fine-grained control for supplementary groups in the first container processes.
  This allows you to choose whether to include groups defined in the container image (/etc/groups)
  for the container's primary UID or not. ([#117842](https://github.com/kubernetes/kubernetes/pull/117842), [@everpeace](https://github.com/everpeace)) [SIG API Machinery, Apps and Node]
- The (alpha) nftables mode of kube-proxy now requires version 1.0.1 or later

- Kubelet.exe on Windows now checks that the process running as administrator and the executing user account is listed in the built-in administrators group.  This is the equivalent to checking the process is running as uid 0. ([#96616](https://github.com/kubernetes/kubernetes/pull/96616), [@perithompson](https://github.com/perithompson)) [SIG Node and Windows]

- Fixed an issue where the API server did not send impersonated UID to authentication webhooks. ([#116681](https://github.com/kubernetes/kubernetes/pull/116681), [@stlaz](https://github.com/stlaz)) [SIG API Machinery and Auth]

- Fixes a regression in the pod binding subresource to honor the `metadata.uid` precondition.

- Fixed a bug where unwanted fields were being returned from a `create --dry-run`: uid and, if generateName was used, name. ([#107088](https://github.com/kubernetes/kubernetes/pull/107088), [@joejulian](https://github.com/joejulian))

## Changelog since v1.9.7

### Other notable changes

* Fix a bug in scheduler cache by using Pod UID as the cache key instead of namespace/name ([#61069](https://github.com/kubernetes/kubernetes/pull/61069), [@anfernee](https://github.com/anfernee))

- Fixes a regression in the pod binding subresource to honor the `metadata.uid` precondition.

pkg go/doc, type Note struct
pkg go/doc, type Note struct, Body string
pkg go/doc, type Note struct, End token.Pos
pkg go/doc, type Note struct, Pos token.Pos
pkg go/doc, type Note struct, UID string
pkg go/doc, type Package struct, Notes map[string][]*Note
pkg go/doc, var IllegalPrefixes []string
pkg go/format, func Node(io.Writer, *token.FileSet, interface{}) error