#
DIFF.BLOG
New
Following
Discover
Jobs
More
Top Writers
Suggest a blog
Upvotes plugin
Report bug
Contact
About
Sign up
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS
k8s: Kubernetes v1.35: Restricting executables invoked by kubeconfigs via exec plugin allowList added to kuberc
1
·
Sujith Quintelier
·
Jan. 9, 2026, 11:36 p.m.
Kubernetes
Security
DevOps
credential management
Summary
Kubernetes v1.35 introduces a beta credential plugin policy that allows user-defined restrictions on executables invoked by kubeconfig exec plugins through an allowlist, enhancing control over plugin execution.
Read full post on quintelier.dev →
MORE POSTS LIKE THIS
Why your RBAC linter misses privilege escalation chains (and how to fix it)
Red Hat ·
Jul 7, 2026
Kubernetes
rbac
Kubernetes: one-off env exec
Thiago Perrotta ·
Mar 23, 2026
Dev
Docker
k8s: Securing Production Debugging in Kubernetes
Sujith Quintelier ·
Mar 19, 2026
Kubernetes
Security
Safely expose the Kubernetes Dashboard in Traefik k3s via a ServersTransport
RvE ·
Mar 11, 2025
Kubernetes
traefik
GitOps with ArgoCD
Jonas Hietala ·
Jul 23, 2026
gitops
ArgoCD
Platform Engineering on Kubernetes: What It Actually Is (and How to Build the Platform)
Aleksei Aleinikov ·
Jul 23, 2026
platform-engineering
internal developer platform
Discover more posts →
AUTHOR
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub
Continue with Google