News and links on Kubernetes security curated by the @Learnk8s team Mastodon: @kubesploit@learnk8s.news
More K8s news, events, jobs →
Joined March 2021
- Tweets3.1K
- Following1
- Followers21.3K
- Likes795
Kubesploit retweeted
This week on the Learn Kubernetes Weekly:
🌐 DNS on AWS
⏳ Eventually Consistent ConfigMap Mounts
🚨 kubectl-mcp-tool Command Injection
🐘 PostgreSQL Lifecycle on Harvester
💰 Cassandra Bill: $30K to $10K
⭐️ Teleport
Read it now: kube.today/issues/206
Kubesploit retweeted
Join Graziano Casto of Akuity at LearnKube Day Salt Lake City 2026 for Kubernetes lightning talks, YAML Games, and a community reception with DJ Amin Astaneh
Learn more: learnkube.com/learnkube-day-…
Kubesploit retweeted
Hortator lets AI agents spawn sub-agents at runtime, with each agent running in its own pod with budget caps, network policies, PII redaction, and capability inheritance so children can never escalate beyond their parent's permissions
➜ ku.bz/KqYBl17Gv
Kubesploit retweeted
CPU and memory usage need context before you change Kubernetes requests and limits
Our new open-source Resource Review Mixin brings usage, throttling, pressure, and runtime events into Grafana
github.com/learnk8s/resource…
Kubesploit retweeted
100 pods on the same node. Node-level firewall rules don't separate them. Network policy does: east-west traffic control at the pod level. Service Mesh adds mTLS on top
Rodrigo Bersa on pod security
📺: ku.bz/dB7PDNt0v
Kubesploit retweeted
Kubesafe is a tool that prevents accidental execution of dangerous commands on the wrong Kubernetes cluster by providing a safety net for cluster management
➤ ku.bz/3hC23K79L
Kubesploit retweeted
This article lays out an AI-assisted AWS DevSecOps pipeline on EKS, where Amazon Q reviews code, Inspector gates the image, DevOps Guru watches production and Step Functions decide when auto-remediation may run without a human
➜ ku.bz/LL-lCFNc0
Kubesploit retweeted
This week on the Learn Kubernetes Weekly:
🚨 Kubernetes Health Checks Down Payments
🏗️ Hybrid Kubernetes Survey Processing
⚡ The Fastest Redis Call
🌐 CNI Deep Dive
🤔 Why CPUs Never Had This Problem
⭐️ LearnKube
Read it now: kube.today/issues/205
Kubesploit retweeted
1/10
One of the things I like about the LearnKube Telegram group is the discussion that follows the articles we share.
We shared a case study about a payment service stuck in a restart loop. Its liveness probe depended on a downstream service.
Kubesploit retweeted
This case study shows how a hidden iptables-legacy NAT rule added by Tailscale changed source IPs between Kubernetes hosts and broke etcd peer TLS, plus how the team found and removed it
➜ ku.bz/MNNxsw45F
Kubesploit retweeted
Ten speakers. Five minutes each. Practical Kubernetes lessons for the community
Brandt Keller from Defense Unicorns is joining the LearnKube Day lightning talks in Salt Lake City
learnkube.com/learnkube-day-…
Kubesploit retweeted
This week on the Learn Kubernetes Weekly:
🧠 Workload-Aware Scheduling
⚙️ Automaxprocs Uses One CPU
🔀 Why gRPC Routes to One Pod
🔐 Static Kubernetes OIDC Issuer
🧩 ZSvirt Open-Sourced
⭐️ NeuBird
Read it now: kube.today/issues/204
Kubesploit retweeted
WaaS creates browser-accessible Linux and Windows desktops as Kubernetes resources, with GitOps workflows, secure remote access, quotas, and OIDC and RBAC controls
➜ ku.bz/TgntmDfyC
Kubesploit retweeted
🗣️ Dilshan Wijesooriya explains how upgrading to AL2023 broke their cluster autoscaler—it had been silently using the EC2 instance role instead of its own pod-level IAM role
Watch the full episode: ku.bz/T_YPfTfDb
Kubesploit retweeted
A Go service can be OOM-killed while its heap looks healthy
Our new article explains how CPU quotas, goroutine stacks, and garbage collection affect Kubernetes requests and limits for Go
learnkube.com/go-kubernetes-…
Kubesploit retweeted
Software supply chain security should be part of the normal delivery workflow
Przemysław Wojtunik on JFrog, Xray, signing, and verification
📺: ku.bz/TJRYGMWV2
Kubesploit retweeted
"Think about supply chain security in layers: scanning, signing, and enforcement."
Meg Sarros on container trust
📺: ku.bz/k_r1B0Rwj
Kubesploit retweeted
1/5
This KubeCon NA, we will host our first community event: LearnKube Day in Salt Lake City, on November 9.
This one is special to me. For the first time, we will bring our community together for a day of our own. 🧵
Kubesploit retweeted
"More security focus, more compliance, more standardization. That's what happens when things get boring."
Mauro Morales on the next decade of Kubernetes
📺: ku.bz/8cpgjFfjn
Kubesploit retweeted
This week on the Learn Kubernetes Weekly:
🔥 Building Modelplane on Crossplane
🚪 Why Ingress Is Being Replaced
🛡️ Fragile VMs to Bulletproof GitOps
💾 500 MB Buffer Killed Our Job
🎮 GPU MIG + Kueue
⭐️ LearnKube
Read it now: kube.today/issues/203
