- Upon successful authorization check, an impersonated user is added to the system:authenticated group.
  system:anonymous when impersonated is added to the system:unauthenticated group. ([#94408](https://github.com/kubernetes/kubernetes/pull/94408), [@tkashem](https://github.com/tkashem)) [SIG API Machinery and Testing]

- Log messages and metrics for the watch cache are now keyed by `<resource>.<group>` instead of `go` struct type. This means e.g. that `*v1.Pod` becomes `pods`. Additionally, resources that come from `CustomResourceDefinitions` are displayed as the correct resource and group, instead of `*unstructured.Unstructured`. ([#111807](https://github.com/kubernetes/kubernetes/pull/111807), [@ncdc](https://github.com/ncdc))

- Drop support for the deprecated and unsupported kubectl run flags:
  - filename
  - force
  - grace-period
  - kustomize
  - recursive
  - timeout
  - wait
  

labels.elevate_word_details=Elevate Word Details
labels.failure_url_details=Failure Url Details
labels.file_auth_details=File Auth Details
labels.file_config_details=File Config Details
labels.group_details=Group Details
labels.job_log_details=Job Log Details
labels.key_match_details=Key Match Details
labels.labeltype_details=Labeltype Details
labels.pathmap_details=Pathmap Details

labels.elevate_word_details=Elevate Word Detail
labels.failure_url_details=Failure Url Detail
labels.file_auth_details=File Auth Detail
labels.file_config_details=File Config Detail
labels.group_details=Group Detail
labels.job_log_details=Job Log Detail
labels.key_match_details=Key Match Detail
labels.labeltype_details=Labeltype Detail
labels.pathmap_details=Pathmap Detail
labels.related_content_details=Related Content Detail

labels.elevate_word_details=Elevate Word Szczegóły
labels.failure_url_details=Failure Url Szczegóły
labels.file_auth_details=File Auth Szczegóły
labels.file_config_details=File Config Szczegóły
labels.group_details=Group Szczegóły
labels.job_log_details=Job Log Szczegóły
labels.key_match_details=Key Match Szczegóły
labels.labeltype_details=Labeltype Szczegóły
labels.pathmap_details=Pathmap Szczegóły

labels.elevate_word_details=Elevate Word Detaylar
labels.failure_url_details=Failure Url Detaylar
labels.file_auth_details=File Auth Detaylar
labels.file_config_details=File Config Detaylar
labels.group_details=Group Detaylar
labels.job_log_details=Job Log Detaylar
labels.key_match_details=Key Match Detaylar
labels.labeltype_details=Labeltype Detaylar
labels.pathmap_details=Pathmap Detaylar

    String SEARCH_GUEST_ROLE_LIST = "searchGuestPermissionList";

    String SUGGEST_SEARCH_LOG_PERMISSIONS = "suggestSearchLogPermissions";

    String GROUP_VALUE_PREFIX = "group:";

    String ROLE_VALUE_PREFIX = "role:";

    String APP_VALUES = "appValues";

    String DEFAULT_SORT_VALUES = "defaultSortValues";

    String DEFAULT_LABEL_VALUES = "defaultLabelValues";

- OpenAPI V2 will no longer publish aggregated API server OpenAPI for group versions that do not match the APIService specified group version. ([#123570](https://github.com/kubernetes/kubernetes/pull/123570), [@Jefftree](https://github.com/Jefftree))

- Updated pause image to version 3.5, which now runs per default as pseudo user and group `65535:65535`. This does not have any effect on remote container runtimes like CRI-O and containerd, which setup the pod sandbox user and group on their own. ([#100292](https://github.com/kubernetes/kubernetes/pull/100292), [@saschagrunert](https://github.com/saschagrunert))