* kubectl could scale custom resource again ([#81342](https://github.com/kubernetes/kubernetes/pull/81342), [@knight42](https://github.com/knight42))

     *
     * The server’s TLS certificate still must match the requested hostname. For example, if the
     * certificate is issued to `example.com` and the request is to `localhost`, the connection will
     * fail. Use a custom [HostnameVerifier] to ignore such problems.
     *
     * Other TLS features are still used but provide no security benefits in absence of the above

		Path:      pathJoin(bucket, decodeDirObject(object)),
	}
	if opts != nil {
		tr.Custom = map[string]string{
			"dry":    fmt.Sprint(opts.DryRun),
			"remove": fmt.Sprint(opts.Remove),
			"mode":   fmt.Sprint(opts.ScanMode),
		}
		if result != nil {
			tr.Custom["version-id"] = result.VersionID
			tr.Custom["disks"] = strconv.Itoa(result.DiskCount)
			tr.Bytes = result.ObjectSize
		}
	}

	} else {
		// If no role policy is configured, then we use claims from the
		// JWT. This is a MinIO STS API specific value, this value
		// should be set and configured on your identity provider as
		// part of JWT custom claims.
		policySet, ok := policy.GetPoliciesFromClaims(claims, iamPolicyClaimNameOpenID())
		policies := strings.Join(policySet.ToSlice(), ",")
		if ok {
			policyName = globalIAMSys.CurrentPolicies(policies)
		}

    /**
     *
     * Property {@code jcifs.smb.client.capabilities} (int)
     *
     * @return custom capabilities
     */
    int getCapabilities();

    /**
     *
     *
     * Property {@code jcifs.smb.client.flags2} (int)
     *
     * @return custom flags2
     */
    int getFlags2();

    /**
     *
     * Property {@code jcifs.smb.client.ssnLimit} (int, 250)

- Fixes an issue that can result in namespaced custom resources being orphaned when their namespace is deleted, if the CRD defining the custom resource is removed concurrently with namespaces being deleted, then recreated. ([#93790](https://github.com/kubernetes/kubernetes/pull/93790), [@liggitt](https://github.com/liggitt)) [SIG API Machinery...

- `account` client_id is a confidential client that belongs to the realm `{realm}`
- `account` client_id is has **Service Accounts Enabled** option enabled.
- `account` client_id has a custom "Audience" mapper, in the Mappers section.
  - Included Client Audience: security-admin-console

#### Adding 'admin' Role

- Go to Roles
  - Add new Role `admin` with Description `${role_admin}`.

    void testAdaptMethodIsUsed() {
        // Given
        when(mockDelegate.hasNext()).thenReturn(true, false);
        when(mockDelegate.next()).thenReturn(mockFileEntry1);

        // Create iterator with custom adapt implementation
        final boolean[] adaptCalled = { false };
        DirFileEntryAdapterIterator iterator = new DirFileEntryAdapterIterator(mockParent, mockDelegate, null) {
            @Override

        inlineMimeTypeSet.add(mimeType);
    }

    /**
     * Gets the action hook for custom processing.
     *
     * @return the action hook
     */
    public ActionHook getActionHook() {
        return actionHook;
    }

    /**
     * Sets the action hook for custom processing.
     *
     * @param actionHook the action hook to set
     */

    - [**API Machinery**](#api-machinery-3)
      - [**Admission Control**](#admission-control)
      - [**API & API server**](#api-&-api-server)
      - [**Audit**](#audit)
      - [**Custom Resources**](#custom-resources)
      - [**Other**](#other)
    - [**Apps**](#apps-1)
    - [**Auth**](#auth-3)
      - [**Audit**](#audit-1)
      - [**RBAC**](#rbac)
      - [**Other**](#other-1)
      - [**GCE**](#gce)