- Upon successful authorization check, an impersonated user is added to the system:authenticated group.
  system:anonymous when impersonated is added to the system:unauthenticated group. ([#94408](https://github.com/kubernetes/kubernetes/pull/94408), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Testing]

    *   New API for initialization of CPU/GPU/TPU in dtensor.
        `dtensor.initialize_accelerator_system` and
        `dtensor.shutdown_accelerator_system`.
    *   The following existing API will be removed:
        `dtensor.initialize_multi_client`, `dtensor.initialize_tpu_system`, and
        `dtensor.shutdown_tpu_system`.

## Deprecations

*   The C++ `tensorflow::Code` and `tensorflow::Status` will become aliases of