node, turn on the feature gate `ReduceDefaultCrashLoopBackOffDecay`. If you are also using the feature gate `KubeletCrashLoopBackOffMax` with a configured per-node `CrashLoopBackOff.MaxContainerRestartPeriod`, the effective kubelet configuration will follow the conflict resolution policy described further in the documentation [here](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#reduced-container-restart-delay). ([#130711](https://github.com/kubernetes/kubernetes/pull/130711), [@l...

* Use full package path for definition name in OpenAPI spec ([#40124](https://github.com/kubernetes/kubernetes/pull/40124), [@mbohlool](https://github.com/mbohlool))
* Follow redirects for streaming requests (exec/attach/port-forward) in the apiserver by default (alpha -> beta). ([#40039](https://github.com/kubernetes/kubernetes/pull/40039), [@timstclair](https://github.com/timstclair))

## Known Issues

- Concurrently joining control-plane nodes does not work as expected in kubeadm 1.15.0. The feature was planned for release in 1.15.0, but a fix may  come in a follow up patch release.

pkg syscall (darwin-arm64), const O_NDELAY = 4
pkg syscall (darwin-arm64), const O_NDELAY ideal-int
pkg syscall (darwin-arm64), const O_NOCTTY = 131072
pkg syscall (darwin-arm64), const O_NOFOLLOW = 256
pkg syscall (darwin-arm64), const O_NOFOLLOW ideal-int
pkg syscall (darwin-arm64), const O_NONBLOCK = 4
pkg syscall (darwin-arm64), const O_POPUP = 2147483648
pkg syscall (darwin-arm64), const O_POPUP ideal-int

- Switched intstr.Type to sized integer to follow API guidelines and improve compatibility with proto libraries ([#83956](https://github.com/kubernetes/kubernetes/pull/83956), [@liggitt](https://github.com/liggitt))

  - Health check (liveness & readiness) probes using an HTTPGetAction will no longer follow redirects to different hostnames from the original probe request. Instead, these non-local redirects will be treated as a Success (the documented behavior). In this case an event with reason "ProbeWarning" will be generated, indicating that the redirect...

pkg syscall (netbsd-arm64-cgo), const O_NOCTTY = 32768
pkg syscall (netbsd-arm64-cgo), const ONOEOT = 8
pkg syscall (netbsd-arm64-cgo), const ONOEOT ideal-int
pkg syscall (netbsd-arm64-cgo), const O_NOFOLLOW = 256
pkg syscall (netbsd-arm64-cgo), const O_NOFOLLOW ideal-int
pkg syscall (netbsd-arm64-cgo), const O_NONBLOCK = 4
pkg syscall (netbsd-arm64-cgo), const O_NOSIGPIPE = 16777216
pkg syscall (netbsd-arm64-cgo), const O_NOSIGPIPE ideal-int

- 'Promoted `cronjob_job_creation_skew` metric to stable to follow the cronjob v2 controller,
  the following metrics had their name updated to match metrics API guidelines:
    - `cronjob_job_creation_skew_duration_seconds` -> `job_creation_skew_duration_seconds`.' ([#113008](https://github.com/kubernetes/kubernetes/pull/113008), [@soltysh](https://github.com/soltysh))

### Ephemeral Containers Graduate to Stable

  You can still access kubelet's `/healthz`, `/pods` and `/configz` by granting the caller `nodes/proxy` permission in RBAC but that also grants the caller permissions to exec, run and attach to containers on the nodes and doing so does not follow the least privilege principle. Granting callers more permissions than they need can give attackers an opportunity to escalate privileges. ([#126347](https://github.com/kubernetes/kubernetes/pull/126347), [@vinayakankugoyal](https://github.com/vinayakankugoyal))...