* kube-apiserver: Fixed a regression accepting patch requests > 1MB ([#84963](https://github.com/kubernetes/kubernetes/pull/84963), [@liggitt](https://github.com/liggitt))
* kube-apiserver: fixed a bug that could cause a goroutine leak if the apiserver encountered an encoding error serving a watch to a websocket watcher ([#84693](https://github.com/kubernetes/kubernetes/pull/84693), [@tedyu](https://github.com/tedyu))

            final char[] out = new char[in.length];
            final int length = in.length;
            int i, o, state;
            final int s;

            /* The canonicalization routine
             */
            state = 0;
            o = 0;
            for (i = 0; i < length; i++) {
                switch (state) {
                case 0:
                    if (in[i] != '/') {

## Changelog since v1.13.2

### Other notable changes

* Update to go1.11.5 ([#73326](https://github.com/kubernetes/kubernetes/pull/73326), [@ixdy](https://github.com/ixdy))
* add goroutine to move unschedulable pods to activeq if they are not retried for more than 1 minute ([#72558](https://github.com/kubernetes/kubernetes/pull/72558), [@denkensk](https://github.com/denkensk))

* fixes an error processing watch events when running skewed apiservers ([#73482](https://github.com/kubernetes/kubernetes/pull/73482), [@liggitt](https://github.com/liggitt))
* add goroutine to move unschedulable pods to activeq if they are not retried for more than 1 minute ([#72558](https://github.com/kubernetes/kubernetes/pull/72558), [@denkensk](https://github.com/denkensk))

- Bump `sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30` to fix a goroutine leak in kube-apiserver when using egress selctor with the gRPC mode. ([#108437](https://github.com/kubernetes/kubernetes/pull/108437), [@andrewsykim](https://github.com/andrewsykim))

= iota indicatorFalse indicatorTrue ) // ResetServiceIndicato clears the service indicator for the running goroutine. func ResetServiceIndicato() { setIndicator(indicatorUnset) } // ServiceIndicator returns true if and only if all services invoked by this // goroutine since the last ResetServiceIndicato call are approved. // // If ResetServiceIndicato was not called before by this goroutine, its return // value is undefined. func ServiceIndicator() bool { return getIndicator() == indicatorTrue }...

= iota indicatorFalse indicatorTrue ) // ResetServiceIndicato clears the service indicator for the running goroutine. func ResetServiceIndicato() { setIndicator(indicatorUnset) } // ServiceIndicator returns true if and only if all services invoked by this // goroutine since the last ResetServiceIndicato call are approved. // // If ResetServiceIndicato was not called before by this goroutine, its return // value is undefined. func ServiceIndicator() bool { return getIndicator() == indicatorTrue }...

* Fix resync goroutine leak in ListAndWatch ([#35672](https://github.com/kubernetes/kubernetes/pull/35672), [@tatsuhiro-t](https://github.com/tatsuhiro-t))

#### client-go

### Bug or Regression

- Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client to v0.0.30, fixing goroutine leaks in kube-apiserver. ([#108440](https://github.com/kubernetes/kubernetes/pull/108440), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery and Cloud Provider]

### Bug or Regression

- Disabled a previously on-by-default optimization for the API server where each **watch** response used a dedicated goroutine. The `APIServingWithRoutine` feature gate has been demoted from beta to alpha, and is now off by default. ([#126481](https://github.com/kubernetes/kubernetes/pull/126481), [@benluddy](https://github.com/benluddy)) [SIG API Machinery]