Kubesploit
LightNews LightNews
banner
kubesploit.io
Kubesploit
@kubesploit.io
240 followers 1 following 420 posts
News and links on Kubernetes security curated by the @Learnk8s.io team
More K8s news, events, jobs → https://kube.today
Posts Replies Media Videos
kubesploit.io
OpenBao provides an open-source solution to manage, store, and distribute secrets, certificates, and keys with secure encryption, dynamic secrets, automated leasing, and detailed revocation

➤ https://ku.bz/qg3j1t67t
December 20, 2025 at 6:06 PM
kubesploit.io
This article explains how to secure Kubernetes at the transport (Layer 4) level, covering best practices around service mesh mTLS, network segmentation, access control, and encryption of in-cluster traffic

➤ https://ku.bz/62pM2bG-r
https://miro.medium.com/v2/resize:fit:700/1*bFmvmE0cg1L_AGzo0hgbIg.png
December 19, 2025 at 6:11 PM
kubesploit.io
This article explains how to use Vault Agent Injector (a mutating webhook) to inject secrets into Kubernetes pods securely, without modifying application code

➜ https://ku.bz/DXC0qMd79
https://cdn.hackernoon.com/images/null-6g239dr.png
December 19, 2025 at 6:06 PM
kubesploit.io
This open-source platform lets you run a self-hosted zero-trust secure access solution supporting VPN-like WireGuard/QUIC, ZTNA, API/AI gateways, homelab access and Kubernetes ingress on your own infrastructure

➤ https://ku.bz/JWMdMH_J8
https://octelium.com/assets/ztna-CrAF5Ft7.webp
December 18, 2025 at 6:11 PM
kubesploit.io
This code tool helps you gather logs, metrics and code changes, then uses AI-powered root-cause analysis to surface what broke in production and suggest immediate fixes

➜ https://ku.bz/srJCYmX4J
https://github.com/dingus-technology/DINGUS/raw/main/docs/assets/dingus-ai-logs-ui.png
December 18, 2025 at 6:06 PM
Reposted by Kubesploit
kube.careers
https://kube.careers/image-gen/digest?companies=OpenAI&companies=Airwallex&companies=Dexterity&currency=USD&salaryFrom=185000&salaryTo=490000&subtitle=Selected+by+the+Kube+Careers+team&title=6+Kubernetes+security+jobs
December 17, 2025 at 9:46 PM
kubesploit.io
Sealed Secrets provides declarative Kubernetes Secret Management in a secure way

Since the Sealed Secrets are encrypted, they can be safely stored in a code repository

➤ https://ku.bz/M_ZTLCWtB
December 17, 2025 at 6:11 PM
kubesploit.io
This article introduces ChaosRoom, a playful tool that helps engineers learn chaos engineering by running mini-games simulating faults and observing how systems respond

➜ https://ku.bz/2GlrYmTbT
https://miro.medium.com/v2/1*Rq5vw2UGHHYYM6wg2NaZOg.png
December 17, 2025 at 6:06 PM
Reposted by Kubesploit
learnkube.com
This week on the Learn Kubernetes Weekly:

🐍 Kubernetes’s Python Moment
☁️ Leaving Big Cloud with Kubernetes
📦 DRA in Kubernetes v1.34
🛠️ APIs with Kong Ingress
🚑 Fixing Upstream Connect Errors

⭐️ Depot

Read it now: https://kube.today/issues/162
https://assets.learnk8s.io/linkedin-162.png
December 17, 2025 at 11:31 AM
kubesploit.io
This tool delivers real-time node/pod-level process, file and network visibility for Kubernetes and bare-metal environments, with rule-based alerts, dashboards and hybrid cloud support

➜ https://ku.bz/7lk94WvMv
https://github.com/sentrilite/sentrilite/raw/master/Sentrilite_Architecture_Diagram.png
December 16, 2025 at 6:06 PM
kubesploit.io
This article shows how to use the Kong OIDC plugin together with Keycloak to secure cluster services and HTTP routes at the API gateway level

➜ https://ku.bz/2Q103hfW1
https://miro.medium.com/v2/resize:fit:700/1*CpjhwQyp42yLDKwMJilxEw.png
December 15, 2025 at 6:06 PM
kubesploit.io
This article explains how a Security Context in Kubernetes works

➤ https://ku.bz/jgGTq6n99
https://learnkube.com/a/be18e9e2649498e83be2d8301bb850f6.svg
December 14, 2025 at 6:06 PM
kubesploit.io
Kviklet provides a secure, self-hosted tool for engineering teams to request, review, and approve production database queries with a workflow inspired by code reviews

➤ https://ku.bz/blQ6ybFXN
https://github.com/kviklet/kviklet/raw/main/images/ExecutedRequest_light.png#gh-light-mode-only
December 13, 2025 at 6:06 PM
kubesploit.io
This case study explains how BioCatch migrated their Vault environment from costly external storage to Raft, enabling high availability, easy disaster recovery, and lower operational costs in Kubernetes

➤ https://ku.bz/zPwwpmMyV
https://miro.medium.com/v2/1*J6bWoFpAYyGT-auAn7VrsQ.png
December 12, 2025 at 6:11 PM
kubesploit.io
This open-source tool helps you manage authentication and access across servers, databases and Kubernetes clusters via API or CLI

➜ https://ku.bz/VYnDyMT1h
https://res.cloudinary.com/uasabi/image/upload/v1654443436/link-reviewer/0f2187736be2840eae3ee08d66d3f3ac.jpg
December 12, 2025 at 6:06 PM
kubesploit.io
This open-source tool lets you analyze connectivity, inspect applied NetworkPolicies, and generate policy YAMLs, all with an interactive fuzzy-finder UI and JSON/table outputs

➤ https://ku.bz/HJpY-dbmG
December 12, 2025 at 6:11 AM
kubesploit.io
This article explains how to remove permission checks from microservices and build a centralized authorization layer with Kong OSS and OpenFGA

➜ https://ku.bz/50Pf5hFcV
https://miro.medium.com/v2/1*vZpIS4W9z7QVN-n0c8d5-w.png
December 11, 2025 at 6:06 PM
Reposted by Kubesploit
learnkube.com
This week on the Learn Kubernetes Weekly:

🔥 Informers Are Easy to Misuse
🎤 Three Optimization Lessons
🛑 Graceful Shutdown
🚪 Namespaces & Multi-tenancy
🎯 Centralizing Helm with HTTPProxy

⭐️ StormForge by CloudBolt

Read it now: https://kube.today/issues/161
https://assets.learnk8s.io/linkedin-161.v2.png
December 10, 2025 at 11:51 AM
kubesploit.io
Tetragon enables powerful real-time, eBPF-based security observability and runtime enforcement

It is Kubernetes-aware and understands identities, allowing security event detection to be configured in relation to individual workloads

➜ https://ku.bz/WrhnVyd2p
https://github.com/cilium/tetragon/raw/main/docs/static/images/smart_observability.png
December 9, 2025 at 6:06 PM
kubesploit.io
This article explores why using Kubernetes namespaces alone is not a sufficient isolation or security boundary

It shows common pitfalls and many attack paths that let a tenant escape isolation even if you only gave them access to a single namespace

➜ https://ku.bz/PCmRjmB57
December 8, 2025 at 6:06 PM
Reposted by Kubesploit
danielepolencic.com
🚀 It's that time of the year! What did I achieve in 2025?

A thread 🧵
https://res.cloudinary.com/learnk8s/image/upload/v1765200103/01_uwlcpa.png
December 8, 2025 at 2:06 PM
kubesploit.io
Kube No Trouble (kubent) is a tool to check whether you're using any deprecated APIs in your cluster and therefore should upgrade your workloads first, before upgrading your Kubernetes cluster

➜ https://ku.bz/zMyZdL3w6
December 5, 2025 at 6:06 PM
kubesploit.io
This tutorial walks you through enabling, running, and monitoring IPv6 networking on Kubernetes clusters using Cilium

➜ https://ku.bz/b6RFcGQjF
https://cdn.sanity.io/images/xinsvxfu/production/85df8887e139046fdaf303632f57aad90efaac1e-1659x995.png?auto=format&fit=clip&q=80&w=2560
December 4, 2025 at 6:06 PM
kubesploit.io
This tool provides a Model Context Protocol (MCP) server for querying Kubernetes Audit Logs across cloud providers using AWS CloudWatch, GCP Logging, and Alibaba SLS

➜ https://ku.bz/Hm_CMFF66
https://github.com/mozillazg/kube-audit-mcp/raw/master/.github/docs/kube-audit-mcp.png
December 3, 2025 at 6:06 PM
Reposted by Kubesploit
learnkube.com
This week on the Learn Kubernetes Weekly:

🌐 Networking from Packets to Pods
⚙️ Istio Upgrades
🔍 Finding Kubernetes Exit Codes
🔒 Security fundamentals: networking
📊 Jaeger Tracing on Kubernetes

⭐️ vCluster Labs

Read it now: https://kube.today/issues/160
https://res.cloudinary.com/learnk8s/image/upload/v1764762531/linkedin-160.v2_pgj5nb.png
December 3, 2025 at 11:56 AM