- Adopted a new implementation of watch caches for **list** verbs, using a btree data structure. The new implementation is active by default; you can opt out by disabling the `BtreeWatchCache` feature gate. ([#128415](https://github.com/kubernetes/kubernetes/pull/128415), [@serathius](https:/...

- The EndpointSlice controller now waits for EndpointSlice and Node caches to be synced before starting. ([#94086](https://github.com/kubernetes/kubernetes/pull/94086), [@robscott](https://github.com/robscott)) [SIG Apps and Network]

* PodSecurityPolicies can now specify a whitelist of allowed paths for host volumes. ([#50212](https://github.com/kubernetes/kubernetes/pull/50212), [@jhorwit2](https://github.com/jhorwit2))

* API server authentication now caches successful bearer token authentication results for a few seconds. ([#50258](https://github.com/kubernetes/kubernetes/pull/50258), [@liggitt](https://github.com/liggitt))

		}
	}
	return true
}

// cache of IAM info fetched in last SiteReplicationMetaInfo call
type srIAMCache struct {
	sync.RWMutex
	lastUpdate time.Time
	srIAMInfo  madmin.SRInfo // caches IAM info
}

func (c *SiteReplicationSys) getSRCachedIAMInfo() (info madmin.SRInfo, ok bool) {
	c.iamMetaCache.RLock()
	defer c.iamMetaCache.RUnlock()
	if c.iamMetaCache.lastUpdate.IsZero() {

appspaceusercontent.com
appspot.com
appudo.net
aq
aq.it
aquarelle
aquila.it
ar
ar.it
ar.us
arab
arai.shizuoka.jp
arakawa.saitama.jp
arakawa.tokyo.jp
aramco
arao.kumamoto.jp
archer.replit.dev
archi
architectes.bj
ardal.no
aremark.no
arendal.no
arezzo.it
ariake.saga.jp
arida.wakayama.jp
aridagawa.wakayama.jp
arita.saga.jp
arkhangelsk.su
armenia.su
army

- Added automatic download of the CNI binary in `local-up-cluster.sh`, facilitating local debugging. ([#120312](https://github.com/kubernetes/kubernetes/pull/120312), [@HirazawaUi](https://github.com/HirazawaUi))
- Added context to `caches populated` log messages. ([#119796](https://github.com/kubernetes/kubernetes/pull/119796), [@sttts](https://github.com/sttts))

- Fixes a regression that could cause panics in LRU caches in controller-manager, kubelet, kube-apiserver, or client-go. ([#104466](https://github.com/kubernetes/kubernetes/pull/104466), [@stbenjam](https://github.com/stbenjam))

appspaceusercontent.com
appspot.com
appudo.net
aq
aq.it
aquarelle
aquila.it
ar
ar.it
ar.us
arab
arai.shizuoka.jp
arakawa.saitama.jp
arakawa.tokyo.jp
aramco
arao.kumamoto.jp
archer.replit.dev
archi
architectes.bj
ardal.no
aremark.no
arendal.no
arezzo.it
ariake.saga.jp
arida.wakayama.jp
aridagawa.wakayama.jp
arita.saga.jp
arkhangelsk.su
armenia.su
army

- The EndpointSlice controller now waits for EndpointSlice and Node caches to be synced before starting. ([#94086](https://github.com/kubernetes/kubernetes/pull/94086), [@robscott](https://github.com/robscott)) [SIG Apps and Network]

- `client-go`: Improved memory use of reflector caches when watching large numbers
  of objects which do not change frequently. ([#113362](https://github.com/kubernetes/kubernetes/pull/113362), [@sxllwx](https://github.com/sxllwx))