* New commands

    * Add `kubectl config rename-context` ([#46114](https://github.com/kubernetes/kubernetes/pull/46114), [@arthur0](https://github.com/arthur0))

    * Add `kubectl apply edit-last-applied` subcommand ([#42256](https://github.com/kubernetes/kubernetes/pull/42256), [@shiywang](https://github.com/shiywang))

  * Strategic Merge Patch

sumita.iwate.jp
sumomo.ne.jp
sumoto.hyogo.jp
sumoto.kumamoto.jp
sumy.ua
sunagawa.hokkaido.jp
sund.no
sunndal.no
sunnyday.jp
supabase.co
supabase.in
supabase.net
supersale.jp
supplies
supply
support
surf
surgery
surnadal.no
surveys.so
susaki.kochi.jp
susono.shizuoka.jp
suwa.nagano.jp
suwalki.pl
suzaka.nagano.jp
suzu.ishikawa.jp
suzuka.mie.jp

### AWS

  username.expression or extra[*].valueExpression or claimValidationRules[*].expression.
  An example claim validation rule expression that matches the validation automatically
  applied when username.claim is set to 'email' is 'claims.?email_verified.orValue(true) == true'. 
  By explicitly comparing the value to true, we let type-checking see the result will be a boolean, 

- Fixed an issue that prevented restart policies and restart rules from being applied to static pods. ([#135031](https://github.com/kubernetes/kubernetes/pull/135031), [@yuanwang04](https://github.com/yuanwang04))

sumita.iwate.jp
sumomo.ne.jp
sumoto.hyogo.jp
sumoto.kumamoto.jp
sumy.ua
sunagawa.hokkaido.jp
sund.no
sunndal.no
sunnyday.jp
supabase.co
supabase.in
supabase.net
supersale.jp
supplies
supply
support
surf
surgery
surnadal.no
surveys.so
susaki.kochi.jp
susono.shizuoka.jp
suwa.nagano.jp
suwalki.pl
suzaka.nagano.jp
suzu.ishikawa.jp
suzuka.mie.jp

- Kubeadm: add support for dry running `kubeadm join`. The new flag `kubeadm join --dry-run` is similar to the existing flag for `kubeadm init/upgrade` and allows you to see what changes would be applied. ([#103027](https://github.com/kubernetes/kubernetes/pull/103027), [@Haleygo](https://github.com/Haleygo))

- Kubeadm: enhanced the "patches" functionality to be able to patch kubelet config files containing `v1beta1.KubeletConfiguration`....

    * kube-apiserver would return 422 Unprocessable Entity when a json patch couldn't be applied to one object.
* remove unused ReplicasetControllerOptions ([#68121](https://github.com/kubernetes/kubernetes/pull/68121), [@dixudx](https://github.com/dixudx))

- Renames the timeout field for the DelegatingAuthenticationOptions to TokenRequestTimeout and set the timeout only for the token review client. Previously the timeout was also applied to watches making them reconnecting every 10 seconds. ([#101102](https://github.com/kubernetes/kubernetes/pull/101102), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery, Auth and Cloud Provider]