* Defaults for file audit logging backend in batch mode changed: ([#67223](https://github.com/kubernetes/kubernetes/pull/67223), [@tallclair](https://github.com/tallclair))
    * Logs are written 1 at a time (no batching)
    * Only a single writer process (lock contention)

- kubeadm: make sure the extra environment variables written to a kubeadm managed PodSpec are sorted alpha-numerically by the environment variable name. ([#126743](https://github.com/kubernetes/kubernetes/pull/126743), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]

users must manually remove this flag from their `kubelet` configuration to prevent startup failures before upgrading `kubelet`. For `kubeadm` clusters, if users pass extra arguments to the `kubelet` like `--pod-infra-container-image`, it will be written to the `kubelet` env file during the `init` phase. `kubeadm` does not remove it during the `init` or `join` phase, so users must manually remove it from `extraArgs` in the `kubelet` configuration file. ([#133779](https://github.com/kubernetes/kub...

Section 10.1.2.2. // K = HMAC (K, V || 0x00 || provided_data) h := hmac.New(hash, K) h.Write(d.V) h.Write([]byte{0x00}) h.Write(entropy) h.Write(nonce) switch s := s.(type) { case plainPersonalization: h.Write(s) case blockAlignedPersonal: l := len(d.V) + 1 + len(entropy) + len(nonce) for _, b := range s { pad000(h, l) h.Write(b) l = len(b) } } K = h.Sum(K[:0]) // V = HMAC (K, V) h = hmac.New(hash, K) h.Write(d.V) d.V = h.Sum(d.V[:0]) // K = HMAC (K, V || 0x01 || provided_data). h.Reset() h.Write(d.V)...

pkg bufio, func ScanWords([]uint8, bool) (int, []uint8, error)
pkg bufio, method (*Reader) WriteTo(io.Writer) (int64, error)
pkg bufio, method (*Scanner) Bytes() []uint8
pkg bufio, method (*Scanner) Err() error
pkg bufio, method (*Scanner) Scan() bool
pkg bufio, method (*Scanner) Split(SplitFunc)
pkg bufio, method (*Scanner) Text() string
pkg bufio, method (*Writer) ReadFrom(io.Reader) (int64, error)

- Kubectl cluster-info dump changed to only display a message telling you the location where the output was written when the output is not standard output. ([#88765](https://github.com/kubernetes/kubernetes/pull/88765), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]

- Fixed `creationTimestamp: null` causing unnecessary writes to etcd. ([#116865](https://github.com/kubernetes/kubernetes/pull/116865), [@alexzielenski](https://github.com/alexzielenski))

Section 10.1.2.2. // K = HMAC (K, V || 0x00 || provided_data) h := hmac.New(hash, K) h.Write(d.V) h.Write([]byte{0x00}) h.Write(entropy) h.Write(nonce) switch s := s.(type) { case plainPersonalization: h.Write(s) case blockAlignedPersonal: l := len(d.V) + 1 + len(entropy) + len(nonce) for _, b := range s { pad000(h, l) h.Write(b) l = len(b) } } K = h.Sum(K[:0]) // V = HMAC (K, V) h = hmac.New(hash, K) h.Write(d.V) d.V = h.Sum(d.V[:0]) // K = HMAC (K, V || 0x01 || provided_data). h.Reset() h.Write(d.V)...

    * inside of which a write lock was intended to prevent races against
    * VM creation, but the usage of the sync.RWMutex type is incorrect,
    * plus is placed in a defer call so the locking is effectively
    * nonexistent.  This patch adds an anonymous function call inside
    * the loop to correctly handle acquiring the write lock with deferred

- Fixed #118052: nodeAffinity on pods can change prior to scheduling gates being removed even when podSpec.affinity is nil in the initial spec, this matches the 1.28 behavior to allow consistent integrators to be written. ([#118199](https://github.com/kubernetes/kubernetes/pull/118199), [@aleskandro](https://github.com/aleskandro)) [SIG Apps, Scheduling and Testing]