- Pod SecurityContext sysctls name parameter for update requests where the existing object's sysctl contains slashes and kubelet sysctl whitelist support contains slashes. ([#102393](https://github.com/kubernetes/kubernetes/pull/102393), [@mengjiao-liu](https://github.com/mengjiao-liu)) [SIG Apps, Auth, Node, Storage and Testing]...

  // +optional
  optional int64 fsGroup = 5;

  // Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported
  // sysctls (by the container runtime) might fail to launch.
  // Note that this field cannot be set when spec.os.name is windows.
  // +optional
  repeated Sysctl sysctls = 7;

pkg syscall (darwin-386-cgo), const ICMP6_FILTER ideal-int
pkg syscall (darwin-386-cgo), const ImplementsGetwd = true
pkg syscall (darwin-386-cgo), const PRIO_PGRP = 1
pkg syscall (darwin-386-cgo), const PRIO_PGRP ideal-int
pkg syscall (darwin-386-cgo), const PRIO_PROCESS = 0
pkg syscall (darwin-386-cgo), const PRIO_PROCESS ideal-int
pkg syscall (darwin-386-cgo), const PRIO_USER = 2
pkg syscall (darwin-386-cgo), const PRIO_USER ideal-int

* The Sysctls experimental feature has been promoted to beta (enabled by default via the `Sysctls` feature flag). PodSecurityPolicy and Pod objects now have fields for specifying and controlling sysctls. Alpha sysctl annotations will be ignored by 1.11+ kubelets. All alpha sysctl annotations in existing deployments must be converted to API fields to be effective. ([#6371](https://github.com...

  
  When the feature gate is enabled, kubelet ignores errors that happens during setting the following sysctl values: `vm.overcommit_memory`, `vm.panic_on_oom`, `kernel.panic`, `kernel.panic_on_oops`, `kernel.keys.root_maxkeys`, `kernel.keys.root_maxbytes`. (These sysctl values for the host, not for the containers)
  
  kubelet also ignores an error during opening `/dev/kmsg`.

- Kubelet allows pods to use the `net.ipv4.ip_local_reserved_ports` sysctl by default and the minimal kernel version is 3.16; Pod Security admission allows this sysctl in v1.27+ versions of the baseline and restricted policies. ([#115374](https://github.com/kubernetes/kubernetes/pull/115374), [@pacoxu](https://github.com/pacoxu)) [SIG Auth, Network and Node]

pkg syscall (netbsd-arm64-cgo), const AF_DATAKIT ideal-int
pkg syscall (netbsd-arm64-cgo), const AF_DECnet = 12
pkg syscall (netbsd-arm64-cgo), const AF_DECnet ideal-int
pkg syscall (netbsd-arm64-cgo), const AF_DLI = 13
pkg syscall (netbsd-arm64-cgo), const AF_DLI ideal-int
pkg syscall (netbsd-arm64-cgo), const AF_E164 = 26
pkg syscall (netbsd-arm64-cgo), const AF_E164 ideal-int
pkg syscall (netbsd-arm64-cgo), const AF_ECMA = 8

pkg syscall (darwin-386), const EDEVERR Errno
pkg syscall (darwin-386), const EFTYPE Errno
pkg syscall (darwin-386), const ELAST Errno
pkg syscall (darwin-386), const EMULTIHOP Errno
pkg syscall (darwin-386), const ENEEDAUTH Errno
pkg syscall (darwin-386), const ENOATTR Errno
pkg syscall (darwin-386), const ENODATA Errno
pkg syscall (darwin-386), const ENOLINK Errno
pkg syscall (darwin-386), const ENOPOLICY Errno

pkg syscall (freebsd-arm64), const B50 = 50
pkg syscall (freebsd-arm64), const B50 ideal-int
pkg syscall (freebsd-arm64), const B57600 = 57600
pkg syscall (freebsd-arm64), const B57600 ideal-int
pkg syscall (freebsd-arm64), const B600 = 600
pkg syscall (freebsd-arm64), const B600 ideal-int
pkg syscall (freebsd-arm64), const B7200 = 7200
pkg syscall (freebsd-arm64), const B7200 ideal-int

pkg syscall (darwin-amd64), func SetBpfDatalink //deprecated
pkg syscall (darwin-amd64), func SetBpfHeadercmpl //deprecated
pkg syscall (darwin-amd64), func SetBpfImmediate //deprecated
pkg syscall (darwin-amd64), func SetBpfInterface //deprecated
pkg syscall (darwin-amd64), func SetBpfPromisc //deprecated
pkg syscall (darwin-amd64), func SetBpfTimeout //deprecated
pkg syscall (darwin-amd64), func StringSlicePtr //deprecated