- Do not unmount and mount subpath bind mounts during container creation unless bind mount changes ([#105512](https://github.com/kubernetes/kubernetes/pull/105512), [@gnufied](https://github.com/gnufied)) [SIG Storage]

pkg syscall (darwin-386), func Umask(int) int
pkg syscall (darwin-386), func Undelete(string) error
pkg syscall (darwin-386), func UnixRights(...int) []uint8
pkg syscall (darwin-386), func Unmount(string, int) error
pkg syscall (darwin-386), func Wait4(int, *WaitStatus, int, *Rusage) (int, error)
pkg syscall (darwin-386), func Write(int, []uint8) (int, error)
pkg syscall (darwin-386), method (*Cmsghdr) SetLen(int)

- AzureFile and CephFS use the new Mount library that prevents logging of sensitive mount options. ([#88684](https://github.com/kubernetes/kubernetes/pull/88684), [@saad-ali](https://github.com/saad-ali)) [SIG Storage]

#### Storage

* [stable] Mount options

  * The ability to specify mount options for volumes is moved from beta to stable.

  * A new `MountOptions` field in the `PersistentVolume` spec is available to specify mount options. This field replaces an annotation.

  * A new `MountOptions` field in the `StorageClass` spec allows configuration of mount options for dynamically provisioned volumes.

* fix mount unmount failure for a Windows pod ([#63272](https://github.com/kubernetes/kubernetes/pull/63272), [@andyzhangx](https://github.com/andyzhangx))
* Fix concurrent map access panic ([#65327](https://github.com/kubernetes/kubernetes/pull/65327), [@dashpole](https://github.com/dashpole))
    * Don't watch .mount cgroups to reduce number of inotify watches

pkg syscall (netbsd-arm64-cgo), func Truncate(string, int64) error
pkg syscall (netbsd-arm64-cgo), func Umask(int) int
pkg syscall (netbsd-arm64-cgo), func UnixRights(...int) []uint8
pkg syscall (netbsd-arm64-cgo), func Unmount(string, int) error
pkg syscall (netbsd-arm64-cgo), func Wait4(int, *WaitStatus, int, *Rusage) (int, error)
pkg syscall (netbsd-arm64-cgo), func Write(int, []uint8) (int, error)

* Local volume source paths that are directories and not mount points fail to unmount.  A fix is in process ([#48331](https://github.com/kubernetes/kubernetes/issues/48331)).

in containers are now `rslave` on Linux by default. To make this default work in all Linux environments the entire mount tree should be marked as shareable, e.g. via `mount --make-rshared /`. All Linux distributions that use systemd already have the root directory mounted as rshared and hence they need not do anything. In Linux environments without systemd we recommend running `mount --make-rshared /` during boot before docker is started, ([@jsafrane](https://github.com/jsafrane))

##...

pkg syscall (freebsd-arm64), func Umask(int) int
pkg syscall (freebsd-arm64), func Undelete(string) error
pkg syscall (freebsd-arm64), func UnixRights(...int) []uint8
pkg syscall (freebsd-arm64), func Unmount(string, int) error
pkg syscall (freebsd-arm64), func Wait4(int, *WaitStatus, int, *Rusage) (int, error)
pkg syscall (freebsd-arm64), func Write(int, []uint8) (int, error)

 - [Action Required] CSI drivers that call IsLikelyNotMountPoint should not assume false means that the path is a mount point. Each CSI driver needs to make sure correct usage of return value of IsLikelyNotMountPoint because if the file is an irregular file but not a mount point is acceptable ([#129370](https://github.com/kubernetes/kubernetes/pull/129370), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage and Windows]