Kubesploit
описание
News and links on Kubernetes security curated by the @Learnk8s team Website: https://kubesploit.io/
2 116
подписчиков
Охват к подписчикам
11,8%
ERR
Реакции к просмотрам
0,00%
0 на 24 постов
Пересылки к просмотрам
1,31%
70
Постов в день
1,0
всего 24
Где отзываются чаще
доля реакций к просмотрам- 22:06"You don't want to inhibit developers from getting things done." Gari Singh explains how platform teams can balance self-service capabilities with governance. He discusses the importance of centralization with guardrails—policies that restrict dangerous operations while enabling developers to work effectively without being inhibited. Watch the full interview: https://ku.bz/F_t6Y2dxz This interview is a reaction to Ben Poland's episode https://ku.bz/klBmzMY5-0,00%
- 20:26This tutorial shows how to build a simple bot-detection system from Nginx logs and use GCP controls to investigate and slow suspicious traffic. More: https://ku.bz/GNLh0bWKs0,00%
- 16:46Nicholaos Mouzourakis, Staff Product Security Engineer at Gusto, explains how Joel Spolsky's "Law of Leaky Abstractions" applies to Kubernetes environments. He emphasizes the profound concept that "abstraction saves us time working, but does not save us time learning" and introduces the idea of learning debt that must eventually be paid when abstractions leak. Nicholaos describes how Kubernetes administrators often face complex problems with incomplete information and tight deadlines. He explains: - Every lower-level technology you don't understand creates a learning debt - Understanding the layers beneath your abstractions reduces troubleshooting time - Modern containerized environments (often lacking shells for security) make this understanding even more critical - Not understanding how layers interact creates security vulnerabilities like injection attacks Watch the full episode: https://kube.fmhttps://ku.bz/S-2vQ_j-40,00%
- 14:16This tutorial shows how to install Microsoft's managed cert-manager extension on an AKS cluster and use it with Gateway API to issue and auto-renew Let's Encrypt certificates. More: https://ku.bz/DFLtYT8zG0,00%
- 12 авг.This week on Learn Kubernetes Weekly 196: 🛠️ How I Rebuilt YouTube’s Load Balancing Algorithm in Go 💾 When ETCD Crashes, Check Your Disks First: A Pod CrashLoopBack Debugging Story 🧩 We Blamed CoreDNS for Weeks. The Real Culprit Was a Default We Never Questioned 🚚 Zero-Downtime EKS Migration: Production-Grade Kubernetes at Scale ⚡ Deterministic Routing: The Hidden Key to Low Latency Read it now: https://kube.today/issues/196 ⭐️ This newsletter is brought to you by LearnKube — master Kubernetes with hands-on training designed for engineers who want to learn the smart way https://ku.bz/hypSbyc-V0,00%
- 12 авг.This article presents a three-layer tenant isolation design where each tenant gets its own control plane, VM nodes and isolated network via KubeFlex, KubeVirt and OVN-Kubernetes, with latency measurements. More: https://ku.bz/YRcVzxByx0,00%
- 11 авг.New from LearnKube: Setting the right requests and limits in Kubernetes. CPU and memory requests and limits appear together in a Pod manifest, but Kubernetes and Linux use them at different stages. You will learn: • How the scheduler compares requests with node allocatable capacity • Why actual usage can exceed a request • How CPU quotas cause throttling even when average CPU looks low • Why an OOM kill is different from a node-pressure eviction • How requests and limits determine Kubernetes QoS classes The article is the first chapter of The Technical Guide to Kubernetes Rightsizing, co-authored by Gulcan and Daniele Polencic. Read the chapter: https://learnkube.com/setting-cpu-memory-limits-requests Download the free technical guide: https://learnkube.com/kubernetes-rightsizing This book was made possible by CloudBolt Software.0,00%
- 10 авг.Karpenter can consolidate nodes and reduce cloud costs. But without Pod Disruption Budgets, those savings can expose workloads to avoidable downtime. Ahmad Asmar from Zencity explains how they use Kyverno to generate PDBs automatically instead of relying on every developer to remember the required configuration. You will learn: - Why Karpenter consolidation and Spot instances make PDB coverage critical - How Kyverno detects existing PDBs through workload labels - Why percentage-based budgets work better for scaling workloads - How ClusterRole aggregation extends Kyverno without modifying its Helm chart Watch: https://ku.bz/xrlPJg54D 🌟 This episode is sponsored by LearnKube. Download the free book, The Technical Guide to Kubernetes Rightsizing, to understand what Prometheus and Grafana cannot tell you about safely reducing requests and limits. https://learnkube.com/kubernetes-rightsizing With @Birthmarkb0,00%
- 5 авг.This tutorial explains how to build a PCI-DSS focused GKE security framework using: - Workload Identity, - Secret Manager, - Binary Authorization, - NetworkPolicy, - VPC Service Controls, - Private Service Connect, - Istio mTLS, - and audit logging. More: https://ku.bz/cD6Lg9ppD0,00%
- 5 авг.This week on Learn Kubernetes Weekly 195: 🔍 Practical Detection Engineering for Kubernetes: Baselining Audit Logs 🤖 Building an AI Agent That Runs Your SRE Operations — What I Learned, What Works, and How You Can Do It Too 🛡️ Building an OSS Kubernetes Security Console 🧩 User Namespaces in Kubernetes: The Implementation 🔀 Vlan Migration: Moving a Live Kubernetes Cluster Without Downtime Read it now: https://kube.today/issues/195 ⭐️ This issue is brought to you by daily.dev — where developers discover what's next https://ku.bz/PrzB1cB0K0,00%
- 4 авг.This article explains how Kubernetes user namespaces are implemented through pod UID/GID range allocation, idmap mounts, containerd, runc, and safeguards against privilege escalation. More: https://ku.bz/z9DNn9t1D0,00%
- 4 авг.The newest tool is not automatically the right architectural choice. Before evaluating implementations, Fabián Sellés Rosa defined three criteria: flexibility, production maturity, and operational effort. This made it possible to compare Crossplane, a custom controller, and KRO with ACK on the same terms. You will learn: - Why KIAM became urgent to replace after years of stable operation - How to define evaluation criteria before comparing tools - Why Adevinta selected KRO with ACK for reconciliation - How Kyverno preserves namespace-level IAM boundaries Watch (or listen to) it here: https://ku.bz/R_06hwnCn 🌟 This episode is brought to you by LearnKube. Download The Technical Guide to Kubernetes Rightsizing to understand what Prometheus and Grafana cannot tell you about safely reducing requests and limits: https://learnkube.com/kubernetes-rightsizing With @Birthmarkb0,00%