- Fixes a 1.32 regression starting pods with postStart hooks specified ([#130496](https://github.com/kubernetes/kubernetes/pull/130496), [@sreeram-venkitesh](https://github.com/sreeram-venkitesh)) [SIG Node]

<!-- END MUNGE: GENERATED_TOC -->

<!-- NEW RELEASE NOTES ENTRY -->


# v1.13.12

[Documentation](https://docs.k8s.io)

## Downloads for v1.13.12


filename | sha512 hash
-------- | -----------

- DRA API: resource.k8s.io/v1alpha3 now only contains DeviceTaintRule. All other types got removed because they became obsolete when introducing the v1beta1 API in 1.32.

- Fixed a regression in 1.32 that prevented pods with `postStart` hooks from starting. ([#129946](https://github.com/kubernetes/kubernetes/pull/129946), [@alex-petrov-vt](https://github.com/alex-petrov-vt))

pkg syscall (netbsd-arm64-cgo), const DLT_JUNIPER_CHDLC = 181
pkg syscall (netbsd-arm64-cgo), const DLT_JUNIPER_CHDLC ideal-int
pkg syscall (netbsd-arm64-cgo), const DLT_JUNIPER_ES = 132
pkg syscall (netbsd-arm64-cgo), const DLT_JUNIPER_ES ideal-int
pkg syscall (netbsd-arm64-cgo), const DLT_JUNIPER_ETHER = 178
pkg syscall (netbsd-arm64-cgo), const DLT_JUNIPER_ETHER ideal-int

- Exited kube-proxy when configuration file changes ([#59176](https://github.com/kubernetes/kubernetes/pull/59176), [@dixudx](https://github.com/dixudx))
- kube-addon-manager was updated to v9.0, and now uses kubectl v1.13.2 and prunes workload resources via the apps/v1 API ([#72978](https://github.com/kubernetes/kubernetes/pull/72978), [@liggitt](https://github.com/liggitt))

* Updated Cluster Autoscaler version to 1.3.2-beta.2. Release notes: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.3.2-beta.2 ([#67697](https://github.com/kubernetes/kubernetes/pull/67697), [@aleksandra-malinowska](https://github.com/aleksandra-malinowska))

- The StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates, locked on since 1.32, have been removed ([#134994](https://github.com/kubernetes/kubernetes/pull/134994), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Auth, Node and Testing]
- The `PreferSameZone` and `PreferSameNode` values for Service's

AUTHORITY\Authenticated Users may be able to modify container logs.

**Affected Versions**:
  - kubelet <= 1.27.15
  - kubelet <= 1.28.11
  - kubelet <= 1.29.6
  - kubelet <= 1.30.2 

**Fixed Versions**:
  - kubelet 1.27.16
  - kubelet 1.28.12
  - kubelet 1.29.7
  - kubelet 1.30.3 

This vulnerability was reported by Paulo Gomes @pjbgf from SUSE.

pkg syscall (darwin-arm64), const IPPROTO_SATMON ideal-int
pkg syscall (darwin-arm64), const IPPROTO_SCCSP = 96
pkg syscall (darwin-arm64), const IPPROTO_SCCSP ideal-int
pkg syscall (darwin-arm64), const IPPROTO_SCTP = 132
pkg syscall (darwin-arm64), const IPPROTO_SCTP ideal-int
pkg syscall (darwin-arm64), const IPPROTO_SDRP = 42
pkg syscall (darwin-arm64), const IPPROTO_SDRP ideal-int
pkg syscall (darwin-arm64), const IPPROTO_SEP = 33