* Add error message when trying to use clusterrole with namespace in kubectl ([#36424](https://github.com/kubernetes/kubernetes/pull/36424), [@xilabao](https://github.com/xilabao))

* Pods that are marked for deletion and have exceeded their grace period, but are not yet deleted, no longer count toward the resource quota.([#46542](https://github.com/kubernetes/kubernetes/pull/46542))


#### Dynamic Admission Control

AAKe,iCAAiCsmB,GAEjEpmB,UAAEomB,GACClhB,YAAYuJ,IACZrL,IAAIrE,EAAKD,eAAgBuiB,GACzBte,qBAAqBhD,QAExBshB,KAIJgF,sBAAA,SAAoB9mB,EAAS6mB,EAAQnO,GACnC,GAAImO,EAAQ,CACVpmB,UAAEomB,GAAQlhB,YAAYe,IAEtB,IAAMqgB,EAAgBtmB,UAAEomB,EAAO3jB,YAAY6f,KAxHV,4BA0H/B,GAEEgE,GACFtmB,UAAEsmB,GAAephB,YAAYe,IAGK,QAAhCmgB,EAAO3mB,aAAa,SACtB2mB,EAAOlf,aAAa,iBAAiB,GAIzClH,UAAET,GAASgO,SAAStH,IACiB,QAAjC1G,EAAQE,aAAa,SACvBF,EAAQ2H,aAAa,iBAAiB,GAGxCnI,EAAKwB,OAAOhB,GAERA,EAAQsH,UAAUC,SAAS8N,KAC7BrV,EAAQsH,UAAUmB,IAAIyG,IAGxB...

- Service account tokens bound to pods can now be used during the pod deletion grace period. ([#89583](https://github.com/kubernetes/kubernetes/pull/89583), [@liggitt](https://github.com/liggitt)) [SIG Auth]

 * Copyright 2011-2019 Twitter, Inc.
 * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)

 * Copyright 2011-2022 Twitter, Inc.
 * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)

Aditya Kane, AdityaKane2001, ag.ramesh, Amogh Joshi, Armen Poghosov,
armkevincheng, Avrosh K, Ayan Moitra, azazhu, Banikumar Maiti, Bas Aarts, bhack,
Bhanu Prakash Bandaru Venkata, Billy Cao, Bohumir Zamecnik, Bradley Reece,
CyanXu, Daniel Situnayake, David Pal, Ddavis-2015, DEKHTIARJonathan, Deven
Desai, Duncan Riach, Edward, Eli Osherovich, Eugene Kuznetsov, europeanplaice,

- Fixed restricted debug profile. ([#117543](https://github.com/kubernetes/kubernetes/pull/117543), [@mochizuki875](https://github.com/mochizuki875))
- Fixed the `preStop` hook. This will now block the pod termination grace period. ([#115835](https://github.com/kubernetes/kubernetes/pull/115835), [@HirazawaUi](https://github.com/HirazawaUi))

- Deprecated the following kubectl run flags, which are ignored if set: `--cascade`, `--filename`, `--force`, `--grace-period`, `--kustomize`, `--recursive`, `--timeout`, `--wait`. ([#112261](https://github.com/kubernetes/kubernetes/pull/112261), [@brianpursley](https://github.com/brianpursley))

## Changelog since v1.7.7

### Other notable changes

* Ignore pods marked for deletion that exceed their grace period in ResourceQuota ([#46542](https://github.com/kubernetes/kubernetes/pull/46542), [@derekwaynecarr](https://github.com/derekwaynecarr))