Podman Desktop 1.26 adds extension credential permissions

Podman Desktop released version 1.26 on March 16 with explicit access controls for extensions that request authentication sessions. The official release post also adds host-certificate synchronization, environment filters, cancellable image pulls, and administrator settings for extension distribution.

Extensions must request credential access

An extension can no longer silently reuse an existing account session or initiate sign-in without a user decision. Podman Desktop now presents an allow-or-deny prompt and improves session management around that access. This creates a visible trust boundary, but teams still need to decide which extension publishers and versions are acceptable before a prompt appears.

Administrators can disable installation of custom extensions and hide the catalog through managed configuration. Those controls are useful for managed workstations where a local container tool can reach private registries or development credentials. Rollout testing should confirm the configuration file reaches every platform and that already-installed extensions match the intended policy.

Certificate and environment handling become more direct

A command-palette action can synchronize host certificates into running Podman virtual machines, helping machines reach internal registries and services that use organization-issued roots. Resource pages can now filter containers, pods, images, volumes, and networks by environment, including Podman, Docker, and Apple Container connections. Image pulls can be cancelled, then opened or run directly after completion.

For a fleet upgrade, test certificate replacement and removal as well as initial synchronization; stale roots inside a VM can be as confusing as missing ones. Exercise extension denial, session expiry, managed settings, and multiple container environments with non-production accounts. Podman Desktop 1.26 improves control of a developer-facing surface where credentials, extensions, and several local engines meet.