- Kubeadm: uses the api-server AdvertiseAddress IP family to choose the etcd endpoint IP family for non external etcd clusters ([#85745](https://github.com/kubernetes/kubernetes/pull/85745), [@aojea](https://github.com/aojea)) [SIG Cluster Lifecycle]

  // manually, the requested family is available in the cluster,
  // and ipFamilyPolicy allows it, it will be used; otherwise creation of
  // the service will fail. This field is conditionally mutable: it allows
  // for adding or removing a secondary IP family, but it does not allow
  // changing the primary IP family of the Service. Valid values are "IPv4"

pkg syscall (netbsd-arm64-cgo), type RawSockaddrInet4 struct, Family uint8
pkg syscall (netbsd-arm64-cgo), type RawSockaddrInet4 struct, Len uint8
pkg syscall (netbsd-arm64-cgo), type RawSockaddrInet4 struct, Zero [8]int8
pkg syscall (netbsd-arm64-cgo), type RawSockaddrInet6 struct, Family uint8
pkg syscall (netbsd-arm64-cgo), type RawSockaddrInet6 struct, Len uint8

pkg syscall (darwin-arm64), type RawSockaddrInet4 struct, Family uint8
pkg syscall (darwin-arm64), type RawSockaddrInet4 struct, Len uint8
pkg syscall (darwin-arm64), type RawSockaddrInet4 struct, Zero [8]int8
pkg syscall (darwin-arm64), type RawSockaddrInet6 struct, Family uint8
pkg syscall (darwin-arm64), type RawSockaddrInet6 struct, Len uint8
pkg syscall (darwin-arm64), type RawSockaddrUnix struct, Family uint8

- Kubenet: added HostPort IPv6 support.  HostPortManager: operates only with one IP family, failing if receives port mapping entries with different IP families.  HostPortSyncer: operates only with one IP family, skipping portmap entries with different IP families ([#80854](https://github.com/kubernetes/kubernetes/pull/80854), [@aojea](https://github.com/aojea))

- When a CNI plugin returns dual-stack pod IPs, kubelet will now try to respect the
  "primary IP family" of the cluster by picking a primary pod IP of the same family
  as the (primary) node IP, rather than assuming that the CNI plugin returned the IPs
  in the order the administrator wanted (since some CNI plugins don't allow

- Remove `NodeLease` feature gate that was graduated and locked to stable in 1.17 release. ([#1052...

- Fix a bug in kube-proxy that caused it to crash when using load balancers with a different IP family ([#87117](https://github.com/kubernetes/kubernetes/pull/87117), [@aojea](https://github.com/aojea)) [SIG Network]

- `kube-proxy` now reports its health more accurately in dual-stack clusters when there are problems with only one IP family. ([#118146](https://github.com/kubernetes/kubernetes/pull/118146), [@aroradaman](https://github.com/aroradaman))

- Updated crictl to v1.12.0 ([#69033](https://github.com/kubernetes/kubernetes/pull/69033), [@feiskyer](https://github.com/feiskyer))

### SIG Network

- Corrected family type (inet6) for ipsets in ipv6-only clusters ([#68436](https://github.com/kubernetes/kubernetes/pull/68436), [@uablrek](https://github.com/uablrek))