- Disable watchcache for events.k8.io/Event resource for compatibility with core/Event. ([#96117](https://github.com/kubernetes/kubernetes/pull/96117), [@wojtek-t](https://github.com/wojtek-t)) [SIG Scalability]

  //
  // "csi.storage.k8s.io/ephemeral" is a new feature in Kubernetes 1.16. It is only
  // required for drivers which support both the "Persistent" and "Ephemeral" VolumeLifecycleMode.
  // Other drivers can leave pod info disabled and/or ignore this field.
  // As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when
  // deployed on such a cluster and the deployment determines which mode that is, for example

  // with restartPolicy=OnFailure.
  //
  // This field is alpha-level. To use this field, you must enable the
  // `JobPodFailurePolicy` feature gate (disabled by default).
  // +optional
  optional PodFailurePolicy podFailurePolicy = 11;

  // Specifies the number of retries before marking this job failed.
  // Defaults to 6
  // +optional

### Bug or Regression

- Fix pod restart after node reboot when NewVolumeManagerReconstruction feature gate is enabled and SELinuxMountReadWriteOncePod disabled ([#124142](https://github.com/kubernetes/kubernetes/pull/124142), [@bertinatto](https://github.com/bertinatto)) [SIG Node]

  * Fix incorrect CPU usage with 4.7 kernel
  * OOM parser uses kmsg
  * Add hugepages support
  * Add CRI-O support

* Sharing a PID namespace between containers in a pod is disabled by default in version 1.8. To enable for a node, use the `--docker-disable-shared-pid=false` kubelet flag. Be aware that PID namespace sharing requires Docker version greater than or equal to 1.13.1.

* Fix issues related to the eviction manager.

  This feature is disabled-by-default and can be enabled using the new ConcurrentWatchObjectDecode feature gate. ([#126329](https://github.com/kubernetes/kubernetes/pull/126329), [@serathius](https://github.com/serathius)) [SIG API Machinery, Etcd and Testing]

### Bug or Regression

  //
  // "csi.storage.k8s.io/ephemeral" is a new feature in Kubernetes 1.16. It is only
  // required for drivers which support both the "Persistent" and "Ephemeral" VolumeLifecycleMode.
  // Other drivers can leave pod info disabled and/or ignore this field.
  // As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when
  // deployed on such a cluster and the deployment determines which mode that is, for example

labels.purge_by_bots=Bot-Namen zur Bereinigung
labels.csv_file_encoding=Kodierung für CSV
labels.notification_to=Benachrichtigung an
labels.pathmap_configuration=Pfad-Zuordnung
labels.pathmap_title_details=Pfad-Zuordnung
labels.disabled=Deaktiviert
labels.pathmap_pt_crawling=Crawlen
labels.pathmap_pt_displaying=Anzeigen
labels.pathmap_pt_both=Crawlen/Anzeigen
labels.regular_name=Regulärer Name
labels.duplicate_name=Dupplizierter Name

labels.csv_file_encoding	=	Encodage pour CSV
labels.notification_to	=	E-mail de notification
labels.pathmap_configuration	=	Mapping du chemin
labels.pathmap_title_details	=	Mapping du chemin
labels.disabled	=	Désactivé
labels.pathmap_pt_crawling	=	Exploration
labels.pathmap_pt_displaying	=	Affichage
labels.pathmap_pt_both	=	Explorer/afficher
labels.pathmap_pt_stored	=	URL stockées
labels.regular_name	=	Nom régulier

<img src="/img/tutorial/security/image08.png">

エンドポイント`/users/me/`を呼び出すと、次のようなレスポンスが得られます：

```JSON
{
  "username": "johndoe",
  "email": "******@****.***",
  "full_name": "John Doe",
  "disabled": false
}
```

<img src="/img/tutorial/security/image09.png">

開発者ツールを開くと、送信されるデータにはトークンだけが含まれており、パスワードはユーザーを認証してアクセストークンを取得する最初のリクエストでのみ送信され、その後は送信されないことがわかります。