Kubesploit
Kanalga Telegram’da o‘tish
News and links on Kubernetes security curated by the @Learnk8s team Website: https://kubesploit.io/
Ko'proq ko'rsatish2 133
Obunachilar
+124 soatlar
-17 kun
+230 kun
Ma'lumotlar yuklanmoqda
O'xshash kanallar
Taglar buluti
Kirish va chiqish esdaliklari
---
---
---
---
---
---
Obunachilarni jalb qilish
Noyabr '26Noy '26
Noyabr '26
+4
0 kanalda
Oktabr '26
+30
2 kanalda
Get PRO
Sentabr '26
+42
2 kanalda
Get PRO
Avgust '26
+50
2 kanalda
Get PRO
Iyul '26
+45
2 kanalda
Get PRO
Iyun '26
+41
3 kanalda
Get PRO
May '26
+49
3 kanalda
Get PRO
Aprel '26
+36
3 kanalda
Get PRO
Mart '26
+65
6 kanalda
Get PRO
Fevral '26
+35
1 kanalda
Get PRO
Yanvar '26
+29
1 kanalda
Get PRO
Dekabr '25
+44
3 kanalda
Get PRO
Noyabr '25
+35
2 kanalda
Get PRO
Oktabr '25
+23
2 kanalda
Get PRO
Sentabr '25
+18
2 kanalda
Get PRO
Avgust '25
+22
2 kanalda
Get PRO
Iyul '25
+38
2 kanalda
Get PRO
Iyun '25
+18
3 kanalda
Get PRO
May '25
+28
2 kanalda
Get PRO
Aprel '25
+18
2 kanalda
Get PRO
Mart '25
+23
3 kanalda
Get PRO
Fevral '25
+23
1 kanalda
Get PRO
Yanvar '25
+28
2 kanalda
Get PRO
Dekabr '24
+49
1 kanalda
Get PRO
Noyabr '24
+106
2 kanalda
Get PRO
Oktabr '24
+103
2 kanalda
Get PRO
Sentabr '24
+94
2 kanalda
Get PRO
Avgust '24
+147
3 kanalda
Get PRO
Iyul '24
+62
2 kanalda
Get PRO
Iyun '24
+66
3 kanalda
Get PRO
May '24
+91
2 kanalda
Get PRO
Aprel '24
+122
3 kanalda
Get PRO
Mart '24
+76
3 kanalda
Get PRO
Fevral '24
+57
2 kanalda
Get PRO
Yanvar '24
+56
2 kanalda
Get PRO
Dekabr '23
+79
2 kanalda
Get PRO
Noyabr '23
+21
3 kanalda
Get PRO
Oktabr '23
+23
2 kanalda
Get PRO
Sentabr '23
+28
0 kanalda
Get PRO
Avgust '23
+12
0 kanalda
Get PRO
Iyul '23
+26
0 kanalda
Get PRO
Iyun '23
+30
0 kanalda
Get PRO
May '23
+42
0 kanalda
Get PRO
Aprel '23
+27
0 kanalda
Get PRO
Mart '23
+81
0 kanalda
Get PRO
Fevral '23
+17
0 kanalda
Get PRO
Yanvar '23
+35
0 kanalda
Get PRO
Dekabr '22
+22
0 kanalda
Get PRO
Noyabr '22
+34
0 kanalda
Get PRO
Oktabr '22
+23
0 kanalda
Get PRO
Sentabr '22
+32
0 kanalda
Get PRO
Avgust '22
+19
0 kanalda
Get PRO
Iyul '22
+32
0 kanalda
Get PRO
Iyun '22
+22
0 kanalda
Get PRO
May '22
+104
0 kanalda
Get PRO
Aprel '22
+36
0 kanalda
Get PRO
Mart '22
+33
0 kanalda
Get PRO
Fevral '22
+18
0 kanalda
Get PRO
Yanvar '22
+22
0 kanalda
Get PRO
Dekabr '21
+12
0 kanalda
Get PRO
Noyabr '21
+45
0 kanalda
Get PRO
Oktabr '21
+388
0 kanalda
| Sana | Obunachilarni jalb qilish | Esdaliklar | Kanallar | |
| 08 Noyabr | 0 | |||
| 07 Noyabr | +1 | |||
| 06 Noyabr | 0 | |||
| 05 Noyabr | 0 | |||
| 04 Noyabr | +2 | |||
| 03 Noyabr | 0 | |||
| 02 Noyabr | +1 | |||
| 01 Noyabr | 0 |
Kanal postlari
Repost from LearnKube news
This tutorial shows how to connect two Amazon EKS clusters with an Istio multi-primary, multi-network mesh and view both through centralized Kiali.
More: https://ku.bz/CSr7L2PvB
| 2 |  Hannah Foxwell, Co-founder at BIMP, is one of the featured lightning-talk speakers at LearnKube Day Salt Lake City 2026.
Join the community for YAML Games and a reception with live DJ Amin Astaneh.
Learn more: https://learnkube.com/learnkube-day-salt-lake-city-2026 | 86 |
| 3 |  LearnKube Day brings Kubernetes practitioners together for five-minute lightning talks and practical lessons from the community.
Andy Suderman, CTO at Fairwinds, is one of the featured lightning-talk speakers at LearnKube Day Salt Lake City 2026.
Join the community for YAML Games and a reception with live DJ Amin Astaneh.
Learn more: https://learnkube.com/learnkube-day-salt-lake-city-2026 | 81 |
| 4 | LearnKube Day brings Kubernetes practitioners together for five-minute lightning talks and practical lessons from the community.
Nabarun Pal, Principal Software Engineer at Broadcom, is one of the featured lightning-talk speakers at LearnKube Day Salt Lake City 2026.
Join the community for YAML Games and a reception with live DJ Amin Astaneh.
Learn more: https://learnkube.com/learnkube-day-salt-lake-city-2026 | 84 |
| 5 |  This week on Learn Kubernetes Weekly 208:
⚖️ Go, Node.js, C#, Java, and Python on Kubernetes
🗃️ Why Kubernetes depends on etcd and Raft
🧠 JVM memory: high usage does not always mean a leak
⏳ Dagster bottlenecks that more nodes cannot fix
🔀 Apache Stateful Functions on Flink 2.x and Java 21
Read it: https://kube.today/issues/208
⭐️ This newsletter is brought to you by LearnKube — understand how Kubernetes works, and what to do when it breaks. Live training with 60% hands-on labs: https://ku.bz/hypSbyc-V | 90 |
| 6 | LearnKube Day brings Kubernetes practitioners together for five-minute lightning talks and practical lessons from the community.
Miriah Peterson, CEO and Co-founder at Haikei Labs, is one of the featured lightning-talk speakers at LearnKube Day Salt Lake City 2026.
Join the community for YAML Games and a reception with live DJ Amin Astaneh.
Learn more: https://learnkube.com/learnkube-day-salt-lake-city-2026 | 151 |
| 7 | LearnKube Day brings Kubernetes practitioners together for five-minute lightning talks and practical lessons from the community.
Artem Lajko, Head of Platform Engineering at iits-consulting, is one of the featured lightning-talk speakers at LearnKube Day Salt Lake City 2026.
Join the community for YAML Games and a reception with live DJ Amin Astaneh.
Learn more: https://lnkd.in/gzwrx3mx | 157 |
| 8 |  This week on Learn Kubernetes Weekly 207:
🚦 Load Testing Apollo Router
⚖️ Client-Side Load Balancing at a Million Requests per Second
🦞 KubeClaw: OpenClaw for Adults
🚀 We Scaled an Insurance Batch Job 4000x — Here’s Every Bottleneck We Hit
👁️ How I Built a Production-Grade Object Detection System That Scales Itself
Read it now: https://kube.today/issues/207
⭐️ This newsletter is brought to you by LearnKube — understand how Kubernetes works, and what to do when it breaks. Live training with 60% hands-on labs https://ku.bz/hypSbyc-V | 121 |
| 9 |  Even as Kubernetes platforms mature, securing them does not necessarily become easier.
Marina Moore from Edera explains that as Kubernetes becomes more complex, both cybersecurity and explainability become more difficult. The main issue is that adding more components means more systems to understand and more areas to protect.
Watch the full interview: https://ku.bz/pzn5hfmTf | 180 |
| 10 | Seven provisioning models. One central Kubernetes team.
Molly Sheets joins Daniele and Bart to discuss the staffing cost of supporting multiple Kubernetes tenancy models.
- Assigning ownership across tenancy models
- Giving AI Ops cross-team context
- Planning canary and cell-based releases
Watch: https://ku.bz/Db3VnC3nl
This episode is sponsored by LearnKube. When a release breaks production, can your developers and platform engineers troubleshoot it together? Request private Kubernetes training tailored to your platform and workloads, with live instruction and 60% hands-on labs. | 135 |
| 11 |  This tutorial teaches how to migrate EKS from AWS VPC CNI and kube-proxy to Cilium using blue/green nodes, WireGuard encryption, and Hubble for observability.
More: https://ku.bz/sYGLb0l37 | 363 |
| 12 |  This article explains how GKE Agent Sandbox uses gVisor to isolate untrusted AI-generated code with separate node pools, Workload Identity, RBAC, and security observability.
More: https://ku.bz/0dy9y1wPw | 263 |
| 13 |  KubeClaw is a production-grade Helm chart for running OpenClaw AI agents on Kubernetes with secure defaults, pinned images, default-deny egress via Blocky, digest-locked upgrades, and batteries-included observability.
More: https://ku.bz/CbKpPNvJq | 248 |
| 14 | This article explains why secrets and tokens form the access system of a platform rather than plain config, and how static secrets and short-lived tokens together decide who can reach what.
More: https://ku.bz/YTvRcJgW7 | 248 |
| 15 |  This week on Learn Kubernetes Weekly 206:
🌐 DNS Is Weird Inside Kubernetes on AWS
⏳ TIL: Kubernetes ConfigMap Volume Mounts Are Eventually Consistent — Not Immediately Consistent
🚨 CVE-2025-69902: OS Command Injection in kubectl-mcp-tool
🐘 Building the Foundation for PostgreSQL Lifecycle Management in a DBaaS on Harvester
💰 We Cut Our Cassandra Bill From $30K to $10K a Month by Self-Hosting on Kubernetes
Read it now: https://kube.today/issues/206
⭐️ This issue is brought to you by Teleport — stop sharing credentials and give every engineer, service, and AI agent a login that expires automatically https://ku.bz/2tJxlTyDy | 184 |
| 16 | LearnKube Day includes ten five-minute lightning talks from Kubernetes practitioners sharing practical lessons with the community.
Graziano Casto, Developer Advocate at Akuity, is one of the featured lightning-talk speakers at LearnKube Day Salt Lake City 2026.
The event brings together, lightning talks, YAML Games, and a community reception with a live DJ(our own Amin Astaneh).
Learn more: https://learnkube.com/learnkube-day-salt-lake-city-2026 | 130 |
| 17 | This is a Hack The Box machine write-up that chains a LangFlow RCE and a forged JWT into a full Kubernetes cluster escape, step by step.
More: https://ku.bz/hw0Zs7JSb | 210 |
| 18 | Hortator lets AI agents spawn sub-agents at runtime, with each agent running in its own pod with budget caps, network policies, PII redaction, and capability inheritance so children can never escalate beyond their parent's permissions.
More: https://ku.bz/KqYBl17Gv | 210 |
| 19 |  CPU and memory usage need context before you change Kubernetes requests and limits.
Throttling, pressure, and runtime events help explain the usage graph. Looking at each replica separately shows differences that a workload average can hide.
We are releasing the Kubernetes Resource Review Mixin, an open-source Grafana dashboard with Prometheus recording rules.
You can use it to:
- See how each Pod's CPU and memory usage compares to its requests and limits.
- Inspect CPU throttling, CPU and memory pressure when PSI metrics are available, and OOM and restart activity.
- Review replicas and workload revisions separately, with p95, maxima, and resource differences in the tables.
The mixin is an extension of our book on rightsizing Kubernetes workloads, The Technical Guide to Kubernetes Rightsizing.
Clone it here: https://github.com/learnk8s/resource-review-mixin | 183 |
| 20 | This write-up details CVE-2025-69902, a command-injection flaw in a kubectl MCP server that runs user input through a shell, letting an attacker execute arbitrary commands on the host.
More: https://ku.bz/2pxZf_bpJ | 211 |
