Kubernetes 1.37 Makes Rootless Node Components a More Practical Security Model
Rootless Kubernetes is moving beyond an experiment: v1.37 gives cluster operators a more mature option for reducing the privileges of node components.
Topic Thread
5 published observations tracking this thread.
Rootless Kubernetes is moving beyond an experiment: v1.37 gives cluster operators a more mature option for reducing the privileges of node components.
The new Beta feature matters because lightweight sidecars no longer have to force the same resource allocation strategy onto primary application containers.
Histograms are useful when averages hide tail latency. Kubernetes 1.37's native histogram support moves a more expressive metric type closer to the default observability path.
The important Kubernetes 1.37 scheduling change is architectural: the scheduler can reason about a workload's shape, not only each Pod in isolation.
The storage changes in Kubernetes 1.37 are small primitives with a large security implication: runtime storage semantics can become explicit policy instead of an implicit container assumption.