With Kubernetes 1.37, the Pod-Level Resource Managers feature graduates to beta (disabled by default): the Topology Manager, CPU Manager, and Memory Manager now read .spec.resources declarations directly. Latency-critical workloads can reserve exclusive NUMA cores for the primary container while sidecars share an isolated pod-level pool.

Kubernetes Memory QoS, which guides the Linux kernel on container memory handling through cgroup v2, graduates to beta and turns on by default in version 1.37. The more important change lies elsewhere: the implicit throttling factor disappears, making the upgrade a no-surprise event for existing clusters.

Kubernetes v1.37 enables KubeletInUserNamespace by default: the kubelet, runtimes, and CNI plugins can now run as a non-root user inside a user namespace. Turn it on to confine container-breakout flaws away from host root.