- Fixed file permission issues that happened during update of Secret/ConfigMap/projected volume when fsGroup is used. The problem caused a race condition where application gets intermittent permission denied error when reading files that were just updated, before the correct permissions were applied. ([#114728](https://github.com/kubernetes/kubernetes/pull/114728), [@furkatgofurov7](https://github.com/furkatgofurov7)) [SIG...

- Fixed a `v1.28` regression in scheduler: a pod with concurrent events could incorrectly get moved to the unschedulable queue where it could get stuck until the next periodic purging after 5 minutes, if there was no other event for it. ([#120413](https://github.com/kubernetes/kubernetes/pull/120413), [@pohly](https://github.com/pohly))

gen.in
gen.mi.us
gen.ng
gen.nz
gen.tr
genkai.saga.jp
genoa.it
genova.it
gent
gentapps.com
genting
gentlentapis.com
geo.br
george
georgia.su
getmyip.com
gets-it.net
gf
gg
ggee
ggf.br
ggff.net
gh
gh.srv.us
gi
gialai.vn
giehtavuoatna.no
gift
gifts
gifu.gifu.jp
gifu.jp
giize.com
gildeskal.no
gildeskål.no

- Fixed a bug that caused a DaemonSet rolling update to hang when its pod gets stuck at terminating.  ([#77773](https://github.com/kubernetes/kubernetes/pull/77773), [@DaiHao](https://github.com/DaiHao))

- The calculation of pod UIDs for static pods has changed to ensure each static pod gets a unique value - this will cause all static pod containers to be recreated/restarted if an in-place kubelet upgrade from 1.20 to 1.21 is performed. Note that draining pods before upgrading the kubelet across minor versions is the supported upgrade...

        final Map<String, Object> dest = newHashMap();
        BeanUtil.copyBeanToMap(src, dest);
        assertThat(dest.get("aaa"), is((Object) "aaa"));
        assertThat(dest.get("bbb"), is(nullValue()));
        assertThat(dest.get("ccc"), is((Object) "ccc"));
        assertThat(dest.get("ddd"), is(nullValue()));
    }

    /**
     * @throws Exception
     */
    @Test

        * At Request audit level or higher, an annotation with key "patch.webhook.admission.k8s.io/round_{round idx}_index_{order idx}" get logged with the JSON payload logging the patch sent by a webhook for given request.

  
  Fixed multiple iptables proxy regressions introduced in 1.22:
  
    - When using Services with SessionAffinity, client affinity for an
      endpoint now gets broken when that endpoint becomes non-ready
      (rather than continuing until the endpoint is fully deleted).
  
    - Traffic to a service IP now starts getting rejected (as opposed to

  will now get dual-stack PodIPs. ([#95239](https://github.com/kubernetes/kubernetes/pull/95239), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]

* Get command uses OpenAPI schema to enhance display for a resource if run with flag 'use-openapi-print-columns'.  ([#46235](https://github.com/kubernetes/kubernetes/pull/46235), [@droot](https://github.com/droot))
    * An example command:
    * kubectl get pods --use-openapi-print-columns