What's new for security in Kubernetes 1.27
ID: 8d989899-071b-50f6-a668-4ae106467fa2
STIX ID: report--8d989899-071b-50f6-a668-4ae106467fa2
Feed Name: Datadog Security Labs
Kubernetes v1.27 delivers several security-relevant enhancements: enabling default seccomp profiles across workloads, alpha support for Linux user namespaces, API/kubectl access to node system logs, a new endpoint to reveal a user’s in-cluster identity for RBAC troubleshooting, and an updated CVE feed aligned with the JSON specification. These updates aim to strengthen baseline protections and streamline security operations, though operators should carefully restrict permissions for the new node log access feature.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.