert v1beta1 PodDisruptionBudget select patchStrategy
* kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
* Mark device as uncertain if unmount device succeeds