CuraDevOps

tag: Container-Hardening · 1 items

Plan archived Kubernetes v1.37 adds emptyDir permissions and bind mount security flags
2026-09-17 · Kubernetes Blog · source ↗ #kubernetes#storage-security#container-hardening
  • Platform/SRE — Plan: Kubernetes v1.37 GA ships emptyDir permission modes (including sticky bit) and bind mount options (noexec, nosuid, nodev) — schedule evaluation and adoption as part of your 1.37 upgrade cycle to harden shared writable volumes; no forced deadline until EOL 2027-10-28.
  • CI/CD — Skip
  • Leader — Skip
  • Signals: Kubernetes 1.37 EOL 2027-10-28