- Kubeadm: only taint control plane nodes when the legacy "master" taint is present. This avoids a bug where "kubeadm upgrade" will re-taint a control plane node with the new "control plane" taint even if the user explicitly untainted the node. ([#109841](https://github.com/kubernetes/kubernetes/pull/109841), [@neolit123](https:...

    REACHABILITY_FENCE_CALLER.reachabilityFence(o);
  }

  private enum ReachabilityFenceCaller {
    @J2ObjCIncompatible
    REAL_CALLER {
      // We call the method only after checking that it's present.
      @IgnoreJRERequirement
      @SuppressWarnings({
        "Java8ApiChecker",
        "NewApi",
        // This method is a helper, which we call from a `finally` block, as recommended.

true` and declare ports, get the `hostPort` field set automatically. Previously this would happen in the PodTemplate of a Deployment, DaemonSet or other workload API.  Now `hostPort` will only be set when an actual Pod is being created.  If this presents a problem, setting the feature gate "DefaultHostNetworkHostPortsInPodTemplates" to true will revert this behavior.  Please file a kubernetes bug if you need to do this. ([#117696](https://github.com/kubernetes/kubernetes/pull/117696), [@thockin]...

session.tracking.modes=cookie

# Comma-separated list of request parameter keys to store in cookies before SSO login.
cookie.search.parameter.keys=q,num,sort
# Comma-separated list of required parameter keys that must be present to store in cookies.
cookie.search.parameter.required_keys=q
# Maximum length of the encoded search parameters stored in cookies.
cookie.search.parameter.max.length=1000

        .build()
    val response = get(url)
    assertThat(response.body.string()).isEqualTo(entryBody)
    assertThat(response.header("Content-Length")).isEqualTo("3")
  }

  /** The TLS version is present in OkHttp 3.0 and beyond.  */
  @Test
  fun testGoldenCacheHttpsResponseOkHttp30() {
    addFinalFailingResponse()

    val url = server.url("/")
    val urlKey = key(url)

- The OpenAPI version field will now be properly autopopulated without needing other OpenAPI fields present in generic API server code. ([#66411](https://github.com/kubernetes/kubernetes/pull/66411), [@DirectXMan12](https://github.com/DirectXMan12))

                // The destination path should be relative to the share
                String destPath = dest.getUncPath();
                // Remove leading backslash if present
                if (destPath.startsWith("\\")) {
                    destPath = destPath.substring(1);
                }

                // Open the source file for renaming

### Kubernetes API Reference Documentation

claim, the kube-controller-manager will be aware of the `volumeAttributesClassName` field of PVC and PV objects. The `volumeAttributesClassName` field is a reference to a VolumeAttributesClass object, which contains a set of key-value pairs that present mutable attributes of the volume. It's forbidden to change the `volumeAttributesClassName` field of a PVC object until the PVC is bound to a PV object. During the binding process, if a PVC has a `volumeAttributesClassName` field set, the controller...

- `etcd: Update etcd to `v3.6.6`. (#135271, @bzsuni) [SIG API Machinery, Cloud Provider, Cluster Lifecycle, Etcd and Testing]
- Fix a bug in the kube-apiserver where a malformed Service without name can cause high CPU usage. The bug is present on the new Cluster IP allocators enabled with the feature MultiCIDRServiceAllocator (enabled by default since 1.33)


## Dependencies

### Added
- cyphar.com/go-pathrs: v0.2.1