Security culture around CRA and SBOMs is built in day-to-day engineering, not in policy documents alone.

Przemysław Wojtunik explains how Spectro Cloud helps his team move faster on security and SBOM work, while stressing that every organization still needs a practical path to make compliance part of daily life.

Watch the full interview: https://ku.bz/TJRYGMWV2

This tutorial shows how two in-cluster services can authenticate each other with Service Account tokens and the TokenReview API, then makes it safer with audience-bound projected tokens.

More: https://ku.bz/rz69JFBdZ

AegisBPF is an eBPF agent that actually blocks unwanted file and network access at the Linux kernel level, instead of only alerting you after something already happened.

More: https://ku.bz/wd7SCHC3l

This case study shows how to implement a HIPAA-compliant CI/CD pipeline using Cosign for artifact signing, OPA Gatekeeper for admission control on EKS, and long-term evidence storage in S3.

More: https://ku.bz/TYS0yf264

NineVigil is a Kubernetes operator that runs AI agents inside gVisor sandboxes, closes their network egress with Cilium and keeps a tamper-evident audit record of every run.

More: https://ku.bz/CKghZJGt1

Kubernetes is ready for databases. Most teams are not.

In KubeSelect episode two, Salman Iqbal and Bart Farrell test this claim with Kat Cosgrove of VillageSQL.

Kat covers:

- Modern Kubernetes storage
- Operators and database expertise
- Team readiness
- Managed database tradeoffs

Kat's verdict: this is now a people problem.

Watch the episode: https://ku.bz/7yDWlP8T5

Kubernetes moves too fast to track everything. Learn Kubernetes Weekly filters out the noise to deliver one curated email with useful articles, tutorials, tools, jobs, events, and CFPs. Subscribe to Learn Kubernetes Weekly.

This tutorial walks through wiring cert-manager and Let's Encrypt into the Istio ingress gateway on GKE, so your HTTPS certificates just renew themselves.

More: https://ku.bz/j_H7dxLV6

AI does not just make the requested change. It often expands the scope.

Pronomita Dey describes how AI-generated code can turn a simple automation into a much larger diff filled with comments, exceptions, and extra logic. That makes review harder, increases trust too early, and raises the need for guardrails, policy as code, and stronger pre-merge checks.



Watch the full interview: https://ku.bz/lm5jTjdVN

200 issues. More than 77,000 Kubernetes engineers. Thank you to all of you reading it 🎉

In Learn Kubernetes Weekly 200:

🤖 Benchmarking LLM Inference with Production Agent Traces
🔌 Two New Headlamp Plugins
🌐 Migrating from ingress-NGINX to Envoy Gateway
🐘 Building High-Availability PostgreSQL on Kubernetes

Read it: https://kube.today/issues/200

This article examines why Copy Fail (CVE-2026-31431) breaks container assumptions and provides a small, safe Python check to determine whether your nodes can reach the vulnerable kernel path.

More: https://ku.bz/CTv-Yf60c

This article shows how a default AWS EKS setting lets any pod reach the node's metadata service and steal its IAM credentials, then walks through the simple fix.

More: https://ku.bz/DXYZGjvf2

This article explains a new alpha feature in Kubernetes 1.36 that loads admission policies from files on disk at startup, so they are live before anything else and nobody can delete them.

More: https://ku.bz/B9JxC5dVt