pkg syscall (freebsd-386), const AF_INET6_SDP = 42
pkg syscall (freebsd-386), const AF_INET6_SDP ideal-int
pkg syscall (freebsd-386), const AF_INET_SDP = 40
pkg syscall (freebsd-386), const AF_INET_SDP ideal-int
pkg syscall (freebsd-386), const AF_MAX = 42
pkg syscall (freebsd-386), const DLT_MATCHING_MAX = 246
pkg syscall (freebsd-386), const DLT_MPEG_2_TS = 243
pkg syscall (freebsd-386), const DLT_MPEG_2_TS ideal-int

		Name:      readTotal,
		Help:      "Total read SysCalls to the kernel. /proc/[pid]/io syscr",
		Type:      counterMetric,
	}
}

func getMinIOProcessSysCallWMD() MetricDescription {
	return MetricDescription{
		Namespace: nodeMetricNamespace,
		Subsystem: sysCallSubsystem,
		Name:      writeTotal,
		Help:      "Total write SysCalls to the kernel. /proc/[pid]/io syscw",
		Type:      counterMetric,

  - [alpha] Pods now have alpha support for setting whitelisted, safe sysctls. Unsafe sysctls can be whitelisted on the kubelet. ([docs](http://kubernetes.io/docs/admin/sysctls/)) ([kubernetes/features#34](https://github.com/kubernetes/enhancements/issues/34))

securityContext: {{- if .Values.securityContext }} {{- toYaml .Values.securityContext | nindent 8 }} {{- else if (semverCompare ">=1.22-0" .Capabilities.KubeVersion.GitVersion) }} # Safe since 1.22: https://github.com/kubernetes/kubernetes/pull/103326 sysctls: - name: net.ipv4.ip_unprivileged_port_start value: "0" {{- end }} {{- with .Values.volumes }} volumes: {{ toYaml . | nindent 8 }} {{- end }} containers: - name: istio-proxy # "auto" will be populated at runtime by the mutating webhook. See https...

* Fix how we iterate over active jobs when removing them for Replace policy ([#36161](https://github.com/kubernetes/kubernetes/pull/36161), [@soltysh](https://github.com/soltysh))
* Adds TCPCloseWaitTimeout option to kube-proxy for sysctl nf_conntrack_tcp_timeout_time_wait ([#35919](https://github.com/kubernetes/kubernetes/pull/35919), [@bowei](https://github.com/bowei))