Source-verified articles on DevOps, cloud infrastructure, AI, and SaaS.
MCP STDIO executes arbitrary OS commands by design. 30+ RCE CVEs, 14+ AI tools affected, and the Kubernetes admission controls that stop it.
Platform engineer's guide to securing AI agents on Kubernetes with cryptographic identity, protocol-aware gateways, admission control, and CNCF KARs.
TeamPCP supply chain attack: how one unrotated token compromised five ecosystems and 500,000 machines. Timeline, IOCs, and CI/CD hardening.
Architecture comparison: Cloudflare Dynamic Workers, Sandboxes, and Mesh vs Kubernetes Agent Sandbox, gVisor, Kata, and NVIDIA OpenShell for AI agents.
Complete guide to migrating from ingress-nginx to Envoy Gateway v1.7.2 in production. Covers Ingress2Gateway 1.0, cert-manager, and zero-downtime cutover.
Istio 1.29: GIE v1 inference routing and ambient mode for GPU memory savings. Agentgateway is a standalone proxy - Istio integration targets 1.30.
Enforce least-privilege on AI agent MCP tool calls using Kyverno admission policies and agentgateway External Authorization on Kubernetes.
What breaks in the Helm 3 to Helm 4 migration: SSA defaults, kstatus RBAC changes, plugin manifest requirements, and a five-phase staging-first rollout.
How platform engineers route, secure, and observe A2A v1.0 traffic on Kubernetes. Covers service mesh, Dapr, Agent Gateway, and OpenTelemetry.
How a poisoned Trivy GitHub Action escalated to Kubernetes cluster takeover - and the K8s-native controls that would have stopped it at each stage.
No articles match your search.