- [Container Images](#container-images-9)
  - [Changelog since v1.27.6](#changelog-since-v1276)
  - [Changes by Kind](#changes-by-kind-9)
    - [Feature](#feature-8)
    - [Failing Test](#failing-test)
    - [Bug or Regression](#bug-or-regression-9)
    - [Other (Cleanup or Flake)](#other-cleanup-or-flake-3)
  - [Dependencies](#dependencies-9)
    - [Added](#added-9)
    - [Changed](#changed-9)

- Added a warning log, an event for cgroup v1 usage and a metric for cgroup version. ([#125328](https://github.com/kubernetes/kubernetes/pull/125328), [@harche](https://github.com/harche))
- Added apiserver.latency.k8s.io/apf-queue-wait annotation to the audit log

### Failing Test

        Files.writeString(tempDir.resolve("shared/initial.txt"), "Initial file in shared directory");
    }

    private void waitForServerReady() throws Exception {
        log.info("Waiting for SMB server to be ready...");

        // Check if container is actually running first
        if (sambaContainer == null || !sambaContainer.isRunning()) {

    - TaintTolerations to 3 - as leveraging node tainting to group nodes in the cluster is becoming a widely-adopted practice
    - NodeAffinity to 2
    - InterPodAffinity to 2
  
  - Won't have HealthzBindAddress, MetricsBindAddress fields (#104251, @ravisantoshgudimetla) [SIG Scheduling and Testing]

- Kubeadm: waiting for etcd learner member to be started before promoting during 'kubeadm join' ([#136365](https://github.com/kubernetes/kubernetes/pull/136365), [@dlipovetsky](https://github.com/dlipovetsky)) [SIG Cluster Lifecycle]

* Set an upper bound (5 minutes) on how long the Kubelet will wait before exiting when the client cert from disk is missing or invalid. This prevents the Kubelet from waiting forever without attempting to bootstrap a new client credentials. ([#59316](https://github.com/kubernetes/kubernetes/pull/59316), [@smarterclayton](https://github.com/smarterclayton))

        indexUpdater.start();

        // Poll for thread to process exceptions
        for (int i = 0; i < 20; i++) {
            if (!indexUpdater.isAlive() || indexUpdater.getState() == Thread.State.WAITING
                    || indexUpdater.getState() == Thread.State.TIMED_WAITING) {
                break;
            }
            Thread.sleep(100);
        }

        // Clean up the thread

  - [Changes by Kind](#changes-by-kind)
    - [Deprecation](#deprecation)
    - [API Change](#api-change)
    - [Feature](#feature)
    - [Documentation](#documentation)
    - [Failing Test](#failing-test)
    - [Bug or Regression](#bug-or-regression)
    - [Other (Cleanup or Flake)](#other-cleanup-or-flake)
  - [Dependencies](#dependencies)
    - [Added](#added)
    - [Changed](#changed)

- Kubeadm: better surface errors during `kubeadm upgrade` when waiting for the kubelet to restart static pods on control plane nodes ([#108315](https://github.com/kubernetes/kubernetes/pull/108315), [@Monokaix](https://github.com/Monokaix))