- `watch.Until` now works for long durations. ([#67350](https://github.com/kubernetes/kubernetes/pull/67350), [@tnozicka](https://github.com/tnozicka))

- Fixed a bug where startupProbe stopped working after a container's first restart ([#101093](https://github.com/kubernetes/kubernetes/pull/101093), [@wzshiming](https://github.com/wzshiming)) [SIG Node]
- Fixed port-forward memory leak for long-running and heavily used connections. ([#99839](https://github.com/kubernetes/kubernetes/pull/99839), [@saschagrunert](https://github.com/saschagrunert)) [SIG API Machinery and Node]

y.low ^= byteorder.BEUint64(blocks) y.high ^= byteorder.BEUint64(blocks[8:]) ghashMul(productTable, y) blocks = blocks[gcmBlockSize:] } } // ghashUpdate extends y with more polynomial terms from data. If data is not a // multiple of gcmBlockSize bytes long then the remainder is zero padded. func ghashUpdate(productTable *[16]gcmFieldElement, y *gcmFieldElement, data []byte) { fullBlocks := (len(data) >> 4) << 4 updateBlocks(productTable, y, data[:fullBlocks]) if len(data) != fullBlocks { var partialBlock...

* Pod log attempts are now reported in apiserver prometheus metrics with verb `CONNECT` since they can run for very long periods of time. ([#50123](https://github.com/kubernetes/kubernetes/pull/50123), [@WIZARD-CXY](https://github.com/WIZARD-CXY))

// (as an external IDP is always assumed when SR is used). In the case of
// OpenID, such mappings are provided from the IDP directly and so are not
// applicable here.
//
// Service accounts are replicated as long as they are not meant for the root
// user.
//
// STS accounts are replicated, but only if the session token is verifiable
// using the local cluster's root credential.

y.low ^= byteorder.BEUint64(blocks) y.high ^= byteorder.BEUint64(blocks[8:]) ghashMul(productTable, y) blocks = blocks[gcmBlockSize:] } } // ghashUpdate extends y with more polynomial terms from data. If data is not a // multiple of gcmBlockSize bytes long then the remainder is zero padded. func ghashUpdate(productTable *[16]gcmFieldElement, y *gcmFieldElement, data []byte) { fullBlocks := (len(data) >> 4) << 4 updateBlocks(productTable, y, data[:fullBlocks]) if len(data) != fullBlocks { var partialBlock...

- Kubelet: added log for volume metric collection taking too long ([#107490](https://github.com/kubernetes/kubernetes/pull/107490), [@pacoxu](https://github.com/pacoxu))

on-aptible.com
on-the-web.tv
on-web.fr
on.biz.ng
on.ca
on.crisp.email
onagawa.miyagi.jp
onavstack.net
oncilla.mythic-beasts.com
ondigitalocean.app
one
onfabrica.com
ong
ong.br
onga.fukuoka.jp
onion
onjuku.chiba.jp
onl
online
online.th
onna.okinawa.jp
ono.fukui.jp
ono.fukushima.jp
ono.hyogo.jp
onojo.fukuoka.jp
onomichi.hiroshima.jp

* Increase allowed lag for ssh key sync loop in tunneler to allow for one failure ([#60068](https://github.com/kubernetes/kubernetes/pull/60068), [@wojtek-t](https://github.com/wojtek-t))

  is beta but disabled by default. ([#120198](https://github.com/kubernetes/kubernetes/pull/120198), [@pacoxu](https://github.com/pacoxu))
- `kubectl` will not support the `/swagger-2.0.0.pb-v1` endpoint that has been long deprecated. ([#119410](https://github.com/kubernetes/kubernetes/pull/119410), [@Jefftree](https://github.com/Jefftree))
- `scheduler`: handling of unschedulable pods because a `ResourceClass` is missing