- Prevent unnecessary Endpoints and EndpointSlice updates caused by Pod ResourceVersion change ([#108078](https://github.com/kubernetes/kubernetes/pull/108078), [@tnqn](https://github.com/tnqn)) [SIG Apps and Network]

	// set globalObjectAPI to `nil`.
	resetGlobalObjectAPI()
	// Reset config path set.
	resetGlobalConfigPath()
	// Reset Global server config.
	resetGlobalConfig()
	// Reset global endpoints.
	resetGlobalEndpoints()
	// Reset global isErasure flag.
	resetGlobalIsErasure()
	// Reset global heal state
	resetGlobalHealState()
	// Reset globalIAMSys to `nil`
	resetGlobalIAMSys()
}

* kubeadm: prevent overriding of certain kubelet security configuration parameters if the user wished to modify them ([#81903](https://github.com/kubernetes/kubernetes/pull/81903), [@jfbai](https://github.com/jfbai))

- Fix that prevents repeated fetching of PVC/PV objects by kubelet when processing of pod volumes fails. While this prevents hammering API server in these error scenarios, it means that some errors in processing volume(s) for a pod could now take up to 2-3 minutes before retry. ([#88141](https://github.com/kubernetes...

- The OpenAPI version field will now be properly autopopulated without needing other OpenAPI fields present in generic API server code. ([#66411](https://github.com/kubernetes/kubernetes/pull/66411), [@DirectXMan12](https://github.com/DirectXMan12))

- During device plugin allocation, resources requested by the pod can only be allocated if the device plugin has registered itself to kubelet AND healthy devices are present on the node to be allocated. If these conditions are not sattsfied, the pod would fail with `UnexpectedAdmissionError` error. ([#117738](https://github.com/kubernetes/kubernetes/pull/117738), [@swatisehgal](https://github.com/swatisehgal)) [SIG Node...

session.tracking.modes=cookie

# Comma-separated list of request parameter keys to store in cookies before SSO login.
cookie.search.parameter.keys=q,num,sort
# Comma-separated list of required parameter keys that must be present to store in cookies.
cookie.search.parameter.required_keys=q
# Maximum length of the encoded search parameters stored in cookies.
cookie.search.parameter.max.length=1000

    assertThat(listener.getCount()).isEqualTo(0);
    table.set(0, entryTwo);
    assertThat(segment.reclaimKey(entryThree, hashThree)).isFalse();
    assertThat(listener.getCount()).isEqualTo(0);

    // present
    table.set(0, entryOne);
    segment.count = 1;
    assertThat(segment.reclaimKey(entryOne, hashOne)).isTrue();
    assertThat(listener.getCount()).isEqualTo(1);

    assertThat(listener.getCount()).isEqualTo(0);
    table.set(0, entryTwo);
    assertThat(segment.reclaimKey(entryThree, hashThree)).isFalse();
    assertThat(listener.getCount()).isEqualTo(0);

    // present
    table.set(0, entryOne);
    segment.count = 1;
    assertThat(segment.reclaimKey(entryOne, hashOne)).isTrue();
    assertThat(listener.getCount()).isEqualTo(1);

* Fix a race condition in which kubeadm only waits for the kubelets kubeconfig file when it has performed the TLS bootstrap, but wasn't waiting for certificates to be present in the filesystem ([#72030](https://github.com/kubernetes/kubernetes/pull/72030), [@ereslibre](https://github.com/ereslibre))