Kubesploit
LightNews LightNews
banner
kubesploit.io
Kubesploit
@kubesploit.io
240 followers 1 following 410 posts
News and links on Kubernetes security curated by the @Learnk8s.io team
More K8s news, events, jobs → https://kube.today
Posts Replies Media Videos
kubesploit.io
This open-source platform lets you run a self-hosted zero-trust secure access solution supporting VPN-like WireGuard/QUIC, ZTNA, API/AI gateways, homelab access and Kubernetes ingress on your own infrastructure

➤ https://ku.bz/JWMdMH_J8
https://octelium.com/assets/ztna-CrAF5Ft7.webp
December 18, 2025 at 6:11 PM
kubesploit.io
This code tool helps you gather logs, metrics and code changes, then uses AI-powered root-cause analysis to surface what broke in production and suggest immediate fixes

➜ https://ku.bz/srJCYmX4J
https://github.com/dingus-technology/DINGUS/raw/main/docs/assets/dingus-ai-logs-ui.png
December 18, 2025 at 6:06 PM
Reposted by Kubesploit
kube.careers
https://kube.careers/image-gen/digest?companies=OpenAI&companies=Airwallex&companies=Dexterity&currency=USD&salaryFrom=185000&salaryTo=490000&subtitle=Selected+by+the+Kube+Careers+team&title=6+Kubernetes+security+jobs
December 17, 2025 at 9:46 PM
kubesploit.io
Sealed Secrets provides declarative Kubernetes Secret Management in a secure way

Since the Sealed Secrets are encrypted, they can be safely stored in a code repository

➤ https://ku.bz/M_ZTLCWtB
December 17, 2025 at 6:11 PM
kubesploit.io
This article introduces ChaosRoom, a playful tool that helps engineers learn chaos engineering by running mini-games simulating faults and observing how systems respond

➜ https://ku.bz/2GlrYmTbT
https://miro.medium.com/v2/1*Rq5vw2UGHHYYM6wg2NaZOg.png
December 17, 2025 at 6:06 PM
Reposted by Kubesploit
learnkube.com
This week on the Learn Kubernetes Weekly:

🐍 Kubernetes’s Python Moment
☁️ Leaving Big Cloud with Kubernetes
📦 DRA in Kubernetes v1.34
🛠️ APIs with Kong Ingress
🚑 Fixing Upstream Connect Errors

⭐️ Depot

Read it now: https://kube.today/issues/162
https://assets.learnk8s.io/linkedin-162.png
December 17, 2025 at 11:31 AM
kubesploit.io
This tool delivers real-time node/pod-level process, file and network visibility for Kubernetes and bare-metal environments, with rule-based alerts, dashboards and hybrid cloud support

➜ https://ku.bz/7lk94WvMv
https://github.com/sentrilite/sentrilite/raw/master/Sentrilite_Architecture_Diagram.png
December 16, 2025 at 6:06 PM
kubesploit.io
This article shows how to use the Kong OIDC plugin together with Keycloak to secure cluster services and HTTP routes at the API gateway level

➜ https://ku.bz/2Q103hfW1
https://miro.medium.com/v2/resize:fit:700/1*CpjhwQyp42yLDKwMJilxEw.png
December 15, 2025 at 6:06 PM
kubesploit.io
This article explains how a Security Context in Kubernetes works

➤ https://ku.bz/jgGTq6n99
https://learnkube.com/a/be18e9e2649498e83be2d8301bb850f6.svg
December 14, 2025 at 6:06 PM
kubesploit.io
Kviklet provides a secure, self-hosted tool for engineering teams to request, review, and approve production database queries with a workflow inspired by code reviews

➤ https://ku.bz/blQ6ybFXN
https://github.com/kviklet/kviklet/raw/main/images/ExecutedRequest_light.png#gh-light-mode-only
December 13, 2025 at 6:06 PM
kubesploit.io
This case study explains how BioCatch migrated their Vault environment from costly external storage to Raft, enabling high availability, easy disaster recovery, and lower operational costs in Kubernetes

➤ https://ku.bz/zPwwpmMyV
https://miro.medium.com/v2/1*J6bWoFpAYyGT-auAn7VrsQ.png
December 12, 2025 at 6:11 PM
kubesploit.io
This open-source tool helps you manage authentication and access across servers, databases and Kubernetes clusters via API or CLI

➜ https://ku.bz/VYnDyMT1h
https://res.cloudinary.com/uasabi/image/upload/v1654443436/link-reviewer/0f2187736be2840eae3ee08d66d3f3ac.jpg
December 12, 2025 at 6:06 PM
kubesploit.io
This open-source tool lets you analyze connectivity, inspect applied NetworkPolicies, and generate policy YAMLs, all with an interactive fuzzy-finder UI and JSON/table outputs

➤ https://ku.bz/HJpY-dbmG
December 12, 2025 at 6:11 AM
kubesploit.io
This article explains how to remove permission checks from microservices and build a centralized authorization layer with Kong OSS and OpenFGA

➜ https://ku.bz/50Pf5hFcV
https://miro.medium.com/v2/1*vZpIS4W9z7QVN-n0c8d5-w.png
December 11, 2025 at 6:06 PM
Reposted by Kubesploit
learnkube.com
This week on the Learn Kubernetes Weekly:

🔥 Informers Are Easy to Misuse
🎤 Three Optimization Lessons
🛑 Graceful Shutdown
🚪 Namespaces & Multi-tenancy
🎯 Centralizing Helm with HTTPProxy

⭐️ StormForge by CloudBolt

Read it now: https://kube.today/issues/161
https://assets.learnk8s.io/linkedin-161.v2.png
December 10, 2025 at 11:51 AM
kubesploit.io
Tetragon enables powerful real-time, eBPF-based security observability and runtime enforcement

It is Kubernetes-aware and understands identities, allowing security event detection to be configured in relation to individual workloads

➜ https://ku.bz/WrhnVyd2p
https://github.com/cilium/tetragon/raw/main/docs/static/images/smart_observability.png
December 9, 2025 at 6:06 PM
kubesploit.io
This article explores why using Kubernetes namespaces alone is not a sufficient isolation or security boundary

It shows common pitfalls and many attack paths that let a tenant escape isolation even if you only gave them access to a single namespace

➜ https://ku.bz/PCmRjmB57
December 8, 2025 at 6:06 PM
Reposted by Kubesploit
danielepolencic.com
🚀 It's that time of the year! What did I achieve in 2025?

A thread 🧵
https://res.cloudinary.com/learnk8s/image/upload/v1765200103/01_uwlcpa.png
December 8, 2025 at 2:06 PM
kubesploit.io
Kube No Trouble (kubent) is a tool to check whether you're using any deprecated APIs in your cluster and therefore should upgrade your workloads first, before upgrading your Kubernetes cluster

➜ https://ku.bz/zMyZdL3w6
December 5, 2025 at 6:06 PM
kubesploit.io
This tutorial walks you through enabling, running, and monitoring IPv6 networking on Kubernetes clusters using Cilium

➜ https://ku.bz/b6RFcGQjF
https://cdn.sanity.io/images/xinsvxfu/production/85df8887e139046fdaf303632f57aad90efaac1e-1659x995.png?auto=format&fit=clip&q=80&w=2560
December 4, 2025 at 6:06 PM
kubesploit.io
This tool provides a Model Context Protocol (MCP) server for querying Kubernetes Audit Logs across cloud providers using AWS CloudWatch, GCP Logging, and Alibaba SLS

➜ https://ku.bz/Hm_CMFF66
https://github.com/mozillazg/kube-audit-mcp/raw/master/.github/docs/kube-audit-mcp.png
December 3, 2025 at 6:06 PM
Reposted by Kubesploit
learnkube.com
This week on the Learn Kubernetes Weekly:

🌐 Networking from Packets to Pods
⚙️ Istio Upgrades
🔍 Finding Kubernetes Exit Codes
🔒 Security fundamentals: networking
📊 Jaeger Tracing on Kubernetes

⭐️ vCluster Labs

Read it now: https://kube.today/issues/160
https://res.cloudinary.com/learnk8s/image/upload/v1764762531/linkedin-160.v2_pgj5nb.png
December 3, 2025 at 11:56 AM
Reposted by Kubesploit
kube.fm
🗣️ Ritesh Patel announces Nirmata's AI Platform Engineering Assistant launch

The AI assistant accelerates security, policy, and governance tasks with 10x faster completion

Watch: https://ku.bz/8nkrRSG_Z
Read: https://ku.bz/8_yYZZMG4
December 2, 2025 at 7:17 PM
kubesploit.io
This article explains how to enforce security and compliance by validating Kubernetes resource configs using Open Policy Agent (OPA) and Rego policies, with deployment tips for Gatekeeper and sidecars

➜ https://ku.bz/nVYydLnDP
https://cdn.prod.website-files.com/626a25d633b1b99aa0e1afa7/6866913a512ad152b6e19d93_image4.jpg
December 2, 2025 at 6:06 PM
Reposted by Kubesploit
kube.fm
🗣️ Fabián walks through an investigation that started with a simple request: allowing cluster tenants to use 3rd-party Kafka services. What seemed straightforward turned into a complex DNS resolution problem

https://ku.bz/NsBZ-FwcJ

🌟 LearnKube
🎙 🎙Bart
December 2, 2025 at 1:32 PM