… You can find more in the official blog post or in KEP-4033: Discover cgroup driver from CRI . Improved Pod stability during kubelet restarts Previously, restarting the kubelet service often caused a temporary disruption in Pod status. …
… In v1.32, it gained metrics and an opt-out option securityContext.seLinuxChangePolicy: Recursive to help catch conflicts. Now in v1.36, it reaches Stable and defaults to all volumes, with Pods or CSIDrivers opting in via spec.seLinuxMount . …
… For CSI storage, a CSI driver does the first mount of a volume, and so it must be the CSI driver that actually applies this mount option. We added a new field SELinuxMount to CSIDriver objects, so that drivers can announce whether they support the -o context mount option. …