* Restored the ability of kubectl running inside a pod to consume resource files specifying a different namespace than the one the pod is running in. ([#44862](https://github.com/kubernetes/kubernetes/pull/44862), [@liggitt](https://github.com/liggitt))

* Fix aggressive VM calls for Azure VMSS ([#83102](https://github.com/kubernetes/kubernetes/pull/83102), [@feiskyer](https://github.com/feiskyer))

### Other (Cleanup or Flake)

- Conntrack reconciler now considers service's target port during cleanup of stale flow entries. ([#130542](https://github.com/kubernetes/kubernetes/pull/130542), [@aroradaman](https://github.com/aroradaman)) [SIG Network]

- Changed how the API server handles updates to `.spec.defaultBackend` of Ingress objects.

:= new(p256Table).Compute(q) table.Select(p, sel) t := NewP256Point() for index >= 4 { index -= 5 p.Double(p) p.Double(p) p.Double(p) p.Double(p) p.Double(p) if index >= 0 { sel, sign = boothW5(s.Rsh(index) & 0b111111) } else { // Booth encoding considers a virtual zero bit at index -1, // so we shift left the least significant limb. wvalue := (s[0] << 1) & 0b111111 sel, sign = boothW5(wvalue) } table.Select(t, sel) t.Negate(sign) p.Add(p, t) } return p, nil } // Negate sets p to -p, if cond == 1,...

:= new(p256Table).Compute(q) table.Select(p, sel) t := NewP256Point() for index >= 4 { index -= 5 p.Double(p) p.Double(p) p.Double(p) p.Double(p) p.Double(p) if index >= 0 { sel, sign = boothW5(s.Rsh(index) & 0b111111) } else { // Booth encoding considers a virtual zero bit at index -1, // so we shift left the least significant limb. wvalue := (s[0] << 1) & 0b111111 sel, sign = boothW5(wvalue) } table.Select(t, sel) t.Negate(sign) p.Add(p, t) } return p, nil } // Negate sets p to -p, if cond == 1,...