## Urgent Upgrade Notes 

### (No, really, you MUST read this before you upgrade)

- 'The `IPv6DualStack` feature gate for external cloud providers was removed.
  (The feature became GA in 1.23 and the gate was removed for all other
  components several releases ago.) If you were still manually

- DRA: when the scheduler had to deallocate a claim after a node became unsuitable for a pod, it might have needed more attempts than really necessary. This was fixed by first disabling allocations. ([#120428](https://github.com/kubernetes/kubernetes/pull/120428), [@pohly](https://github.com/pohly))

- Pods were allowed to use the `net.ipv4.tcp_rmem` and `net.ipv4.tcp_wmem` sysctl by default
  when the kernel version was 4.15 or higher. With the kernel 4.15 the sysctl became namespaced.

   ([#123341](https://github.com/kubernetes/kubernetes/pull/123341), [@neoli...

* Fixes possible panic during volume detach, if corresponding volume plugin became non-attachable ([#71471](https://github.com/kubernetes/kubernetes/pull/71471), [@mshaverdo](https://github.com/mshaverdo))

yamanouchi.nagano.jp
yamashina.kyoto.jp
yamato.fukushima.jp
yamato.kanagawa.jp
yamato.kumamoto.jp
yamatokoriyama.nara.jp
yamatotakada.nara.jp
yamatsuri.fukushima.jp
yamaxun
yamazoe.nara.jp
yame.fukuoka.jp
yanagawa.fukuoka.jp
yanaizu.fukushima.jp
yandex
yandexcloud.net
yao.osaka.jp
yaotsu.gifu.jp
yasaka.nagano.jp
yashio.saitama.jp
yashiro.hyogo.jp
yasu.shiga.jp

* Fixes possible panic during volume detach, if corresponding volume plugin became non-attachable ([#71471](https://github.com/kubernetes/kubernetes/pull/71471), [@mshaverdo](https://github.com/mshaverdo))

SIG CLI introduces kubectl debug

SIG CLI was debating the need for a debug utility for quite some time already. With the development of [ephemeral containers](https://kubernetes.io/docs/concepts/workloads/pods/ephemeral-containers/), it became more obvious how we can support developers with tooling built on top of `kubectl exec`. The addition of the `kubectl debug` [command](https://github.com/kubernetes/enhancements/blob/master/keps/sig-cli/1441-kubectl-debug/README.md) (it is alpha but...

yamanouchi.nagano.jp
yamashina.kyoto.jp
yamato.fukushima.jp
yamato.kanagawa.jp
yamato.kumamoto.jp
yamatokoriyama.nara.jp
yamatotakada.nara.jp
yamatsuri.fukushima.jp
yamaxun
yamazoe.nara.jp
yame.fukuoka.jp
yanagawa.fukuoka.jp
yanaizu.fukushima.jp
yandex
yandexcloud.net
yao.osaka.jp
yaotsu.gifu.jp
yasaka.nagano.jp
yashio.saitama.jp
yashiro.hyogo.jp
yasu.shiga.jp

in v1.21](https://kubernetes.io/blog/2021/04/06/podsecuritypolicy-deprecation-past-present-and-future/), and with the release of v1.25, it has been removed. The updates required to improve its usability would have introduced breaking changes, so it became necessary to remove it in favor of a more friendly replacement. That replacement is [Pod Security Admission](https://kubernetes.io/docs/concepts/security/pod-security-admission/), which graduates to Stable with this release. If you are currently relying...