* Advanced audit policy now supports matching subresources and resource names, but the top level resource no longer matches the subresouce. For example "pods" no longer matches requests to the logs subresource of pods. Use "pods/logs" to match subresources. ([#48836](https://github.com/kubernetes/kubernetes/pull/48836), [@ericchiang](https://github.com/ericchiang))

- Kube-apiserver: Made the subresources `pods/exec`, `pods/attach`, and `pods/portforward` require `create` permission for both SPDY and Websocket API requests. Previously, SPDY requests required `create` permission, but Websocket requests only required `get` permission. This change...

- Removed restrictions on subresource flag in kubectl commands ([#128296](https://github.com/kubernetes/kubernetes/pull/128296), [@AnishShah](https://github.com/AnishShah)) [SIG CLI]
- Revised the kubelet API Authorization with new subresources, that allow finer-grained authorization checks and access control for kubelet endpoints.

- Enabled ratcheting validation on `status` subresources for CustomResourceDefinitions. ([#129506](https://github.com/kubernetes/kubernetes/pull/129506), [@JoelSpeed](https://github.com/JoelSpeed))

- The validation in the CertificateSigningRequest `/status` and `/approval` subresources was migrated to declarative validation.
  If the `DeclarativeValidation` feature gate was enabled, mismatches with existing validation are reported via metrics.

import org.apache.tomcat.util.net.SSLHostConfigCertificate;
import org.codelibs.core.lang.StringUtil;
import org.codelibs.fess.tomcat.valve.SuppressErrorReportValve;
import org.codelibs.fess.tomcat.webresources.FessWebResourceRoot;
import org.dbflute.tomcat.TomcatBoot;
import org.dbflute.tomcat.logging.BootLogger;
import org.dbflute.tomcat.props.BootPropsTranslator;

/**

    class InterfaceContractTests {

        @Test
        @DisplayName("SmbResource should extend AutoCloseable")
        void testInterfaceInheritance() {
            // Then
            assertTrue(AutoCloseable.class.isAssignableFrom(SmbResource.class), "SmbResource should extend AutoCloseable");
        }

        @Test
        @DisplayName("SmbResource should have all required methods")

import jcifs.ResourceFilter;
import jcifs.SmbConstants;
import jcifs.SmbResource;

class ShareEnumIterator implements CloseableIterator<SmbResource> {

    private static final Logger log = LoggerFactory.getLogger(ShareEnumIterator.class);

    private final Iterator<FileEntry> delegate;
    private final ResourceFilter filter;
    private final SmbResource parent;
    private SmbResource next;

    /**
     * @param parent

    @Mock
    private SmbResource mockParent;

    @Mock
    private CloseableIterator<FileEntry> mockDelegate;

    @Mock
    private ResourceFilter mockFilter;

    @Mock
    private FileEntry mockFileEntry1;

    @Mock
    private FileEntry mockFileEntry2;

    @Mock
    private FileEntry mockFileEntry3;

    @Mock
    private SmbResource mockResource1;

    @Mock

import jcifs.ResourceFilter;
import jcifs.SmbConstants;
import jcifs.SmbResource;

class NetServerFileEntryAdapterIterator extends FileEntryAdapterIterator {

    /**
     * @param parent
     * @param delegate
     * @param filter
     */
    public NetServerFileEntryAdapterIterator(final SmbResource parent, final NetServerEnumIterator delegate, final ResourceFilter filter) {