* [Federation] Make the hpa scale time window configurable ([#49583](https://github.com/kubernetes/kubernetes/pull/49583), [@irfanurrehman](https://github.com/irfanurrehman))
* fuse daemons for GlusterFS and CephFS are now run in their own systemd scope when Kubernetes runs on a system with systemd. ([#49640](https://github.com/kubernetes/kubernetes/pull/49640), [@jsafrane](https://github.com/jsafrane))

### External credential providers

Kubernetes client [credential plugins](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins) have been in beta since 1.11, a few eons ago. With the release of Kubernetes 1.22, this feature set graduates to stable. The GA feature set includes improved support for plugins that provide interactive login flows.

 [ "10s", "30s", "1m", "5m", "15m", "30m", "1h", "2h", "1d" ] }, "timezone": "", "title": "Istio Wasm Extension Dashboard", "uid": "7PAV7ctGz", "version": 17 } manifests/addons/values-kiali.yaml # We set up anonymous authentication as this is for demos. auth: strategy: anonymous deployment: pod_labels: sidecar.istio.io/inject: "false" accessible_namespaces: - '**' ingress_enabled: false hpa: api_version: autoscaling/v2beta2 login_token: signing_key: CHANGEME00000000 manifests/addons/gen.sh #!/usr/bin/env...