Kubernetes 1.35 - New security features

**Kubernetes 1.35 — Security-focused release notes:** This article summarizes 17 security-related changes in Kubernetes 1.35, including deprecating cgroup v1, image pull credential verification, transitioning from SPDY to WebSockets (with RBAC permission implications), kubelet certificate CN validation, constrained impersonation, user namespaces improvements, CSI token handling, pod certificates, image-as-volume support, and several other feature graduations and operational flags; it provides compatibility warnings and remediation guidance for cluster administrators.