### PID Limits graduates to General Availability

PID Limits features are now generally available on both `SupportNodePidsLimit` (node-to-pod PID isolation) and `SupportPodPidsLimit` (ability to limit PIDs per pod), after being enabled-by-default in beta stage for a year.

pkg os, method (*Process) Release() error
pkg os, method (*Process) Signal(Signal) error
pkg os, method (*Process) Wait() (*ProcessState, error)
pkg os, method (*ProcessState) Exited() bool
pkg os, method (*ProcessState) Pid() int
pkg os, method (*ProcessState) String() string
pkg os, method (*ProcessState) Success() bool
pkg os, method (*ProcessState) Sys() interface{}
pkg os, method (*ProcessState) SysUsage() interface{}

	START_CMD="CI=on _MINIO_AUTO_DRIVE_HEALING=off minio server ${MINIO_OPTS} &"
	echo
	echo "Starting MinIO instance: ${START_CMD}"
	echo
	eval "$START_CMD"
	MINIO_SRVR_PID="$!"
	echo "MinIO Server PID: ${MINIO_SRVR_PID}"
	echo
	echo "Waiting for MinIO instance to get ready!"
	sleep 10
}

main "$@"`, scheme)
	adminLogIf(ctx, embedFileInZip(inspectZipW, "start-minio.sh", scrb.Bytes(), 0o755))
}

* Some container runtimes share a process (PID) namespace for all containers in a pod. This will become the default for Docker in a future release of Kubernetes. You can preview this functionality if running with the CRI and Docker 1.13.1 by enabling the --experimental-docker-enable-shared-pid kubelet flag. ([#41583](https://github.com/kubernetes/kubernetes/pull/41583), [@verb](https://github.com/verb))

#### Photon
* Fix photon controller plugin to construct with correct PdID ([#37167](https://github.com/kubernetes/kubernetes/pull/37167), [@luomiao](https://github.com/luomiao))

#### rbd

pkg syscall (freebsd-arm64), type SysProcAttr struct, Foreground bool
pkg syscall (freebsd-arm64), type SysProcAttr struct, Noctty bool
pkg syscall (freebsd-arm64), type SysProcAttr struct, Pgid int
pkg syscall (freebsd-arm64), type SysProcAttr struct, Ptrace bool
pkg syscall (freebsd-arm64), type SysProcAttr struct, Setctty bool
pkg syscall (freebsd-arm64), type SysProcAttr struct, Setpgid bool

pkg syscall (darwin-arm64), type SysProcAttr struct, Foreground bool
pkg syscall (darwin-arm64), type SysProcAttr struct, Noctty bool
pkg syscall (darwin-arm64), type SysProcAttr struct, Pgid int
pkg syscall (darwin-arm64), type SysProcAttr struct, Ptrace bool
pkg syscall (darwin-arm64), type SysProcAttr struct, Setctty bool
pkg syscall (darwin-arm64), type SysProcAttr struct, Setpgid bool

When using the separate flag, the order in which they're specified doesn't matter.  ([#58123](https://github.com/kubernetes/kubernetes/pull/58123), [@hzxuzhonghu](https://github.com/hzxuzhonghu))

* The kubelet  --docker-disable-shared-pid flag, which runs docker containers with a process namespace that is shared between all containers in a pod, is now deprecated and will be removed in a future release. It is replaced by `v1.Pod.Spec.ShareProcessNamespace`, which configures this behavior....

pkg syscall (netbsd-arm64-cgo), type SysProcAttr struct, Foreground bool
pkg syscall (netbsd-arm64-cgo), type SysProcAttr struct, Noctty bool
pkg syscall (netbsd-arm64-cgo), type SysProcAttr struct, Pgid int
pkg syscall (netbsd-arm64-cgo), type SysProcAttr struct, Ptrace bool
pkg syscall (netbsd-arm64-cgo), type SysProcAttr struct, Setctty bool
pkg syscall (netbsd-arm64-cgo), type SysProcAttr struct, Setpgid bool

pkg syscall (freebsd-riscv64), type SysProcAttr struct, Noctty bool #53466
pkg syscall (freebsd-riscv64), type SysProcAttr struct, Pdeathsig Signal #53466
pkg syscall (freebsd-riscv64), type SysProcAttr struct, Pgid int #53466
pkg syscall (freebsd-riscv64), type SysProcAttr struct, Ptrace bool #53466
pkg syscall (freebsd-riscv64), type SysProcAttr struct, Setctty bool #53466