- Kube-apiserver: the `--encryption-provider-config` file is now loaded with strict deserialization, which fails if the config file contains duplicate or unknown fields. This protects against accidentally running with config files that are malformed, mis-indented, or have typos in field names, and getting unexpected behavior. When `--encryption-provider-config-automatic-reload` is used, new encryption config files that contain typos after the kube-apiserver is running are treated as...

 *  Fix: Don't crash loading the public suffix database in GraalVM native images. The function
    `HttpUrl.topPrivateDomain()` uses a resource file to identify private domains, but we didn't
    include this file on GraalVM.


## Version 5.0.0-alpha.4

_2022-02-01_

**This release introduces fast fallback to better support mixed IPv4+IPv6 networks.** Fast fallback

labels.startTime=Start Time
labels.target=Target
labels.token=Token
labels.synonymFile=Synonym File
labels.stopwordsFile=Stopwords File
labels.stemmerOverrideFile=Stemmer Override File
labels.mappingFile=Mapping File
labels.protwordsFile=Protwords File
labels.kuromojiFile=Kuromoji File
labels.elevateWordFile=Elevate Word File
labels.badWordFile=Bad Word File
labels.urlExpr=Condition
labels.boostExpr=Boost Expression

                            } catch (final Exception e) {
                                if (logger.isDebugEnabled()) {
                                    logger.debug("Failed to detect MIME type from file, using default: url={}, file={}, defaultMimeType={}",
                                            url, outputFile.getAbsolutePath(), defaultMimeType, e);
                                }

rs
ac.rs
co.rs
edu.rs
gov.rs
in.rs
org.rs

// ru : https://cctld.ru/files/pdf/docs/en/rules_ru-rf.pdf
// Submitted by George Georgievsky <******@****.***>
ru

// rw : https://www.ricta.org.rw/sites/default/files/resources/registry_registrar_contract_0.pdf
rw
ac.rw
co.rw
coop.rw
gov.rw
mil.rw
net.rw
org.rw

- Kubeadm: warn but do not error out on missing "ca.key" files for root CA, front-proxy CA and etcd CA, during "kubeadm join --control-plane" if the user has provided all certificates, keys and kubeconfig files which require signing with the given CA keys. ([#94988...

## Urgent Upgrade Notes 

### (No, really, you MUST read this before you upgrade)

Restored the ability of kubectl running inside a pod to consume resource files specifying a different namespace than the one the pod is running in. ([#44862](https://github.com/kubernetes/kubernetes/pull/44862), [@liggitt](https://github.com/liggitt))

    * Kubectl commands run inside a pod using a kubeconfig file now use the namespace specified in the kubeconfig file, instead of using the pod namespace. If no kubeconfig file is used, or the kubeconfig does not specify a namespace, the pod namespace...

        lenient().when(mockFileEntry2.getName()).thenReturn("file2.txt");
        lenient().when(mockFileEntry3.getName()).thenReturn("file3.txt");

        lenient().when(mockResource1.getName()).thenReturn("file1.txt");
        lenient().when(mockResource2.getName()).thenReturn("file2.txt");
        lenient().when(mockResource3.getName()).thenReturn("file3.txt");
    }

    /**

- Fixes spammy incorrect "Ignoring same-zone topology hints for service since no hints were provided for zone" messages in the kube-proxy logs. ([#133527](https://github.com/kubernetes/kubernetes/pull/133527), [@danwinship](https://github.com/danwinship)) [SIG Network]