- Added two client certificate metrics for exec auth:
    - `rest_client_certificate_expiration_seconds` a gauge reporting the lifetime of the current client certificate. Reports the time of expiry in seconds since January 1, 1970 UTC.

            int bytesRead = response.readBytesWireFormat(buffer, 0);

            // Then
            assertEquals(60, bytesRead);
            assertEquals(0, response.getCloseFlags());
            // Zero Windows FileTime converts to negative Unix time
            long expectedTime = -SmbConstants.MILLISECONDS_BETWEEN_1970_AND_1601;
            assertEquals(expectedTime, response.getCreationTime());

    /**
     * Decodes a resource change notification message.
     */
    private void decodeResourceChangeMessage(NdrBuffer buf, WitnessNotificationMessage message) throws NdrException {
        // Timestamp (FILETIME - 64-bit)
        long timestamp = buf.dec_ndr_hyper();
        message.setTimestamp(timestamp);

        // Resource name
        String resourceName = decodeWideStringPointer(buf);

     * @throws IOException if an I/O error occurs
     */
    public int readUnsignedShort() throws IOException {
        return readShort() & 0xffff;
    }

    /**
     * Reads a Windows FILETIME value and converts it to a Date.
     * @return the Date object, or null if the time represents infinity
     * @throws IOException if an I/O error occurs
     */
    public Date readFiletime() throws IOException {

        byte[] buffer = new byte[8];
        ServerMessageBlock.writeTime(0, buffer, 0);
        // When zero is written, it stays as zero in buffer
        // When read back, it converts to negative Unix time due to Windows FileTime conversion
        long expectedTime = -SmbConstants.MILLISECONDS_BETWEEN_1970_AND_1601;
        assertEquals(expectedTime, ServerMessageBlock.readTime(buffer, 0));
    }

    @Test
    void testUTimeReadWrite() {

        // Note: When encoding time 0, SMBUtil.writeTime writes 0 directly,
        // but SMBUtil.readTime interprets 0 as Jan 1, 1601 in Unix time (-11644473600000)
        // This is the expected behavior for Windows FILETIME
        long expectedTime = -11644473600000L; // Jan 1, 1601 in Unix time
        assertEquals(expectedTime, decoded.getCreateTime());
        assertEquals(expectedTime, decoded.getLastAccessTime());

    * environments.
* Improved Italian translation for kubectl ([#51463](https://github.com/kubernetes/kubernetes/pull/51463), [@lucab85](https://github.com/lucab85))
* Add a metric to the kubelet to monitor remaining lifetime of the certificate that ([#51031](https://github.com/kubernetes/kubernetes/pull/51031), [@jcbsmpsn](https://github.com/jcbsmpsn))
    * authenticates the kubelet to the API server.

        // Given
        byte[] buffer = new byte[64];
        int bufferIndex = 8;

        // Prepare test data in buffer (40 bytes of data)
        // Use SMBUtil to properly encode times in Windows FILETIME format
        SMBUtil.writeTime(TEST_CREATE_TIME, buffer, bufferIndex);
        SMBUtil.writeTime(TEST_LAST_ACCESS_TIME, buffer, bufferIndex + 8);
        SMBUtil.writeTime(TEST_LAST_WRITE_TIME, buffer, bufferIndex + 16);

<p>
The <a href="/doc/go1compat">Go 1 compatibility guarantee</a> ensures that
programs written to the Go 1 specification will continue to compile and run
correctly, unchanged, over the lifetime of that specification.
More generally, as adjustments are made and features added to the language,
the compatibility guarantee ensures that a Go program that works with a

### Other (Cleanup or Flake)

- Kube-apiserver: sets an upper-bound on the lifetime of idle keep-alive connections and time to read the headers of incoming requests ([#103958](https://github.com/kubernetes/kubernetes/pull/103958), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Node]

## Dependencies