* Update doc for kubectl apply ([#37397](https://github.com/kubernetes/kubernetes/pull/37397), [@ymqytw](https://github.com/ymqytw))
* Try self-repair scheduler cache or panic ([#37379](https://github.com/kubernetes/kubernetes/pull/37379), [@wojtek-t](https://github.com/wojtek-t))

- Improved memory usage of kube-apiserver by dropping`.metadata.managedFields` field that self-requested informers of kube-apiserver didn't need. ([#124667](https://github.com/kubernetes/kubernetes/pull/124667), [@linxiulei](https://github.com/linxiulei)) [SIG API Machinery]

- Fixed applying of SELinux labels to CSI volumes on very busy systems (with "error checking for SELinux support: could not get consistent content of /proc/self/mountinfo after 3 attempts") ([#105934](https://github.com/kubernetes/kubernetes/pull/105934), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]

      </match>
    </magic>
    <glob pattern="*.eot"/>
  </mime-type>
  <mime-type type="application/vnd.ms-htmlhelp">
    <glob pattern="*.chm"/>
    <magic priority="50">
      <match value="ITSF" type="string" offset="0"/>
    </magic>
  </mime-type>
  <mime-type type="application/vnd.ms-ims">
    <glob pattern="*.ims"/>
  </mime-type>
  <mime-type type="application/vnd.ms-lrm">

2F82          ; mapped                 ; 81E3          # 3.0  KANGXI RADICAL MINISTER
2F83          ; mapped                 ; 81EA          # 3.0  KANGXI RADICAL SELF
2F84          ; mapped                 ; 81F3          # 3.0  KANGXI RADICAL ARRIVE
2F85          ; mapped                 ; 81FC          # 3.0  KANGXI RADICAL MORTAR

- kube-controller-manager currently needs a writable `--cert-dir` (default is `/var/run/kubernetes`) for generating self-signed certificates, when no `--tls-cert-file` or `--tls-private-key-file` are provided.

### Deprecation

- Added support for vSphere in-tree volumes migration to vSphere CSI driver. The in-tree vSphere Volume plugin will be deprecated and removed in a future release.