wmflabs.org

// William Harrison : https://wdh.gg
// Submitted by William Harrison <******@****.***>
wdh.app

// WISP : https://wisp.gg
// Submitted by Stepan Fedotov <******@****.***>
panel.gg
daemon.panel.gg

// Wix.com, Inc. : https://www.wix.com
// Submitted by Shahar Talmi / Alon Kochba <******@****.***>
wixsite.com
wixstudio.com
editorx.io
wixstudio.io
wix.run

ia\u0005volyn\u0005yalta\u000bzakarpattia\u000bzaporizhzhe\u000czaporizhzhia\u0008zhitomir\u0008zhytomyr\u0002zp\u0002zt\u0004conn\u0005copro\u0004hosp\u0016independent-commission\u0013independent-inquest\u0013independent-inquiry\u0011independent-panel\u0012independent-review\u0003nhs\u0007nimsite\u0006police\u000epublic-inquiry\u0005pymnt\u0010royal-commission\u0002ak\u0002dc\u0003dni\u0002fl\u0007golffan\u0009heliohost\u0005is-by\u0003isa\u000bland-4-sale\u0002nd\u0002nh\u0002nj\u0003nsn\u0002...

- Changed core_pattern on COS nodes to be an absolute path. ([#86329](https://github.com/kubernetes/kubernetes/pull/86329), [@mml](https://github.com/mml)) [SIG Cluster Lifecycle and Node]
- Client-go certificate manager rotation gained the ability to preserve optional intermediate chains accompanying issued certificates ([#88744](https://github.com/kubernetes/kubernetes/pull/88744), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery and Auth]

### Juju
* The kubernetes-master, kubernetes-worker and kubeapi-load-balancer charms have gained an nrpe-external-master relation, allowing the integration of their monitoring in an external Nagios server. ([#41923](https://github.com/kubernetes/kubernetes/pull/41923), [@Cynerva](https://github.com/Cynerva))

* Start synchronizing pods after network is ready.  ([#68752](https://github.com/kubernetes/kubernetes/pull/68752), [@krzysztof-jastrzebski](https://github.com/krzysztof-jastrzebski))
* kubectl has gained new --profile and --profile-output options to output go profiles ([#68681](https://github.com/kubernetes/kubernetes/pull/68681), [@dlespiau](https://github.com/dlespiau))

* PodSecurityPolicy admission sets `podsecuritypolicy.admission.k8s.io/admit-policy` and `podsecuritypolicy.admission.k8s.io/validate-policy` annotations containing the name of the policy that allowed a pod to be admitted. (PodSecurityPolicy also gained the ability to [limit hostPath volume mounts to be read-only](https://kubernetes.io/docs/concepts/policy/pod-security-policy/#volumes-and-file-systems).)

In addition, the NodeRestriction admission plugin now prevents kubelets from modifying...

- The errors in k8s.io/apimachinery/pkg/api/meta gained support for the stdlibs errors.Is matching, including when wrapped ([#111808](https://github.com/kubernetes/kubernetes/pull/111808), [@alvaroaleman](https://github.com/alvaroaleman)) [SIG API Machinery]