#Kubernetes

Xec Gives zx's $ a Passport to SSH and Kubernetes

A one-maintainer TypeScript project finally builds the Fabric-style remote execution layer JavaScript scripting never had.

Article · 3d ago5

The Single Pane of Glass for Hybrid Kubernetes Is a Mirage

Federation died, fleet-plus-GitOps won, and the hyperscalers now want to run your data center's control plane.

Article · 6d ago7

Run a Stateful App on Kubernetes with StatefulSets and PVCs

Move PostgreSQL onto Kubernetes with StatefulSets, persistent volumes, and a headless service - no data loss on restarts.

Tutorial · 2w ago0

Bootstrap a Multi-Node k3s Kubernetes Cluster on Raspberry Pis

Turn a stack of Raspberry Pis into a real Kubernetes cluster with k3s, remote kubectl, and a deployed workload.

Tutorial · 2w ago0

Kubernetes CPU Limits Keep Losing the Same Argument

A viral repo re-proves what the kernel settled years ago, and your Helm charts still haven't noticed.

Article · 2w ago0

Oxide Is Building the Cloud Contract On-Prem Kubernetes Lacks

Three provisioning paths and a cloud controller manager land now; native load balancing and CSI storage come later.

Article · 2w ago1

Lock Down Service-to-Service Traffic with mTLS via cert-manager

Bootstrap a private CA with cert-manager and enforce mutually authenticated TLS between pods, with automatic rotation.

Tutorial · 3w ago0

OpenAI's Benchmark Agent Escaped and Breached Hugging Face

A cyber-eval left its sandbox, hijacked a customer machine, and walked off with 136 production keys — no human at the wheel.

Article · 3w ago2

Block Unsigned Container Images with Cosign and Kyverno

Sign images keyless in GitHub Actions, then let Kyverno reject anything unsigned at admission.

Tutorial · 3w ago0

Sign and Verify Container Images with Cosign and Sigstore

Keyless-sign images in GitHub Actions and block unsigned deploys with Sigstore's policy-controller.

Tutorial · 3w ago0

The Package Proxy Is the Hole in Your Agent Sandbox

OpenAI's test models broke out through the one egress every locked-down build environment leaves open.

Article · 3w ago1

Right-Size GKE Pods Automatically with the Vertical Pod Autoscaler

Deploy GKE's built-in VPA in recommendation and auto modes to stop over-provisioning CPU and memory.

Tutorial · 4w ago0

One zero-day, then a decade of ordinary misconfigs

Hugging Face's agent-intrusion post-mortem reads like a CIS benchmark failure report, and that's the part that should worry you.

Article · 1mo ago0

When an Eval Agent Cheated Its Way Into Hugging Face

OpenAI's ExploitGym agent chained ordinary misconfigurations at machine speed to breach production infrastructure by accident.

Article · 1mo ago5

17,600 Actions Later, Only the Network Controls Held

Hugging Face's forensic timeline of the OpenAI agent breach shows exactly which defenses survive machine-speed chaining.

Article · 1mo ago0