- Only extend token lifetimes when `--service-account-extend-token-expiration` is true and the requested token audiences are empty or exactly match all values for `--api-audiences`. ([#105954](https://github.com/kubernetes/kubernetes/pull/105954), [@jyotimahapatra](https://github.com/jyotimahapatra))...

- Kube-apiserver: gzip compression switched from level 4 to level 1 to improve large list call latencies in exchange for higher network bandwidth usage (10-50% higher). This increases the headroom before very large unpaged list calls exceed request timeout limits. ([#112400](https://github.com/kubernetes/kubernetes/pull/112400), [@shyamjvs](https://github.com/shyamjvs)) [SIG API Machinery]

- Kube-apiserver: gzip compression switched from level 4 to level 1 to improve large list call latencies in exchange for higher network bandwidth usage (10-50% higher). This increases the headroom before very large unpaged list calls exceed request timeout limits. ([#112401](https://github.com/kubernetes/kubernetes/pull/112401), [@shyamjvs](https://github.com/shyamjvs)) [SIG API Machinery]

	c.Assert(err, nil)

	// execute the request.
	response, err = s.client.Do(req)
	c.Assert(err, nil)
	verifyError(c, response, "InvalidArgument", "Size of filter rule value cannot exceed 1024 bytes in UTF-8 representation", http.StatusBadRequest)

	req, err = newTestSignedBadSHARequest(http.MethodGet,
		getListenNotificationURL(s.endPoint, bucketName, []string{}, []string{}, validEvents),

  - Migrate `pkg/kubelet/(dockershim, network)` to structured logging
  Exit code changed from 255 to 1 ([#98939](https://github.com/kubernetes/kubernetes/pull/98939), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Network and Node]
  - Migrate `pkg/kubelet/certificate` to structured logging

## Changelog since v1.10.3

### Other notable changes

* Fixes issue for readOnly subpath mounts for SELinux systems and when the volume mountPath already existed in the container image. ([#64351](https://github.com/kubernetes/kubernetes/pull/64351), [@msau42](https://github.com/msau42))

,KAAKiP,QAAQiB,UACblQ,KAAKiP,QAAU,OAInBkB,SAAA,WACEnQ,KAAKoP,UAAYpP,KAAKqP,gBACD,OAAjBrP,KAAKiP,SACPjP,KAAKiP,QAAQmB,kBAKjBnJ,qBAAA,WAAqB,IAAAlH,EAAAC,KACnBlD,UAAEkD,KAAKkB,UAAU0B,GAjMJ,qBAiMoB,SAAAxC,GAC/BA,EAAMuC,iBACNvC,EAAMiQ,kBACNtQ,EAAKsD,a,EAIToD,WAAA,SAAWzI,GAaT,OAZAA,EAAMsS,EAAA,GACDtQ,KAAKuQ,YAAYnL,QACjBtI,UAAEkD,KAAKkB,UAAUsB,OACjBxE,GAGLnC,EAAKiC,gBACHiH,EACA/G,EACAgC,KAAKuQ,YAAY5K,aAGZ3H,GAGTmR,kBAAA,WACE,IAAKnP,KAAKkP,MAAO,CACf,IAAMvN,EAASqN,EAASW,sBAAsB3P,KAAKkB,UAE/CS,IACF3B,KAAK...

- Introduce alpha support for exec-based container registry credential provider plugins...

### SIG Cloud Provider

- Fix: After a Node is down and take some time to get back to up again, the mount point of the evicted Pods cannot be cleaned up successfully. (#111933) Meanwhile Kubelet will print the log `Orphaned pod "xxx" found, but error not a directory occurred when trying to remove the volumes dir` every 2 seconds. (#105536) ([#116134](https://github.com/k...