* If ExperimentalCriticalPodAnnotation=True flag gate is set, kubelet will ensure that pods with `scheduler.alpha.kubernetes.io/critical-pod` annotation will be admitted even under resource pressure, will not be evicted, and are reasonably protected from system OOMs. ([#41052](https://github.com/kubernetes/kubernetes/pull/41052), [@vishh](https://github.com/vishh))

* If ExperimentalCriticalPodAnnotation=True flag gate is set, kubelet will ensure that pods with `scheduler.alpha.kubernetes.io/critical-pod` annotation will be admitted even under resource pressure, will not be evicted, and are reasonably protected from system OOMs. ([#41052](https://github.com/kubernetes/kubernetes/pull/41052), [@vishh](https://github.com/vishh))

## Changelog since v1.10.3

### Other notable changes

* Fixes issue for readOnly subpath mounts for SELinux systems and when the volume mountPath already existed in the container image. ([#64351](https://github.com/kubernetes/kubernetes/pull/64351), [@msau42](https://github.com/msau42))

pkg syscall (freebsd-riscv64), const WCOREFLAG = 128 #53466
pkg syscall (freebsd-riscv64), const WCOREFLAG ideal-int #53466
pkg syscall (freebsd-riscv64), const WEXITED = 16 #53466
pkg syscall (freebsd-riscv64), const WEXITED ideal-int #53466
pkg syscall (freebsd-riscv64), const WLINUXCLONE = 2147483648 #53466
pkg syscall (freebsd-riscv64), const WLINUXCLONE ideal-int #53466

                // This is a duplicate check, as preWriteCleanup already purged expired
                // entries, but let's accommodate an incorrect expiration queue.
                enqueueNotification(
                    entryKey, hash, value, valueReference.getWeight(), RemovalCause.EXPIRED);
              } else {
                recordLockedRead(e, now);
                statsCounter.recordHits(1);

### Bug or Regression

  - Migrate `pkg/kubelet/(dockershim, network)` to structured logging
  Exit code changed from 255 to 1 ([#98939](https://github.com/kubernetes/kubernetes/pull/98939), [@yangjunmyfm192085](https://github.com/yangjunmyfm192085)) [SIG Network and Node]
  - Migrate `pkg/kubelet/certificate` to structured logging

- Only extend token lifetimes when `--service-account-extend-token-expiration` is true and the requested token audiences are empty or exactly match all values for `--api-audiences`. ([#105954](https://github.com/kubernetes/kubernetes/pull/105954), [@jyotimahapatra](https://github.com/jyotimahapatra))...

pkg syscall (darwin-386), const VWERASE = 4
pkg syscall (darwin-386), const VWERASE ideal-int
pkg syscall (darwin-386), const WCONTINUED = 16
pkg syscall (darwin-386), const WCOREFLAG = 128
pkg syscall (darwin-386), const WEXITED = 4
pkg syscall (darwin-386), const WNOHANG = 1
pkg syscall (darwin-386), const WNOWAIT = 32
pkg syscall (darwin-386), const WORDSIZE = 32
pkg syscall (darwin-386), const WSTOPPED = 8

,KAAKiP,QAAQiB,UACblQ,KAAKiP,QAAU,OAInBkB,SAAA,WACEnQ,KAAKoP,UAAYpP,KAAKqP,gBACD,OAAjBrP,KAAKiP,SACPjP,KAAKiP,QAAQmB,kBAKjBnJ,qBAAA,WAAqB,IAAAlH,EAAAC,KACnBlD,UAAEkD,KAAKkB,UAAU0B,GAjMJ,qBAiMoB,SAAAxC,GAC/BA,EAAMuC,iBACNvC,EAAMiQ,kBACNtQ,EAAKsD,a,EAIToD,WAAA,SAAWzI,GAaT,OAZAA,EAAMsS,EAAA,GACDtQ,KAAKuQ,YAAYnL,QACjBtI,UAAEkD,KAAKkB,UAAUsB,OACjBxE,GAGLnC,EAAKiC,gBACHiH,EACA/G,EACAgC,KAAKuQ,YAAY5K,aAGZ3H,GAGTmR,kBAAA,WACE,IAAKnP,KAAKkP,MAAO,CACf,IAAMvN,EAASqN,EAASW,sBAAsB3P,KAAKkB,UAE/CS,IACF3B,KAAK...