Kubesploit @kubesploit

News and links on Kubernetes security curated by the @Learnk8s team Mastodon: @[email protected] kube.today More K8s news, events, jobs → Joined March 2021

Tweets

2K
Followers

20K
Following

1
Likes

535

Kube Architect @K8sArchitect

11 hours ago

Sveltos installs as a controller in a management cluster, deploying add-ons and policies (Helm charts, Kustomize, raw YAML) to target clusters by label selectors and sync rules, automating multi-cluster resource management and compliance ➤ ku.bz/RgJVTPtfJ

1 1 9 1K 7

Download Image

Kubesploit @kubesploit

12 hours ago

ToolHive secures Model Context Protocol (MCP) servers in Kubernetes using native features like RBAC, network policies, and StatefulSets It isolates servers via a proxy, blocking direct network access for enterprise-grade security ➤ ku.bz/cJ4HXTrnS

0 0 13 705 7

Kubesploit @kubesploit

12 hours ago

This repository demonstrates CVE-2024-3094, the backdoor discovered in xz utils versions 5.6.0+ It provides a Docker container with the vulnerable Debian package and a patched liblzma library to reproduce the SSH authentication bypass exploit ➜ ku.bz/4K_lDB_ff

0 0 3 567 1

Kubesploit @kubesploit

2 days ago

Reflector is a Kubernetes addon designed to monitor changes to resources (Secrets and ConfigMaps) and reflect changes to mirror resources in the same or other namespaces ➤ ku.bz/wPZw27PGH

0 1 7 1K 8

Kubesploit @kubesploit

2 days ago

This tutorial shows how to restrict access to Kubernetes services without a VPN using oauth2-proxy with ingress-nginx ➜ ku.bz/z67cDR8Fg

0 0 12 1K 11

Daniele Polencic — @[email protected] @danielepolencic

2 days ago

🤖 I've been following OpenAI's Kubernetes scaling journey since the very beginning. If you map their growth over the years, it tells an incredible story: 2018: Started with clusters, then pushed to 2,500 nodes for initial AI experiments 2021: Scaled to 7,500 nodes to power…

3 5 41 4K 33

Kubesploit @kubesploit

3 days ago

KubernetesEnumerationTool audits clusters for exploitable misconfigs, missing best practices, and RBAC overreach It identifies weak points like privileged pods, hostIPC, insecure tokens and tests node-level access via PowerShell modules ➜ ku.bz/-zW_QZVKM

1 0 5 677 3

LearnKube @learnk8s

3 days ago

This week on the Learn Kubernetes Weekly: 🐣 Inside a Pod’s Birth ✂️ How We Cut Cross-AZ Traffic 🙅‍♀️ allowPrivilegeEscalation: false 🏞️ Streaming List ⌛️ HPA tolerance ⭐️ @loft_sh Read it now: learnkube.com/issues/147

0 6 19 2K 7

Download Image

Kubesploit @kubesploit

4 days ago

watchall monitors your Kubernetes cluster, snapshots all resource changes into timestamped YAML files, redacts secrets, and lets you diff resource history offline via a deltas subcommand ➜ ku.bz/WncbdWtvp

0 1 18 1K 11

KubeFM @K8sFM

4 days ago

🗣️ Frédéric, Senior SRE at BlaBlaCar, shares how his team solved the cold start problem for their 1,500 Java microservices using Istio's warm-up capabilities ku.bz/grxcypt9j 🌟 @testkubeio 🎙 @birthmarkbart

1 7 17 2K 7

Download Video

Kubesploit @kubesploit

5 days ago

This article explains how to understand the limitations of Kubernetes' `allowPrivilegeEscalation: false` flag and its failure to prevent all privilege escalation methods ➜ ku.bz/RpcSdbpgK

0 1 16 1K 6

Kubesploit @kubesploit

5 days ago

KSOPS is a kustomize exec plugin for SOPS encrypted resources KSOPS can be used to decrypt any Kubernetes resource, but is most commonly used to decrypt encrypted Kubernetes Secrets and ConfigMaps ➤ ku.bz/615H3TNYJ

0 2 9 854 4

Kube Architect @K8sArchitect

5 days ago

Learn how UiPath replaced mutating webhooks with a Helm library solution, enabling flexible cross-service configuration management in Kubernetes without cluster-wide permissions ➤ ku.bz/frf79NxRC

1 2 18 3K 10

Kubesploit @kubesploit

6 days ago

This article explains how Kubernetes handles Linux capability names inconsistently, with behavior differing between container runtimes like containerd and CRI-O ➤ ku.bz/Fk3B8xWbr

0 1 13 1K 12

Kubesploit @kubesploit

7 days ago

Kyverno is a policy engine designed for Kubernetes It can validate, mutate, and generate configurations using admission controls and background scans Kyverno policies are Kubernetes resources and do not require learning a new language ➤ ku.bz/swJ_5DtbJ

0 4 27 2K 15

Kubesploit @kubesploit

a week ago

This tutorial covers east-west routing configuration utilizing CoreDNS, Traefik, cert-manager, and trust-manager for domain resolution and secure certificate management ➤ ku.bz/QfzB7zPcf

0 7 48 2K 35

Download Image

Kubesploit @kubesploit

a week ago

Conftest lets you enforce security/compliance rules on Kubernetes, Terraform, and other configs using OPA’s Rego ➜ ku.bz/Cq4x8tmnM

0 0 10 825 4

Kubesploit @kubesploit

a week ago

The ClusterSecret operator keeps matching namespaces updated with secrets: - New matching namespaces receive the secret automatically. - Changes to the ClusterSecret update all related secrets, and deleting it also removes all cloned secrets ➤ ku.bz/L452YC-Mp

0 3 14 721 5

Kubesploit @kubesploit

a week ago

This article explains how to deploy a sidecar container to transform mounted secrets into structured JSON or `.env` files for applications It details watching mounted secrets in real-time and regenerating output on changes ➜ ku.bz/xKKXSNvb7

0 2 15 1K 8

Daniele Polencic — @[email protected] @danielepolencic

a week ago

🔓 Here's what surprises security engineers in my Kubernetes courses: By design, ANY pod can talk to ANY other pod in the cluster. No exceptions. Even if you use namespaces, that frontend pod can still reach your database directly. It's not a bug—it's literally how Kubernetes…