k8s-mechanic watches for pod crashes, degraded Deployments, and NotReady nodes, spawns a read-only in-cluster agent that investigates the failure and opens a PR on your GitOps repo with secret redaction, prompt injection detection, and a pentest report. More: https://ku.bz/Xg8shhsZb
About us
News and links on Kubernetes security curated by the Learnk8s team
- Website
-
https://kubesploit.io
External link for Kubesploit
- Industry
- Internet News
- Company size
- 2-10 employees
- Headquarters
- London
- Specialties
- Kubernetes and Security
Updates
-
This article explains how ListenerSet in Gateway API v1.5 separates listeners from Gateways so teams can restore self-service TLS management across namespaces and scale beyond the old listener limit. More: https://ku.bz/s-5QsVS_T
-
New report: Immutable OS for Kubernetes We’ve published a new report on how teams manage Kubernetes node OSes in practice. Based on 2,138 responses across 4 platforms, the report examines node updates, incident response, CVE patch windows, and OS customization. The results suggest that immutable-node operations are becoming more common, but the hard part is still operational: building reliable image pipelines, observability, and rollout processes around the base OS. Read the full report: https://lnkd.in/gnRCWCuS ⭐️ This research was sponsored by Spectro Cloud. If you want to explore an immutable OS built for Kubernetes, check out Hadron OS: https://ku.bz/P5Gj9c18t
-
-
💡 Kubernetes teams often talk about immutable infrastructure. Node OS management is where that model gets tested. I ran a series of polls on how teams manage Kubernetes nodes in practice. 2,138 practitioners responded across LinkedIn, Twitter, Telegram, and Mastodon. The results: - 47.1% replace nodes instead of patching them - 55.1% check monitoring and logs first when a node misbehaves - 74.3% can patch within hours or days after a critical OS CVE - Only 14.9% run heavily customized node OS images The poll results point in one direction: teams want immutable nodes, but the hard part is operationalizing them with image pipelines, observability, and reliable rollout workflows. Full report: https://lnkd.in/gVe-i6TQ 🌟 If you want to explore an immutable OS built for Kubernetes, check out Hadron OS by Spectro Cloud (thank you for sponsoring this research): https://ku.bz/P5Gj9c18t
-
-
A special episode on KubeFM, and a slightly different subject than usual. Kelsey, Eric Abercrombie, and Julius Payne II join Bart to explore what hip-hop can teach us about Kubernetes and how music, creativity, and lived experience shape how we think about technology. You will learn: - Why fundamentals, patience, and repetition still matter more than shortcuts - How Kubernetes, community, and confidence intersect for people entering cloud-native work - What hip-hop, production, and storytelling can teach us about ownership, authenticity, and finding your voice Watch (or listen to) it here: https://ku.bz/czrCCXSLt 🌟 This episode is brought to you by LearnKube — get started on your Kubernetes journey through comprehensive online, in-person, or remote training: https://lnkd.in/ge4aYVZq With 🎙Bart
-
This tutorial teaches how to build a cert-manager external issuer that uses a YubiHSM 2 to sign TLS certificates via Go's crypto.Signer interface. More: https://ku.bz/b9GlYRS88
-
Kubesploit reposted this
The Kubernetes control plane is where the cluster accepts changes, stores the desired state, and decides what happens next. In this series of articles, you will learn: - How the API server handles authentication, authorization, admission, and storage - How etcd stores the cluster state and why it can become a bottleneck at scale - How the controller manager turns intent into actions through reconciliation loops - How the scheduler filters and ranks nodes before placing Pods https://lnkd.in/gzEEd-eJ 🌟 If you want to level up your Kubernetes knowledge, the next LearnKube training starts this Thursday: https://lnkd.in/ge4aYVZq
-
-
🚀 I created a map of the Kubernetes control plane. If you’ve ever wondered what happens after you run `kubectl apply`, this should help. For the past few months, I’ve been putting together a five-part series about the key parts of the control plane: - the API server - etcd - the scheduler - the controller manager and how they all work (and scale) together. While working on it, I made many diagrams. Rather than keeping them in separate articles, I combined them into one visual map. I hope you find it useful: https://lnkd.in/gPmvDUiC The map is sized for A4 paper, so you can print it out and put it on your wall if you like! 🌟 And if you want to level up your Kubernetes game, don’t miss our next 4-day Advanced Kubernetes workshop starting this Thursday! https://lnkd.in/gesTDVZK
-
-
X.509 Certificate Exporter is a Go-based Prometheus exporter that monitors certificate expiration inside Kubernetes clusters or as a standalone service, helping teams alert before TLS certificates expire. More: https://ku.bz/BPXM_D-v2
-
-
Cilium Policy Generator, watches dropped flows in real time, and auto-generates CiliumNetworkPolicy YAML files to allow them — so you stop writing policies by hand in default-deny Cilium clusters. More: https://ku.bz/hZYF4XgL_