Hardening Container Storage with Bind Mount Options and EmptyDir Permissions
By BIOS Founding Team
Kubernetes v1.37 adds an fsMode field for fine-grained permission control on emptyDir volumes, plus bind mount options that can block file deletion, restrict binary execution from writable volumes, or enforce read-only access.
These let teams declare storage-level security and least-privilege policies directly in pod specs, rather than relying on external workarounds.
Full details: https://kubernetes.io/blog/2026/09/16/kubernetes-v1-37-hardening-container-storage/
More from the community
Terraform v1.16.4
The latest patch on the 1.16 stable line, fixing rendering of policy evaluation outcomes against older Terraform Enterprise versions and a deferred-error bug triggered when a provider returns a deferral for a resource...
Terraform v1.17.0-beta2
The second beta of 1.17 carries forward the Policy GA, provider-requirement variables and locals, and -minimal-refresh features from beta1.
Python Documentation Now Available in Persian
The official CPython documentation is now available translated into Persian, the result of community translator effort, joining the growing list of localized doc sets.