- Added `UserNamespacesPodSecurityStandards` feature gate to enable user namespace support for Pod Security Standards.
  Enabling this feature will modify all Pod Security Standard rules to allow setting: `spec[.*].securityContext.[runAsNonRoot,runAsUser]`.
  This feature gate should only be enabled if all nodes in the cluster support the user namespace feature and have it enabled.

- Add a namespace label for all `apiserver_admission_* metrics`.
  Expand the histogram range to 0-10s for all `apiserver_admission_*_duration_seconds` metrics. ([#101208](https://github.com/kubernetes/kubernetes/pull/101208), [@voutcn](https://github.com/voutcn))

* scheduler: use incremental scheduling cycle in PriorityQueue to put all in-flight unschedulable pods back to active queue if we received move request ([#73309](https://github.com/kubernetes/kubernetes/pull/73309), [@cofyc](https://github.com/cofyc))

  ipFamilies (a list of families assigned), and clusterIPs (inclusive of
  clusterIP).  Most users do not need to set anything at all, defaulting will
  handle it for them.  Services are single-stack unless the user asks for

* "kubectl wait" command now supports the "--all" flag to select all resources in the namespace of the specified resource types. ([#70599](https://github.com/kubernetes/kubernetes/pull/70599), [@caesarxuchao](https://github.com/caesarxuchao))

- [`KT-57398`](https://youtrack.jetbrains.com/issue/KT-57398) Add ability to run compilation via build-tools-api
- [`KT-34901`](https://youtrack.jetbrains.com/issue/KT-34901) Gradle testFixtures don't have friendPaths set
- [`KT-44833`](https://youtrack.jetbrains.com/issue/KT-44833) Gradle DSL: Add `languageSettings` accessor to `kotlin` extension that applies to all source sets

- The etcd and KMS plugin health checks are not exposed in the new `livez` and `readyz` endpoints. This will be fixed in 1.16.1.
- Systems running `iptables` 1.8.0 or newer should start it in legacy mode. Please note that this affects all versions of Kubernetes and not only v1.16.0. For more detailed information about the issue and how to apply a workaround, please refer to the official documentation

Pruning requires that CRD developer provides complete, structural validation schemas, either at the top-level or for all versions of the CRD.

#### CustomResourceDefinition Defaulting

    /** The key of the configuration. e.g. 0 */
    String THUMBNAIL_GENERATOR_INTERVAL = "thumbnail.generator.interval";

    /** The key of the configuration. e.g. all */
    String THUMBNAIL_GENERATOR_TARGETS = "thumbnail.generator.targets";

    /** The key of the configuration. e.g. true */
    String THUMBNAIL_CRAWLER_ENABLED = "thumbnail.crawler.enabled";

pkg syscall (netbsd-arm64-cgo), const SYS__LWP_SUSPEND ideal-int
pkg syscall (netbsd-arm64-cgo), const SYS__LWP_UNPARK = 321
pkg syscall (netbsd-arm64-cgo), const SYS__LWP_UNPARK_ALL = 322
pkg syscall (netbsd-arm64-cgo), const SYS__LWP_UNPARK_ALL ideal-int
pkg syscall (netbsd-arm64-cgo), const SYS__LWP_UNPARK ideal-int
pkg syscall (netbsd-arm64-cgo), const SYS__LWP_WAIT = 312
pkg syscall (netbsd-arm64-cgo), const SYS__LWP_WAIT ideal-int