* Fix bug where master startup script on GCP failed randomly due to concurrent iptables invocations. ([#55945](https://github.com/kubernetes/kubernetes/pull/55945), [@x13n](https://github.com/x13n))



# v1.8.4

    - [Workloads that saturate nodes with pods may see pods that fail due to node admission](#workloads-that-saturate-nodes-with-pods-may-see-pods-that-fail-due-to-node-admission)
    - [Etcd v3.5.[0-2] data corruption](#etcd-v350-2-data-corruption)
  - [Urgent Upgrade Notes](#urgent-upgrade-notes)

   * and accesses that were performed on the map. The queue is drained on writes and when it exceeds
   * its capacity threshold.
   *
   * The Least Recently Used page replacement algorithm was chosen due to its simplicity, high hit
   * rate, and ability to be implemented with O(1) time complexity. The initial LRU implementation
   * operates per-segment rather than globally for increased implementation simplicity. We expect

            } catch (SmbAuthException e) {
                // Some configurations may not allow share listing without specific permissions
                log.warn("Share listing not available due to authentication: {}", e.getMessage());
                // This is acceptable - just verify we can access known shares
                try {
                    CIFSContext verifyContext = createFreshContext();

        while ((fromIndex = systemMsg.indexOf("=== Document ===", fromIndex)) != -1) {
            docCount++;
            fromIndex++;
        }
        assertTrue(docCount < 10, "Expected fewer than 10 documents due to truncation, got " + docCount);
    }

    @Test
    public void test_generateSummaryResponse_singleDocWithinLimit() {
        client.setTestContextMaxChars(10000);
        client.setTestSystemPrompt("system");

	}
	return ARNPrefix + kmsID
}

// DecryptETags decryptes the ETag of all ObjectInfos using the KMS.
//
// It adjusts the size of all encrypted objects since encrypted
// objects are slightly larger due to encryption overhead.
// Further, it decrypts all single-part SSE-S3 encrypted objects
// and formats ETags of SSE-C / SSE-KMS encrypted objects to
// be AWS S3 compliant.
//

		if err != nil {
			t.Fatal(err)
		}
		// t.Logf("data := %#v\n", data)
	})
	// Test compressed index consistency fix
	t.Run("comp-index", func(t *testing.T) {
		// This file has a compressed index, due to https://github.com/minio/minio/pull/20575
		// We ensure it is rewritten without an index.
		// We compare this against the signature of the files stored without a version.

* Fix kubelet start failure issue on Azure Stack due to InstanceMetadata setting ([#74936](https://github.com/kubernetes/kubernetes/pull/74936), [@rjaini](https://github.com/rjaini))

	// Find the field start and end indices.
	// Doing this in a separate pass (rather than slicing the string s
	// and collecting the result substrings right away) is significantly
	// more efficient, possibly due to cache effects.
	start := -1 // valid span start if >= 0
	for i := 0; i < len(s); {
		r, size := utf8.DecodeRune(s[i:])
		if f(r) {
			if start >= 0 {
				spans = append(spans, span{start, i})
				start = -1

	}

	var u2 User
	if err := DB.Preload("Company").First(&u2, user.ID).Error; err != nil {
		t.Fatalf("load: %v", err)
	}

	if u2.Company.ID != 0 {
		t.Fatalf("expected company association cleared due to unlink, got %+v", u2.Company)
	}
}

// Many2Many: update and delete via Set
func TestClauseAssociationSetUpdateAndDeleteMany2Many(t *testing.T) {
	ctx := context.Background()