08 Sep 2020

#### Bug fixes

 - Fix population of etcd certificates in CNI config [cni-plugin #949](https://github.com/projectcalico/cni-plugin/pull/949) (@caseydavenport)
 - Resolves an issue on nodes whose Kubernetes node name does not exactly match the system hostname [cni-plugin #943](https://github.com/projectcalico/cni-plugin/pull/943) (@neiljerram)
 - Fix flannel migration issues when running on Rancher [kube-controllers #506](https://github.com/projectcalico/kube-controllers/pull/506) (@songjiang)
 - Fix `kubectl exec` format for migration controller [kube-controllers #504](https://github.com/projectcalico/kube-controllers/pull/504) (@songjiang)
 - Fix flannel migration for clusters with multiple control-plane nodes. [kube-controllers #503](https://github.com/projectcalico/kube-controllers/pull/503) (@caseydavenport)
 - Fix datastore migration of KubeControllerConfiguration [calico #3976](https://github.com/projectcalico/calico/pull/3976) (@mgleung)

#### Other changes

 - Add knobs to explicitly disable adding drop rules for encapsulated packets originating from workloads. [felix #2486](https://github.com/projectcalico/felix/pull/2486) (@doublek)
 - Add FelixConfiguration parameters to explicitly allow encapsulated packets from workloads. [libcalico-go #1301](https://github.com/projectcalico/libcalico-go/pull/1301) (@doublek)
 - In BPF mode, Felix no longer needs configuration to avoid detecting EKS workloads as host interfaces. [felix #2471](https://github.com/projectcalico/felix/pull/2471) (@fasaxc)
