Post

sysdig.comKubernetes 1.35 - New security features | SysdigDiscover the new security features in Kubernetes 1.35, from breaking changes like cgroup v1 removal to safer defaults for auth, images, and namespaces.

🪪 Increased verifications when pulling images in Kubernetes 1.35: 🔎 Performs credentials check when accessing images, not only on pull. 👥 To keep images secure in multi-tenant clusters. ℹ️ www.sysdig.com/blog/kuberne...

sysdig.comKubernetes 1.35 - New security features | SysdigDiscover the new security features in Kubernetes 1.35, from breaking changes like cgroup v1 removal to safer defaults for auth, images, and namespaces.

🌐 User namespaces when using the host network in Kubernetes 1.35: 🛡️ Pods using the host network no longer need to also use the host users. 🔐 They can run as privileged without being root. ℹ️ www.sysdig.com/blog/kuberne...

sysdig.comKubernetes 1.35 - New security features | SysdigDiscover the new security features in Kubernetes 1.35, from breaking changes like cgroup v1 removal to safer defaults for auth, images, and namespaces.

🦹🏻 Constrained impersonation in Kubernetes 1.35: 💡 Impersonator: User acting as another user. 🚧 They are now limited to their original permissions. 🛡️ This prevents privilege escalations. ℹ️ www.sysdig.com/blog/kuberne...