CuraDevOps

tag: Storage-Security · 2 items

Plan archived Kubernetes v1.37 adds emptyDir permissions and bind mount security flags
2026-09-17 · Kubernetes Blog · source ↗ #kubernetes#storage-security#container-hardening
  • Platform/SRE — Plan: Kubernetes v1.37 GA ships emptyDir permission modes (including sticky bit) and bind mount options (noexec, nosuid, nodev) — schedule evaluation and adoption as part of your 1.37 upgrade cycle to harden shared writable volumes; no forced deadline until EOL 2027-10-28.
  • CI/CD — Skip
  • Leader — Skip
  • Signals: Kubernetes 1.37 EOL 2027-10-28
Plan archived AKS: Encryption in Transit for Azure Files NFS v4.1 Now GA
2026-07-18 · Azure Updates · source ↗ #azure-kubernetes-service#storage-security#encryption
  • Platform/SRE — Plan: A new GA security capability for AKS clusters using Azure Files NFS v4.1 volumes via the CSI driver — worth evaluating this quarter for workloads with data-in-transit compliance requirements. Review existing PersistentVolume configurations and enable EiT where encryption mandates apply.
  • CI/CD — Skip
  • Leader — Learn: This GA feature expands available encryption controls on AKS-backed storage, which may inform security standards or compliance posture for teams running NFS workloads on Azure, but no strategic decision is forced.
  • Signals: GA announcement