* Resolves an issue serving aggregated APIs backed by services that respond to requests to `/` with non-2xx HTTP responses ([#79895](https://github.com/kubernetes/kubernetes/pull/79895), [@deads2k](https://github.com/deads2k))

A650          ; mapped                 ; A651          # 5.1  CYRILLIC CAPITAL LETTER YERU WITH BACK YER
A651          ; valid                                  # 5.1  CYRILLIC SMALL LETTER YERU WITH BACK YER
A652          ; mapped                 ; A653          # 5.1  CYRILLIC CAPITAL LETTER IOTIFIED YAT

raw string literals and interpreted string literals.
</p>

<p>
Raw string literals are character sequences between back quotes, as in
<code>`foo`</code>.  Within the quotes, any character may appear except
back quote. The value of a raw string literal is the
string composed of the uninterpreted (implicitly UTF-8-encoded) characters
between the quotes;

GACpB,GAAY,OAARqP,EACF7Q,EAAAA,QAAEuN,IAA8BlK,SAChCrD,EAAAA,QAAE4N,IAAmBvK,SACrBrD,EAAAA,QAAE0N,IAAoB1F,YACjB,GAAY,aAAR6I,EACT7Q,EAAAA,QAAKuN,GAAJ,iBAAiDlK,SAClDrD,EAAAA,QAAK4N,GAAJ,iBAAsCvK,cAClC,GAAY,aAARwN,EAAqB,CAC9B,IAAMC,EAAY9Q,EAAAA,QAAEwB,GACduP,EAAWD,EAAU1F,OAAO,aAC5B4F,EAAiBD,EAAS3F,SAC1B6F,EAAeF,EAASG,QACxB1B,EAAQsB,EAAUpG,SAAS,aAAaR,KAAK,iBAGnD,GAFA6G,EAAS1N,SACTrD,EAAAA,QAAC,IAAKwP,GAASnM,SACXrD,EAAAA,QAAEyN,IAAsBlI,WAAWsF,QAAU7K,EAAAA,QAAK0N,GAAJ,KAA2BC,IAAwB9C,OACnG7K,EAAAA,QAAE0N...

			return false
		}

		// Finally, if there is no parent policy, check if a policy claim is
		// present in the session token.
		if len(policies) == 0 {
			// If there is no parent policy mapping, we fall back to
			// using policy claim from JWT.
			policySet, ok := args.GetPolicies(iamPolicyClaimNameOpenID())
			if !ok {
				// When claims are set, it should have a policy claim field.
				return false
			}

   *       {@link #withoutCloser(AsyncFunction)}
   * </ul>
   *
   * <p>Example usage:
   *
   * {@snippet :
   * // Fall back to a secondary input stream in case of IOException.
   * ClosingFuture<InputStream> inputFuture =
   *     firstInputFuture.catchingAsync(

	defer store.unlock()

	// Handle policy mapping removal.
	if policy == "" {
		if store.getUsersSysType() == LDAPUsersSysType {
			// Add a fallback removal towards previous content that may come back
			// as a ghost user due to lack of delete, this change occurred
			// introduced in PR #11840
			store.deleteMappedPolicy(ctx, name, regUser, false)
		}

                                        null);
                            } catch (SmbException se) {
                                // Handle specific not-found errors without falling back to queryPath
                                switch (se.getNtStatus()) {
                                case NtStatus.NT_STATUS_NO_SUCH_FILE:
                                case NtStatus.NT_STATUS_OBJECT_NAME_INVALID:

   ([#123261](https://github.com/kubernetes/kubernetes/pull/123261), [@skitt](https://github.com/skitt))
- Reverted the `EventedPLEG` feature (beta, but disabled by default) back to alpha due to a known issue.
   ([#122697](https://github.com/kubernetes/kubernetes/pull/122697), [@pacoxu](https://github.com/pacoxu))
- Used `errors.Is()` to handle errors returned by `LookPath()`.

### Other (Cleanup or Flake)