* kube-apiserver now uses SSH tunnels for webhooks if the webhook is not directly routable from apiserver's network environment. ([#58644](https://github.com/kubernetes/kubernetes/pull/58644), [@yguo0905](https://github.com/yguo0905))

  }

  /**
   * Evaluates whether the argument is a 6to4 address.
   *
   * <p>6to4 addresses begin with the {@code "2002::/16"} prefix. The next 32 bits are the IPv4
   * address of the host to which IPv6-in-IPv4 tunneled packets should be routed.
   *
   * <p>For more on 6to4 addresses see section 2 of <a target="_parent"
   * href="http://tools.ietf.org/html/rfc3056#section-2">RFC 3056</a>.
   *

    * + to use:
    * A new service spec field `Service.Spec.IPFamily` has been added. The default of this field is family of (first service cidr in --service-cluster-ip-range flag). The value is defaulted as described above  once the feature gate is turned on. Here are the possible values for this field:

- The feature-gate CSIMigrationPortworx was promoted to beta in Kubernetes 1.25, but turned off by default. In 1.31, it was turned on by default. Before upgrading to 1.31, please make sure that the corresponding portworx csi driver is installed if you are using Portworx. ([#125016](https://github.com/kubernetes/kubernetes/pull/125016), [@carlory](https://github.com/carlory))...

fukushima.fukushima.jp
fukushima.hokkaido.jp
fukushima.jp
fukuyama.hiroshima.jp
fun
funabashi.chiba.jp
funagata.yamagata.jp
funahashi.toyama.jp
functions.fnc.fr-par.scw.cloud
fund
funnels.cx
fuoisku.no
fuossko.no
furano.hokkaido.jp
furniture
furubira.hokkaido.jp
furudono.fukushima.jp
furukawa.miyagi.jp
fusa.no
fuso.aichi.jp
fussa.tokyo.jp
futaba.fukushima.jp

- `PidPressure` now evicts pods from lowest priority to highest priority ([#72844](htt...

  
  When we switched to go-runner for building the apiserver,
  controller-manager, and scheduler server components, we no longer
  reference the individual architectures in the image names, specifically
  in the 'FROM' directive of the server image Dockerfiles.
  
  As a result, server images for non-amd64 images copy in the go-runner
  amd64 binary instead of the go-runner that matches that architecture.
  

fukushima.fukushima.jp
fukushima.hokkaido.jp
fukushima.jp
fukuyama.hiroshima.jp
fun
funabashi.chiba.jp
funagata.yamagata.jp
funahashi.toyama.jp
functions.fnc.fr-par.scw.cloud
fund
funnels.cx
fuoisku.no
fuossko.no
furano.hokkaido.jp
furniture
furubira.hokkaido.jp
furudono.fukushima.jp
furukawa.miyagi.jp
fusa.no
fuso.aichi.jp
fussa.tokyo.jp
futaba.fukushima.jp

  * Hard Eviction Thresholds will be subtracted from Capacity while calculating
    Node Allocatable. This will result in a reduction of schedulable capacity in
    clusters post upgrade where kubelet hard eviction has been turned on for
    memory. To opt-out set `--experimental-allocatable-ignore-eviction=true`.
  * More details on these feature here:
    https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/

- Promoted the feature gate `ValidtaingAdmissionPolicy` to beta, and it is turned off by default. ([#119409](https://github.com/kubernetes/kubernetes/pull/119409), [@alexzielenski](https://github.com/alexzielenski))