Kubesploit
2.13K subscribers
979 photos
220 videos
1.96K links
News and links on Kubernetes security curated by the @Learnk8s team
Website: https://kubesploit.io/
Download Telegram
Forwarded from KubeFM
Media is too big
VIEW IN TELEGRAM
LearnKube Day brings Kubernetes practitioners together for five-minute lightning talks and practical lessons from the community.

Nabarun Pal, Principal Software Engineer at Broadcom, is one of the featured lightning-talk speakers at LearnKube Day Salt Lake City 2026.

Join the community for YAML Games and a reception with live DJ Amin Astaneh.

Learn more: https://learnkube.com/learnkube-day-salt-lake-city-2026
Forwarded from KubeFM
This media is not supported in your browser
VIEW IN TELEGRAM
LearnKube Day brings Kubernetes practitioners together for five-minute lightning talks and practical lessons from the community.

Andy Suderman, CTO at Fairwinds, is one of the featured lightning-talk speakers at LearnKube Day Salt Lake City 2026.

Join the community for YAML Games and a reception with live DJ Amin Astaneh.

Learn more: https://learnkube.com/learnkube-day-salt-lake-city-2026
Forwarded from KubeFM
Media is too big
VIEW IN TELEGRAM
Hannah Foxwell, Co-founder at BIMP, is one of the featured lightning-talk speakers at LearnKube Day Salt Lake City 2026.

Join the community for YAML Games and a reception with live DJ Amin Astaneh.

Learn more: https://learnkube.com/learnkube-day-salt-lake-city-2026
Forwarded from LearnKube news
This tutorial shows how to connect two Amazon EKS clusters with an Istio multi-primary, multi-network mesh and view both through centralized Kiali.

More: https://ku.bz/CSr7L2PvB
Forwarded from Kube Builders
This case study shows how a silent 47-minute outage pushed one team to block merges in CI with an OPA policy that rejects any service without proper observability settings.

More: https://ku.bz/W7yRMN1qP
kubectl-view-secret is a kubectl plugin that lists secret keys and safely decodes one or every value, with JSON, YAML, namespace, context, and interactive output options.

More: https://ku.bz/k7xYXMMfH
Forwarded from LearnKube news
Learn Kubernetes Weekly 209 is here.

Five reads on reliable Kubernetes operations:

πŸ›‘ SIGTERM Doesn’t Mean β€œStop”
πŸ’‘ K8s Turn Off The Light
πŸ”Ž Your CI Pipeline Should Reject Any Service Without an Observability Contract
🌐 GKE IP exhaustion fixed: the Class E migration guide
πŸ”— Istio- MultiCluster MultiPrimary MultiNetwork Service Mesh on AWS EKS

Read the issue: https://kube.today/issues/209

This newsletter is brought to you by LearnKube β€” build GPU platforms on Kubernetes. Learn GPU sharing, isolation, and efficiency through private, hands-on training for your team.
This article compares IRSA and EKS Pod Identity, explains how each gives pods temporary AWS credentials, and shows Terraform examples plus a migration path.

More: https://ku.bz/vZt0MNMby
Forwarded from LearnKube news
New instructor-led course: Building GPU Platforms on Kubernetes.

NVIDIA announced NVIDIA Kubernetes Engine (NVKE) at KubeCon this week. Our new course connects NVKE to the GPU allocation, sharing, isolation, and efficiency decisions that platform teams face.

You will learn how to:

- Trace GPU access through NVIDIA drivers, container runtimes, and Kubernetes device allocation.
- Compare time-slicing, MPS, and MIG, including their memory, compute, and fault-isolation guarantees.
- Connect DCGM metrics to application throughput and identify wasted GPU capacity.
- Explore NVKE workload clusters and node pools through its local evaluation environment.

The four-day outline covers Kubernetes foundations, architecture, networking, and scheduling over the first three days. Day four focuses on NVIDIA GPUs and NVKE.

Explore the curriculum and discuss training for your team:
https://learnkube.com/gpu-kubernetes-training
Isola runs untrusted or AI-generated code in self-hosted Kubernetes sandboxes with gVisor isolation, controlled networking, file access, command APIs, and reusable filesystem snapshots.

More: https://ku.bz/Ctk7Vc3w0
KubeAPT checks whether Kubernetes admission controls really block unsafe workloads, covering ValidatingAdmissionPolicies, Pod Security Admission, and reusable policy bundles.

More: https://ku.bz/D5ZRm9fnD