- Fixed a kubelet issue that could result in invalid pod status updates to be sent to the api-server where pods would be reported in a terminal phase but also report a ready condition of true in some cases. ([#110481](https://github.com/kubernetes/kubernetes/pull/110481), [@bobbypage](https://github.com/bobbypage)) [SIG Node and...

* On GCE, the apiserver audit log (`/var/log/kube-apiserver-audit.log`) will be sent through fluentd if enabled. It will go to the same place as `kube-apiserver.log`, but tagged as its own stream. ([#41360](https://github.com/kubernetes/kubernetes/pull/41360), [@enisoc](https://github.com/enisoc))

          <match value="Relay-Version:" type="stringignorecase" offset="0"/>
          <match value="Return-Path:" type="stringignorecase" offset="0"/>
          <match value="Sent:" type="string" offset="0"/>
          <match value="Status:" type="string" offset="0"/>
          <match value="Subject:" type="string" offset="0"/>
          <match value="To:" type="string" offset="0"/>

* fix apps DeploymentSpec conversion issue ([#49719](https://github.com/kubernetes/kubernetes/pull/49719), [@dixudx](https://github.com/dixudx))
* fluentd-gcp addon: Fix a bug in the event-exporter, when repeated events were not sent to Stackdriver. ([#50511](https://github.com/kubernetes/kubernetes/pull/50511), [@crassirostris](https://github.com/crassirostris))

### Promoted SeccompDefault to Beta

- Kube-proxy: Traffic from the cluster directed to ExternalIPs is always sent directly to the Service. ([#96296](https://github.com/kubernetes/kubernetes/pull/96296), [@aojea](https://github.com/aojea)) [SIG Network and Testing]

- Set metrics-server's metric-resolution to 15s. ([#117121](https://github.com/kubernetes/kubernetes/pull/117121), [@dgrisonnet](https://github.com/dgrisonnet)) [SIG Cloud Provider and Instrumentation]
- SubjectAccessReview requests sent to webhook authorizers now default `spec.resourceAttributes.version` to `*` if unset. ([#116937](https://github.com/kubernetes/kubernetes/pull/116937), [@AxeZhan](https://github.com/AxeZhan)) [SIG Apps and Auth]

* Fixes an issue with missing apiVersion/kind in object data sent to admission webhooks ([#74448](https://github.com/kubernetes/kubernetes/pull/74448), [@liggitt](https://github.com/liggitt))

- AdmissionReview objects sent for the creation of Namespace API objects now populate the `namespace` attribute consistently (previously the `namespace` attribute was empty for Namespace creation via POST requests, and populated for Namespace creation via server-side-apply PATCH...

i]) i -= _S k++ } for s := 0; s < _W && k < len(x.limbs) && i > 0; s += 8 { x.limbs[k] |= uint(b[i-1]) << s i-- } if i > 0 { return errors.New("input overflows the modulus size") } return nil } // SetUint assigns x = y. // // The output will be resized to a single limb and overwritten. func (x *Nat) SetUint(y uint) *Nat { x.reset(1) x.limbs[0] = y return x } // Equal returns 1 if x == y, and 0 otherwise. // // Both operands must have the same announced length. // //go:norace func (x *Nat) Equal(y *Nat)...