- UDP and SCTP protocols can left stale connections that need to be cleared to avoid services disruption, but they can cause problems that are hard to debug.
  Kubernetes components using a loglevel greater or equal than 4 will log the conntrack operations and its output, to show the entries that were deleted. ([#95694](https://github.com/kubernetes/kubernetes/pull/95694), [@aojea](https://github.com/aojea)) [SIG Network]

- Fixed a regression since `v1.27.0` in the scheduler framework when running score plugins. 
  The `skippedScorePlugins` number might be greater than `enabledScorePlugins`, 
  so when initializing a slice the `cap(len(skippedScorePlugins) - len(enabledScorePlugins))` is negative, 

Modulus from a slice of big-endian bytes. The // modulus must be greater than one. // // The number of significant bits and whether the modulus is even is leaked // through timing side-channels. func NewModulus(b []byte) (*Modulus, error) { n := NewNat().resetToBytes(b) return newModulus(n) } // NewModulusProduct creates a new Modulus from the product of two numbers // represented as big-endian byte slices. The result must be greater than one. // //go:norace func NewModulusProduct(a, b []byte) (*Modulus,...

- Remove incorrectly printed warning for SessionAffinity whenever a headless service is creater or updated ([#134054](https://github.com/kubernetes/kubernetes/pull/134054), [@Peac36](https://github.com/Peac36)) [SIG Network]

- Graceful node shutdown, allow the actual inhibit delay to be greater than the expected inhibit delay. ([#103137](https://github.com/kubernetes/kubernetes/pull/103137), [@wzshiming](https://github.com/wzshiming))

gr.com
gr.eu.org
gr.it
gr.jp
grafana-dev.net
grainger
grajewo.pl
gran.no
grane.no
granvin.no
graphic.design
graphics
gratangen.no
gratis
grayjayleagues.com
greater.jp
green
greta.fr
grimstad.no
gripe
griw.gov.pl
grocery
groks-the.info
groks-this.info
grondar.za
grong.no
grosseto.it
groundhandling.aero
group
group.aero

- The `kubectl debug` is able to create ephemeral containers in pre-1.22 clusters with the `EphemeralContainers` feature enabled. Note that versions of kubectl prior to 1.22 are unable to create ephemeral containers in clusters version 1.22 and greater due to an API change. ([#103292](https://github.com/kubernetes/kubernetes/pull/103292), [@verb](https://github.com/verb))

FE63          ; mapped                 ; 002D          # 1.1  SMALL HYPHEN-MINUS
FE64          ; disallowed_STD3_mapped ; 003C          # 1.1  SMALL LESS-THAN SIGN
FE65          ; disallowed_STD3_mapped ; 003E          # 1.1  SMALL GREATER-THAN SIGN
FE66          ; disallowed_STD3_mapped ; 003D          # 1.1  SMALL EQUALS SIGN
FE67          ; disallowed                             # NA   <reserved-FE67>

- Fixed a regression since 1.27.0 in scheduler framework when running score plugins. 
  The `skippedScorePlugins` number might be greater than `enabledScorePlugins`, 
  so when initializing a slice the cap(len(skippedScorePlugins) - len(enabledScorePlugins)) is negative, 

* Sharing a PID namespace between containers in a pod is disabled by default in version 1.8. To enable for a node, use the `--docker-disable-shared-pid=false` kubelet flag. Be aware that PID namespace sharing requires Docker version greater than or equal to 1.13.1.

* Fix issues related to the eviction manager.

* Fix inconsistent Prometheus cAdvisor metrics.

* Fix issues related to the local storage allocatable feature.

### Auth