### Bug or Regression

    * Add hugepages monitoring support
    * Fix incorrect CPU usage metrics with 4.7 kernel
    * Add tmpfs monitoring support
* Support for Huge pages in empty_dir volume plugin ([#50072](https://github.com/kubernetes/kubernetes/pull/50072), [@squall0gd](https://github.com/squall0gd))
    * [Huge pages](https://www.kernel.org/doc/Documentation/vm/hugetlbpage.txt) can now be used with empty dir volume plugin.

vda.it
ve
ve.it
vefsn.no
vega.no
vegarshei.no
vegas
vegårshei.no
velvet.jp
ven.it
veneto.it
venezia.it
venice.it
vennesla.no
ventures
verbania.it
vercel.app
vercel.dev
vercelli.it
verdal.no
verisign
vermögensberater
vermögensberatung
verona.it
verran.no
verse.jp
versicherung
versus.jp
vestby.no
vestnes.no
vestre-slidre.no

- Add --permit-address-sharing flag to `kube-apiserver` to listen with `SO_REUSEADDR`. While allowing to listen on wildcard IPs like 0.0.0.0 and specific IPs in parallel, it avoids waiting for the kernel to release socket in `TIME_WAIT` state, and hence, considerably reducing `kube-apiserver` restart times under certain conditions. ([#93861](https://github.com/kubernetes/kubernetes/pull/93861), [@sttts](https://github.com/sttts))

- Add `/sys/devices/virtual/powercap` to default masked paths. It avoids the potential security risk that the ability to read these files may offer a power-based sidechannel attack against any workloads running on the same kernel. ([#125970](https://github.com/kubernetes/kubernetes/pull/125970), [@carlory](https://github.com/carlory)) [SIG Node]
- Fix a bug that Pods could stuck in the unschedulable pod pool 

The RuntimeClass alpha feature enables a node to surface multiple runtime options to support a variety of workload types.  Examples include native linux containers, and “sandboxed” containers that isolate the container from the host kernel.

  
  Enabling seccomp for your workload can have a negative performance impact depending on the kernel and container runtime version in use.
  

vda.it
ve
ve.it
vefsn.no
vega.no
vegarshei.no
vegas
vegårshei.no
velvet.jp
ven.it
veneto.it
venezia.it
venice.it
vennesla.no
ventures
verbania.it
vercel.app
vercel.dev
vercelli.it
verdal.no
verisign
vermögensberater
vermögensberatung
verona.it
verran.no
verse.jp
versicherung
versus.jp
vestby.no
vestnes.no
vestre-slidre.no

### Bug or Regression

- Bump system-validators to v1.10.2: remove version-specific cgroup kernel config checks to avoid false failures on cgroup v2 systems when v1-only configs are missing. ([#134087](https://github.com/kubernetes/kubernetes/pull/134087), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]

- Add `/sys/devices/virtual/powercap` to default masked paths. It avoids the potential security risk that the ability to read these files may offer a power-based sidechannel attack against any workloads running on the same kernel. ([#125970](https://github.com/kubernetes/kubernetes/pull/125970), [@carlory](https://github.com/carlory)) [SIG Node]