pkg syscall (darwin-arm64), func CheckBpfVersion //deprecated
pkg syscall (darwin-arm64), func CheckBpfVersion(int) error
pkg syscall (darwin-arm64), func Chflags(string, int) error
pkg syscall (darwin-arm64), func Chroot(string) error
pkg syscall (darwin-arm64), func Close(int) error
pkg syscall (darwin-arm64), func CloseOnExec(int)
pkg syscall (darwin-arm64), func CmsgLen(int) int
pkg syscall (darwin-arm64), func CmsgSpace(int) int

pkg syscall (netbsd-arm64-cgo), func CheckBpfVersion(int) error
pkg syscall (netbsd-arm64-cgo), func Chflags(string, int) error
pkg syscall (netbsd-arm64-cgo), func Chroot(string) error
pkg syscall (netbsd-arm64-cgo), func Close(int) error
pkg syscall (netbsd-arm64-cgo), func CloseOnExec(int)
pkg syscall (netbsd-arm64-cgo), func CmsgLen(int) int

* Fixes issue where subpath volume content was deleted during orphaned pod cleanup for Local volumes that are directories (and not mount points) on the root filesystem. ([#72291](https://github.com/kubernetes/kubernetes/pull/72291), [@msau42](https://github.com/msau42))...

gc.ca

// cat : https://www.iana.org/domains/root/db/cat.html
cat

// cc : https://www.iana.org/domains/root/db/cc.html
cc

// cd : https://www.iana.org/domains/root/db/cd.html
// see also: https://www.nic.cd/domain/insertDomain_2.jsp?act=1
cd
gov.cd

// cf : https://www.iana.org/domains/root/db/cf.html
cf

// cg : https://www.iana.org/domains/root/db/cg.html
cg

     -->
    <root-XML localName="html"/>
    <root-XML localName="HTML"/>
    <root-XML localName="link"/>
    <root-XML localName="LINK"/>
    <root-XML localName="body"/>
    <root-XML localName="BODY"/>
    <root-XML localName="p"/>
    <root-XML localName="P"/>
    <root-XML localName="script"/>
    <root-XML localName="SCRIPT"/>
    <root-XML localName="frameset"/>

* Changed ext3/ext4 volume creation to not reserve any portion of the volume for the root user. When creating ext3/ext4 volume, mkfs defaults to reserving 5% of the volume for the super-user (root). This patch changes the mkfs to pass -m0 to disable this setting.
([#64102](https://github.com/kubernetes/kubernetes/pull/64102), [@atombender](https://github.com/atombender))

- kube-dns add-on:
  - All containers are now being executed under more restrictive privileges.
  - Most of the containers now run as non-root user and has the root filesystem set as read-only.
  - The remaining container running as root only has the minimum Linux capabilities it requires to run.

options for kube-proxy running in winkernel mode. `--forward-healthcheck-vip`, if specified as true, health check traffic whose destination is service VIP will be forwarded to kube-proxy's healthcheck service. `--root-hnsendpoint-name` specifies the name of the hns endpoint for the root network namespace. This option enables the pass-through load balancers like Google's GCLB to correctly health check the backend services. Without this change, the health check packets is dropped, and Windows node...

This setting enables a pod to specify a `PodFSGroupChangePolicy` that indicates that volume ownership and permissions will be changed only when permission and ownership of the root directory do not match with expected permissions on the volume.

### CSIDriver policy for FSGroup graduates to Beta

    * An example command:
    * kubectl get pods --use-openapi-print-columns
* add gzip compression to GET and LIST requests ([#45666](https://github.com/kubernetes/kubernetes/pull/45666), [@ilackarms](https://github.com/ilackarms))