Kubernetes v1.37 adds emptyDir permissions and bind mount security flags

Thu, 17 Sep 2026 15:22:47 +0000

Platform/SRE — Plan: Kubernetes v1.37 GA ships emptyDir permission modes (including sticky bit) and bind mount options (noexec, nosuid, nodev) — schedule evaluation and adoption as part of your 1.37 upgrade cycle to harden shared writable volumes; no forced deadline until EOL 2027-10-28.
CI/CD — Skip
Leader — Skip
Signals: Kubernetes 1.37 EOL 2027-10-28

Container-Hardening on CuraDevOps