Kubernetes v1.37: Hardening Container Storage with Bind Mount Options and EmptyDir Permissions
- Kubernetes: 33 events in the last 90 days
- Previous: 1 days earlier · Kubernetes v1.37: Pod-Level Resource Managers graduated to Beta
What happened
Kubernetes v1.37 brings important storage security features: emptyDir permission modes and bind mount options. They help application programmers and security professionals implement rigorous security policies, for example, prohibiting deletion of files across containers or execution of arbitrary binaries from writable volumes, directly in Kubernetes without any complicated circumvention. Linux storage and permission…
Summary assembled by rule from the sources below