-A KUBE-FORWARD -m conntrack --ctstate INVALID -j DROP
				-A KUBE-FORWARD -m comment --comment "kubernetes forwarding rules" -m mark --mark 0x4000/0x4000 -j ACCEPT
				-A KUBE-FORWARD -m comment --comment "kubernetes forwarding conntrack rule" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
				COMMIT
				*nat
				:KUBE-SERVICES - [0:0]

                  RETURN if you have your own rules in the iptables "INPUT" chain;
                  Calico will insert its rules at the top of that chain, then "RETURN"
                  packets to the "INPUT" chain once it has completed processing workload
                  endpoint egress policy. Use ACCEPT to unconditionally accept packets

                  Listener Status to \"True\". \n Implementations MAY choose to accept
                  a Gateway with some Conflicted Listeners only if they only accept
                  the partial Listener set that contains no Conflicted Listeners.
                  To put this another way, implementations may accept a partial Listener
                  set only if they throw out *all* the conflicting Listeners. No picking

#### client-go:

org/junit/runners/ParentRunner$ClassRuleCollector.class package org.junit.runners; synchronized class ParentRunner$ClassRuleCollector implements model.MemberValueConsumer { final java.util.List entries; private void ParentRunner$ClassRuleCollector(); public void accept(model.FrameworkMember, org.junit.rules.TestRule); public java.util.List getOrderedRules(); } org/junit/runners/Parameterized$AfterParam.class package org.junit.runners; public abstract interface Parameterized$AfterParam extends annotation.Annotation...

func http2buildCommonHeaderMapsOnce() {
	http2commonBuildOnce.Do(http2buildCommonHeaderMaps)
}

func http2buildCommonHeaderMaps() {
	common := []string{
		"accept",
		"accept-charset",
		"accept-encoding",
		"accept-language",
		"accept-ranges",
		"age",
		"access-control-allow-credentials",
		"access-control-allow-headers",
		"access-control-allow-methods",
		"access-control-allow-origin",

<table>
  <tr>
    <td>previous</td>
    <td>now</td>
  </tr>
  <tr>
    <td>GET /swagger.json</td>
    <td>GET /openapi/v2
Accept: application/json</td>
  </tr>
  <tr>
    <td>GET /swagger-2.0.0.pb-v1</td>
    <td>GET /openapi/v2
Accept: application/com.github.proto-openapi.spec.v2@v1.0+protobuf</td>

- kubeadm: make the command "kubeadm alpha kubeconfig user" accept a "--config" flag and remove the following flags:
  - apiserver-advertise-address / apiserver-bind-port: use either localAPIEndpoint from InitConfiguration or controlPlaneEndpoint from ClusterConfiguration.
  - cluster-name: use clusterName from ClusterConfiguration

- `discovery.k8s.io/v1beta1` EndpointSlices are deprecated in favor of `discovery.k8s.io/v1`,...

    /** The key of the configuration. e.g. label */
    String QUERY_FACET_FIELDS = "query.facet.fields";

    /** The key of the configuration. e.g. 100 */
    String QUERY_FACET_FIELDS_SIZE = "query.facet.fields.size";

    /** The key of the configuration. e.g. 1 */
    String QUERY_FACET_FIELDS_min_doc_count = "query.facet.fields.min_doc_count";

    /** The key of the configuration. e.g. count.desc */