RootNode.es on Mythryl: “Kubernetes 1.35 brings changes around security: 🚮 Removal of cgroup…”

🪪 Increased verifications when pulling images in Kubernetes 1.35: 🔎 Performs credentials check when accessing images, not only on pull. 👥 To keep images secure in multi-tenant clusters. ℹ️ www.sysdig.com/blog/kuberne...

sysdig.comKubernetes 1.35 - New security features | SysdigDiscover the new security features in Kubernetes 1.35, from breaking changes like cgroup v1 removal to safer defaults for auth, images, and namespaces.

RootNode.es

@rootnode.es

2 Dec 2025

🌐 User namespaces when using the host network in Kubernetes 1.35: 🛡️ Pods using the host network no longer need to also use the host users. 🔐 They can run as privileged without being root. ℹ️ www.sysdig.com/blog/kuberne...

sysdig.comKubernetes 1.35 - New security features | SysdigDiscover the new security features in Kubernetes 1.35, from breaking changes like cgroup v1 removal to safer defaults for auth, images, and namespaces.

RootNode.es

@rootnode.es

2 Dec 2025

🦹🏻 Constrained impersonation in Kubernetes 1.35: 💡 Impersonator: User acting as another user. 🚧 They are now limited to their original permissions. 🛡️ This prevents privilege escalations. ℹ️ www.sysdig.com/blog/kuberne...

sysdig.comKubernetes 1.35 - New security features | SysdigDiscover the new security features in Kubernetes 1.35, from breaking changes like cgroup v1 removal to safer defaults for auth, images, and namespaces.

RootNode.es

@rootnode.es

2 Dec 2025

🔑 Token secrets for CSI drivers in Kubernetes 1.35: 🗂️ New field to provide secrets to CSI drivers. 🛡️ Keeping sensitive data separate from configuration. ℹ️ www.sysdig.com/blog/kuberne...

sysdig.comKubernetes 1.35 - New security features | SysdigDiscover the new security features in Kubernetes 1.35, from breaking changes like cgroup v1 removal to safer defaults for auth, images, and namespaces.

Post