pkg syscall (netbsd-386), const SO_TYPE = 4104
pkg syscall (netbsd-386), const SO_USELOOPBACK = 64
pkg syscall (netbsd-386), const SYSCTL_VERSION = 16777216
pkg syscall (netbsd-386), const SYSCTL_VERS_0 = 0
pkg syscall (netbsd-386), const SYSCTL_VERS_1 = 16777216
pkg syscall (netbsd-386), const SYSCTL_VERS_MASK = 4278190080
pkg syscall (netbsd-386), const SYS_ACCEPT = 30
pkg syscall (netbsd-386), const SYS_ACCESS = 33

- Changes behaviour of kube-proxy start; does not attempt to set specific `sysctl` values (which does not work in recent Kernel versions anymore in non-init namespaces), when the current sysctl values are already set higher. ([#103174](https://github.com/kubernetes/kubernetes/pull/103174), [@Napsty](https://github.com/Napsty))

pkg syscall (linux-386), const PTRACE_SINGLESTEP ideal-int
pkg syscall (linux-386), const PTRACE_SYSCALL ideal-int
pkg syscall (linux-386), const PTRACE_SYSEMU ideal-int
pkg syscall (linux-386), const PTRACE_SYSEMU_SINGLESTEP ideal-int
pkg syscall (linux-386), const PTRACE_TRACEME ideal-int
pkg syscall (linux-386), const PathMax ideal-int
pkg syscall (linux-386), const RLIMIT_AS ideal-int

* The Sysctls experimental feature has been promoted to beta (enabled by default via the `Sysctls` feature flag). PodSecurityPolicy and Pod objects now have fields for specifying and controlling sysctls. Alpha sysctl annotations will be ignored by 1.11+ kubelets. All alpha sysctl annotations in existing deployments must be converted to API fields to be effective. ([#6371](https://github.com/kubernetes/kubernetes/pull/63717), [@ingvagabund](https://github.com/ingvagabund))

  // credentials.  If not specified, default values will be attempted.
  // +optional
  optional LocalObjectReference secretRef = 5;
}

// Sysctl defines a kernel parameter to be set
message Sysctl {
  // Name of a property to set
  optional string name = 1;

  // Value of a property to set
  optional string value = 2;
}

  
  When the feature gate is enabled, kubelet ignores errors that happens during setting the following sysctl values: `vm.overcommit_memory`, `vm.panic_on_oom`, `kernel.panic`, `kernel.panic_on_oops`, `kernel.keys.root_maxkeys`, `kernel.keys.root_maxbytes`. (These sysctl values for the host, not for the containers)
  
  kubelet also ignores an error during opening `/dev/kmsg`.

pkg syscall (darwin-arm64), const SYS___SIGWAIT_NOCANCEL = 422
pkg syscall (darwin-arm64), const SYS___SIGWAIT_NOCANCEL ideal-int
pkg syscall (darwin-arm64), const SYS___SYSCTL = 202
pkg syscall (darwin-arm64), const SYS___SYSCTL ideal-int
pkg syscall (darwin-arm64), const S_IEXEC = 64
pkg syscall (darwin-arm64), const S_IEXEC ideal-int
pkg syscall (darwin-arm64), const S_IFMT = 61440

- Kubelet allows pods to use the `net.ipv4.ip_local_reserved_ports` sysctl by default and the minimal kernel version is 3.16; Pod Security admission allows this sysctl in v1.27+ versions of the baseline and restricted policies. ([#115374](https://github.com/kubernetes/kubernetes/pull/115374), [@pacoxu](https://github.com/pacoxu)) [SIG Auth, Network and Node]

pkg syscall (freebsd-arm64), const SYS___SETUGID = 374
pkg syscall (freebsd-arm64), const SYS___SETUGID ideal-int
pkg syscall (freebsd-arm64), const SYS___SYSCTL = 202
pkg syscall (freebsd-arm64), const SYS___SYSCTL ideal-int
pkg syscall (freebsd-arm64), const SYS__UMTX_OP = 454
pkg syscall (freebsd-arm64), const SYS__UMTX_OP ideal-int
pkg syscall (freebsd-arm64), const SYS_ABORT2 = 463

pkg syscall (freebsd-riscv64), const SYS___SETUGID = 374 #53466
pkg syscall (freebsd-riscv64), const SYS___SETUGID ideal-int #53466
pkg syscall (freebsd-riscv64), const SYS___SYSCTL = 202 #53466
pkg syscall (freebsd-riscv64), const SYS___SYSCTL ideal-int #53466
pkg syscall (freebsd-riscv64), const S_IFMT = 61440 #53466
pkg syscall (freebsd-riscv64), const S_IRWXG = 56 #53466