Kubernetes
Kubernetes 1.37 arrives in August 2026, and the release-team sneak peek reads as a feature list. Sorted by what actually affects a running cluster, it splits cleanly into two piles: a couple of genuine security wins worth adopting, and a set of long-signaled deprecations that will stop
Kubernetes
The core move in GitOps is making Git the desired-state control plane and letting a controller reconcile the cluster to match it, continuously. Traditional CI/CD pushes to the cluster; GitOps pulls. That single inversion is where most of the security benefit comes from, and it's the
Kubernetes
Manual compliance audits don't survive contact with Kubernetes. Pods live and die in seconds, a snapshot is stale the moment you take it, and a single kubectl patch applied during a 3 a.m. incident silently drifts a cluster off its CIS baseline until the next scheduled audit
Kubernetes
Centralized logging on Kubernetes has a way of turning into your most expensive observability line item. The usual culprit is the index. Elasticsearch-style stacks index every word of every log line, and that full-text index can balloon to roughly the size of the raw data it's