master
Add policy manifest loader, source, and plugin wiring
api/validation: implement API validation, conversion, and CEL compilation for derived attributes
Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
Adapt the codebase to the Authorizer interface change
remove import doc comments
Add the Unconditional prefix to Authorizer and WantsAuthorizer interfaces
staging: extract CRI streaming modules with client-go compatibility
Revert "DRA ResourceClaim controller: updated mutation cache based on events"
Merge pull request #140113 from pmengelbert/pmengelbert/authentication_to_admission_webhooks/2
clean up: remove loop variable capture
disable PodLevelResourceManagers by default since there are critical issues
introduce EvictionRequest and Eviction API
Wait for pending state to clear before triggering 2nd unmount
kubelet: thread logger through boot time lookup
Implement TLS support in gRPC prober
Make TestOverallNFTablesRulesIPv6 test
Make quota evaluators in admission conditional on enabled resources
Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
build: remove deprecated '// +build' tag
Add blank lines around long CSILimits field for stable gofmt output
Move Pod host-namespace fields from PodSecurityContext to PodSpec
Sync supported service account token algorithms to test image
Merge pull request #139247 from danwinship/utiliptables-cleanup
Implement kubelet support for emptyDir mode
restrict the use of scheme internally to client-go
lavalamp is taking a long break