// uid contains the uid of the user that created the CertificateSigningRequest.
  // Populated by the API server on creation and immutable.
  // +optional
  optional string uid = 3;

  // groups contains group membership of the user that created the CertificateSigningRequest.
  // Populated by the API server on creation and immutable.
  // +listType=atomic
  // +optional
  repeated string groups = 4;

pkg syscall (darwin-arm64), const IPV6_MAX_MEMBERSHIPS = 4095
pkg syscall (darwin-arm64), const IPV6_MAX_MEMBERSHIPS ideal-int
pkg syscall (darwin-arm64), const IPV6_MAX_SOCK_SRC_FILTER = 128
pkg syscall (darwin-arm64), const IPV6_MAX_SOCK_SRC_FILTER ideal-int
pkg syscall (darwin-arm64), const IPV6_MIN_MEMBERSHIPS = 31
pkg syscall (darwin-arm64), const IPV6_MIN_MEMBERSHIPS ideal-int
pkg syscall (darwin-arm64), const IPV6_MMTU = 1280

			gSet := set.CreateStringSet(cred.Groups...)
			if gSet.Equals(currGroupsSet) {
				// No change to groups memberships for this
				// credential.
				continue
			}

			// Expired credentials don't need group membership updates.
			if cred.IsExpired() {
				continue
			}

			cred.Groups = currGroups

pkg syscall (freebsd-arm64), const INPCK = 16
pkg syscall (freebsd-arm64), const INPCK ideal-int
pkg syscall (freebsd-arm64), const IP_ADD_MEMBERSHIP = 12
pkg syscall (freebsd-arm64), const IP_ADD_SOURCE_MEMBERSHIP = 70
pkg syscall (freebsd-arm64), const IP_ADD_SOURCE_MEMBERSHIP ideal-int
pkg syscall (freebsd-arm64), const IP_BINDANY = 24
pkg syscall (freebsd-arm64), const IP_BINDANY ideal-int

pkg syscall (darwin-386), const IPV6_MAX_GROUP_SRC_FILTER ideal-int
pkg syscall (darwin-386), const IPV6_MAX_MEMBERSHIPS ideal-int
pkg syscall (darwin-386), const IPV6_MAX_SOCK_SRC_FILTER ideal-int
pkg syscall (darwin-386), const IPV6_MIN_MEMBERSHIPS ideal-int
pkg syscall (darwin-386), const IPV6_MMTU ideal-int
pkg syscall (darwin-386), const IPV6_PORTRANGE ideal-int

     * <p/>
     * This method is designed to assist with computing access control for a
     * given user when the target object's ACL has local groups. Local groups
     * are not listed in a user's group membership (e.g. as represented by the
     * tokenGroups constructed attribute retrived via LDAP).
     * <p/>
     * Domain groups nested inside a local group are currently not expanded. In

pkg syscall (freebsd-386-cgo), const IPV6_MAX_GROUP_SRC_FILTER ideal-int
pkg syscall (freebsd-386-cgo), const IPV6_MAX_MEMBERSHIPS ideal-int
pkg syscall (freebsd-386-cgo), const IPV6_MAX_SOCK_SRC_FILTER ideal-int
pkg syscall (freebsd-386-cgo), const IPV6_MIN_MEMBERSHIPS ideal-int
pkg syscall (freebsd-386-cgo), const IPV6_MMTU ideal-int
pkg syscall (freebsd-386-cgo), const IPV6_MSFILTER ideal-int

pkg syscall (netbsd-arm64-cgo), const IP_IPSEC_POLICY = 22
pkg syscall (netbsd-arm64-cgo), const IP_IPSEC_POLICY ideal-int
pkg syscall (netbsd-arm64-cgo), const IP_MAX_MEMBERSHIPS = 20
pkg syscall (netbsd-arm64-cgo), const IP_MAX_MEMBERSHIPS ideal-int
pkg syscall (netbsd-arm64-cgo), const IP_MAXPACKET = 65535
pkg syscall (netbsd-arm64-cgo), const IP_MAXPACKET ideal-int
pkg syscall (netbsd-arm64-cgo), const IP_MF = 8192

  // to the container's primary GID, the fsGroup (if specified), and group memberships
  // defined in the container image for the uid of the container process. If unspecified,
  // no additional groups are added to any container. Note that group memberships
  // defined in the container image for the uid of the container process are still effective,

* fix kubelet event recording for selected events. ([#46246](https://github.com/kubernetes/kubernetes/pull/46246),...