- kubeadm: provide `--control-plane-endpoint` flag for `controlPlaneEndpoint` ([#79270](https://github.com/kubernetes/kubernetes/pull/79270), [@SataQiu](https://github.com/SataQiu))
- kubeadm: enable secure serving for the kube-scheduler ([#80951](https://github.com/kubernetes/kubernetes/pull/80951), [@neolit123](https://github.com/neolit123))

### CVE-2022-3294: Node address isn't always verified when proxying

A security issue was discovered in Kubernetes where users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can to modify Node objects and send requests proxying through them.

### CVE-2022-3294: Node address isn't always verified when proxying

A security issue was discovered in Kubernetes where users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can to modify Node objects and send requests proxying through them.

        * [Build a Secure Twilio Webhook with Python and FastAPI](https://www.twilio.com/blog/build-secure-twilio-webhook-python-fastapi)  by [Twilio](https://www.twilio.com).

* Kubernetes now supports up to 5,000 nodes via etcd v3, which is enabled by default.
* [Role-based access control (RBAC)](https://kubernetes.io//docs/admin/authorization/rbac) has graduated to beta, and defines secure default roles for control plane, node, and controller components.
* The [`kubeadm` cluster bootstrap tool](https://kubernetes.io/docs/getting-started-guides/kubeadm/) has graduated to beta. Some highlights:

   limitations under the License.


================================================================

github.com/secure-io/sio-go
https://github.com/secure-io/sio-go
----------------------------------------------------------------
MIT License

Copyright (c) 2019 SecureIO

golang.org/fips140@v1.1.0-rc1/fips140/v1.1.0-rc1/drbg/rand.go // Copyright 2024 The Go Authors. All rights reserved. // Use of this source code is governed by a BSD-style // license that can be found in the LICENSE file. // Package drbg provides cryptographically secure random bytes // usable by FIPS code. In FIPS mode it uses an SP 800-90A Rev. 1 // Deterministic Random Bit Generator (DRBG). Otherwise, // it uses the operating system's random number generator. package drbg import ( entropy "crypto/internal/entropy/v1.0.0"...

"crypto/internal/fips140" "crypto/internal/randutil" "crypto/internal/sysrand" "io" "sync" ) var drbgs = sync.Pool{ New: func() any { var c *Counter entropy.Depleted(func(seed *[48]byte) { c = NewCounter(seed) }) return c }, } // Read fills b with cryptographically secure random bytes. In FIPS mode, it // uses an SP 800-90A Rev. 1 Deterministic Random Bit Generator (DRBG). // Otherwise, it uses the operating system's random number generator. func Read(b []byte) { if !fips140.Enabled { sysrand.Read(b) return } // At...

pkg net/http, type Cookie struct, Name string
pkg net/http, type Cookie struct, Path string
pkg net/http, type Cookie struct, Raw string
pkg net/http, type Cookie struct, RawExpires string
pkg net/http, type Cookie struct, Secure bool
pkg net/http, type Cookie struct, Unparsed []string
pkg net/http, type Cookie struct, Value string
pkg net/http, type CookieJar interface { Cookies, SetCookies }