- Kube-apiserver: setting `--audit-log-maxsize=0` now disables audit log rotation (the default remains `100` MB). In order to avoid outages due to filling disks with ever-growing audit logs, `--audit-log-maxage` now defaults to 366 (1 year) and `--audit-log-maxbackup` now defaults to 100. If retention of all rotated logs is desired, age and count-based pruning can be disabled by explicitly specifying `--audit-log-maxage=0` and `--audit-log-maxbackup=0`. ([#13647...

	if tokenRevokeType != "" {
		claims[tokenRevokeTypeClaim] = tokenRevokeType
	}

	// Validate that user.AccessKey's policies can be retrieved - it may not
	// be in case the user is disabled.
	if _, err = globalIAMSys.PolicyDBGet(user.AccessKey, user.Groups...); err != nil {
		writeSTSErrorResponse(ctx, w, ErrSTSInvalidParameterValue, err)
		return
	}

	secret, err := getTokenSigningKey()

     */
    boolean isDfsStrictView();

    /**
     *
     * Property {@code jcifs.smb.client.dfs.disabled} (boolean, default false)
     *
     * @return whether DFS lookup is disabled
     */
    boolean isDfsDisabled();

    /**
     * Enable hack to make kerberos auth work with DFS sending short names
     *

 * creating the factory. The currently available policies are:
 *
 * <ul>
 *   <li>DISABLED
 *   <li>WARN
 *   <li>THROW
 * </ul>
 *
 * <p>The locks created by a factory instance will detect lock acquisition cycles with locks created
 * by other {@code CycleDetectingLockFactory} instances (except those with {@code Policy.DISABLED}).
 * A lock's behavior when a cycle is detected, however, is defined by the {@code Policy} of the

    /** Map storing field names and their associated query terms for logging. */
    protected Map<String, List<String>> fieldLogMap = null;

    /** Flag indicating whether role-based query filtering should be disabled. */
    protected boolean disableRoleQuery = false;

    /** The default field to search in when no specific field is specified. */
    protected String defaultField = null;

    /**

        assertEquals(DirectoryLeaseContext.DIRECTORY_LEASE_FLAG_RECURSIVE | DirectoryLeaseContext.DIRECTORY_LEASE_FLAG_NOTIFICATIONS,
                flags2);

        // Test with notifications disabled
        DirectoryLeaseContext context3 = new DirectoryLeaseContext(key, 0, DirectoryCacheScope.RECURSIVE_TREE);
        context3.setNotificationEnabled(false);

        byte[] buffer3 = new byte[context3.size()];

        protected String jobLogId;

        /**
         * Default constructor for ApiStartJobResponse.
         */
        public ApiStartJobResponse() {
            super();
        }

        /**
         * Sets the job log ID.
         * @param jobLogId The job log ID to set. Null when job logging is disabled.

     *
     * @return The SAMR interface UUID string
     */
    public static String getSyntax() {
        return "12345778-1234-abcd-ef00-0123456789ac:1.0";
    }

    /** Account control bit flag: Account is disabled */
    public static final int ACB_DISABLED = 1;
    /** Account control bit flag: Home directory is required */
    public static final int ACB_HOMDIRREQ = 2;
    /** Account control bit flag: Password is not required */

     *
     * @return The SAMR interface UUID string
     */
    public static String getSyntax() {
        return "12345778-1234-abcd-ef00-0123456789ac:1.0";
    }

    /** Account control bit flag: Account is disabled */
    public static final int ACB_DISABLED = 1;
    /** Account control bit flag: Home directory is required */
    public static final int ACB_HOMDIRREQ = 2;
    /** Account control bit flag: Password is not required */

     *
     * @param value the query string to escape
     * @return the escaped query string, or the original value if escaping is disabled
     */
    protected String escapeQuery(final String value) {
        if (!escape) {
            return value;
        }

        String newValue = value;