pkg syscall (darwin-arm64), const NOTE_LINK = 16
pkg syscall (darwin-arm64), const NOTE_LINK ideal-int
pkg syscall (darwin-arm64), const NOTE_LOWAT = 1
pkg syscall (darwin-arm64), const NOTE_LOWAT ideal-int
pkg syscall (darwin-arm64), const NOTE_NONE = 128
pkg syscall (darwin-arm64), const NOTE_NONE ideal-int
pkg syscall (darwin-arm64), const NOTE_NSECONDS = 4

pkg syscall (netbsd-arm64-cgo), const NOTE_EXIT = 2147483648
pkg syscall (netbsd-arm64-cgo), const NOTE_EXIT ideal-int
pkg syscall (netbsd-arm64-cgo), const NOTE_EXTEND = 4
pkg syscall (netbsd-arm64-cgo), const NOTE_EXTEND ideal-int
pkg syscall (netbsd-arm64-cgo), const NOTE_FORK = 1073741824
pkg syscall (netbsd-arm64-cgo), const NOTE_FORK ideal-int
pkg syscall (netbsd-arm64-cgo), const NOTE_LINK = 16

  // defined in the container image for the uid of the container process. If unspecified,
  // no additional groups are added to any container. Note that group memberships
  // defined in the container image for the uid of the container process are still effective,
  // even if they are not included in this list.
  // Note that this field cannot be set when spec.os.name is windows.
  // +optional
  repeated int64 supplementalGroups = 4;

participant dep as Dep with yield
participant operation as Path Operation
participant tasks as Background tasks

    Note over client,tasks: Can raise exception for dependency, handled after response is sent
    Note over client,operation: Can raise HTTPException and can change the response
    client ->> dep: Start request
    Note over dep: Run code up to yield
    opt raise
        dep -->> handler: Raise HTTPException

* Implementers of the cloud provider interface will note the addition of a context to this interface. Trivial code modification will be necessary for a cloud provider to continue to compile. ([#59287](https://github.com/kubernetes/kubernetes/pull/59287), [@cheftako](https://github.com/cheftako))
* /release-note-none ([#58264](https://github.com/kubernetes/kubernetes/pull/58264), [@WanLinghao](https://github.com/WanLinghao))

`super-admin.conf` file. The cluster admin can then decide to keep the file present on a node host or move it to a safe location. `kubadm certs renew` will renew the certificate in `super-admin.conf` to one year if the file exists; if it does not exist a "MISSING" note will be printed. `kubeadm upgrade apply` for this release will migrate this particular node to the two file setup. Subsequent kubeadm releases will continue to optionally renew the certificate in `super-admin.conf` if the file exists on disk and if...

  * You can remove the "old" taints (stored internally as annotations) at any time after the upgrade by doing `kubectl annotate nodes <node name> scheduler.alpha.kubernetes.io/taints-` (note the minus at the end, which means "delete the taint with this key")

specified in the service account's secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the `kubernetes.io/enforce-mountable-secrets` annotation are used together with ephemeral containers.

**Note**: This only impacts the cluster if the ServiceAccount admission plugin is used (most cluster should have this on by default as recommended in https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#serviceaccount), the `kub...

* **[Pod priority and preemption](https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/) is now enabled by default.** Note that this means that pods from *any* namespace can now request priority classes that compete with and/or cause preemption of critical system pods that are already running. If that is not desired, disable the PodPriority feature by setting `--featu...

- SCTP support in API objects (Pod, Service, NetworkPolicy) is now GA.
  Note that this has no effect on whether SCTP is enabled on nodes at the kernel level,