CuraDevOps

Plan active

Kubernetes v1.37: Pod Certificates and Cluster Trust Bundles go GA

2026-08-29 15:23 UTC · Kubernetes Blog · read the source ↗ #kubernetes#workload-identity#mtls
  • Platform/SRE — Plan: Pod Certificates and Cluster Trust Bundles reaching GA in Kubernetes 1.37 introduces native X.509/mTLS workload identity as an alternative to service account JWTs; evaluate adopting cluster trust bundles and pod certificate issuance this quarter for services requiring mTLS.
  • CI/CD — Skip
  • Leader — Learn: Native X.509 workload identity baked into Kubernetes core shifts how orgs can approach service-to-service auth without a service mesh; worth tracking as input to future golden-path and identity-standards decisions.
  • Signals: Kubernetes 1.37 EOL 2027-10-28
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.