- The `system:aggregate-to-edit` role no longer includes write access to the Endpoints API. For new Kubernetes 1.22 clusters, the `edit` and `admin` roles will no longer include that access in newly created Kubernetes 1.22 clusters. This will have no affect on existing clusters upgrading to Kubernetes 1.22. To retain write access to Endpoints in the aggregated `edit` and `admin` roles for newly created 1.22 clusters, refer to https://github.com/kubernetes/website/pull/29025....

    public static final int POLICY_INFO_PRIMARY_DOMAIN = 3;
    /** Policy information level for account domain. */
    public static final int POLICY_INFO_ACCOUNT_DOMAIN = 5;
    /** Policy information level for server role. */
    public static final int POLICY_INFO_SERVER_ROLE = 6;
    /** Policy information level for modification details. */
    public static final int POLICY_INFO_MODIFICATION = 9;

- **Auth**
  - [alpha] Further polishing of the Role-based access control alpha API including a default set of cluster roles. ([docs](http://kubernetes.io/docs/admin/authorization/)) ([kubernetes/features#2](https://github.com/kubernetes/enhancements/issues/2))

labels.facet=패싯
labels.geo=지오
labels.groups=그룹
labels.hash=해시
labels.kuromojiFile=Kuromoji 파일
labels.maxSize=최대 크기
labels.order=순서
labels.purgeSuggestSearchLogDay=이전 추천 정보 삭제
labels.q=쿼리
labels.roles=역할
labels.suggestSearchLog=추천용 검색 로그
labels.suggestWord=추천 단어
labels.targetLabel=라벨
labels.term=검색어
labels.fields=필드
labels.ex_q=확장 쿼리
labels.oldPassword=현재 비밀번호
labels.newPassword=새 비밀번호

labels.groups=Группы
labels.hash=Хэш
labels.kuromojiFile=Файл Kuromoji
labels.maxSize=Максимальный размер
labels.order=Порядок
labels.purgeSuggestSearchLogDay=Удалить старую информацию о предложениях
labels.q=Запрос
labels.roles=Роли
labels.suggestSearchLog=Журнал поиска предложений
labels.suggestWord=Предложить слово
labels.targetLabel=Метка
labels.term=Термин
labels.fields=Поля
labels.ex_q=Расширенный запрос

labels.groups=Gruppi
labels.hash=Hash
labels.kuromojiFile=File kuromoji
labels.maxSize=Dimensione massima
labels.order=Ordine
labels.purgeSuggestSearchLogDay=Elimina informazioni suggerite precedenti
labels.q=Query
labels.roles=Ruoli
labels.suggestSearchLog=Log di ricerca suggeriti
labels.suggestWord=Parola suggerita
labels.targetLabel=Etichetta
labels.term=Termine di ricerca
labels.fields=Campi
labels.ex_q=Query estesa

`-${Math.floor(Math.random() * 1000)}`\n      navId += `-${Math.floor(Math.random() * 1000)}`\n    }\n\n    const newNavItem = `<li class=\"nav-item\" role=\"presentation\"><a href=\"#\" class=\"btn-iframe-close\" data-widget=\"iframe-close\" data-type=\"only-this\"><i class=\"fas fa-times\"></i></a><a class=\"nav-link\" data-toggle=\"row\" id=\"${navId}\" href=\"#${tabId}\" role=\"tab\" aria-controls=\"${tabId}\" aria-selected=\"false\">${title}</a></li>`\n    $(SELECTOR_TAB_NAVBAR_NAV).append(unescape(escape(newNavItem)))\n\n...

labels.facet=分面
labels.geo=地理
labels.groups=组
labels.hash=哈希
labels.kuromojiFile=Kuromoji文件
labels.maxSize=最大大小
labels.order=顺序
labels.purgeSuggestSearchLogDay=删除以前的建议信息
labels.q=查询
labels.roles=角色
labels.suggestSearchLog=建议搜索日志
labels.suggestWord=建议词
labels.targetLabel=标签
labels.term=搜索词
labels.fields=字段
labels.ex_q=扩展查询
labels.oldPassword=当前密码
labels.newPassword=新密码

([#67349](https://github.com/kubernetes/kubernetes/pull/67349), [@mikedanese](https://github.com/mikedanese))
- The admin RBAC role now aggregates edit and view.  The edit RBAC role now aggregates view.  ([#66684](https://github.com/kubernetes/kubernetes/pull/66684), [@deads2k](https://github.com/deads2k))

	} else {
		c.iamUsersMap[key] = u
	}
	c.updatedAt = time.Now()
	return nil
}

// IAMStorageAPI defines an interface for the IAM persistence layer
type IAMStorageAPI interface {
	// The role of the read-write lock is to prevent go routines from
	// concurrently reading and writing the IAM storage. The (r)lock()
	// functions return the iamCache. The cache can be safely written to
	// only when returned by `lock()`.