Kubernetes v1.36: Fine-Grained Kubelet API Authorization Graduates to GA
Kubernetes v1.36 has graduated fine-grained kubelet API authorization to General Availability, enabling more precise access control over the kubelet's HTTPS API. This replaces the need for the overly broad nodes/proxy permission, which grants node-level superuser capability. This change addresses a long-standing security issue and reduces the blast radius of a security incident. Engineers should update to Kubernetes v1.36 to take advantage of this feature.