- Adds apiserver.latency.k8s.io/authentication annotation to the audit log to record the time spent authenticating slow requests.

	opts.sessionPolicy = sp

	return ctx, cred, opts, createReq, targetUser, APIError{}
}

// setReqInfoPolicyName will set the given policyName as a tag on the context's request info,
// so that it appears in audit logs.
func setReqInfoPolicyName(ctx context.Context, policyName string) {
	reqInfo := logger.GetReqInfo(ctx)
	reqInfo.SetTags("policyName", policyName)

- X.509 client certificate authentication to the kube-apiserver now produces credential IDs (derived from the certificate's signature) , for use in audit logging. ([#125634](https://github.com/kubernetes/kubernetes/pull/125634), [@ahmedtd](https://github.com/ahmedtd)) [SIG API Machinery, Auth and Testing]

### Feature

- Fixed a bug that caused apiservers to send an inappropriate Content-Type request header to authorization, token authentication, imagepolicy admission, and audit webhooks when the alpha client-go feature gate "ClientsPreferCBOR" is enabled. ([#132960](https://github.com/kubernetes/kubernetes/pull/132960), [@benluddy](https://github.com/benluddy)) [SIG API Machinery and Node]

- Updated an audit annotation key used by the `…/serviceaccounts/<name>/token` resource handler.

atami.shizuoka.jp
ath.cx
athleta
atl.jelastic.vps-host.net
atm.pl
atmeta.com
ato.br
atsugi.kanagawa.jp
atsuma.hokkaido.jp
attorney
au
au.eu.org
au.ngrok.io
auction
audi
audible
audio
audnedaln.no
augustow.pl
aukra.no
aure.no
aurland.no
aurskog-holand.no
aurskog-høland.no
aus.basketball
auspost
austevoll.no
austrheim.no

tp|tel|file|sms):|[^#&/:?]*(?:[#/?]|$))/i\n\n/**\n * A pattern that matches safe data URLs. Only matches image, video and audio types.\n *\n * Shoutout to Angular https://github.com/angular/angular/blob/12.2.x/packages/core/src/sanitization/url_sanitizer.ts\n */\nconst DATA_URL_PATTERN = /^data:(?:image\\/(?:bmp|gif|jpeg|jpg|png|tiff|webp)|video\\/(?:mpeg|mp4|ogg|webm)|audio\\/(?:mp3|oga|ogg|opus));base64,[\\d+/a-z]+=*$/i\n\nfunction allowedAttribute(attr, allowedAttributeList) {\n  const attrName...

* Audit events now log the existence and patch of mutating webhooks.  ([#77824](https://github.com/kubernetes/kubernetes/pull/77824), [@roycaihw](https://github.com/roycaihw))

atami.shizuoka.jp
ath.cx
athleta
atl.jelastic.vps-host.net
atm.pl
atmeta.com
ato.br
atsugi.kanagawa.jp
atsuma.hokkaido.jp
attorney
au
au.eu.org
au.ngrok.io
auction
audi
audible
audio
audnedaln.no
augustow.pl
aukra.no
aure.no
aurland.no
aurskog-holand.no
aurskog-høland.no
aus.basketball
auspost
austevoll.no
austrheim.no

*   Add var name to errors on variable restore.
*   Added an AudioSpectrogram op for audio feature generation.
*   Added `reduction` arg to losses.
*   `tf.placeholder` can represent scalar shapes and partially known.
*   Remove estimator_spec(mode) argument.
*   Added an AudioSpectrogram op for audio feature generation.
*   TensorBoard disables all runs by default if there are more than 40 runs.