// Name must be an IANA_SVC_NAME.
  optional k8s.io.apimachinery.pkg.util.intstr.IntOrString port = 2;

  // Host name to connect to, defaults to the pod IP. You probably want to set
  // "Host" in httpHeaders instead.
  // +optional
  optional string host = 3;

  // Scheme to use for connecting to the host.
  // Defaults to HTTP.
  // +optional
  optional string scheme = 4;

    String API_PING_search_engine_FIELDS = "api.ping.search_engine.fields";

    /** The key of the configuration. e.g.  */
    String VIRTUAL_HOST_HEADERS = "virtual.host.headers";

    /** The key of the configuration. e.g.  */
    String HTTP_PROXY_HOST = "http.proxy.host";

    /** The key of the configuration. e.g. 8080 */
    String HTTP_PROXY_PORT = "http.proxy.port";

    /** The key of the configuration. e.g.  */

*   Fixed bad conversion in host port chain name generating func which led to some unreachable host ports. ([#55153](https://github.com/kubernetes/kubernetes/pull/55153),[ @chenchun](https://github.com/chenchun))

  - [Changelog since v1.21.4](#changelog-since-v1214)
  - [Important Security Information](#important-security-information)
    - [CVE-2021-25741: Symlink Exchange Can Allow Host Filesystem Access](#cve-2021-25741-symlink-exchange-can-allow-host-filesystem-access)
  - [Changes by Kind](#changes-by-kind-8)
    - [Feature](#feature-6)
    - [Bug or Regression](#bug-or-regression-8)

  - The `ValidateProxyRedirects` feature was promoted to Beta and enabled by default. This feature restricts redirect-following from the apiserver to same-host redirects.  If nodes are configured to respond to CRI streaming requests on a different host interface than what the apiserver makes requests on (only the case if not using the built-in dockershim & setting the kubelet flag `--redirect-container-streaming=true`), then these requests will be broken....

- Fixed `DaemonSet` to update the status even if it fails to create a pod. ([#113787](https://github.com/kubernetes/kubernetes/pull/113787), [@gjkim42](https://github.com/gjkim42))
- Fixed `SELinux` label for host path volumes created by host path provisioner ([#112021](https://github.com/kubernetes/kubernetes/pull/112021), [@mrunalp](https://github.com/mrunalp))

- Kube-controller-manager: volume plugins can be restricted from contacting local and loopback addresses by setting `--volume-host-allow-local-loopback=false`, or from contacting specific CIDR ranges by setting `--volume-host-cidr-denylist` (for example, `--volume-host-cidr-denylist=127.0.0.1/28,feed::/16`) ([#91785](https://github.com/kubernetes/kubernetes/pull/91785), [@mattcary](https://github.com/mattcary)) [SIG API Machinery, Apps, Auth, CLI,...

* - fluentd-gcp runs with a dedicated fluentd-gcp service account ([#54175](https://github.com/kubernetes/kubernetes/pull/54175), [@tallclair](https://github.com/tallclair))
    * - Stop mounting the host certificates into fluentd's prometheus-to-sd container

pkg syscall (netbsd-arm64), const IN_CLASSC_HOST = 255
pkg syscall (netbsd-arm64), const IN_CLASSC_HOST ideal-int
pkg syscall (netbsd-arm64), const IN_CLASSC_NET = 4294967040
pkg syscall (netbsd-arm64), const IN_CLASSC_NET ideal-int
pkg syscall (netbsd-arm64), const IN_CLASSC_NSHIFT = 8
pkg syscall (netbsd-arm64), const IN_CLASSC_NSHIFT ideal-int
pkg syscall (netbsd-arm64), const IN_CLASSD_HOST = 268435455

pkg syscall (darwin-arm64), const IN_CLASSC_HOST = 255
pkg syscall (darwin-arm64), const IN_CLASSC_HOST ideal-int
pkg syscall (darwin-arm64), const IN_CLASSC_NET = 4294967040
pkg syscall (darwin-arm64), const IN_CLASSC_NET ideal-int
pkg syscall (darwin-arm64), const IN_CLASSC_NSHIFT = 8
pkg syscall (darwin-arm64), const IN_CLASSC_NSHIFT ideal-int
pkg syscall (darwin-arm64), const IN_CLASSD_HOST = 268435455