Kubernetes 1.35 Patches CSI Drivers' Token Leak Nightmare—Opt-In Security Without the Chaos
Service account tokens leaking into CSI driver logs? Kubernetes v1.35 kills that risk with a backward-compatible opt-in to the right spot. No more CVEs from sloppy token handling.
⚡ Key Takeaways
- Kubernetes v1.35 adds beta opt-in for CSI drivers to get service account tokens in the secure **secrets** field, dodging log leaks. 𝕏
- Backward-compatible: fallback code works pre-upgrade; no breaks for existing setups. 𝕏
- Inspired by past token hardening—expect fewer CVEs and faster driver adoption by 2025. 𝕏
Worth sharing?
Get the best Open Source stories of the week in your inbox — no noise, no spam.
Originally reported by Kubernetes Blog
Related Stories
DevOps & Infrastructure
Kubernetes 1.35 Cracks Open Mutable PV Node Affinity — A Stateful Revolution in Alpha
Security & Privacy
Kubernetes Debugging's Dirty Secret: From Quick Fixes to Breach Backdoors
DevOps & Infrastructure
Kubernetes Just Killed Ingress NGINX: Half Your Clusters Are Suddenly Vulnerable
DevOps & Infrastructure