* allow group impersonation ([#30803](https://github.com/kubernetes/kubernetes/pull/30803), [@deads2k](https://github.com/deads2k))
* Always return command output for exec probes and kubelet RunInContainer ([#30731](https://github.com/kubernetes/kubernetes/pull/30731), [@ncdc](https://github.com/ncdc))

- We have added a new Priority & Fairness rule that exempts all probes (/readyz, /healthz, /livez) to prevent 
  restarting of "healthy" kube-apiserver instance(s) by kubelet. ([#101111](https://github.com/kubernetes/kubernetes/pull/101111), [@tkashem](https://github.com/tkashem)) [SIG API Machinery]

s.se
t.se
tm.se
u.se
w.se
x.se
y.se
z.se

// sg : https://www.sgnic.sg/domain-registration/sg-categories-rules
// Confirmed by registry <******@****.***> 2024-11-19
sg
com.sg
net.sg
org.sg
gov.sg
edu.sg

// sh : http://nic.sh/rules.htm
sh
com.sh
net.sh
gov.sh
org.sh
mil.sh

// si : https://www.iana.org/domains/root/db/si.html
si

- The kube-proxy `sync_proxy_rules_iptables_total` metric has now reverted back
  to its pre-1.27 behavior of tracking the total number of iptables rules that
  kube-proxy is responsible for, rather than only counting the number of rules
  that it re-synced on the last sync. The new `sync_proxy_rules_iptables_last`

- Drop additional rule requirement (cronjobs/finalizers) in the roles who use kubectl create cronjobs to be backwards compatible ([#124883](https://github.com/kubernetes/kubernetes/pull/124883), [@ardaguclu](https://github.com/ardaguclu)) [SIG CLI]

### Bug or Regression

- Drop additional rule requirement (cronjobs/finalizers) in the roles who use kubectl create cronjobs to be backwards compatible ([#124883](https://github.com/kubernetes/kubernetes/pull/124883), [@ardaguclu](https://github.com/ardaguclu)) [SIG CLI]

pkg syscall (linux-386), type TCPInfo struct, Options uint8
pkg syscall (linux-386), type TCPInfo struct, Pad_cgo_0 [2]uint8
pkg syscall (linux-386), type TCPInfo struct, Pmtu uint32
pkg syscall (linux-386), type TCPInfo struct, Probes uint8
pkg syscall (linux-386), type TCPInfo struct, Rcv_mss uint32
pkg syscall (linux-386), type TCPInfo struct, Rcv_rtt uint32
pkg syscall (linux-386), type TCPInfo struct, Rcv_space uint32

        the already-constructed model instead.
    *   Code that requires very tricky shape manipulation via converted op
        layers in order to work, where the Keras symbolic shape inference proves
        insufficient.
    *   Code that tries manually walking a `tf.keras.Model` layer by layer and
        assumes layers only ever have one positional argument. This assumption

pkg syscall (linux-arm-cgo), type TCPInfo struct, Pad_cgo_0 [2]uint8
pkg syscall (linux-arm-cgo), type TCPInfo struct, Pmtu uint32
pkg syscall (linux-arm-cgo), type TCPInfo struct, Probes uint8
pkg syscall (linux-arm-cgo), type TCPInfo struct, Rcv_mss uint32
pkg syscall (linux-arm-cgo), type TCPInfo struct, Rcv_rtt uint32
pkg syscall (linux-arm-cgo), type TCPInfo struct, Rcv_space uint32