* Addresses vSphere Volume Attach limits ([#29881](https://github.com/kubernetes/kubernetes/pull/29881), [@dagnello](https://github.com/dagnello))
* allow restricting subresource access ([#29988](https://github.com/kubernetes/kubernetes/pull/29988), [@deads2k](https://github.com/deads2k))

* The SubjectAccessReview API passes subresource and resource name information to the authorizer to answer authorization queries. ([#40935](https://github.com/kubernetes/kubernetes/pull/40935), [@liggitt](https://github.com/liggitt))

        try ( SmbResource f = new SmbFile(getTestShareURL(), ctx); ) {
            checkConnection(f);
            f.resolve("test").exists();
        }
    }


    @Test
    public void logonAnonymous () throws IOException {
        try ( SmbResource f = new SmbFile(getTestShareGuestURL(), withAnonymousCredentials()) ) {

        try ( SmbResource f = getDefaultShareRoot() ) {
            checkConnection(f);
            if ( f.getType() != SmbConstants.TYPE_FILESYSTEM ) {
                assertEquals(SmbConstants.TYPE_SHARE, f.getType());
            }
        }
    }


    @Test
    public void testGetFreeSpace () throws CIFSException, MalformedURLException {
        try ( SmbResource f = getDefaultShareRoot() ) {

        try ( SmbFile defaultShareRoot = getDefaultShareRoot();
              SmbResource f = new SmbFile(defaultShareRoot, makeRandomName());
              SmbResource p = new SmbFile(getTestShareGuestURL(), getContext());
              SmbResource tgt = new SmbFile(p, "other-share") ) {
            f.createNewFile();
            boolean renamed = false;
            try {

        private Object shutdownLock = new Object();
        private volatile boolean shutdown;
        private SmbResource file;


        /**
         * @param smbFile
         * 
         */
        public ExclusiveLockFirst ( SmbResource smbFile ) {
            this.file = smbFile;
        }


        public void waitForStart () throws InterruptedException {

            throws SmbException {
        try ( CloseableIterator<SmbResource> it = doEnum(root, wildcard, searchAttributes, fnf == null ? null : new ResourceNameFilter() {

            @Override
            public boolean accept ( SmbResource parent, String name ) throws CIFSException {
                if ( ! ( parent instanceof SmbFile ) ) {
                    return false;

The merged fix enforces validation against the proxying address for a Node. In some cases, the fix can break clients that depend on the `nodes/proxy` subresource, specifically if a kubelet advertises a localhost or link-local address to the Kubernetes control plane. Configuring an egress proxy for egress to the cluster network can also mitigate this vulnerability.

**Affected Versions**:

    writing it has test supersource but no prod supersource.

    GWT happens to use the prod .gwt.xml, so it looks for no supersource for
    tests, either. This causes it to fail to find AtomicLongMapTest.

    Our workaround is to tell GWT that util.concurrent and all other packages
    have prod supersource, even if they have none. GWT is happy to ignore us

import jcifs.CloseableIterator;
import jcifs.ResourceFilter;
import jcifs.SmbConstants;
import jcifs.SmbResource;


class DirFileEntryAdapterIterator extends FileEntryAdapterIterator {

    /**
     * @param parent
     * @param delegate
     * @param filter
     */
    public DirFileEntryAdapterIterator ( SmbResource parent, CloseableIterator<FileEntry> delegate, ResourceFilter filter ) {
        super(parent, delegate, filter);