- `status.conditions` may not contain duplicate types
  - `status.conditions[*].status` is now required
  - `status.certificate` must be PEM-encoded, and contain only CERTIFICATE blocks ([#91685](https://github.com/kubernetes/kubernetes/pull/91685), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Architecture, Auth, CLI and Testing]

pkg encoding/pem, func Decode([]uint8) (*Block, []uint8)
pkg encoding/pem, func Encode(io.Writer, *Block) error
pkg encoding/pem, func EncodeToMemory(*Block) []uint8
pkg encoding/pem, type Block struct
pkg encoding/pem, type Block struct, Bytes []uint8
pkg encoding/pem, type Block struct, Headers map[string]string
pkg encoding/pem, type Block struct, Type string

* updates fluentd in fluentd-elasticsearch to version 1.2.4 ([#67434](https://github.com/kubernetes/kubernetes/pull/67434), [@monotek](https://github.com/monotek))
    * also updates activesupport, fluent-plugin-elasticsearch & oj gems

1D1C0         ; mapped                 ; 1D1BA 1D165 1D16F #3.1 MUSICAL SYMBOL FUSA BLACK
1D1C1..1D1DD  ; valid                  ;      ; NV8    # 3.1  MUSICAL SYMBOL LONGA PERFECTA REST..MUSICAL SYMBOL PES SUBPUNCTIS
1D1DE..1D1E8  ; valid                  ;      ; NV8    # 8.0  MUSICAL SYMBOL KIEVAN C CLEF..MUSICAL SYMBOL KIEVAN FLAT SIGN

pkg crypto/x509, const UnknownSignatureAlgorithm = 0
pkg crypto/x509, func DecryptPEMBlock(*pem.Block, []uint8) ([]uint8, error)
pkg crypto/x509, func EncryptPEMBlock(io.Reader, string, []uint8, []uint8, PEMCipher) (*pem.Block, error)
pkg crypto/x509, func IsEncryptedPEMBlock(*pem.Block) bool
pkg crypto/x509, func ParseECPrivateKey([]uint8) (*ecdsa.PrivateKey, error)

nttMul(A[i*k1024+j], s[j])) } } H := sha3.New256() ek := dk.EncapsulationKey().Bytes() H.Write(ek) H.Sum(dk.h[:0]) } // kemPCT1024 performs a Pairwise Consistency Test per FIPS 140-3 IG 10.3.A // Additional Comment 1: "For key pairs generated for use with approved KEMs in // FIPS 203, the PCT shall consist of applying the encapsulation key ek to // encapsulate a shared secret K leading to ciphertext c, and then applying // decapsulation key dk to retrieve the same shared secret K. The PCT passes if // the two shared...

nttMul(A[i*k1024+j], s[j])) } } H := sha3.New256() ek := dk.EncapsulationKey().Bytes() H.Write(ek) H.Sum(dk.h[:0]) } // kemPCT1024 performs a Pairwise Consistency Test per FIPS 140-3 IG 10.3.A // Additional Comment 1: "For key pairs generated for use with approved KEMs in // FIPS 203, the PCT shall consist of applying the encapsulation key ek to // encapsulate a shared secret K leading to ciphertext c, and then applying // decapsulation key dk to retrieve the same shared secret K. The PCT passes if // the two shared...