33.9850° N, 118.4695° W THE OBSERVATORY
THE COALITION — A FUTURE FORGED IN UNITY. A TRUTH BEYOND VEIL.
INITIATION IS DISCERNMENT KNOWLEDGE IS SOVEREIGNTY △
Login Register
Developer Signal Kubernetes high Trusted Signal Verified Source

Kubernetes v1.36: Fine-Grained Kubelet API Authorization Graduates to GA

On behalf of Kubernetes SIG Auth and SIG Node, we are pleased to announce the graduation of fine-grained kubelet API authorization to General Availability (GA) in Kubernetes v1.36! The KubeletFineGrainedAuthz feature gate was introduced as an opt-in alpha feature in Kubernetes v1.32, then graduated to beta (enabled by default) in v1.33. Now, the feature is generally available and the feature gate is locked to enabled. This feature enables more precise, least-privilege access control over the kubelet's HTTPS API, replacing the need to grant the overly broad nodes/proxy permission for common monitoring and observability use cases. Motivation: the nodes/proxy problemThe kubelet exposes an HTTPS endpoint with several APIs that give access to data of varying sensitivity, including pod listings,

Source: Kubernetes ↗

Kubernetes@kubernetesio Apr 24, 2026Published 18:35 UTCSignal Time 78Trust Score
K8s Kubernetes kubernetes.io

On behalf of Kubernetes SIG Auth and SIG Node, we are pleased to announce the graduation of fine-grained kubelet API authorization to General Availability (GA) in Kubernetes v1.36! The KubeletFineGrainedAuthz feature gate was introduced as an opt-in alpha feature in Kubernetes v1.32, then graduated to beta (enabled by default) in v1.33. Now, the feature is generally available and the feature gate is locked to enabled. This feature enables more precise, least-privilege access control over the kubelet's HTTPS API, replacing the need to grant the overly broad nodes/proxy permission for common monitoring and observability use cases. Motivation: the nodes/proxy problemThe kubelet exposes an HTTPS endpoint with several APIs that give access to data of varying sensitivity, including pod listings,

This Coalition transmission preserves metadata, trust context, and source routing for a Developer Signal item from Kubernetes. The complete article remains with the original publisher.

Content handling is marked as Metadata Only. Use the source article link for the full report, updates, corrections, and publisher-controlled context.

Key Points

  • Published by Kubernetes.
  • Categorized as Developer Signal.
  • Source handling: Verified Source.
  • Rights posture: Metadata Only.
  • Follow the source article for the complete original report.
Source Article Kubernetes v1.36: Fine-Grained Kubelet API Authorization Graduates to GA kubernetes.io ↗