- Platform/SRE — Plan: Pod Certificates and Cluster Trust Bundles reaching GA in Kubernetes 1.37 introduces native X.509/mTLS workload identity as an alternative to service account JWTs; evaluate adopting cluster trust bundles and pod certificate issuance this quarter for services requiring mTLS.
- CI/CD — Skip
- Leader — Learn: Native X.509 workload identity baked into Kubernetes core shifts how orgs can approach service-to-service auth without a service mesh; worth tracking as input to future golden-path and identity-standards decisions.
- Signals: Kubernetes 1.37 EOL 2027-10-28