* Fix pods failing to start when subPath is a dangling symlink from kubelet point of view, which can happen if it is running inside a container ([#48555](https://github.com/kubernetes/kubernetes/pull/48555), [@redbaron](https://github.com/redbaron))

- Fixed a test failure in `TestSetVolumeOwnershipOwner` for `fsGroup=3000` and
  symlink cases in `volume_linux_test.go`. The tests were failing due to invalid
  ownership verification and the issue has been resolved by adjusting file

			err = fmt.Errorf("Unable to load TLS certificate '%s,%s': %w", certFile, keyFile, err)
			bootLogIf(GlobalContext, err, logger.ErrorKind)
		}
	}
	secureConn = true

	// Certs might be symlinks, reload them every 10 seconds.
	manager.UpdateReloadDuration(10 * time.Second)

	// syscall.SIGHUP to reload the certs.
	manager.ReloadOnSignal(syscall.SIGHUP)

	return x509Certs, manager, secureConn, nil

pkg os, func SameFile(FileInfo, FileInfo) bool
pkg os, func Setenv(string, string) error
pkg os, func StartProcess(string, []string, *ProcAttr) (*Process, error)
pkg os, func Stat(string) (FileInfo, error)
pkg os, func Symlink(string, string) error
pkg os, func TempDir() string
pkg os, func Truncate(string, int64) error
pkg os, method (*File) Chdir() error
pkg os, method (*File) Chmod(FileMode) error

These modes accept only 1, 2, 4, and 8 as scale factors.
</li>

</ul>

<p>
When using the compiler and assembler's
<code>-dynlink</code> or <code>-shared</code> modes,
any load or store of a fixed memory location such as a global variable
must be assumed to overwrite <code>CX</code>.
Therefore, to be safe for use with these modes,

* kubectl cp now safely allows unpacking of symlinks that may point outside the destination directory ([#82384](https://github.com/kubernetes/kubernetes/pull/82384), [@tallclair](https://github.com/tallclair))

### Other notable changes

* Fix hyperkube's layer caching, and remove --make-symlinks at build time ([#25693](https://github.com/kubernetes/kubernetes/pull/25693), [@luxas](https://github.com/luxas))

- Increased the coverage to 89.8%. ([#132607](https://github.com/kubernetes/kubernetes/pull/132607), [@ylink-lfs](https://github.com/ylink-lfs))

pkg syscall (darwin-386), const EISDIR = 21
pkg syscall (darwin-386), const ELAST = 105
pkg syscall (darwin-386), const ELOOP = 62
pkg syscall (darwin-386), const EMFILE = 24
pkg syscall (darwin-386), const EMLINK = 31
pkg syscall (darwin-386), const EMSGSIZE = 40
pkg syscall (darwin-386), const EMULTIHOP = 95
pkg syscall (darwin-386), const ENAMETOOLONG = 63
pkg syscall (darwin-386), const ENEEDAUTH = 81

- hyperkube

  - the `--make-symlinks` flag, deprecated in v1.14, has been removed. ([#80017](https://github.com/kubernetes/kubernetes/pull/80017), [@Pothulapati](https://github.com/Pothulapati))

- kube-apiserver