- UserInfo derived from service account tokens created from the TokenRequest API now include the pod name and UID in the Extra field. ([#61858](https://github.com/kubernetes/kubernetes/pull/61858), [@mikedanese](https://github.com/mikedanese))

pkg syscall (netbsd-arm64-cgo), type Credential struct, Groups []uint32
pkg syscall (netbsd-arm64-cgo), type Credential struct, NoSetGroups bool
pkg syscall (netbsd-arm64-cgo), type Credential struct, Uid uint32
pkg syscall (netbsd-arm64-cgo), type Dirent struct
pkg syscall (netbsd-arm64-cgo), type Dirent struct, Fileno uint64
pkg syscall (netbsd-arm64-cgo), type Dirent struct, Name [512]int8

- Changed CRI pod log directory from `/var/log/pods/UID` to `/var/log/pods/NAMESPACE_NAME_UID`. ([#74441](https://github.com/kubernetes/kubernetes/pull/74441), [@Random-Liu](https://github.com/Random-Liu))

pkg syscall (freebsd-arm64), type Credential struct, Groups []uint32
pkg syscall (freebsd-arm64), type Credential struct, NoSetGroups bool
pkg syscall (freebsd-arm64), type Credential struct, Uid uint32
pkg syscall (freebsd-arm64), type Dirent struct
pkg syscall (freebsd-arm64), type Dirent struct, Fileno uint64
pkg syscall (freebsd-arm64), type Dirent struct, Name [256]int8

pkg syscall (darwin-arm64), type Credential struct, Groups []uint32
pkg syscall (darwin-arm64), type Credential struct, NoSetGroups bool
pkg syscall (darwin-arm64), type Credential struct, Uid uint32
pkg syscall (darwin-arm64), type Dirent struct
pkg syscall (darwin-arm64), type Dirent struct, Ino uint64
pkg syscall (darwin-arm64), type Dirent struct, Name [1024]int8

,"completed","removeEventListener","readyWait","wait","readyState","doScroll","access","chainable","emptyGet","raw","bulk","_key","rmsPrefix","rdashAlpha","fcamelCase","_all","letter","toUpperCase","camelCase","string","acceptData","owner","Data","uid","defineProperty","configurable","set","data","prop","hasData","dataPriv","dataUser","rbrace","rmultiDash","dataAttr","JSON","parse","removeData","_data","_removeData","attrs","dequeue","startLength","hooks","_queueHooks","unshift","stop","setter",...

  fine-grained control for supplementary groups in the first container processes.
  This allows you to choose whether to include groups defined in the container image (/etc/groups)
  for the container's primary UID or not. ([#117842](https://github.com/kubernetes/kubernetes/pull/117842), [@everpeace](https://github.com/everpeace)) [SIG API Machinery, Apps and Node]
- The (alpha) nftables mode of kube-proxy now requires version 1.0.1 or later

pkg syscall (freebsd-riscv64), type Credential struct, Groups []uint32 #53466
pkg syscall (freebsd-riscv64), type Credential struct, NoSetGroups bool #53466
pkg syscall (freebsd-riscv64), type Credential struct, Uid uint32 #53466
pkg syscall (freebsd-riscv64), type Dirent struct #53466
pkg syscall (freebsd-riscv64), type Dirent struct, Fileno uint64 #53466
pkg syscall (freebsd-riscv64), type Dirent struct, Name [256]int8 #53466

- Kubelet.exe on Windows now checks that the process running as administrator and the executing user account is listed in the built-in administrators group.  This is the equivalent to checking the process is running as uid 0. ([#96616](https://github.com/kubernetes/kubernetes/pull/96616), [@perithompson](https://github.com/perithompson)) [SIG Node and Windows]

- Fixed an issue where the API server did not send impersonated UID to authentication webhooks. ([#116681](https://github.com/kubernetes/kubernetes/pull/116681), [@stlaz](https://github.com/stlaz)) [SIG API Machinery and Auth]