* genericapiserver: extract CA cert from server cert and SNI cert chains ([#39022](https://github.com/kubernetes/kubernetes/pull/39022), [@sttts](https://github.com/sttts))
* genericapiserver: turn APIContainer.SecretRoutes into a real ServeMux ([#38826](https://github.com/kubernetes/kubernetes/pull/38826), [@sttts](https://github.com/sttts))

- Added the `SizeBasedListCostEstimate` feature gate (enabled by default), which changes how APF seats are assigned to `LIST` requests. With this feature, one seat is assigned per 100KB of data loaded into memory at once during a `LIST` operation. ([#132932](https://github.com/kubernetes/kubernetes/pull/132932), [@serathius](https://github.com/serathius))

9b,OAAQF,KACV3E,KAAK6gB,gBAAkB7gB,KAAK4gB,SAASjc,IACxDwP,GAAanU,KAAK2gB,SAAShc,KACM,oBAAzB3E,KAAK2gB,SAAShc,EAAI,IACtBwP,EAAYnU,KAAK2gB,SAAShc,EAAI,KAGpC3E,KAAKiiB,UAAUjiB,KAAK4gB,SAASjc,M,EAKnCsd,UAAA,SAAUxhB,GACRT,KAAK6gB,cAAgBpgB,EAErBT,KAAKkiB,SAEL,IAAMC,EAAUniB,KAAKsM,UAClBlP,MAAM,KACNkkB,KAAI,SAAAhlB,GAAQ,OAAOA,EAAyBmE,mBAAYnE,QAA5C,UAA8DmE,EAA9D,QAET2hB,EAAQtlB,UAAE,GAAG2H,MAAMnG,KAAKpC,SAASwI,iBAAiByd,EAAQrC,KAAK,QAEjEsC,EAAMngB,SApNmB,kBAqN3BmgB,EAAMxgB,QAtMc,aAuMjBwd,KArMwB,oBAsMxB/U,S...

   The `read_vs_write_current_requests` metric histogram is adjusted, in the case of using API Priority and Fairness instead of max-in-flight, to divide by the relevant limit: sum of queue capacities for waiting requests, sum of seat limits for executing requests. ([#110164](https://github.com/kubernetes/kubernetes/pull/110164), [@MikeSpreitzer](https://github.com/MikeSpreitzer))

    * sync time.
 
    * The goal is for administrators to be able to alert on proxies that, for
    * whatever reason, are quite stale.
* Fix a string comparison bug in IPVS graceful termination where UDP real servers are not deleted. ([#78999](https://github.com/kubernetes/kubernetes/pull/78999), [@andrewsykim](https://github.com/andrewsykim))

* Update GitHub action issue-manager. PR [#1520](https://github.com/tiangolo/fastapi/pull/1520).
* Add new links:
    * **English articles**:
        * [Real-time Notifications with Python and Postgres](https://wuilly.com/2019/10/real-time-notifications-with-python-and-postgres/) by [Guillermo Cruz](https://wuilly.com/).

* Fix a string comparison bug in IPVS graceful termination where UDP real servers are not deleted. ([#78999](https://github.com/kubernetes/kubernetes/pull/78999), [@andrewsykim](https://github.com/andrewsykim))

* CRI now defines mounting behavior. If the host path doesn't exist, the runtime should return an error. If the host path is a symlink, the runtime should follow the symlink and mount the real destination to the container. ([#61460](https://github.com/kubernetes/kubernetes/pull/61460), [@feiskyer](https://github.com/feiskyer))

### SIG OpenStack

    <magic priority="50">
       <match value="Windows Media Audio" type="unicodeLE" offset="0:8192" />
    </magic>
  </mime-type>

  <mime-type type="audio/x-pn-realaudio">
    <_comment>Real Audio</_comment>
    <alias type="audio/x-realaudio" />
    <magic priority="50">
      <match value="0x2e7261fd" type="big32" offset="0"/>
    </magic>
    <glob pattern="*.ram"/>
    <glob pattern="*.ra"/>

* support cross resource group for azure file ([#68117](https://github.com/kubernetes/kubernetes/pull/68117), [@andyzhangx](https://github.com/andyzhangx))
* Use real device path in isDeviceOpen check on umount ([#68674](https://github.com/kubernetes/kubernetes/pull/68674), [@gnufied](https://github.com/gnufied))