Kubesploit

Kogaro continuously validates Kubernetes config with 60+ checks across reference, resource, security, image, and network domains , catching silent failures before they impact production. More: https://ku.bz/SWl3-LNty

Kubesafe is a tool that prevents accidental execution of dangerous commands on the wrong Kubernetes cluster by providing a safety net for cluster management. More: https://ku.bz/3hC23K79L

This article walks through building a Kubernetes admission webhook in Go from scratch, including the TLS trust setup and the bootstrapping deadlock nobody warns you about. More: https://ku.bz/tdxnc5S4r

Kubernetes problems often hide in controller timing, implicit defaults, and capacity assumptions. This week in Learn Kubernetes Weekly: 🔎 A production race condition left orphaned pods blocking new deployments. 📦 Source Hydrated Infrastructure Models commit rendered manifests for explicit GitOps audits. 🖥 Headlamp replaces the archived Kubernetes Dashboard and maps familiar workflows to a maintained UI. ⚙️…

This article walks through a real Copy Fail pod escape on Talos Linux , showing how a shared page cache breaks container isolation and why gVisor or microVMs help. More: https://ku.bz/tYzhJx61Q

Guardrails are not one-size-fits-all. David Parry argues that AI systems touching Kubernetes need deterministic rules that match the company, the deployment model, and the compliance requirements around sensitive data. He points to code review and YAML inspection as places where these guardrails should be explicit and enforceable, not left to improvisation. Watch the full interview: https://ku.bz/c5J05syX3 This…

A pizza order became a 15-container, 200-trace system. In Kube Signals episode two, Brian Teller and Mauricio (Salaboy) Salatino examine observability, state management, governance, and trust for non-deterministic agents. They discuss: - Why multi-agent runtimes can recreate monolith scaling - How OpenTelemetry exposes prompts, completions, and decisions - Why execution history turns agent trust into measurable…

This article explains why three old Kubernetes CVEs will never get a code fix, and what to change in your cluster now that scanners are about to start flagging them again. More: https://ku.bz/22Rr95v9F

On-prem apps talking to cloud services need a path — and there are three. Raglin Anthony explains: public internet with HTTPS (simple, but at the mercy of variability), AWS Site-to-Site VPN (private and encrypted), or AWS Direct Connect (a physical cable that bypasses the internet entirely — suitable for production and compliance workloads). Whichever path you pick, DNS resolution across environments is always the…