- Extender bind should respect IsInterested ([#79804](https://github.com/kubernetes/kubernetes/pull/79804), [@yqwang-ms](https://github.com/yqwang-ms))
- Fix an issue with toleration merging & whitelist checking in the PodTolerationRestriction admission controller. ([#81732](https://github.com/kubernetes/kubernetes/pull/81732), [@tallclair](https://github.com/tallclair))

- Pod SecurityContext sysctls name parameter for update requests where the existing object's sysctl contains slashes and kubelet sysctl whitelist support contains slashes. ([#102393](https://github.com/kubernetes/kubernetes/pull/102393), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG Apps, Auth, Node, Storage and Testing]

- Added a `--prune-allowlist` flag that can be used with `kubectl apply --prune`. This flag now replaces and functions the same as the `--prune-whitelist` flag, which has been deprecated. ([#113116](https://github.com/kubernetes/kubernetes/pull/113116), [@brianpursley](https://github.com/brianpursley))

    * waiting for the request to be satisfied. It will continually refresh the certificate as
    * the certificates expiration approaches.
* Allow PSP's to specify a whitelist of allowed paths for host volume based on path prefixes ([#43946](https://github.com/kubernetes/kubernetes/pull/43946), [@jhorwit2](https://github.com/jhorwit2))

rate.limit.block.duration.ms=300000
# Retry-After header value in seconds.
rate.limit.retry.after.seconds=60
# Comma-separated list of whitelisted IPs (e.g., 127.0.0.1,::1).
rate.limit.whitelist.ips=127.0.0.1,::1
# Comma-separated list of blocked IPs.
rate.limit.blocked.ips=
# Comma-separated list of trusted proxy IPs. Only trust X-Forwarded-For/X-Real-IP from these IPs.
rate.limit.trusted.proxies=127.0.0.1,::1

* Each pod has its own associated cgroup by default. ([#41349](https://github.com/kubernetes/kubernetes/pull/41349), [@derekwaynecarr](https://github.com/derekwaynecarr))
* Whitelist kubemark in node_ssh_supported_providers for log dump ([#41800](https://github.com/kubernetes/kubernetes/pull/41800), [@shyamjvs](https://github.com/shyamjvs))

- No actions required. This is a small enhancement to a utility library. ([#92440](https://github.com/kubernetes/kubernetes/pull/92440), [@luigibk](https://github.com/luigibk)) [SIG Network]
- PodTolerationRestriction: Mention Whitelist Scope in Error ([#87582](https://github.com/kubernetes/kubernetes/pull/87582), [@mrueg](https://github.com/mrueg)) [SIG Scheduling]

    String RATE_LIMIT_RETRY_AFTER_SECONDS = "rate.limit.retry.after.seconds";

    /** The key of the configuration. e.g. 127.0.0.1,::1 */
    String RATE_LIMIT_WHITELIST_IPS = "rate.limit.whitelist.ips";

    /** The key of the configuration. e.g.  */
    String RATE_LIMIT_BLOCKED_IPS = "rate.limit.blocked.ips";

    /** The key of the configuration. e.g. 127.0.0.1,::1 */

                if (hits != null) {
                    final List<Map<String, Object>> hitList = getListValue(hits, "hits");
                    if (hitList != null) {
                        for (final Map<String, Object> hit : hitList) {
                            final Map<String, Object> source = getMapValue(hit, "_source");
                            if (source != null) {

        assertNotNull(hits);

        final List<Map<String, Object>> hitList = coordinatorHelper.getListValue(hits, "hits");
        assertNotNull(hitList);
        assertEquals(1, hitList.size());

        final Map<String, Object> source = coordinatorHelper.getMapValue(hitList.get(0), "_source");
        assertNotNull(source);