Plan
archived
Kubernetes v1.37 adds emptyDir permissions and bind mount security flags
- Platform/SRE — Plan: Kubernetes v1.37 GA ships emptyDir permission modes (including sticky bit) and bind mount options (noexec, nosuid, nodev) — schedule evaluation and adoption as part of your 1.37 upgrade cycle to harden shared writable volumes; no forced deadline until EOL 2027-10-28.
- CI/CD — Skip
- Leader — Skip
- Signals: Kubernetes 1.37 EOL 2027-10-28
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.