pkg syscall (freebsd-arm64), func Syscall9(uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr) (uintptr, uintptr, Errno)
pkg syscall (freebsd-arm64), func Sysctl(string) (string, error)
pkg syscall (freebsd-arm64), func SysctlUint32(string) (uint32, error)
pkg syscall (freebsd-arm64), func TimevalToNsec(Timeval) int64
pkg syscall (freebsd-arm64), func Truncate(string, int64) error

pkg syscall (darwin-arm64), func Syscall9(uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr) (uintptr, uintptr, Errno)
pkg syscall (darwin-arm64), func Sysctl(string) (string, error)
pkg syscall (darwin-arm64), func SysctlUint32(string) (uint32, error)
pkg syscall (darwin-arm64), func TimevalToNsec(Timeval) int64
pkg syscall (darwin-arm64), func Truncate(string, int64) error

- Improved algorithm for selecting `best` non-preferred hint in the TopologyManager ([#108154](https://github.com/kubernetes/kubernetes/pull/108154), [@klueska](https://github.com/klueska))
- Kube-proxy doesn't set the sysctl `net.ipv4.conf.all.route_localnet=1` if no IPv4 loopback address is selected by the `nodePortAddresses` configuration parameter. ([#107684](https://github.com/kubernetes/kubernetes/pull/107684), [@aojea](https://github.com/aojea))

pkg syscall (darwin-386), func Syscall9(uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr) (uintptr, uintptr, Errno)
pkg syscall (darwin-386), func Sysctl(string) (string, error)
pkg syscall (darwin-386), func SysctlUint32(string) (uint32, error)
pkg syscall (darwin-386), func TimespecToNsec(Timespec) int64
pkg syscall (darwin-386), func TimevalToNsec(Timeval) int64

pkg syscall (freebsd-riscv64), func Syscall9(uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr, uintptr) (uintptr, uintptr, Errno) #53466
pkg syscall (freebsd-riscv64), func Sysctl(string) (string, error) #53466
pkg syscall (freebsd-riscv64), func SysctlUint32(string) (uint32, error) #53466
pkg syscall (freebsd-riscv64), func TimevalToNsec(Timeval) int64 #53466

* The `spec.SecurityContext.Sysctls` field is now dropped during creation of `Pod` objects unless the `Sysctls` feature gate is enabled. ([#72752](https://github.com/kubernetes/kubernetes/pull/72752), [@rajathagasthya](https://github.com/rajathagasthya))
    * The `spec.AllowedUnsafeSysctls` and `spec.ForbiddenSysctls` fields are now dropped during creation of `PodSecurityPolicy` objects unless the `Sysctls` feature gate is enabled.

- Introduced the flag `--ipvs-strict-arp` to configure stricter ARP sysctls, defaulting to false to preserve existing behaviors. This was enabled by default in 1.13.0, which impacted a few CNI plugins. ([#75295](https://github.com/kubernetes/kubernetes/pull/75295), [@lbernail](https://github.com/lbernail))

* [IPVS] Allow for transparent kube-proxy restarts ([#75283](https://github.com/kubernetes/kubernetes/pull/75283), [@lbernail](https://github.com/lbernail))
* [IPVS] Introduces flag ipvs-strict-arp to configure stricter ARP sysctls, defaulting to false to preserve existing behaviors. This was enabled by default in 1.13.0, which impacted a few CNI plugins. ([#75295](https://github.com/kubernetes/kubernetes/pull/75295), [@lbernail](https://github.com/lbernail))