Kubesploit
LightNews LightNews
banner
kubesploit.io
Kubesploit
@kubesploit.io
250 followers 1 following 470 posts
News and links on Kubernetes security curated by the @Learnk8s.io team
More K8s news, events, jobs → https://kube.today
Posts Replies Media Videos
kubesploit.io
This tutorial teaches how to securely manage and dynamically update Kubernetes secrets using AWS Secrets Manager, External-Secrets Operator, and Config-Reloader

➤ https://ku.bz/Cx_nsGFC1
https://miro.medium.com/v2/1*-ke_isjUcTE9QqkH1Ucpcg.png
February 7, 2026 at 6:16 PM
kubesploit.io
This tool runs inside Kubernetes and automatically decrypts secrets encrypted with Mozilla SOPS, and then creates standard Kubernetes Secret objects from them

➤ https://ku.bz/H3KWGSwl9
https://github.com/peak-scale/sops-operator/raw/main/docs/assets/sops-operator.drawio.png
February 6, 2026 at 6:56 PM
kubesploit.io
Synapse is a high-performance reverse proxy and firewall built with Rust, using XDP-based packet filtering for ultra-low latency protection at kernel level

➜ https://ku.bz/w2PFxxfN8
February 6, 2026 at 6:41 PM
kubesploit.io
This case study shows how Mindbody used Kyverno policy-as-code to dynamically manage Istio ingress gateways across hundreds of applications without updating individual Helm charts

➜ https://ku.bz/F6-Xr10Yv
February 5, 2026 at 6:51 PM
kubesploit.io
This article explains how Kubernetes user namespaces work for container isolation and covers the security benefits of mapping container root users to unprivileged host users, thereby reducing privilege escalation risks

➤ https://ku.bz/1kmpsFXbB
February 5, 2026 at 6:26 PM
kubesploit.io
External Secrets Operator syncs secrets from AWS, Vault, GCP, Azure, and others via their APIs and injects them as native Kubernetes Secrets using CRDs

➤ https://ku.bz/P9-BCNT1L
February 5, 2026 at 4:16 AM
Reposted by Kubesploit
kube.careers
https://kube.careers/image-gen/digest?companies=Tailscale&companies=Accenture+Federal+Services&companies=OpenAI&currency=USD&salaryFrom=225000&salaryTo=20340000&subtitle=Selected+by+the+Kube+Careers+team&title=6+Kubernetes+security+jobs
February 4, 2026 at 9:51 PM
kubesploit.io
kubectl-rexec is a kubectl plugin that provides full audit logging for kubectl exec sessions, addressing the security gap where standard exec commands leave no trace of what happens inside containers

➜ https://ku.bz/yRQZ9Jrml
February 4, 2026 at 6:26 PM
Reposted by Kubesploit
kube.fm
"Self-service without governance leads to 3 AM outages." Zain Malik explains how mature platforms balance empowerment with reliability

📺: https://ku.bz/rwttMCncv
February 4, 2026 at 4:51 PM
Reposted by Kubesploit
kube.fm
🗣️ Nicholaos Mouzourakis explains how Open Policy Agent (OPA) integrates with Kubernetes for authorization, highlighting its versatility and performance

Watch the full episode: https://ku.bz/S-2vQ_j-4
February 4, 2026 at 2:56 PM
Reposted by Kubesploit
learnkube.com
This week on the Learn Kubernetes Weekly:

🔥 When HA Brings Downtime
🔄 Upgrade AWS CSI Drivers
🤖 AI/ML Models at Scale in SAP AI Core
✅ Readiness Checks for Spring Boot
🌐 CoreDNS in OpenShift

⭐️ LearnKube

Read it now: https://kube.today/issues/169
https://assets.learnk8s.io/linkedin-169.png
February 4, 2026 at 11:46 AM
kubesploit.io
This tutorial teaches how to deploy HashiCorp Vault Secrets Operator on Google Kubernetes Engine to synchronize Vault secrets into Kubernetes Secret resources automatically

➜ https://ku.bz/QnvFmQp8h
https://miro.medium.com/v2/1*00NOpxRZCV5VNokGm3s8CA.png
February 3, 2026 at 6:26 PM
Reposted by Kubesploit
kube.fm
🗣️ Ziv manages 600+ Postgres clusters in a closed network environment with no public cloud

After existing backup solutions proved unreliable, they built a new architecture using pgBackRest + ArgoCD

https://ku.bz/Rg_sQYSmw

🌟 LearnKube
🎙 🎙Bart
February 3, 2026 at 12:51 PM
kubesploit.io
Kaniop is a Kubernetes operator written in Rust for managing Kanidm identity management clusters, providing declarative identity management through GitOps workflows

➜ https://ku.bz/D1JBBy0B3
February 2, 2026 at 6:36 PM
kubesploit.io
This tutorial walks you through setting up Google Cloud IAP for Kubernetes services, using CDKTF (TypeScript) to configure OAuth, BackendConfig, and service annotations so your internal tools are protected behind identity checks

➤ https://ku.bz/f7PqfWlby
January 30, 2026 at 6:56 PM
kubesploit.io
This article explains a critical security issue where AWS CSI drivers gave DaemonSet service accounts the ability to patch nodes, completely breaking node isolation in multi-tenant clusters

➜ https://ku.bz/xGP7ymMvW
January 30, 2026 at 6:41 PM
kubesploit.io
PodCertificateSigner lets your Kubernetes cluster automatically issue TLS certificates for pods by handling `PodCertificateRequest` resources with a custom signer controller

➤ https://ku.bz/rbMcq48rD
January 29, 2026 at 7:16 PM
kubesploit.io
Dockadvisor is a lightweight Dockerfile linter built in Go that validates your Dockerfiles with over 60 rules covering syntax, security, and best practices

➜ https://ku.bz/2DT4TqRRk
January 29, 2026 at 6:56 PM
kubesploit.io
cert-manager-mcp-server provides cert-manager resource management through Model Context Protocol (MCP), letting AI assistants like Claude inspect certificates, issuers, and certificate requests directly in Kubernetes clusters

➤ https://ku.bz/RwfN0Qz5g
January 29, 2026 at 6:26 AM
Reposted by Kubesploit
kube.careers
January 28, 2026 at 9:51 PM
kubesploit.io
This tutorial teaches how to deploy KubeArmor runtime security on Huawei Cloud Container Engine (CCE) using BPF-LSM for dynamic kernel-level policy enforcement without static profiles or reboots

➜ https://ku.bz/vnqpX_3yc
January 28, 2026 at 6:26 PM
Reposted by Kubesploit
learnkube.com
This week on the Learn Kubernetes Weekly:

🗑️ Deleting a CRD
🌱 Carbon-Aware ML Training
⚡ vLLM Setups for Spiky Traffic
🛡️ Preventing Resource Deletion in Argo
🔄 Reproducible Infra with NixOS

⭐️ Kubex

Read it now: https://kube.today/issues/168
January 28, 2026 at 11:46 AM
kubesploit.io
traefik-oidc-auth is a Traefik plugin that secures upstream services using OpenID Connect authentication acting as a relying party for identity providers like ZITADEL, Keycloak, Microsoft EntraID, and Authentik

➜ https://ku.bz/18rD29Nlh
January 27, 2026 at 6:26 PM
Reposted by Kubesploit
kube.fm
🗣️ Most developers assume Kubernetes requires an enterprise budget. Varnit Goyal proves otherwise — he built a full three-node Kubernetes cluster for $2.16/month using Rackspace Spot Instances

https://ku.bz/HpVyQMVv0

🌟 LearnKube
🎙 🎙Bart
January 27, 2026 at 12:26 PM
kubesploit.io
Pinniped provides identity services to Kubernetes by integrating external identity providers (OIDC, LDAP, Active Directory) with clusters for secure, unified login across on-premises and cloud environments

➜ https://ku.bz/Zb8ms9RlY
January 27, 2026 at 3:31 AM