Kubernetes v1.37 Hardens the Volume You Already Mount
TL;DR Kubernetes v1.37 ships two storage-security features: emptyDir permission modes and bind mount options (announcement). bindMountOptions puts noexec , nosuid and nodev on the bind mount any volume creates inside a container; mode sets how an emptyDir is created instead of the hardcoded 0777. B…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-13 14:00 · DEV Community — AI
Kubernetes v1.37 Hardens the Volume You Already Mount