컨테이너를 사용하지 않고서는, 어플리케이션을 구동하고 재시작하는 것이 매우 번거롭고 어려울 수 있습니다. 하지만 **컨테이너를 사용한다면** 대부분의 경우에 이런 기능은 기본적으로 포함되어 있습니다. ✨

## 복제 - 프로세스 개수

만약 여러분이 **쿠버네티스**와 머신 <abbr title="A group of machines that are configured to be connected and work together in some way.">클러스터</abbr>, 도커 스왐 모드, 노마드, 또는 다른 여러 머신 위에 분산 컨테이너를 관리하는 복잡한 시스템을 다루고 있다면, 여러분은 각 컨테이너에서 (워커와 함께 사용하는 Gunicorn 같은) **프로세스 매니저** 대신 **클러스터 레벨**에서 **복제를 다루**고 싶을 것입니다.

- `PidPressure` now evicts pods from lowest priority to...

* API server authentication now caches successful bearer token authentication results for a few seconds. ([#50258](https://github.com/kubernetes/kubernetes/pull/50258), [@liggitt](https://github.com/liggitt))

pkg syscall (freebsd-386-cgo), func CloseOnExec(int)
pkg syscall (freebsd-386-cgo), func CmsgLen(int) int
pkg syscall (freebsd-386-cgo), func CmsgSpace(int) int
pkg syscall (freebsd-386-cgo), func Connect(int, Sockaddr) error
pkg syscall (freebsd-386-cgo), func Dup(int) (int, error)
pkg syscall (freebsd-386-cgo), func Dup2(int, int) error
pkg syscall (freebsd-386-cgo), func Fchdir(int) error

### Auth

- Fixed OpenID Connect (OIDC) token refresh when the client secret contains a special character. ([#76914](https://github.com/kubernetes/kubernetes/pull/76914), [@tsuna](https://github.com/tsuna))

          <version>4.0.0+</version>
          <description>
            <![CDATA[
            The source control management system URL
            that describes the repository and how to connect to the
            repository.
            This connection is read-only.
            <br><b>Default value is</b>: parent value [+ path adjustment] + (artifactId or project.directory property), or just parent value if

* Support whitespace in command path for gcp auth plugin ([#41653](https://github.com/kubernetes/kubernetes/pull/41653), [@jlowdermilk](https://github.com/jlowdermilk))
* client-go no longer imports GCP OAuth2 and OpenID Connect packages by default. ([#41532](https://github.com/kubernetes/kubernetes/pull/41532), [@ericchiang](https://github.com/ericchiang))

pkg syscall (darwin-386), func Close(int) error
pkg syscall (darwin-386), func CloseOnExec(int)
pkg syscall (darwin-386), func CmsgLen(int) int
pkg syscall (darwin-386), func CmsgSpace(int) int
pkg syscall (darwin-386), func Connect(int, Sockaddr) error
pkg syscall (darwin-386), func Dup(int) (int, error)
pkg syscall (darwin-386), func Dup2(int, int) error
pkg syscall (darwin-386), func Exchangedata(string, string, int) error

  To request this behavior, your client software must enable the `WatchListClient` client-go feature gate. Additionally, streaming is only available if supported by the cluster; the API server that you connect to must also support streaming.

* The OpenID Connect authenticator can now use a custom prefix, or omit the default prefix, for username and groups claims through the --oidc-username-prefix and --oidc-groups-prefix flags. For example, the authenticator can map a user with the username "jane" to "google:jane"...