* New behavior:
      * Only `container_name`, `pod_name`, `namespace`, `id`, `image`, and `name` labels are exposed
      * no environment variables will be exposed ever via /metrics, even if whitelisted
* Filter duplicate network packets in promiscuous bridge mode (with ebtables) ([#28717](https://github.com/kubernetes/kubernetes/pull/28717), [@freehan](https://github.com/freehan))

      client
        .newBuilder()
        .sslSocketFactory(handshakeCertificates.sslSocketFactory())
    }
  }

  /** Confirm that runtime exceptions thrown inside of OkHttp propagate to the caller.  */
  @Test
  fun unexpectedExceptionSync() {
    client =
      client
        .newBuilder()
        .dns { hostname: String? -> throw RuntimeException("boom!") }
        .build()

    val response1 = client.newCall(request).execute()
    assertThat(response1.body.string()).isEqualTo("ABC")
    val cacheEntry =
      fileSystem.allPaths
        .stream()
        .filter { e: Path -> e.name.endsWith(".0") }
        .findFirst()
        .orElseThrow { NoSuchElementException() }
    corruptCertificate(cacheEntry)
    val response2 = client.newCall(request).execute() // Not Cached!

  </mime-type>
  <mime-type type="application/vnd.smart.teacher">
    <glob pattern="*.teacher"/>
  </mime-type>
  <mime-type type="application/vnd.software602.filler.form+xml"/>
  <mime-type type="application/vnd.software602.filler.form-xml-zip"/>
  <mime-type type="application/vnd.solent.sdkm+xml">
    <glob pattern="*.sdkm"/>
    <glob pattern="*.sdkd"/>
  </mime-type>

* Fix watch to not send the same set of events multiple times causing watcher to go back in time ([#73845](https://github.com/kubernetes/kubernetes/pull/73845), [@wojtek-t](https://github.com/wojtek-t))
* MAC Address filter has been fixed in vSphere Cloud Provider, it no longer ignores `00:1c:14` and `00:05:69` prefixes ([#73721](https://github.com/kubernetes/kubernetes/pull/73721), [@frapposelli](https://github.com/frapposelli))

      assertThat(response.body.string()).isNotEmpty()
    }
    if (!platform.isJdk8()) {
      val connectCount =
        eventRecorder.eventSequence
          .stream()
          .filter { event: CallEvent? -> event is ConnectStart }
          .count()
      assertThat(connectCount).isEqualTo(1)
    }
  }

  /** Test which headers are sent unencrypted to the HTTP proxy.  */
  @Test

- GCE/Windows: When the service cannot be stopped Stackdriver logging processes are now force killed ([#77378](https://github.com/kubernetes/kubernetes/pull/77378), [@yujuhong](https://github.com/yujuhong))

- Scheduler changes its logic of calculating `evaluatedNodes` from "contains the number of nodes that filtered out by PreFilterResult and Filter plugins" to "the number of nodes filtered out by Filter plugins only". ([#124735](https://github.com/kubernetes/kubernetes/pull/124735), [@AxeZhan](https://github.com/AxeZhan))
- Services implemented a field selector for the ClusterIP and Type fields.

kicks-ass.net
kicks-ass.org
kids
kids.us
kiengiang.vn
kiev.ua
kiho.mie.jp
kihoku.ehime.jp
kijo.miyazaki.jp
kikirara.jp
kikonai.hokkaido.jp
kikuchi.kumamoto.jp
kikugawa.shizuoka.jp
kill.jp
kilo.jp
kim
kim.replit.dev
kimino.wakayama.jp
kimitsu.chiba.jp
kimobetsu.hokkaido.jp
kin.okinawa.jp
kindle
kinghost.net
kinko.kagoshima.jp
kinokawa.wakayama.jp

- Fix a regression that the scheduler always goes through all Filter plugins. ([#114524](https://github.com/kubernetes/kubernetes/pull/114524), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]