tashuang.zk, tcervi, Teng Lu, Thales Elero Cervi, Thibaut Goetghebuer-Planchon,
Thomas Walther, Till Brychcy, Trent Lo, Uday Bondhugula, vishakha.agrawal,
Vishnuvardhan Janapati, wamuir, Wenwen Ouyang, wenwu, Williard Joshua Jose,
xiaohong1031, Xiaoming (Jason) Cui, Xinan Jiang, Yasir Modak, Yi Li, Yong Tang,
zilinzhu, 박상준, 이장

# Release 2.5.2

This release introduces several vulnerability fixes:

## Known Issues

- Completed pods lose logs across node upgrade ([#32324](https://github.com/kubernetes/kubernetes/issues/32324))
- Pods are deleted across node upgrade ([#32323](https://github.com/kubernetes/kubernetes/issues/32323))

"būti", "būtų", "buvo", "dėl", "gali", "į", "iki", "ir", "iš", "ja", "ją", "jai", "jais", "jam", "jame", "jas", "jei", "ji", "jį", "jie", "jiedu", "jiedvi", "jiedviem", "jiedviese", "jiems", "jis", "jo", "jodviem", "jog", "joje", "jomis", "joms", "jos", "jose", "jų", "judu", "judvi", "judviejų", "jųdviejų", "judviem", "judviese", "jumis", "jums", "jumyse", "juo", "juodu", "juodviese", "juos", "juose", "jus", "jūs", "jūsų", "ką", "kad", "kai", "kaip", "kas", "kiek", "kol", "kur", "kurie", "kuris", "man",...

  * `kubectl get podsecuritypolicies -o yaml > psp.yaml`
2. Review and delete any PodSecurityPolicy objects you do not want all pod-creating users to be able to use (NOTE: Privileged users that were making use of those policies will also lose access to those policies). For example:
  * `kubectl delete podsecuritypolicies/my-privileged-policy`
3. After upgrading to 1.5.5, re-create the exported PodSecurityPolicy objects:
  * `kubectl create -f psp.yaml`

- Added reconstruction of SELinux mount context after kubelet restart. Feature `SELinuxMountReadWriteOncePod` is now fully implemented and kubelet does not lose its cache of SELinux contexts after kubelet process restart. ([#113596](https://github.com/kubernetes/kubernetes/pull/113596), [@jsafrane](https://github.com/jsafrane))

pkg syscall (linux-386), const AF_PHONET ideal-int
pkg syscall (linux-386), const AF_PPPOX ideal-int
pkg syscall (linux-386), const AF_RDS ideal-int
pkg syscall (linux-386), const AF_ROSE ideal-int
pkg syscall (linux-386), const AF_ROUTE ideal-int
pkg syscall (linux-386), const AF_RXRPC ideal-int
pkg syscall (linux-386), const AF_SECURITY ideal-int
pkg syscall (linux-386), const AF_SNA ideal-int

"būti", "būtų", "buvo", "dėl", "gali", "į", "iki", "ir", "iš", "ja", "ją", "jai", "jais", "jam", "jame", "jas", "jei", "ji", "jį", "jie", "jiedu", "jiedvi", "jiedviem", "jiedviese", "jiems", "jis", "jo", "jodviem", "jog", "joje", "jomis", "joms", "jos", "jose", "jų", "judu", "judvi", "judviejų", "jųdviejų", "judviem", "judviese", "jumis", "jums", "jumyse", "juo", "juodu", "juodviese", "juos", "juose", "jus", "jūs", "jūsų", "ką", "kad", "kai", "kaip", "kas", "kiek", "kol", "kur", "kurie", "kuris", "man",...

* ⬆️ Upgrade python-jose dependency to `>=3.3.0,<4.0.0` for tests. PR [#3468](https://github.com/tiangolo/fastapi/pull/3468) by [@tiangolo](https://github.com/tiangolo).

## 0.66.0

### Features

* Fixed issue 63608, which is that under rare circumstances the ResourceQuota admission controller could lose track of an request in progress and time out after waiting 10 seconds for a decision to be made. ([#64598](https://github.com/kubernetes/kubernetes/pull/64598), [@MikeSpreitzer](https://github.com/MikeSpreitzer))

pkg syscall (linux-386), const AF_PACKET = 17
pkg syscall (linux-386), const AF_PHONET = 35
pkg syscall (linux-386), const AF_PPPOX = 24
pkg syscall (linux-386), const AF_RDS = 21
pkg syscall (linux-386), const AF_ROSE = 11
pkg syscall (linux-386), const AF_ROUTE = 16
pkg syscall (linux-386), const AF_RXRPC = 33
pkg syscall (linux-386), const AF_SECURITY = 14
pkg syscall (linux-386), const AF_SNA = 22