- This PR sets the --cluster-dns flag value to kube-dns service IP whether or not NodeLocal DNSCache is enabled. NodeLocal DNSCache will listen on both the link-local as well as the service IP. ([#84383](https://github.com/kubernetes/kubernetes/pull/84383), [@prameshj](https://github.com/prameshj))
- kube-dns add-on:
  - All containers are now being executed under more restrictive privileges.

- Fixed a regression introduced in v1.29 where conntrack entries for UDP connections
  to deleted pods did not get cleaned up correctly, which could (among other things)
  cause DNS problems when DNS pods were restarted. ([#127780](https://github.com/kubernetes/kubernetes/pull/127780), [@danwinship](https://github.com/danwinship))

    return true // The caller's address can be carried by this connection.
  }

  /**
   * Returns true if this connection's route has the same address as any of [candidates]. This
   * requires us to have a DNS address for both hosts, which only happens after route planning. We
   * can't coalesce connections that use a proxy, since proxies don't tell us the origin server's IP
   * address.
   */

## Changelog since v1.15.9

## Changes by Kind

### Other (Bug, Cleanup or Flake)

- Fix the bug PIP's DNS is deleted if no DNS label service annotation isn't set. ([#87310](https://github.com/kubernetes/kubernetes/pull/87310), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]

 *
 * <p>Lookups by row key are often faster than lookups by column key, because the data is stored in
 * a {@code Map<R, Map<C, V>>}. A method call like {@code column(columnKey).get(rowKey)} still runs
 * quickly, since the row key is provided. However, {@code column(columnKey).size()} takes longer,
 * since an iteration across all row keys occurs.
 *

   *     underlying this step or, if {@code get()} throws a different kind of exception, that
   *     exception itself.
   * @param executor the executor that runs {@code fallback} if the input fails
   */
  public <X extends Throwable> ClosingFuture<V> catching(
      Class<X> exceptionType, ClosingFunction<? super X, ? extends V> fallback, Executor executor) {

     * {@code " x "} (space, letter x, space), followed by the count.
     */
    @Override
    String toString();
  }

  /**
   * Runs the specified action for each distinct element in this multiset, and the number of
   * occurrences of that element. For some {@code Multiset} implementations, this may be more

HSPLokhttp3/Dispatcher;->finished(Ljava/util/Deque;Ljava/lang/Object;)V
HSPLokhttp3/Dispatcher;->promoteAndExecute()Z
HSPLokhttp3/Dns$Companion$DnsSystem;-><init>()V
HSPLokhttp3/Dns$Companion$DnsSystem;->lookup(Ljava/lang/String;)Ljava/util/List;
HSPLokhttp3/Dns;-><clinit>()V
HSPLokhttp3/EventListener$Companion$NONE$1;-><init>()V
HSPLokhttp3/EventListener;-><clinit>()V
HSPLokhttp3/EventListener;-><init>()V

      .isEqualTo(generalNameIpAddress to localhost)
    assertThat(CertificateAdapters.generalName.toDer(generalNameIpAddress to localhost))
      .isEqualTo(bytes)
  }

  @Test fun `choice dns`() {
    val bytes = "820b6578616d706c652e636f6d".decodeHex()
    assertThat(CertificateAdapters.generalName.fromDer(bytes))
      .isEqualTo(generalNameDnsName to "example.com")

- Kubeadm: Remove the field `ClusterConfiguration.DNS.Type` in v1beta3 since CoreDNS is the only supported DNS type. ([#101547](https://github.com/kubernetes/kubernetes/pull/101547), [@neolit123](https://github.com/neolit123))