optional NodeSelector requiredDuringSchedulingIgnoredDuringExecution = 1;

  // The scheduler will prefer to schedule pods to nodes that satisfy
  // the affinity expressions specified by this field, but it may choose
  // a node that violates one or more of the expressions. The node that is
  // most preferred is the one with the greatest sum of weights, i.e.
  // for each node that meets all of the scheduling requirements (resource

    String LDAP_ATTR_TELEPHONE_NUMBER = "ldap.attr.telephoneNumber";

    /** The key of the configuration. e.g. homePhone */
    String LDAP_ATTR_HOME_PHONE = "ldap.attr.homePhone";

    /** The key of the configuration. e.g. homePostalAddress */
    String LDAP_ATTR_HOME_POSTAL_ADDRESS = "ldap.attr.homePostalAddress";

    /** The key of the configuration. e.g. labeledURI */

to `true` (it is disabled by default). An API server fronted by an L7 load balancer that already mitigates these http/2 attacks may choose not to enable the kube-apiserver mitigation to avoid disrupting load balancer → kube-apiserver connections if http/2 requests from multiple clients share the same backend connection. An API server on a private network may choose not to enable the kube-apiserver mitigation to prevent performance regressions for unauthenticated clients. Authenticated requests rely...

pkg syscall (darwin-arm64), const SYS_CHMOD_EXTENDED ideal-int
pkg syscall (darwin-arm64), const SYS_CHOWN = 16
pkg syscall (darwin-arm64), const SYS_CHOWN ideal-int
pkg syscall (darwin-arm64), const SYS_CHROOT = 61
pkg syscall (darwin-arm64), const SYS_CHROOT ideal-int
pkg syscall (darwin-arm64), const SYS_CHUD = 185
pkg syscall (darwin-arm64), const SYS_CHUD ideal-int
pkg syscall (darwin-arm64), const SYS_CLOSE = 6

pkg syscall (netbsd-arm64-cgo), const SYS_CHOWN = 16
pkg syscall (netbsd-arm64-cgo), const SYS_CHOWN ideal-int
pkg syscall (netbsd-arm64-cgo), const SYS_CHROOT = 61
pkg syscall (netbsd-arm64-cgo), const SYS_CHROOT ideal-int
pkg syscall (netbsd-arm64-cgo), const SYS_CLOCK_GETRES = 429
pkg syscall (netbsd-arm64-cgo), const SYS_CLOCK_GETRES ideal-int
pkg syscall (netbsd-arm64-cgo), const SYS_CLOCK_GETTIME = 427

    * platforms would be satisfied by manually-created PersistentVolume objects.
    * Administrators can choose to disable this behavior by deleting the automatically
    * installed StorageClass API object. Alternatively, administrators may choose to
    * keep the automatically installed StorageClass and only disable the defaulting

license before distributing the Program. d) Each Contributor represents that to its knowledge it has sufficient copyright rights in its Contribution, if any, to grant the copyright license set forth in this Agreement. 3. REQUIREMENTS A Contributor may choose to distribute the Program in object code form under its own license agreement, provided that: a) it complies with the terms and conditions of this Agreement; and b) its license agreement: i) effectively disclaims on behalf of all Contributors all...

to `true` (it is disabled by default). An API server fronted by an L7 load balancer that already mitigates these http/2 attacks may choose not to enable the kube-apiserver mitigation to avoid disrupting load balancer → kube-apiserver connections if http/2 requests from multiple clients share the same backend connection. An API server on a private network may choose not to enable the kube-apiserver mitigation to prevent performance regressions for unauthenticated clients. Authenticated requests rely...

is unauthenticated. The mitigation may be disabled by setting the `UnauthenticatedHTTP2DOSMitigation` feature gate to `false` (it is enabled by default). An API server fronted by an L7 load balancer that already mitigates these http/2 attacks may choose to disable the kube-apiserver mitigation to avoid disrupting load balancer -> kube-apiserver connections if http/2 requests from multiple clients share the same backend connection. An API server on a private network may opt to disable the kube-apiserver...

### Bug or Regression

- ## Changelog
  
  ### General
  - Fix priority expander falling back to a random choice even though there is a higher priority option to choose
  - Clone `kubernetes/kubernetes` in `update-vendor.sh` shallowly, instead of fetching all revisions
  - Speed up binpacking by reducing the number of PreFilter calls (call once per pod instead of #pods*#nodes times)