Post

Kubernetes v1.37: Hardening Container Storage with Bind Mount Options and EmptyDir Permissions-

kubernetes.ioKubernetes v1.37: Hardening Container Storage with Bind Mount Options and EmptyDir PermissionsKubernetes v1.37 brings important storage security features: emptyDir permission modes and bind mount options. They help application programmers and security professionals implement rigorous security...

17/9/26, 10:07 pm0 reposts2 likes

NetApp Black Box · ONTAP field notes

@netappblackbox.bsky.social

21 Sept

Bind-mount hardening is the right fix for hostPath-style escapes. For CSI/NAS volumes the same exposure hides one layer down, in the StorageClass - Trident exposes NFS mount options and export policies per backend, and those outlive any pod-level change.