Kubernetes 1.37 - New security features

Kubernetes 1.37 has just been released, bringing 67 enhancements. In terms of security, we’ve identified 19 changes with security implications spanning new security features to mount volumes, improvements on snapshots, authentication by default on webhooks, and more. Security changes in Kubernetes 1.37 that may break things This feature speeds up the mounting of PersistentVolumes when using SELinux. By using the context option at mount time, Kubernetes applies the security context to the entire volume rather than recursively changing the context on the files. With this optimization, it’s a bit easier for cluster administrators to strengthen their clusters with SELinux. ⚠️ In Kubernetes 1.37, SELinuxMount, the last bit of this enhancement, graduates to stable, meaning that this optimization will be applied to all eligible volumes. This…