statement</a>.</li>
	</ul>
</li>

<li>
	A <a href="#Select_statements">"select" statement</a> in which:
	<ul>
	<li>there are no "break" statements referring to the "select" statement, and</li>
	<li>the statement lists in each case, including the default if present,
	    end in a terminating statement.</li>
	</ul>
</li>

<li>

* kubectl port-forward now allows using resource name (e.g., deployment/www) to select a matching pod, as well as the use of --pod-running-timeout to wait until at least one pod is running. ([#59705](https://github.com/kubernetes/kubernetes/pull/59705), [@phsiao](https://github.com/phsiao))

*   The RBAC bootstrapping policy now allows authenticated users to create selfsubjectrulesreviews. ([#56095](https://github.com/kubernetes/kubernetes/pull/56095),[ @ericchiang](https://github.com/ericchiang))
*   RBAC ClusterRoles can now select other roles to aggregate. ([#54005](https://github.com/kubernetes/kubernetes/pull/54005),[ @deads2k](https://github.com/deads2k))

* fix: azure disk could not mounted on Standard_DC4s/DC2s instances ([#86612](https://github.com/kubernetes/kubernetes/pull/86612), [@andyzhangx](https://github.com/andyzhangx))
* Fix v1.17.0 regression in reflector relist causing master rolling upgrade to fail for large clusters due to excessive list calls to etcd ([#86824](https://github.com/kubernetes/kubernetes/pull/86824), [@jpbetz](https://github.com/jpbetz))

pkg syscall (netbsd-arm64-cgo), const EIO = 5
pkg syscall (netbsd-arm64-cgo), const EISCONN = 56
pkg syscall (netbsd-arm64-cgo), const EISDIR = 21
pkg syscall (netbsd-arm64-cgo), const ELAST = 96
pkg syscall (netbsd-arm64-cgo), const ELAST Errno
pkg syscall (netbsd-arm64-cgo), const ELOOP = 62
pkg syscall (netbsd-arm64-cgo), const EMFILE = 24
pkg syscall (netbsd-arm64-cgo), const EMLINK = 31

pkg syscall (darwin-arm64), const EIO = 5
pkg syscall (darwin-arm64), const EISCONN = 56
pkg syscall (darwin-arm64), const EISDIR = 21
pkg syscall (darwin-arm64), const ELAST = 106
pkg syscall (darwin-arm64), const ELAST Errno
pkg syscall (darwin-arm64), const ELOOP = 62
pkg syscall (darwin-arm64), const EMFILE = 24
pkg syscall (darwin-arm64), const EMLINK = 31
pkg syscall (darwin-arm64), const EMSGSIZE = 40

* "kubectl wait" command now supports the "--all" flag to select all resources in the namespace of the specified resource types. ([#70599](https://github.com/kubernetes/kubernetes/pull/70599), [@caesarxuchao](https://github.com/caesarxuchao))

// https://www.iana.org/domains/root/db/security.html
security

// seek : Seek Limited
// https://www.iana.org/domains/root/db/seek.html
seek

// select : Registry Services, LLC
// https://www.iana.org/domains/root/db/select.html
select

// sener : Sener Ingeniería y Sistemas, S.A.
// https://www.iana.org/domains/root/db/sener.html
sener

// services : Binky Moon, LLC

- To address the possibility of dry-run requests overwhelming admission webhooks...

- The nftables mode of kube-proxy is now GA. (The iptables mode remains the
  default; you can select the nftables mode by passing `--proxy-mode nftables`
  or using a config file with `mode: nftables`. See the kube-proxy documentation