MockResponse(
        code = 401,
        headers = headersOf("WWW-Authenticate", "Basic realm=\"protected area\""),
      ),
    )
    server.enqueue(
      MockResponse(body = "c"),
    )
    val authenticator =
      RecordingOkAuthenticator(
        basic("jesse", "peanutbutter"),
        "Basic",
      )
    client =
      client
        .newBuilder()

        code = 407,
        headers = headersOf("Proxy-Authenticate", "Basic realm=\"localhost\""),
      ),
    )
    server.enqueue(
      MockResponse(body = "response body"),
    )
    client =
      client
        .newBuilder()
        .proxy(server.proxyAddress)
        .proxyAuthenticator(RecordingOkAuthenticator("password", "Basic"))
        .build()

                    // If request failed and we added advanced features, retry with a basic request
                    if ((leasesAdded || persistentHandlesAdded) && shouldRetryWithBasicRequest(e)) {
                        if (log.isDebugEnabled()) {
                            log.debug("CREATE request with advanced features failed ({}), retrying with basic request",

        },
        "overrides": []
      },
      "gridPos": {
        "h": 6,
        "w": 12,
        "x": 0,
        "y": 0
      },
      "id": 52,
      "options": {
        "displayMode": "basic",
        "maxVizHeight": 300,
        "minVizHeight": 10,
        "minVizWidth": 0,
        "namePlacement": "auto",
        "orientation": "horizontal",
        "reduceOptions": {
          "calcs": [

    public static final String LABELS_spnego_preauth_password = "{labels.spnego_preauth_password}";

    /** The key of the message: Allow Basic Auth */
    public static final String LABELS_spnego_allow_basic = "{labels.spnego_allow_basic}";

    /** The key of the message: Allow Unsecure Basic Auth */
    public static final String LABELS_spnego_allow_unsecure_basic = "{labels.spnego_allow_unsecure_basic}";

    when (responseCode) {
      HttpURLConnection.HTTP_PROXY_AUTH -> {
        builder.addHeader("Proxy-Authenticate: Basic realm=\"protected area\"")
      }

      HttpURLConnection.HTTP_UNAUTHORIZED -> {
        builder.addHeader("WWW-Authenticate: Basic realm=\"protected area\"")
      }

      HttpURLConnection.HTTP_NO_CONTENT, HttpURLConnection.HTTP_RESET -> {

### Other notable changes

* Fix AWS device allocator to only use valid device names ([#41455](https://github.com/kubernetes/kubernetes/pull/41455), [@gnufied](https://github.com/gnufied))

* Added 'kubectl top' command showing the resource usage metrics. ([#28844](https://github.com/kubernetes/kubernetes/pull/28844), [@mksalawa](https://github.com/mksalawa))
* Add basic audit logging ([#27087](https://github.com/kubernetes/kubernetes/pull/27087), [@soltysh](https://github.com/soltysh))

})
@GwtCompatible
@NullUnmarked // TODO(cpovirk): Annotate for nullness.
final class LocalCache<K, V> extends AbstractMap<K, V> implements ConcurrentMap<K, V> {

  /*
   * The basic strategy is to subdivide the table among Segments, each of which itself is a
   * concurrently readable hash table. The map supports non-blocking reads and concurrent writes
   * across different segments.
   *

})
@GwtCompatible
@NullUnmarked // TODO(cpovirk): Annotate for nullness.
final class LocalCache<K, V> extends AbstractMap<K, V> implements ConcurrentMap<K, V> {

  /*
   * The basic strategy is to subdivide the table among Segments, each of which itself is a
   * concurrently readable hash table. The map supports non-blocking reads and concurrent writes
   * across different segments.
   *