## Before Upgrading

Consider the following changes, limitations, and guidelines before you upgrade:

* The kubelet now fails if swap is enabled on a node. To override the default and run with /proc/swaps on, set `--fail-swap-on=false`. The experimental flag `--experimental-fail-swap-on` is deprecated in this release, and will be removed in a future release.

* Used inline func to ensure unlock is executed ([#61644](https://github.com/kubernetes/kubernetes/pull/61644), [@resouer](https://github.com/resouer))
* kubernetes-master charm now properly clears the client-ca-file setting on the apiserver snap ([#61479](https://github.com/kubernetes/kubernetes/pull/61479), [@hyperbolic2346](https://github.com/hyperbolic2346))

	HostProbeSNATIPV6 = netip.MustParseAddr(env.RegisterStringVar("HOST_PROBE_SNAT_IPV6", DefaultHostProbeSNATIPV6, "").Get())
)

const (
	// to reliably identify kubelet healthprobes from inside the pod (versus standard kube-proxy traffic,
	// since the IP is normally the same), we SNAT identified host probes in the host netns to a fixed

          swap(array, from, to);
        }
        if (array[from + 1] > array[to]) {
          swap(array, from + 1, to);
        }
        if (array[from] > array[from + 1]) {
          swap(array, from, from + 1);
        }

        // Perform a partition with the selected median.
        int low = from + 1, high = to; // Indexes for partitioning.
        double partition = array[from + 1]; // Choose partitioning element.

          swap(array, from, to);
        }
        if (array[from + 1] > array[to]) {
          swap(array, from + 1, to);
        }
        if (array[from] > array[from + 1]) {
          swap(array, from, from + 1);
        }

        // Perform a partition with the selected median.
        int low = from + 1, high = to; // Indexes for partitioning.
        double partition = array[from + 1]; // Choose partitioning element.

iptables -t nat -A ISTIO_POSTRT -m owner --socket-exists -p tcp -m set --match-set istio-inpod-probes-v4 dst -j SNAT --to-source 169.254.7.127
ip6tables -t nat -N ISTIO_POSTRT
ip6tables -t nat -A POSTROUTING -j ISTIO_POSTRT

      <url>ssh://parent.url/distros</url>
      <uniqueVersion>false</uniqueVersion>
      <layout>legacy</layout>
    </repository>
    <snapshotRepository>
      <id>parent-snaps</id>
      <name>parent-snaps</name>
      <url>ssh://parent.url/snaps</url>
      <uniqueVersion>false</uniqueVersion>
      <layout>legacy</layout>
    </snapshotRepository>
    <site>
      <id>parent-site</id>
      <name>parent-site</name>

pkg debug/pe, const IMAGE_FILE_NET_RUN_FROM_SWAP = 2048
pkg debug/pe, const IMAGE_FILE_NET_RUN_FROM_SWAP ideal-int
pkg debug/pe, const IMAGE_FILE_RELOCS_STRIPPED = 1
pkg debug/pe, const IMAGE_FILE_RELOCS_STRIPPED ideal-int
pkg debug/pe, const IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP = 1024
pkg debug/pe, const IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP ideal-int
pkg debug/pe, const IMAGE_FILE_SYSTEM = 4096

  <distributionManagement>
    <repository>
      <url>https://parent.url/dist</url>
      <id>parent.distros</id>
    </repository>
    <snapshotRepository>
      <url>https://parent.url/snaps</url>
      <id>parent.snaps</id>
    </snapshotRepository>
    <site>
      <url>https://parent.url/site</url>
      <id>parent.site</id>
    </site>
    <downloadUrl>https://parent.url/download</downloadUrl>

  </ciManagement>
  <distributionManagement>
    <repository>
      <id>child-distros</id>
      <url>ssh://child.url/distros</url>
    </repository>
    <snapshotRepository>
      <id>child-snaps</id>
      <url>ssh://child.url/snaps</url>
    </snapshotRepository>
    <site>
      <id>child-site</id>
      <url>scp://child.url/site</url>
    </site>
  </distributionManagement>