» Tag
kubernetes
51 postsAWS EKS Privilege Escalation: Pod Metadata to Cluster-Admin
How a compromised EKS pod can escalate to cluster-admin via EC2 metadata and node tokens, plus a persistent aws-auth backdoor technique.
How AI Pinpointed the Root Cause of a Multi-Region K8s Outage
How Trendyol used an LLM to trace a multi-region Kubernetes outage to a systemd upgrade bug in under an hour, sifting 200MB of logs.
Fixing AKS MemoryPressure Eviction and Azure Disk CSI Deadlock
How AKS MemoryPressure evictions cause Azure Disk CSI VolumeAttachment deadlocks, plus root-cause fixes: QoS, KubeletConfig, PDBs, and CI/CD guardrails.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comMicrosoft's Three-Layer LLM Routing Architecture for AI Agents
Microsoft has unveiled a three-layer LLM routing architecture for Azure Kubernetes Service, designed to efficiently manage agent traffic.
Srenix: Self-Healing Kubernetes Tool in a 30MB Binary
Srenix is a tool that automatically detects and resolves issues in Kubernetes clusters.
Securing Kubernetes Dashboard with Cloudflare Zero Trust Tunnel
Secure your Kubernetes Dashboard with Cloudflare Zero Trust Tunnel. Important steps and checklist for engineers.
EKS node autoscaling with Karpenter: just-in-time capacity, no node groups
Karpenter provisions EC2 capacity for EKS based on actual pending pods instead of static node groups. A look at NodePool, EC2NodeClass, consolidation and Spot use.
Zero-Trust Workload Identity in Kubernetes: SPIFFE, SPIRE, Cilium
Why IP-based network policies fail in Kubernetes, and how SPIFFE, SPIRE, and Cilium enable cryptographic workload identity and enforced mutual TLS.
Deployment Status Is Actually a Distributed Systems Problem
Drawing on Guara Cloud's build experience, this piece explains why 'pending' labels fail and how deployment status must be modeled as evidence-based distributed state.
OpenShell Kubernetes Operator for Managing Sandboxes
The OpenShell Kubernetes Operator enables sandbox management via kubectl. A significant tool for developers.