Kubernetes v1.35 introduces an opt-in feature for CSI drivers to receive service account tokens through a dedicated secrets field instead of the volume context. This change aims to improve security by preventing accidental logging of sensitive tokens and standardizing how they are handled. Drivers can opt-in at their own pace, ensuring backward compatibility.

Kubernetes v1.35 introduces a beta feature that allows CSI drivers to opt-in to receive service account tokens via a more secure secrets field instead of the volume context. This change aims to reduce the risk of sensitive token exposure in logs and improve consistency across drivers. Authors of CSI drivers are encouraged to adopt this feature with backward compatibility in mind.

The blog post discusses the introduction of mutable CSI (Container Storage Interface) node allocatable count in Kubernetes 1.33, which enhances resource management for storage providers. This feature allows dynamic adjustments to the allocatable storage resources on nodes, improving flexibility and efficiency in handling workloads. Additionally, it outlines the implications for storage management and cluster performance.