- Add multiple Admission Controller injection modes and failure‑policy configuration; enable internal profiling and a new KSM cronjob completion check.
- Secure Cluster Agent API with TLS 1.3 default and change external metrics port to 8443 for non‑root operation.
- Fix node count reporting, reduce AKS log noise, stabilize time‑based metrics, prevent panic in KSM checks, and remove noisy deprecation warnings.