Contributions with other software (except as part of its Contributor
    Version); or

(c) under Patent Claims infringed by Covered Software in the absence of
    its Contributions.

This License does not grant any rights in the trademarks, service marks,
or logos of any Contributor (except as may be necessary to comply with
the notice requirements in Section 3.4).

- Fixed a regression in the default `v1.27` configurations in `kube-apiserver`: fixed the `AggregatedDiscoveryEndpoint` feature (`beta` in `v1.27+`) to successfully fetch discovery information from aggregated API servers that do not check `Accept` headers when serving the `/apis` endpoint. ([#119870](https://github.com/kubernetes/kubernetes/pull/119870), [@Jefftree](https://github.com/Jefftree))

                try {
                    final ClassicHttpResponse response = closeableHttpClient.executeOpen(null, request, httpClientContext);
                    httpEntity = response.getEntity();
                    consumer.accept(response, httpEntity);
                } catch (final Exception e) {
                    logger.warn("Failed to authenticate with form-based authentication: scheme={}, url={}", scheme, request.getRequestUri(),

- The `system:aggregate-to-edit` role no longer includes write access to the Endpoints API. For new Kubernetes 1.22 clusters, the `edit` and `admin` roles will no longer include that access in newly created Kubernetes 1.22 clusters. This will have no affect on existing clusters upgrading to Kubernetes 1.22. To retain write access to Endpoints in the aggregated `edit` and `admin` roles for newly created 1.22 clusters, refer to https://github.co...

A security issue was discovered in Kubernetes where users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can to modify Node objects and send requests proxying through them.

quotes, as in <code>&quot;bar&quot;</code>.
Within the quotes, any character may appear except newline and unescaped double quote.
The text between the quotes forms the
value of the literal, with backslash escapes interpreted as they
are in <a href="#Rune_literals">rune literals</a> (except that <code>\'</code> is illegal and
<code>\"</code> is legal), with the same restrictions.

pkg syscall (netbsd-arm64-cgo), const WUNTRACED = 2
pkg syscall (netbsd-arm64-cgo), const WUNTRACED ideal-int
pkg syscall (netbsd-arm64-cgo), func Accept4(int, int) (int, Sockaddr, error)
pkg syscall (netbsd-arm64-cgo), func Accept(int) (int, Sockaddr, error)
pkg syscall (netbsd-arm64-cgo), func Access(string, uint32) error
pkg syscall (netbsd-arm64-cgo), func Adjtime(*Timeval, *Timeval) error

### (No, really, you MUST read this before you upgrade)

- kube-apiserver:

- In kubelet configuration, the `.memorySwap.swapBehavior` field now accepts a new value `NoSwap`, which becomes the default if unspecified. The previously accepted `UnlimitedSwap` value has been dropped.
   ([#122745](https://github.com/kubernetes/kubernetes/pull/122745), [@kannon92](https://github.com/kannon92))

Russ Cox <******@****.***> 1768661710 -0500