</p>


<h3 id="Close">Close</h3>

<p>
For an argument <code>ch</code> with a <a href="#Core_types">core type</a>
that is a <a href="#Channel_types">channel</a>, the built-in function <code>close</code>
records that no more values will be sent on the channel.
It is an error if <code>ch</code> is a receive-only channel.

pkg syscall (darwin-arm64), const SYS_CHUD = 185
pkg syscall (darwin-arm64), const SYS_CHUD ideal-int
pkg syscall (darwin-arm64), const SYS_CLOSE = 6
pkg syscall (darwin-arm64), const SYS_CLOSE ideal-int
pkg syscall (darwin-arm64), const SYS_CLOSE_NOCANCEL = 399
pkg syscall (darwin-arm64), const SYS_CLOSE_NOCANCEL ideal-int
pkg syscall (darwin-arm64), const SYS_CONNECT = 98
pkg syscall (darwin-arm64), const SYS_CONNECT ideal-int

Volume cloning enables users to specify another PVC as a "DataSource" when provisioning a new volume. If the underlying storage system supports this functionality and implements the "CLONE_VOLUME" capability in its CSI driver, then the new volume becomes a clone of the source volume.

These changes are reflected in the following Kubernetes enhancements:
([#625](https://github.com/kubernetes/enhancements/issues/625))

pkg syscall (netbsd-arm64), const CLONE_PTRACE = 8192
pkg syscall (netbsd-arm64), const CLONE_PTRACE ideal-int
pkg syscall (netbsd-arm64), const CLONE_SIGHAND = 2048
pkg syscall (netbsd-arm64), const CLONE_SIGHAND ideal-int
pkg syscall (netbsd-arm64), const CLONE_VFORK = 16384
pkg syscall (netbsd-arm64), const CLONE_VFORK ideal-int
pkg syscall (netbsd-arm64), const CLONE_VM = 256
pkg syscall (netbsd-arm64), const CLONE_VM ideal-int

  // at which time stdin is closed and remains closed until the container is restarted. If this
  // flag is false, a container processes that reads from stdin will never receive an EOF.
  // Default is false
  // +optional
  optional bool stdinOnce = 17;

  // Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.
  // Default is false.
  // +optional
  optional bool tty = 18;
}

* Update debian-iptables and hyperkube-base images to include CVE fixes. ([#67365](https://github.com/kubernetes/kubernetes/pull/67365), [@ixdy](https://github.com/ixdy))
* Immediately close the other side of the connection when proxying. ([#67288](https://github.com/kubernetes/kubernetes/pull/67288), [@MHBauer](https://github.com/MHBauer))

- Apiserver add a new flag --goaway-chance which is the fraction of requests that will be closed gracefully(GOAWAY) to prevent HTTP/2 clients from getting stuck on a single apiserver. 
  After the connection closed(received GOAWAY), the client's other in-flight requests won't be affected, and the client will reconnect. 

    * The cache can be disabled per dependency declaration, using `use_cache=False` as in `Depends(your_dependency, use_cache=False)`.
    * Updated docs at: [Using the same dependency multiple times](https://fastapi.tiangolo.com/tutorial/dependencies/sub-dependencies/#using-the-same-dependency-multiple-times).

* hack/local-up-cluster.sh now enables kubelet authentication/authorization by default (they can be disabled with KUBELET_AUTHENTICATION_WEBHOOK=false and KUBELET_AUTHORIZATION_WEBHOOK=false ([#71690](https://github.com/kubernetes/kubernetes/pull/71690), [@liggitt](https://github.com/liggitt))

* An `automountServiceAccountToken` field was added to ServiceAccount and PodSpec objects. If set to `false` on a pod spec, no service account token is automounted in the pod. If set to `false` on a service account, no service account token is automounted for that service account unless explicitly overridden in the pod spec. ([#37953](https://github.com/kubernetes/kubernetes/pull/37953), [@ligg...