TGViewer
Kubesploit Kubesploit @kubesploit · 2.13K subscribers
Post #1860 303
Kloak swaps placeholders for real secrets inside the kernel with eBPF, just before TLS encryption, so applications never hold credentials and need no sidecars or code changes.
Secrets can be pinned to specific hosts and ports.

More: https://ku.bz/2tGP1vSc3
Open in Telegram All posts from @kubesploit
More from @kubesploit
  1. Sep 23, 2026This article asks what a container can block on its own when a dependency turns malicious,…
  2. Sep 23, 2026This week on Learn Kubernetes Weekly 202: 🔥 We Replaced etcd with Google Cloud Spanner 😌…
  3. Sep 22, 2026This article explains what an attacker can really do with leaked Kubernetes credentials, f…
  4. Sep 22, 2026"When an agent goes loose, you might find yourself: your S3 bucket has been deleted by mis…
  5. Sep 21, 2026This article walks through making a container image safe before it ever reaches the cloud,…
  6. Sep 21, 2026We just published Kubernetes Architecture in Financial Services, a free technical book abo…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →