A technical guide on implementing TLS client authentication for Kubernetes pods using short-lived certificates. The solution leverages cert-manager with its CSI driver, Small Step CA as a certificate issuer, and dynamic certificate rotation without manual Secret recreation.
Kubernetes Changed Block Tracking API moved from Alpha to Beta with the March 2026 v1.0.0 release of external-snapshot-metadata. The main change is the promotion of SnapshotMetadataService CRD from v1alpha1 to v1beta1, requiring users to re-apply CRD definitions and update manifests accordingly. The feature enables CSI drivers to track changed blocks in storage volumes, with focus now on wider adoption and operational feedback before GA.