# post Published articles for post. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Agents operate, humans govern: Scale your operations and reduce toil with Azure SRE Agent DevFeed: [Agents operate, humans govern: Scale your operations and reduce toil with Azure SRE Agent]() Original publisher: [Read original article]() Author: TNS Staff Published: 2026-09-15T16:21:45Z Content type: article Language: en Sources: [The New Stack]() Topics: [SRE](), [incident](), [Azure](), [observability](), [DevOps](), [Redis]() Tags: [agent](), [ai-agents](), [ai-operations](), [azure](), [code-review](), [deployment](), [devops](), [incident](), [microsoft-azure](), [monitoring](), [observability](), [post](), [redis](), [sponsor-microsoft-azure](), [sponsored](), [sponsored-post](), [sre](), [telemetry]() ### AI overview The article describes Azure SRE Agent as a system that analyzes telemetry, correlates deployment and monitoring data, investigates incidents, identifies root causes, recommends or prepares fixes, and supports mitigation and other operational tasks under human approval. It cites examples involving Microsoft service teams and InEight, including a recommendation to scale Redis. ### Source excerpt What if engineers could spend their time building and optimizing systems rather than maintaining them? It's 3 a.m., and the The post Agents operate, humans govern: Scale your operations and reduce toil with Azure SRE Agent appeared first on The New Stack. ## Performance Improvements in .NET 11 DevFeed: [Performance Improvements in .NET 11]() Original publisher: [Read original article]() Author: Stephen Toub - MSFT Published: 2026-09-15T12:00:00Z Content type: article Language: en Sources: [.NET Blog]() Topics: [.NET](), [.NET 11]() Tags: [blog](), [improvements](), [net](), [net-11](), [performance](), [post]() ### AI overview This post surveys hundreds of performance improvements in .NET 11, including runtime and library changes that reduce bounds checks, allocations, locks, loop cycles, redundant checks, instructions, system calls, and array-copy costs. ### Source excerpt Take a tour through hundreds of performance improvements in .NET 11. The post Performance Improvements in .NET 11 appeared first on .NET Blog. ## The Honest Migration Playbook - IPsec Series, Part 11 DevFeed: [The Honest Migration Playbook - IPsec Series, Part 11]() Original publisher: [Read original article]() Author: Julio Gomez Published: 2026-09-14T19:41:59Z Content type: article Language: en Sources: [Cisco Blogs]() Topics: [migration](), [Post-Quantum](), [Authentication](), [Networks]() Tags: [authentication](), [cisco](), [developer](), [migration](), [networks](), [post](), [post-quantum](), [post-quantum-authentication](), [post-quantum-cryptography-pqc](), [rsa](), [series]() ### AI overview This article presents an operational playbook for migrating authentication in a live multi-router IPsec network from RSA certificates to ML-DSA. It contrasts authentication with key exchange, explains a mixed hub-and-spoke deployment using ML-KEM-768, and reports that changing signature algorithms cannot be performed without tunnel disruption. ### Source excerpt The final post in the IPsec series: a fully quantum-safe tunnel on Cisco 8000 routers, both pillars live on real hardware. Part 11 closes the arc with the migration playbook and what a healthy post-quantum tunnel actually looks like. ## Share your .NET story with the community DevFeed: [Share your .NET story with the community]() Original publisher: [Read original article]() Author: Luis Quintanilla Published: 2026-09-14T17:05:00Z Content type: article Language: en Sources: [.NET Blog]() Topics: [.NET](), [.NET Conf](), [Development]() Tags: [2026](), [blog](), [community](), [conference](), [customer-stories](), [developer-stories](), [developers](), [development](), [modernization](), [net](), [net-conf](), [performance](), [post](), [virtual-event]() ### AI overview Microsoft invites teams to share how they use .NET to solve practical problems for possible inclusion in .NET Conf 2026 and other .NET channels. Submissions may describe applications, system modernization, performance, security, efficiency, modern C#, or practical AI-powered capabilities. ### Source excerpt Share how your team uses .NET to solve real problems and help us bring more community stories to .NET Conf 2026 and other .NET channels. The post Share your .NET story with the community appeared first on .NET Blog. ## Why didn't ReadDirectoryChangesW provide a way to correlate the two sides of a rename operation? DevFeed: [Why didn't ReadDirectoryChangesW provide a way to correlate the two sides of a rename operation?]() Original publisher: [Read original article]() Author: Raymond Chen Published: 2026-09-14T14:00:00Z Content type: article Language: en Sources: [Raymond Chen]() Topics: [Filesystems](), [systems]() Tags: [concurrent](), [events](), [files](), [ids](), [implementation](), [information](), [old-new-thing](), [other](), [post](), [systems]() ### AI overview The article explains why ReadDirectoryChangesW did not explicitly provide a mechanism for correlating the two events generated by a file rename. It suggests that the events were expected to occur consecutively, but that assumption was never documented and could fail when concurrent renames or disk activity interleave events. File IDs provide the information needed to correlate the two sides reliably. ### Source excerpt Perhaps it wasn't necessary, or perhaps it didn't occur to them that this a problem. The post Why didn't ReadDirectoryChangesW provide a way to correlate the two sides of a rename operation? appeared first on The Old New Thing. ## Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection DevFeed: [Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection]() Original publisher: [Read original article]() Author: Osher Jacob Published: 2026-09-14T10:00:01Z Content type: article Language: en Sources: [Unit 42]() Topics: [AWS CloudTrail](), [Cloud](), [threat detection](), [Threat Research](), [SIEM, Security, Observability](), [Machine learning](), [Algorithms](), [SQL](), [IAM](), [identity and access management](), [Amazon Web Services]() Tags: [algorithms](), [amazon-web-services-aws](), [analysis](), [aws-cloudtrail](), [cloud](), [cloud-cybersecurity-research](), [cloud-detection](), [devops](), [iam](), [identity-and-access-management](), [logs](), [machine-learning](), [post](), [sql](), [threat-detection](), [threat-research]() ### AI overview This article presents a behavioral clustering model for mapping cloud identities to functional roles using activity patterns from audit logs. It applies unsupervised machine learning with UMAP and HDBSCAN to data from more than 40,000 identities across 125 cloud environments, and shows how the resulting map can support automated threat detection. The article also explains how lightweight heuristics extracted from the map can classify identities at scale using standard SQL, reducing the need for continuous resource-intensive machine learning pipelines. ### Source excerpt We designed a behavioral clustering model to map cloud identity roles from audit logs, enabling continuous threat detection using standard SQL queries. The post Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection appeared first on Unit 42. ## Kubernetes v1.37 brings 67 enhancements. Which matter for operators? DevFeed: [Kubernetes v1.37 brings 67 enhancements. Which matter for operators?]() Original publisher: [Read original article]() Author: Bill Doerrfeld Published: 2026-09-11T17:40:04Z Content type: news Language: en Sources: [Kubernetes Overview, News and Trends | The New Stack](), [The New Stack]() Topics: [Kubernetes](), [Infrastructure as code](), [migration](), [AI Platform](), [Machine learning](), [Authorization]() Tags: [ai](), [ai-infrastructure](), [cloud-native-ecosystem](), [hpe](), [infrastructure-as-code](), [kubecon-cloudnativecon-na-2026](), [kubernetes](), [migration](), [post](), [road-to-kubecon](), [sponsor-hpe](), [sponsored-post](), [terraform]() ### AI overview A Kubernetes roundup covers v1.37 enhancements, HPE Morpheus and Terraform provider changes, migration tooling, and recent CNCF project graduations including Kubeflow. ### Source excerpt Welcome to the first edition of Road to KubeCon, where we'll track the world of Kubernetes as we approach KubeCon The post Kubernetes v1.37 brings 67 enhancements. Which matter for operators? appeared first on The New Stack. ## 20+ Best Free Fonts Perfect for Art Deco-Inspired Designs DevFeed: [20+ Best Free Fonts Perfect for Art Deco-Inspired Designs]() Original publisher: [Read original article]() Author: Eric Karkovack Published: 2026-09-11T07:15:57Z Content type: article Language: en Sources: [Speckyboy Design Magazine]() Topics: [Font]() Tags: [design](), [display-fonts](), [fonts](), [legibility](), [ligatures](), [logo-fonts](), [post](), [sans-serif-fonts](), [serif-fonts](), [variable-fonts]() ### AI overview A curated collection of more than 20 free Art Deco fonts for designers, covering serif and sans-serif styles with options for logos, headlines, titles, monograms, and branding. The selection includes varied weights, alternate characters, ligatures, and approaches to legibility. ### Source excerpt Are you looking for the perfect free Art Deco font? We have both serif and sans-serif variants, and all will add a touch of elegance to your project. The post 20+ Best Free Fonts Perfect for Art Deco-Inspired Designs appeared first on Speckyboy Design Magazine. ## 47,000 job listings reveal the engineering roles that AI is creating DevFeed: [47,000 job listings reveal the engineering roles that AI is creating]() Original publisher: [Read original article]() Author: Jennifer Riggins Published: 2026-09-10T13:09:28Z Content type: news Language: en Sources: [The New Stack]() Topics: [Machine Learning & Artificial Intelligence](), [AI Development](), [Machine learning]() Tags: [ai](), [ai-engineering](), [ai-strategy](), [andela](), [engineering](), [jobs](), [machine-learning](), [post](), [skills](), [sponsor-andela](), [sponsored](), [sponsored-post](), [tech-careers](), [work]() ### AI overview Andela's analysis of 47,000 Fortune 500 engineering job postings identifies emerging AI-related roles formed by combining established skill sets. The article argues that organizations should use AI to delegate suitable work while retaining human expertise and specialization. ### Source excerpt Every major transformation in tech has led to roles merging, then new ones emerging. Friction between developers and operations drove The post 47,000 job listings reveal the engineering roles that AI is creating appeared first on The New Stack. ## AI floods security teams with flaws -- business context sets priorities DevFeed: [AI floods security teams with flaws -- business context sets priorities]() Original publisher: [Read original article]() Author: Megan Carnegie Published: 2026-09-10T12:00:00Z Content type: article Language: en Sources: [The New Stack]() Topics: [vulnerability](), [Cybersecurity](), [Business Security]() Tags: [ai](), [business](), [cloud-services](), [i-o-mergent](), [post](), [security](), [sponsor-i-o-mergent](), [sponsored](), [sponsored-post](), [vulnerability]() ### AI overview The article argues that security teams should prioritize vulnerabilities using business context rather than scanner severity alone, because automated findings can overwhelm limited engineering capacity. ### Source excerpt A security researcher testing a 300-person B2B company with a global footprint discovered an internet-exposed database with weak authentication during The post AI floods security teams with flaws -- business context sets priorities appeared first on The New Stack. ## Loop engineering: stop prompting, start looping DevFeed: [Loop engineering: stop prompting, start looping]() Original publisher: [Read original article]() Author: Anthony Viard Published: 2026-09-08T16:00:00Z Content type: article Language: en Sources: [Postman Blog]() Topics: [Loop Engineering](), [AI Agent](), [AI-assisted coding](), [API]() Tags: [2026](), [agent](), [agentic](), [agents](), [ai](), [ai-agents](), [ai-coding](), [api](), [api-testing](), [blog](), [code](), [coding-agents](), [developer](), [engineering](), [general](), [guide](), [idea](), [loops](), [model](), [post](), [postman-cli](), [tool](), [verify](), [work]() ### AI overview This article explains loop engineering as a way to improve AI coding agent reliability. Instead of relying on a single prompt, the system repeatedly generates code, runs it against a real API or other source of truth, verifies the result, and decides whether to stop or continue. The article distinguishes this outer verification loop from the inner ReAct tool-use cycle and presents a reproducible setup for allowing an agent to correct its own mistakes. ### Source excerpt Stop prompting your AI agent, start looping. A guide to loop engineering: wire a real API call in as the oracle so generated code stops guessing. The post Loop engineering: stop prompting, start looping appeared first on Postman Blog. ## A sample use of the winstart.bat file in Windows 95 DevFeed: [A sample use of the winstart.bat file in Windows 95]() Original publisher: [Read original article]() Author: Raymond Chen Published: 2026-09-08T14:00:00Z Content type: article Language: en Sources: [Raymond Chen]() Topics: [Windows](), [Batch file]() Tags: [architecture](), [display](), [driver](), [drivers](), [graphics](), [history](), [multitasking](), [old-new-thing](), [post](), [windows]() ### AI overview The article explains a sample use of winstart.bat in Windows 95: starting the TIGA Communications Driver so 16-bit Windows can use high-resolution graphics modes. It notes that MS-DOS programs could not use TIGA modes and that multitasking TIGA graphics across Windows and MS-DOS sessions was unsupported. ### Source excerpt For a driver that needs high resolution mode only in Windows. The post A sample use of the winstart.bat file in Windows 95 appeared first on The Old New Thing. ## EN 301 549 v4.1.1 is final! What changed, what it means, and what you should do. DevFeed: [EN 301 549 v4.1.1 is final! What changed, what it means, and what you should do.]() Original publisher: [Read original article]() Author: Matthew Luken Published: 2026-09-08T12:28:32Z Content type: article Language: en Sources: [Deque]() Topics: [Accessibility]() Tags: [accessibility](), [accessibility-compliance](), [compliance](), [eaa](), [en-301-549](), [europe](), [european-accessibility-act](), [hardware](), [post](), [products](), [real-time](), [testing](), [update](), [web](), [web-content-accessibility-guidelines]() ### AI overview EN 301 549 v4.1.1 was officially published on September 2, 2026, but it still needs citation in the Official Journal of the European Union and reference in national laws before its legal effect is fully established. The article explains why organizations should begin preparing now, highlighting revised real-time text requirements, six new WCAG 2.2 Level A/AA success criteria, updated User Preferences requirements, and changes affecting real-time communication. ### Source excerpt On September 2, 2026, EN 301 549 v4.1.1 was officially published. This represents a major update to Europe's accessibility standard for ICT products and services, and it's a big milestone. But in practice, it's only the first step along a three-point timeline. The post EN 301 549 v4.1.1 is final! What changed, what it means, and what you should do. appeared first on Deque. ## What happens if you change a window class's GCL\_CBWNDEXTRA? DevFeed: [What happens if you change a window class's GCL\_CBWNDEXTRA?]() Original publisher: [Read original article]() Author: Raymond Chen Published: 2026-09-04T14:00:00Z Content type: article Language: en Sources: [Raymond Chen]() Topics: [Windows](), [Code]() Tags: [code](), [compatibility](), [old-new-thing](), [post](), [windows]() ### AI overview The article explains that changing a window class's extra-byte size affects only windows created afterward. Existing windows retain the size assigned at creation, and accessing bytes that were not available then can produce an out-of-range result. ### Source excerpt You're changing the value for future windows. The post What happens if you change a window class's GCL_CBWNDEXTRA? appeared first on The Old New Thing. ## How to verify your Azure Application Gateway is zone-redundant DevFeed: [How to verify your Azure Application Gateway is zone-redundant]() Original publisher: [Read original article]() Author: Andre Newman Published: 2026-09-04T00:00:00Z Content type: article Language: en Sources: [Gremlin Blog]() Topics: [Azure](), [Availability](), [Cloud](), [web applications](), [Command-line interface](), [Shared Responsibility Model]() Tags: [availability](), [azure](), [cli](), [cloud](), [features](), [high-availability](), [how-to](), [infrastructure](), [post](), [shared-responsibility](), [web-applications]() ### AI overview This how-to article explains availability-zone redundancy for Azure Application Gateway. It describes the redundancy model, the shared responsibility boundary, and how to verify whether a gateway is zone-redundant or zonal using Azure CLI and Resource Graph. It also cautions that a redundant gateway does not by itself make the services behind it redundant. ### Source excerpt This post explains what zone redundancy means for Application Gateway, how to confirm whether a given gateway is zone-redundant or zonal using the Azure CLI and Resource Graph, and why a gateway surviving a zone failure doesn't mean the services calling through it will. ## For the builders: canvas, CMS, and quality-of-life improvements from Webflow Conf 2026 DevFeed: [For the builders: canvas, CMS, and quality-of-life improvements from Webflow Conf 2026]() Original publisher: [Read original article]() Author: Webflow Team Published: 2026-09-02T00:00:00Z Content type: article Language: en Sources: [Webflow Blog]() Topics: [Canvas](), [Content Management System](), [Artificial Intelligence]() Tags: [ai](), [building](), [code](), [design](), [dev](), [developers](), [inside-webflow](), [platform](), [post](), [web](), [webflow](), [workflow](), [zoom]() ### AI overview Webflow's 2026 Builder Keynote introduces Source by Webflow and highlights workflow improvements for designers and developers, including CMS components, breakpoint canvas updates, and visual editing for AI code components. ### Source excerpt A roundup of what's new for designers and developers building in Webflow, including components in the CMS, breakpoint canvas, and visual editing for AI code components. ## Code42 Is Shutting Down. Is CrashPlan the Safe Choice, or Just the Convenient One? DevFeed: [Code42 Is Shutting Down. Is CrashPlan the Safe Choice, or Just the Convenient One?]() Original publisher: [Read original article]() Author: Kari Wilson Published: 2026-09-01T16:00:37Z Content type: article Language: en Sources: [Backblaze Blog | Cloud Storage & Cloud Backup]() Topics: [migration](), [Tooling](), [data loss prevention]() Tags: [alternatives](), [backing-up](), [backup](), [blog](), [businessbackup](), [cloud](), [cloud-storage](), [evaluation](), [featured](), [featured-backing-up](), [migration](), [post]() ### AI overview The article examines whether CrashPlan is an appropriate replacement for Code42 after Code42 stopped new sales in 2025 and plans to end support in 2026, with subsequent deletion of backup archives. It explains that Code42's backup business became a separate CrashPlan company in 2022 and urges IT teams to evaluate alternatives rather than assume CrashPlan is an automatic successor. It highlights migration incentives and a possible 5TB storage cap on some CrashPlan plans. ### Source excerpt Code42 support ends in 2026, but CrashPlan isn't the automatic successor it appears to be. Before migrating, understand the companies' split, CrashPlan's ownership, potential storage limits, evolving positioning, and the questions IT teams should ask when evaluating better backup alternatives. The post Code42 Is Shutting Down. Is CrashPlan the Safe Choice, or Just the Convenient One? appeared first on Backblaze Blog | Cloud Storage & Cloud Backup ## Sites using PQC (September 2026) DevFeed: [Sites using PQC (September 2026)]() Original publisher: [Read original article]() Published: 2026-09-01T14:49:46Z Content type: article Language: en Sources: [Signs of Triviality]() Topics: [Post-quantum cryptography](), [Post-Quantum](), [TLS (Transport Layer Security)](), [Cryptography]() Tags: [2026](), [cryptography](), [post](), [post-quantum](), [post-quantum-cryptography](), [quantum](), [september-2026](), [sites](), [tls](), [top](), [using]() ### AI overview A periodic check examines which of the top 1 million domains support post-quantum cryptography in their TLS key exchange. ### Source excerpt One more periodic check of which of the top 1M domains support post-quantum cryptography in their TLS key exchange. ## How First Impressions Shape Client Choices and Views of the Web Industry DevFeed: [How First Impressions Shape Client Choices and Views of the Web Industry]() Original publisher: [Read original article]() Author: L. Jeffrey Zeldman Published: 2026-09-01T13:10:32Z Content type: opinion Language: en Sources: [Jeffrey Zeldman]() Topics: [web design](), [Web Development](), [CSS](), [web-standards]() Tags: [css](), [design](), [glamorous](), [my-glamorous-life](), [post](), [tech](), [technofascism](), [web](), [web-design](), [web-standards]() ### AI overview Jeffrey Zeldman reflects on encounters with rude or exploitative people in the web industry and argues that early impressions can foreshadow later conduct. He connects a past website-design negotiation to a former partner's role in changing Twitter's verification system. ### Source excerpt Why first impressions are often correct. Today's jerk is tomorrow's techno-fascist. The post Tales o' Tech: Suffering Fools appeared first on Jeffrey Zeldman Presents. ## Scheduling email campaigns at scale with Amazon EventBridge Scheduler DevFeed: [Scheduling email campaigns at scale with Amazon EventBridge Scheduler]() Original publisher: [Read original article]() Author: Oluwaseun Ademuwagun Published: 2026-09-01T13:09:17Z Content type: tutorial Language: en Sources: [AWS Compute Blog]() Topics: [Amazon Web Services](), [Amazon Simple Queue Service (SQS)](), [Software as a service]() Tags: [advanced-300](), [amazon-eventbridge](), [amazon-sqs](), [aws](), [cost](), [customer](), [how-to](), [integration](), [local](), [post](), [saas](), [scale](), [technical-how-to]() ### AI overview This tutorial explains how to schedule personalized email campaigns at scale with Amazon EventBridge Scheduler. It uses one schedule per recipient to deliver messages at individually optimal times, discusses batch cron jobs, Amazon SQS delay queues, and third-party campaign tools, and describes scaling schedule creation with AWS Step Functions Distributed Map and delivery through Amazon SES. ### Source excerpt Learn how to use Amazon EventBridge Scheduler to deliver email campaigns at per-recipient optimal send times. This post shows how to create one schedule per recipient with zero idle compute cost, scale schedule creation with AWS Step Functions Distributed Map, and deliver through Amazon SES. ## The invisible heartbeat of our networks DevFeed: [The invisible heartbeat of our networks]() Original publisher: [Read original article]() Author: Luca Cicchelli Published: 2026-08-31T23:03:47Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Networks](), [distributed-systems](), [Critical Infrastructure](), [Security](), [5G](), [Cybersecurity](), [cloud-infrastructure](), [AI Infrastructure]() Tags: [5g](), [ai](), [ai-infrastructure](), [critical-infrastructure](), [cybersecurity](), [data](), [distributed-systems](), [engineering](), [gnss](), [gps](), [guest-post](), [hardware](), [network](), [networking](), [networks](), [outage](), [outages](), [post](), [servers](), [systems](), [tech-matters](), [time](), [transactions]() ### AI overview The article examines how accurate time synchronization underpins modern networks and distributed systems. It uses the Telstra outage to show how misaligned time servers can disrupt communications and rail services, and discusses resilient time sources, terrestrial backups, local atomic clocks, and synchronization requirements for finance, 5G, cloud, and AI infrastructure. ### Source excerpt Guest Post: The recent Telstra outage highlighted a critical but often overlooked dependency in modern networks: Accurate time synchronization. ## Scale AV Perception Across Vehicle Platforms with NVIDIA Omniverse NuRec DevFeed: [Scale AV Perception Across Vehicle Platforms with NVIDIA Omniverse NuRec]() Original publisher: [Read original article]() Author: Michelle Horton Published: 2026-08-31T16:00:00Z Content type: tutorial Language: en Sources: [NVIDIA Developer](), [NVIDIA Technical Blog]() Topics: [Nvidia](), [synthetic-data](), [Simulation and Design](), [data](), [configuration]() Tags: [3d](), [autonomous](), [autonomous-vehicles](), [data](), [developer-tools-techniques](), [developers](), [development](), [model](), [models](), [nvidia](), [omniverse](), [performance](), [physical-ai](), [post](), [robotics](), [scale](), [simulation-modeling-design](), [synthetic-data](), [training](), [tutorial]() ### AI overview This tutorial explains how to adapt an autonomous-vehicle perception stack across carline and sensor-rig variants using existing real-world drives. It presents a four-step workflow with NVIDIA Omniverse NuRec: pair a reconstructed drive with a target rig, render target camera views, refine the frames with NVIDIA Harmonizer, and train a perception model on the output. ### Source excerpt A perception stack is shaped by the vehicle that carries it. Move the same software to a new carline--for example, from an SUV to a sedan or another vehicle... ## Why Senior Leaders Should Attend Post-Incident Reviews for Major Cloud Incidents DevFeed: [Why Senior Leaders Should Attend Post-Incident Reviews for Major Cloud Incidents]() Original publisher: [Read original article]() Author: Sridhar Rajarao Published: 2026-08-29T00:00:00Z Content type: opinion Language: en Sources: [Sridhar Rajarao]() Topics: [incident](), [Cloud](), [control-plane](), [Deployment]() Tags: [cloud](), [control-plane](), [customers](), [deploy](), [incident](), [incident-management](), [leadership](), [major](), [operations](), [post](), [postmortems](), [reliability](), [review](), [service]() ### AI overview The article argues that senior leaders should attend Post Incident Reviews for major cloud incidents because failures can affect many customers and teams. Leadership helps approve cross-team changes, resolve trade-offs, and ensure corrective actions are completed. ### Source excerpt For major incidents, a Post Incident Review is not an operations meeting. It is where leaders remove the blockers that keep the service from becoming safer. ## Kubernetes v1.37: Pod Certificates and Cluster Trust Bundles DevFeed: [Kubernetes v1.37: Pod Certificates and Cluster Trust Bundles]() Original publisher: [Read original article]() Author: Taahir Ahmed Published: 2026-08-28T18:30:00Z Content type: article Language: en Sources: [Kubernetes Blog]() Topics: [Kubernetes](), [Authentication](), [JSON Web Tokens](), [TLS (Transport Layer Security)](), [Cloud]() Tags: [authentication](), [blog](), [cloud](), [cryptographic](), [json](), [kubernetes](), [post](), [tls](), [tokens]() ### AI overview Kubernetes 1.37 introduces generally available Pod Certificates and Cluster Trust Bundles, adding built-in X.509 certificate issuance for TLS and mTLS. The article explains how this production identity mechanism relates to existing service account JWTs and addresses the security limitations of bearer tokens. ### Source excerpt Pod Certificate / Cluster Trust Bundles Blog Post Kubernetes brings a wealth of features that make it easy to run your production workloads securely and reliably. While aspects like scheduling, health checks and resource limits are probably at the front of your mind, one other important feature of Kubernetes is production identity -- how your workload can authenticate to other systems in order to do its job. Up until now, the primary production identity mechanism built into Kubernetes has been service account JWTs (JSON Web Tokens). These are cryptographically-signed tokens, issued by the control plane of your cluster, that let anyone in the world understand who is calling when your workload uses them. In Kubernetes 1.37, the foundations of a new built-in production identity technology have gone GA. Pod Certificates (and the closely-associated Cluster Trust Bundles) build X.509 certificate issuance for TLS and mTLS directly into core Kubernetes. Why? Service account JWTs have a lot going for them: They are built directly into Kubelet, and work pretty magically. They are written to your workload container's filesystem before your workload starts up, and automatically kept up to date. The issuance system follows least-privilege principles; the node restriction admission plugin ensures that tokens can only be requested by the Kubelet that is actually currently running your pod. They can be federated, allowing you to use them to authenticate to other systems outside of Kubernetes. Service account JWTs underpin the pod-to-cloud authentication store for all of the largest cloud providers, and have widespread support across many additional services and software packages. If it can understand JWTs, you can authenticate to it with a service account token. However, service account JWTs have one big downside -- they are bearer tokens. With bearer tokens, if you have the token, then you are the identity asserted by the token. And since you necessarily have to hand copies of the J [Next page]()