k8s: Kubernetes v1.37: Pod Certificates and Cluster Trust Bundles
Kubernetes Official Blog
2026-08-28
Kubernetes 1.37 graduates Pod Certificates and Cluster Trust Bundles to GA, adding built-in support for workload X.509 identity and trust bundle distribution. The feature uses Kubelet, PodCertificateRequest objects, and signer controllers to issue and rotate certificates for TLS/mTLS while keeping key material on the node filesystem.