Kubesploit

Public

Can't Join? @kubesploit

2k Members

Updated: May 29, 2026 at 6:32 PM

Kubesploit

News and links on Kubernetes security curated by the @Learnk8s team Website: https://kubesploit.io/

@kubesploit is a dedicated channel for links and curated with regular updates in Business News

Ranking

Global Ranking

#6200

+10622

Language Ranking

#1365

+1175

Category Ranking

#112

+241

Participant Growth (Last 30 Days)

Total: 2.0K

24h growth: +0 0%

Latest Posts

Kubesploit

Apr 23, 2026, 04:54 PM

📷 Photo

This week's 6 best Kubernetes vacancies that focus on security are:

DevSecOps Engineer with Anthropic
💰 $405K to $485K a year
Remote from the United States of America
→ https://ku.bz/wrrnmcjDQ

DevSecOps Engineer with OpenAI
💰 $364.5K to $490K a year
Remote from the United States of America
→ https://ku.bz/NXd17JHfV

DevSecOps Engineer with Faire
💰 $268K to $368.5K a year
Remote from the United States of America, Canada, the United Kingdom (+1 more)
→ https://ku.bz/6dD8HVYdT

DevSecOps Engineer with Mercor
💰 $130K to $500K a year
On-site in San Francisco, CA, USA
→ https://ku.bz/Hs5qfr1h2

DevSecOps Engineer with Perplexity
💰 $220K to $405K a year
Fully remote
→ https://ku.bz/rnYh0TMpt

👉 Browse 6284 jobs on Kube Careers https://kube.careers/

241

Kubesploit

Apr 23, 2026, 04:54 PM

📷 Photo

Master Kubernetes with LearnKube's Advanced Kubernetes workshop!

What should you expect?

- Learn how to architect and design clusters from the ground up (in the cloud or on-prem).
- Explore the Kubernetes internal component and how the system is designed with resiliency in mind.
- Deep-dive into the networking components and observe the packets flowing into the cluster.
- Hands-on labs to test the theory with real-world scenarios!
- And more.

The next course starts next week: https://learnkube.com/training

We also run in-person courses and private training: https://learnkube.com/corporate-training

201

Kubesploit

Apr 23, 2026, 04:54 PM

Cilium Policy Generator, watches dropped flows in real time, and auto-generates CiliumNetworkPolicy YAML files to allow them — so you stop writing policies by hand in default-deny Cilium clusters.

More: https://ku.bz/hZYF4XgL_

276

Kubesploit

Apr 23, 2026, 04:54 PM

📷 Photo

This week's 6 best Kubernetes vacancies that focus on security are:

DevSecOps Engineer with Anthropic
💰 $405K to $485K a year
Remote from the United States of America
→ https://ku.bz/wrrnmcjDQ

DevSecOps Engineer with OpenAI
💰 $364.5K to $490K a year
Remote from the United States of America
→ https://ku.bz/NXd17JHfV

DevSecOps Engineer with Faire
💰 $268K to $368.5K a year
Remote from the United States of America, Canada, the United Kingdom (+1 more)
→ https://ku.bz/6dD8HVYdT

DevSecOps Engineer with Perplexity
💰 $220K to $405K a year
Fully remote
→ https://ku.bz/rnYh0TMpt

DevSecOps Engineer with Veeam Software
💰 $172.4K to $441.5K a year
Remote from the United States of America
→ https://ku.bz/lhKbTMggn

👉 Browse 5950 jobs on Kube Careers https://kube.careers/

267

Kubesploit

Apr 23, 2026, 04:54 PM

🎥 Video

Nicholaos Mouzourakis, Staff Product Security Engineer at Gusto, explains a fascinating performance issue they encountered when deploying Open Policy Agent in Kubernetes. He details how Go's default thread management clashed with Kubernetes CPU resource limits, causing significant performance degradation.

The core issue: Go automatically spawns threads equal to the number of CPU cores reported by the OS (8 in their case), but Kubernetes with a 750 millicore limit only allowed access to 75% of a single core. This meant all 8 Go threads were competing for limited CPU resources, creating what he describes as "context switch thrashing."

Nicholaos shares how they diagnosed this problem and the counterintuitive solution - reducing GOMAXPROCS from 8 to 2 - which immediately improved performance.

Watch the full episode: https://kube.fmhttps/:// http://ku.bz/S-2vQ_j-4

275

Kubesploit

Apr 23, 2026, 04:54 PM

📷 Photo

This week on Learn Kubernetes Weekly 179:

☁️ CloudEvents: The Missing Standards of Event-Driven Architecture
🔥 A Field Guide to Sandboxes for AI
🔐 Securing East-West Traffic with GKE Internal Gateway
💥 Designing for Failure: Chaos Engineering Best Practices
📊 Building a Centralized Multi-Account AWS Monitoring Platform

Read it now: https://kube.today/issues/179

⭐️ This newsletter is brought to you by Portworx. Automate, protect, and unify data for modern applications across on-premises, public, and hybrid cloud environments https://ku.bz/sjN4qdbrL

162

Kubesploit

Apr 23, 2026, 04:54 PM

🎥 Video

Rohit Agrawal from Databricks on replacing Kubernetes networking with a proxy-less, client-side load balancing system and eliminating 20-30% over-provisioning across hundreds of services.

You will learn:

- Why KubeProxy's L4 routing breaks down for gRPC: it picks a backend once per connection, not per request
- How Databricks built an Endpoint Discovery Service that streams real-time pod metadata to every client
- How zone-aware spillover cuts cross-AZ costs without sacrificing availability
- Why CPU-based routing failed and what signals to use instead

Watch (or listen to) it here: https://ku.bz/y803JMhBk

🌟 Sponsored by LearnKube — Kubernetes training, online or in-person. https://learnkube.com/training

With https://t.me/Birthmarkb

187

Kubesploit

Apr 23, 2026, 04:54 PM

📷 Photo

This week on Learn Kubernetes Weekly 178:

🔥 Kubernetes Remote Code Execution via nodes/proxy Get Permission
🦅 Aetòs: From Chaos to Engineering Excellence — A 3-Year Transformation
☸️ Kubernetes v1.35: Extended Toleration Operators to Support Numeric Comparisons
🔄 Reducing Complexity By Migrating from K8S to ECS Fargate for NetworkLessons
🗄️ Database State Management in Kubernetes: Running SQL Server on AKS with GitOps

Read it now: https://kube.today/issues/178

⭐️ This newsletter is brought to you by StormForge by CloudBolt. Stop setting Kubernetes requests. Let ML handle rightsizing https://ku.bz/2wYKp0Q2Y

165

Kubesploit

Apr 23, 2026, 04:54 PM

📷 Photo

This week on Learn Kubernetes Weekly 177:

☕ What Happens When You Run Java at Scale on Kubernetes
🚀 From Push to Production: Our Deployment Pipeline with Argo CD
⚡ From Minutes to Seconds: How I Eliminated Kubernetes Image Pull Delays
🏕️ Nomad on OpenShift: The Case for the Control Plane
🔬 Deep Dive: The Linkerd Destination Service

Read it now: https://kube.today/issues/177

⭐️ This newsletter is brought to you by Spectro Cloud, helping you scale K8s infrastructure for AI workloads — from cloud to edge https://ku.bz/JD0dS5lhZ

189

Kubesploit

Apr 23, 2026, 04:54 PM

📷 Photo

This week's 6 best Kubernetes vacancies that focus on security are:

DevSecOps Engineer with Anthropic
💰 $405K to $485K a year
Remote from the United States of America
→ https://ku.bz/wrrnmcjDQ

DevSecOps Engineer with OpenAI
💰 $364.5K to $490K a year
Remote from the United States of America
→ https://ku.bz/NXd17JHfV

DevSecOps Engineer with Faire
💰 $268K to $368.5K a year
Remote from the United States of America, Canada, the United Kingdom (+1 more)
→ https://ku.bz/6dD8HVYdT

DevSecOps Engineer with Perplexity
💰 $220K to $405K a year
Fully remote
→ https://ku.bz/rnYh0TMpt

DevSecOps Engineer with xAI
💰 $180K to $440K a year
On-site in Palo Alto, CA, USA, Washington, DC, USA
→ https://ku.bz/fk6J-Tflt

👉 Browse 5267 jobs on Kube Careers https://kube.careers/

300

Kubesploit

Mar 29, 2026, 10:34 AM

🎥 Video

Mike Stefaniak, Head of Product, Kubernetes and Registries at Amazon Web Services (AWS), shares three key trends he's observing at KubeCon that are shaping the future of Kubernetes deployments:

1. How security and trust are becoming critical differentiators in open source projects
2. The resurgence of service mesh communication patterns, particularly around routing models and enabling communication between multiple agents within clusters.
3. The growing need for more sophisticated authorization mechanisms in Kubernetes to handle the actions that AI agents and MCP (Model Context Protocol) tools might take

Watch the full interview: https://ku.bz/PzjrglcZJ

211

Kubesploit

Mar 29, 2026, 10:34 AM

📷 Photo

This week on Learn Kubernetes Weekly 174:

🤖 How We Cut Build Debugging Time by 75% with a DevEx AI Assistant
🔥 We Cut Our Kubernetes Pods by 60% and Doubled Traffic Capacity
📈 Scaling Django SaaS to 1M Users: Async ORM, Caching, and Horizontal Pods
⚠️ Hidden Kubernetes Bad Practices Learned the Hard Way During Incidents
🥷 Kubernetes PKI & Kubelet Credential Abuse: From Popping a Pod to Owning the Cluster

Read it now: https://kube.today/issues/174

⭐️ This newsletter is brought to you by LearnKube — master Kubernetes with hands-on training designed for engineers who want to learn the smart way https://ku.bz/hypSbyc-V

223

Kubesploit

Mar 29, 2026, 10:34 AM

📷 Photo

This week's 6 best Kubernetes vacancies that focus on security are:

DevSecOps Engineer with Anthropic
💰 $40.5M to $48.5M a year
🏠 From the office in San Francisco, CA, USA
→ https://ku.bz/wrrnmcjDQ

DevSecOps Engineer with Tailscale
💰 $16.1M to $20.14M a year
🌎 Fully remote
→ https://ku.bz/J9Cs7QBBp

DevSecOps Engineer with Accenture Federal Services
💰 $11.49M to $15.13M a year
👨‍💻 Remote from
→ https://ku.bz/bsl59cPMh

DevSecOps Engineer with OpenAI
💰 $364.5K to $490K a year
👨‍💻 Remote from the United States of America
→ https://ku.bz/NXd17JHfV

DevSecOps Engineer with Faire
💰 $268K to $368.5K a year
🏠 From the office in San Francisco, CA, USA
→ https://ku.bz/Lt703grhh

👉 Browse 2543 jobs on Kube Careers https://kube.careers/

316

Kubesploit

Mar 29, 2026, 10:34 AM

🎥 Video

Fernando from SadServers on how he cut his Kubernetes bill from $1,000/month on GKE to $30/month on Hetzner with Edka — a 500% cost reduction for the same capacity.

You will learn:

- Why Kubernetes hasn't delivered on its original promise of cost savings through bin packing — and what it actually provides instead
- A real cost comparison: $1,000/month on GKE vs. $30/month on Hetzner with Edka for the same nominal capacity
- What you need to bring with you (observability, logging, dashboards) when leaving a fully managed cloud provider

Watch (or listen to) it here: https://ku.bz/6nSDbz9m4

🌟 This episode is brought to you by LearnKube — get started on your Kubernetes journey through comprehensive online, in-person or remote training https://learnkube.com/training

With https://t.me/Birthmarkb

197

Kubesploit

Mar 29, 2026, 10:34 AM

📷 Photo

This article shows how to use tofu-controller to manage Terraform resources with GitOps for external systems like Grafana dashboards and HashiCorp Vault policies with continuous reconciliation and automatic drift detection.

More: https://ku.bz/B3y_Zflr7

875

Kubesploit

Mar 29, 2026, 10:34 AM

🎥 Video

Zero trust in Kubernetes works best as a layered model, not a single toggle.

Abhishek Rao breaks down a phased approach: start with micro-segmentation, add identity with mTLS, and enforce cluster-level ingress and egress controls. This creates security boundaries teams can reason about and maintain.

Strong security comes from structure, not one-off rules.

Watch the full interview: https://ku.bz/_q9XBgY2c

This interview is a reaction to John Howard's episode https://ku.bz/sk-ZF1PG9

303

Kubesploit

Mar 29, 2026, 10:34 AM

Linnix is an eBPF + PSI-powered Kubernetes observability agent written in Rust that identifies which pod is actually stalling your services, not just consuming CPU.

More: https://ku.bz/x-VQLHwSW

567

Kubesploit

Mar 29, 2026, 10:34 AM

🎥 Video

Spectro Cloud just announced Hadron Linux — a brand new Linux distribution engineered from scratch by the Kairos team.

Ettore Di Giacinto explains: Hadron is purpose-built as a minimal, immutable base layer for edge infrastructure. Unlike retrofitted general-purpose distributions, it is specifically designed to eliminate common friction points when deploying Kubernetes at scale.

The goal: a Linux foundation that treats edge as a first-class target, not an afterthought.

Watch the announcement: https://ku.bz/wMhKpZ5bQ

Read the announcement: https://ku.bz/_9RmXnjDJ

381

Kubesploit

Mar 29, 2026, 10:34 AM

📷 Photo

This article solves automated certificate distribution for EAP-TLS WiFi authentication using nginx-proxy on Kubernetes with step-ca, avoiding traditional MDM by hosting mobileconfig files at an HTTPS endpoint with mTLS authentication.

More: https://ku.bz/spclMhjDz

347

Kubesploit

Mar 29, 2026, 10:34 AM

cek is a command-line tool for exploring OCI container image filesystems, reading file contents, and inspecting layer mechanics without running containers by connecting to container daemons or pulling from registries.

More: https://ku.bz/VWLLdYCbb

663

Kubesploit

Mar 26, 2026, 08:09 PM

🎥 Video

Nicholaos Mouzourakis, Staff Product Security Engineer at Gusto, breaks down the common deployment patterns for Open Policy Agent (OPA) in Kubernetes environments. He explains the tradeoffs between individual pods, auto-scaling groups, daemon sets, sidecars, and WASM modules.

He outlines critical considerations for selecting the right deployment option:

- Latency requirements
- Bandwidth constraints
- Development overhead
- Feature compatibility (noting WASM modules lack full standard library support)
- Cloud costs and policy size implications

He notes that co-located pods typically achieve a few milliseconds of latency, and suggests WASM modules for those requiring even better performance.

Watch the full episode: https://kube.fmhttps/:// http://ku.bz/S-2vQ_j-4

302

Kubesploit

Mar 24, 2026, 08:07 PM

📷 Photo

This week's 6 best Kubernetes vacancies that focus on security are:

DevSecOps Engineer with Anthropic
💰 $40.5M to $48.5M a year
🏠 From the office in San Francisco, CA, USA
→ https://ku.bz/wrrnmcjDQ

DevSecOps Engineer with Tailscale
💰 $15.96M to $19.97M a year
🌎 Fully remote
→ https://ku.bz/J9Cs7QBBp

DevSecOps Engineer with Accenture Federal Services
💰 $11.49M to $15.13M a year
👨‍💻 Remote from
→ https://ku.bz/bsl59cPMh

DevSecOps Engineer with OpenAI
💰 $364.5K to $490K a year
👨‍💻 Remote from the United States of America
→ https://ku.bz/NXd17JHfV

DevSecOps Engineer with Faire
💰 $268K to $368.5K a year
🏠 From the office in San Francisco, CA, USA
→ https://ku.bz/Lt703grhh

👉 Browse 2459 jobs on Kube Careers https://kube.careers/

298

Kubesploit

Mar 24, 2026, 08:07 PM

📷 Photo

This week on Learn Kubernetes Weekly 173:

🔥 Kubernetes Egress Control with Squid Proxy
💪 How We Turned a Forced OS Migration into a 30% Infrastructure Reduction
⚡ Auto-scaling and Load-based Scaling in Kubernetes
🎯 Smart Scheduler: Intelligent Pod Placement for Kubernetes Cost Optimization
🤖 Using Claude Code to Pilot Kubernetes on Autodock

Read it now: https://kube.today/issues/173

⭐️ This newsletter is brought to you by Hadron, the new lightweight secure Linux OS from the Kairos team https://ku.bz/mMZytrj-z

206

Kubesploit

Mar 24, 2026, 08:07 PM

pwru is an eBPF-based tool for tracing network packets in the Linux kernel with advanced filtering capabilities.

It allows fine-grained introspection of kernel state to facilitate debugging network connectivity issues.

More: https://ku.bz/Q3X1ngZGC

243

Kubesploit

Mar 24, 2026, 08:07 PM

📷 Photo

This article demonstrates how to exploit Kubernetes PKI and kubelet credentials after gaining node access to escalate from pod compromise to full cluster control.

More: https://ku.bz/NxVxjKtt0

303

Kubesploit

Mar 23, 2026, 04:51 PM

📷 Photo

Chainloop is an evidence store and policy engine for Software Supply Chain attestations, SBOMs, VEX, SARIF, and QA reports, with contract-based workflows, Rego policy evaluation, and third-party integrations such as Dependency-Track and Guac.

More: https://ku.bz/_wQslV4bc

276

Kubesploit

Mar 19, 2026, 10:08 AM

🎥 Video

Karpenter can rotate your nodes for three reasons: they're underutilized, they're empty, or the AMI has drifted from what you specified.

You can set a disruption budget for each reason to control how many nodes rotate at once. But here's the catch: if you only set budgets for two reasons and skip the third, Karpenter doesn't disable it. It silently applies a default 10% budget to any reason you didn't mention.

Adhi Sutandi's team found this the hard way — drift events fired during maintenance windows they thought were locked down. The fix? Set a single budget of one node with no reason qualifier, so it applies to everything.

New episode out now: https://ku.bz/XyVfsSQPr

195

Kubesploit

Mar 18, 2026, 12:46 AM

🎥 Video

"The supply chain has become the sharp end of the wedge."

Andrew Martin traces the evolution of software supply chain attacks from boot sector viruses to modern npm-borne worms. His team signs everything, generates SBOMs, and verifies Cosign artifacts at admission time into Kubernetes clusters.

The prediction for 2026: continuous validation of supply chain security metadata at runtime will become a staple in Kubernetes security tooling this year.

Watch the full interview: https://ku.bz/wyMlWGTqf

251

Kubesploit

Mar 18, 2026, 12:46 AM

📷 Photo

This tutorial teaches how to implement Kubernetes egress control using Squid proxy and NetworkPolicy for visibility and enforcement of outbound traffic without service mesh complexity.

More: https://ku.bz/XyLs9nnzh

229

Kubesploit

Mar 17, 2026, 10:27 AM

📷 Photo

📕 We published a book on optimising and right-sizing GPUs in Kubernetes.

Most GPU clusters show 100% allocation and single-digit actual usage.

The book helps you:

- Tell whether your GPUs are actually computing or just allocated
- Pick the right metrics instead of trusting nvidia-smi
- Choose between time-slicing, MIG, and dedicated GPUs based on real data
- Stop GPU waste from cascading into CPU and memory waste

Download it for free here: http://ku.bz/KL4jRvsL4

This book was made possible by Kubex.

145

Showing 30 of 100 posts

Loading posts...

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Loading reviews...

Related Telegram Channels

Loading recommended channels...

Kubesploit

Kubesploit

Ranking

Participant Growth (Last 30 Days)

Latest Posts

Rating

User Reviews (0)

Related Telegram Channels

w1lmore cooks

Kraken Announcements

𝐀𝐑𝐑𝐀𝐒𝐇, 𝐆𝐎𝐋𝐃 𝐓𝐑𝐀𝐃𝐄𝐑

Bits Community

Fortune

GAGARIN Announcement Channel 🚀

SEO Official Channel

TG PROFIT

Latest Posts

Related Telegram Channels

w1lmore cooks

Kraken Announcements

𝐀𝐑𝐑𝐀𝐒𝐇, 𝐆𝐎𝐋𝐃 𝐓𝐑𝐀𝐃𝐄𝐑

Bits Community

Fortune

GAGARIN Announcement Channel 🚀

SEO Official Channel

TG PROFIT

User Reviews (0)