Kubernetes v1.36 introduces an alpha feature that addresses the challenge of enforcing security policies across cluster bootstrap: manifest-based admission control. It lets you define admission webhooks and CEL-based policies as files on disk, loaded by the API server at startup, before it serves any requests, ensuring they can’t be deleted or bypassed.
Kubernetes v1.35 introduces a beta solution to address service account token handling in CSI drivers: CSI Driver Opt-in for Service Account Tokens via Secrets Field. This allows CSI drivers to receive service account tokens through the secrets field in NodePublishVolumeRequest, which is the appropriate place for sensitive data in the CSI specification.
Service Account Token Integration for Kubelet Credential Providers graduates to beta in Kubernetes v1.34, bringing enhanced security for image pulls.
A comprehensive guide to implementing Kubernetes Structured Authentication with practical examples using Microsoft Entra ID and Okta as JWT providers, featuring CEL-based validation and hot-reloading configuration.
Exploring the evolution of Kubernetes image pulls with workload identity for enhanced security in v1.33. This post covers the new features that improve how Kubernetes handles image registry authentication.
Deep dive into the structured authentication configuration feature and its beta graduation in Kubernetes 1.30. Learn about the new capabilities and how to leverage them for enhanced security.
Announcing the graduation of KMS V2 to beta status in Kubernetes 1.27 and what this means for Kubernetes encryption. Learn about the new capabilities and stability improvements.
Exploring the enhancements and improvements in KMS V2 for better encryption key management in Kubernetes 1.25. This post covers the new features, performance improvements, and migration guidance.
Introduction of Azure AD workload identity for Kubernetes - a new authentication mechanism that enables Kubernetes workloads to access Azure resources using Azure Active Directory without storing secrets in the cluster.