- When client certificate files are provided, reload files for new connections, and close connections when a certificate changes. ([#79083](https://github.com/kubernetes/kubernetes/pull/79083), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery, Auth, Node and Testing]

pkg log/syslog (freebsd-arm64), func NewLogger(Priority, int) (*log.Logger, error)
pkg log/syslog (freebsd-arm64), method (*Writer) Alert(string) error
pkg log/syslog (freebsd-arm64), method (*Writer) Close() error
pkg log/syslog (freebsd-arm64), method (*Writer) Crit(string) error
pkg log/syslog (freebsd-arm64), method (*Writer) Debug(string) error
pkg log/syslog (freebsd-arm64), method (*Writer) Emerg(string) error

* fix kubectl taint e2e flake: add retries for removing taint ([#33872](https://github.com/kubernetes/kubernetes/pull/33872), [@kevin-wangzefeng](https://github.com/kevin-wangzefeng))
* portfordwardtester: avoid data loss during send+close+exit ([#37103](https://github.com/kubernetes/kubernetes/pull/37103), [@sttts](https://github.com/sttts))

    * Authenticated users are decorated with a 'system:authenticated' group.
    * NOTE: anonymous access is enabled by default. If you rely on authentication alone to authorize access, change to use an authorization mode other than AlwaysAllow, or or set '--anonymous-auth=false'.

### Volumes
* StorageClass pre-installed and set as default on Azure, AWS, GCE, OpenStack, and vSphere.
  * This is something to pay close attention to if you’ve been using Kubernetes for a while, because it changes the default behavior of PersistentVolumeClaim objects on these clouds.

- No-op and GC related updates to cluster trust...

*   `import tensorflow` now goes much faster.
*   Adds a file cache to the GCS filesystem with configurable max staleness for
    file contents. This permits caching of file contents across close/open
    boundaries.
*   Added an axis parameter to `tf.gather`.
*   Added a `constant_values` keyword argument to `tf.pad`.
*   Adds `Dataset.interleave` transformation.

- Do not unmount and mount subpath bind mounts during container creation unless bind mount changes ([#105512](https://github.com/kubernetes/kubernetes/pull/105512), [@gnufied](https://github.com/gnufied)) [SIG Storage]
- Don't prematurely close reflectors in case of slow initialization in watch based manager to fix issues with inability to properly mount secrets/configmaps. ([#104604](https://github.com/kubernetes/kubernetes/pull/104604), [@wojtek-t](https://github.com/wojtek-t))

pkg syscall (linux-386), const VSWTC = 7
pkg syscall (linux-386), const VTIME = 5
pkg syscall (linux-386), const VWERASE = 14
pkg syscall (linux-386), const WALL = 1073741824
pkg syscall (linux-386), const WCLONE = 2147483648
pkg syscall (linux-386), const WCONTINUED = 8
pkg syscall (linux-386), const WEXITED = 4
pkg syscall (linux-386), const WNOHANG = 1
pkg syscall (linux-386), const WNOTHREAD = 536870912

* fix azure retry issue when return 2XX with error ([#78298](https://github.com/kubernetes/kubernetes/pull/78298), [@andyzhangx](https://github.com/andyzhangx))
* kubelet: fix fail to close kubelet->API connections on heartbeat failure when bootstrapping or client certificate rotation is disabled ([#78016](https://github.com/kubernetes/kubernetes/pull/78016), [@gaorong](https://github.com/gaorong))