The RuntimeClass alpha feature enables a node to surface multiple runtime options to support a variety of workload types.  Examples include native linux containers, and “sandboxed” containers that isolate the container from the host kernel.

  
  Enabling seccomp for your workload can have a negative performance impact depending on the kernel and container runtime version in use.
  

bearalváhki.no
beardu.no
beats
beauty
bedzin.pl
beep.pl
beer
beiarn.no
bel.tr
belau.pw
belem.br
belluno.it
benevento.it
bentley
bentre.vn
beppu.oita.jp
berg.no
bergamo.it
bergen.no
berlevag.no
berlevåg.no
berlin
beskidy.pl
best
bestbuy
bet
bet.ar
bet.br
better-than.tv
bf
bg
bg.eu.org
bg.it
bh
bharti
bhz.br
bi
bi.it

## Changelog since v1.34.5

## Changes by Kind

### Bug or Regression

- Kubeadm: do not add learner member to etcd client endpoints ([#137258](https://github.com/kubernetes/kubernetes/pull/137258), [@ahrtr](https://github.com/ahrtr)) [SIG Cluster Lifecycle]

- Add `/sys/devices/virtual/powercap` to default masked paths. It avoids the potential security risk that the ability to read these files may offer a power-based sidechannel attack against any workloads running on the same kernel. ([#125970](https://github.com/kubernetes/kubernetes/pull/125970), [@carlory](https://github.com/carlory)) [SIG Node]

- Handle Windows named pipes in host mounts. ([#69484](https://github.com/kubernetes/kubernetes/pull/69484), [@ddebroy](https://github.com/ddebroy))
- Fixed inconsistency in windows kernel proxy when updating HNS policy. ([#68923](https://github.com/kubernetes/kubernetes/pull/68923), [@delulu](https://github.com/delulu))

##  External Dependencies

- Kubelet: a configuration file specified via `--config` is now loaded with strict deserialization,...

- SCTP support in API objects (Pod, Service, NetworkPolicy) is now GA.
  Note that this has no effect on whether SCTP is enabled on nodes at the kernel level,
  and note that some cloud platforms and network plugins do not support SCTP traffic. ([#95566](https://github.com/kubernetes/kubernetes/pull/95566), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]

- Fixes kube-proxy's nftables mode to work on systems with nft 1.1.3. ([#136796](https://github.com/kubernetes/kubernetes/pull/136796), [@kairosci](https://github.com/kairosci)) [SIG API Machinery, Auth and Network]
- Kubeadm: do not add learner member to etcd client endpoints ([#137251](https://github.com/kubernetes/kubernetes/pull/137251), [@pacoxu](https://github.com/pacoxu)) [SIG Cluster Lifecycle]

- kubeadm will now not fail preflight checks when running on >= 5.0 Linux kernel ([#74355](https://github.com/kubernetes/kubernetes/pull/74355), [@brb](https://github.com/brb))