# kubernetes security

Published articles for kubernetes security.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Kubernetes for Agentic AI: Best Practices for Security and Observability

DevFeed: [Kubernetes for Agentic AI: Best Practices for Security and Observability](<https://devfeed.tech/articles/kubernetes-for-agentic-ai-best-practices-for-security-and-observability-29742.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/kubernetes-for-agentic-ai/>)

Author: info@goteleport.com (Boris Kurktchiev, Jack Pitts)

Published: 2026-04-01T00:00:00Z

Content type: article

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Security](<https://devfeed.tech/topics/security.md>), [observability](<https://devfeed.tech/topics/observability.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Availability](<https://devfeed.tech/topics/availability.md>), [AI Platform](<https://devfeed.tech/topics/ai-platform.md>)

Tags: [availability](<https://devfeed.tech/tags/availability.md>), [container](<https://devfeed.tech/tags/container.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [monitoring](<https://devfeed.tech/tags/monitoring.md>), [network-segmentation](<https://devfeed.tech/tags/network-segmentation.md>), [observability](<https://devfeed.tech/tags/observability.md>), [permissions](<https://devfeed.tech/tags/permissions.md>), [recommendations](<https://devfeed.tech/tags/recommendations.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This article presents 18 Kubernetes best practices for securing and monitoring containerized agentic AI workloads. It emphasizes foundational controls such as least privilege, access control, network policies, image assurance, network segmentation, and continuous monitoring, while noting that many practices also apply to other containerized and serverless environments.

### Source excerpt

Discover 18 Kubernetes security, observability, and availability best practices for container-based agentic workloads.

## From Linux Primitives to Kubernetes Security Contexts

DevFeed: [From Linux Primitives to Kubernetes Security Contexts](<https://devfeed.tech/articles/from-linux-primitives-to-kubernetes-security-contexts-19144.md>)

Original publisher: [Read original article](<https://learnkube.com/security-contexts>)

Author: Dave Altena

Published: 2025-08-11T00:00:00Z

Content type: tutorial

Language: en

Sources: [Learnk8s](<https://devfeed.tech/sources/learnk8s.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Security](<https://devfeed.tech/topics/security.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>)

Tags: [cgroups](<https://devfeed.tech/tags/cgroups.md>), [config](<https://devfeed.tech/tags/config.md>), [containers](<https://devfeed.tech/tags/containers.md>), [filesystems](<https://devfeed.tech/tags/filesystems.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [learn](<https://devfeed.tech/tags/learn.md>), [linux](<https://devfeed.tech/tags/linux.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This tutorial explains how Kubernetes Security Contexts control container privileges and how those settings map to underlying Linux primitives. It covers running containers as non-root users, managing capabilities, using read-only filesystems, and blocking privilege escalation.

### Source excerpt

Dive deep into Kubernetes Security Contexts and learn how to manage security settings for your pods and containers.

## Cybersecurity hygiene in co-working spaces: A practical guide

DevFeed: [Cybersecurity hygiene in co-working spaces: A practical guide](<https://devfeed.tech/articles/cybersecurity-hygiene-in-co-working-spaces-a-practical-guide-13018.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/cybersecurity-hygiene-in-co-working-spaces-a-practical-guide>)

Published: 2024-01-02T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Endpoint security](<https://devfeed.tech/topics/endpoint-security.md>), [network security](<https://devfeed.tech/topics/network-security.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [Incident response](<https://devfeed.tech/topics/incident-response.md>), [Git](<https://devfeed.tech/topics/git.md>), [MFA](<https://devfeed.tech/topics/mfa.md>), [USB](<https://devfeed.tech/topics/usb.md>)

Tags: [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [endpoint-security](<https://devfeed.tech/tags/endpoint-security.md>), [git](<https://devfeed.tech/tags/git.md>), [github-vulnerability](<https://devfeed.tech/tags/github-vulnerability.md>), [guide](<https://devfeed.tech/tags/guide.md>), [incident](<https://devfeed.tech/tags/incident.md>), [incident-response](<https://devfeed.tech/tags/incident-response.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [network-security](<https://devfeed.tech/tags/network-security.md>), [security-best-practices](<https://devfeed.tech/tags/security-best-practices.md>), [usb](<https://devfeed.tech/tags/usb.md>)

### AI overview

A practical guide to cybersecurity hygiene in co-working spaces. It covers Kubernetes security, Git repository protection, device safety, layered defenses, incident response, and security awareness training.

### Source excerpt

Navigate the cybersecurity landscape in shared work environments with essential tips on device safety and incident response.

## The principle of minimalism

DevFeed: [The principle of minimalism](<https://devfeed.tech/articles/the-principle-of-minimalism-13267.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/the-principle-of-minimalism>)

Published: 2023-06-22T00:00:00Z

Content type: opinion

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Docker](<https://devfeed.tech/topics/docker.md>), [systems](<https://devfeed.tech/topics/systems.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [docker](<https://devfeed.tech/tags/docker.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [iam](<https://devfeed.tech/tags/iam.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [secure-by-default](<https://devfeed.tech/tags/secure-by-default.md>), [security](<https://devfeed.tech/tags/security.md>), [software-security-audit](<https://devfeed.tech/tags/software-security-audit.md>), [software-security-practices](<https://devfeed.tech/tags/software-security-practices.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [zero-trust-networking](<https://devfeed.tech/tags/zero-trust-networking.md>), [zero-trust-security](<https://devfeed.tech/tags/zero-trust-security.md>)

### AI overview

This engineering commentary argues that systems should use secure-by-default minimalism: defaults should expose only what users actually need, while deviations should be intentional and audited. It uses Docker and Kubernetes examples, including root containers, mutable deployment references, and secret handling, and introduces access-control applications such as non-root execution and minimal seccomp profiles.

### Source excerpt

Learn about the principle of minimalism in engineering, where your default should be the lowest-common denominator of what you actually need.

## Chainguard open sources new policy catalog for Sigstore policy-controller

DevFeed: [Chainguard open sources new policy catalog for Sigstore policy-controller](<https://devfeed.tech/articles/chainguard-open-sources-new-policy-catalog-for-sigstore-policy-controller-12974.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-open-sources-new-policy-catalog-for-sigstore-policy-controller>)

Published: 2023-04-18T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [sigstore policy controller](<https://devfeed.tech/topics/sigstore-policy-controller.md>), [sigstore](<https://devfeed.tech/topics/sigstore.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [rego](<https://devfeed.tech/topics/rego.md>), [YAML](<https://devfeed.tech/topics/yaml.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [rego](<https://devfeed.tech/tags/rego.md>), [secure-software](<https://devfeed.tech/tags/secure-software.md>), [security](<https://devfeed.tech/tags/security.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [sigstore-policy-controller](<https://devfeed.tech/tags/sigstore-policy-controller.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [trust](<https://devfeed.tech/tags/trust.md>), [verification](<https://devfeed.tech/tags/verification.md>), [yaml](<https://devfeed.tech/tags/yaml.md>)

### AI overview

Chainguard open sources a policy catalog for Sigstore policy-controller. The catalog provides policies that organizations and open source projects can adopt incrementally to improve software supply-chain security, with community contributions supported.

### Source excerpt

To help unlock benefits of the Sigstore policy-controller, Chainguard open sources a policy catalog that can be adopted to improve your supply chain security.

## Secure Access to Kubernetes API.

DevFeed: [Secure Access to Kubernetes API.](<https://devfeed.tech/articles/secure-access-to-kubernetes-api-29739.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/kubernetes-api-access-security/>)

Author: sakshyam.shah@goteleport.com (Sakshyam Shah)

Published: 2022-06-30T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [api server](<https://devfeed.tech/topics/api-server.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [Security](<https://devfeed.tech/topics/security.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Cloud Native Ecosystem](<https://devfeed.tech/topics/cloud-native-ecosystem.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [api-server](<https://devfeed.tech/tags/api-server.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [cloud-native](<https://devfeed.tech/tags/cloud-native.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This tutorial explains why securing the Kubernetes API is central to cluster security and presents best practices for hardening API access control. It covers authentication, authorization, and admission control, with relevance to both self-managed clusters and managed services such as AWS EKS and GCP Kubernetes Engine.

### Source excerpt

Securing the Kubernetes API server is one of the most critical controls for resilient production clusters, as it enables complete runtime configuration and control.

## Updated Pluralsight Course - Configuring and Managing Kubernetes Security

DevFeed: [Updated Pluralsight Course - Configuring and Managing Kubernetes Security](<https://devfeed.tech/articles/updated-pluralsight-course-configuring-and-managing-kubernetes-security-17542.md>)

Original publisher: [Read original article](<https://www.nocentino.com/posts/2022-05-09-updated-pluralsight-course-configuring-managing-kubernetes-security/>)

Author: Anthony Nocentino

Published: 2022-05-09T00:00:00Z

Content type: release

Language: en

Sources: [Kubernetes on Anthony Nocentino's Blog](<https://devfeed.tech/sources/kubernetes-on-anthony-nocentino-s-blog.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Security](<https://devfeed.tech/topics/security.md>), [Pluralsight](<https://devfeed.tech/topics/pluralsight.md>), [Learning](<https://devfeed.tech/topics/learning.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [containers](<https://devfeed.tech/tags/containers.md>), [course](<https://devfeed.tech/tags/course.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [learning](<https://devfeed.tech/tags/learning.md>), [pluralsight](<https://devfeed.tech/tags/pluralsight.md>), [security](<https://devfeed.tech/tags/security.md>), [tls](<https://devfeed.tech/tags/tls.md>), [training](<https://devfeed.tech/tags/training.md>)

### AI overview

An updated Pluralsight course, "Configuring and Managing Kubernetes Security," is available. It teaches security fundamentals for Kubernetes clusters, including authentication, authorization, admission control, certificates, kubeconfig files, and role-based access control.

### Source excerpt

My updated course "Configuring and Managing Kubernetes Security" is now available on Pluralsight here! If you want to learn about the course, check out the trailer here, or if you're going to dive right in, check it out here! This course will teach you the fundamentals needed to configure and manage security in Kubernetes clusters. This course targets IT professionals who design and maintain Kubernetes and container-based solutions. The course can be used by the IT pro learning new skills and the system administrator or developer preparing to use Kubernetes both on-premises and in the Cloud.

## How to Hack Kubernetes (and How to Protect It)

DevFeed: [How to Hack Kubernetes (and How to Protect It)](<https://devfeed.tech/articles/how-to-hack-kubernetes-and-how-to-protect-it-29685.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/how-to-hack-kubernetes/>)

Author: info@goteleport.com (Kolawole Samuel Adebayot)

Published: 2022-03-08T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Kubernetes clusters](<https://devfeed.tech/topics/kubernetes-clusters.md>), [Containers](<https://devfeed.tech/topics/containers.md>)

Tags: [clusters](<https://devfeed.tech/tags/clusters.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [security](<https://devfeed.tech/tags/security.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

A practical guide to Kubernetes security that describes seven likely attack paths and corresponding defensive measures. It emphasizes protection across the container lifecycle, including secure software sources, least privilege, and manageable cluster design.

### Source excerpt

Practical tips for how to hack Kubernetes and how to protect your clusters.

## New Pluralsight Course - Configuring and Managing Kubernetes Security

DevFeed: [New Pluralsight Course - Configuring and Managing Kubernetes Security](<https://devfeed.tech/articles/new-pluralsight-course-configuring-and-managing-kubernetes-security-17525.md>)

Original publisher: [Read original article](<https://www.nocentino.com/posts/2020-08-24-new-pluralsight-course-configuring-and-managing-kubernetes-security/>)

Author: Anthony Nocentino

Published: 2020-08-24T18:48:13Z

Content type: release

Language: en

Sources: [Kubernetes on Anthony Nocentino's Blog](<https://devfeed.tech/sources/kubernetes-on-anthony-nocentino-s-blog.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Security](<https://devfeed.tech/topics/security.md>), [Pluralsight](<https://devfeed.tech/topics/pluralsight.md>), [Learning](<https://devfeed.tech/topics/learning.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>)

Tags: [administration](<https://devfeed.tech/tags/administration.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [containers](<https://devfeed.tech/tags/containers.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [linux](<https://devfeed.tech/tags/linux.md>), [pluralsight](<https://devfeed.tech/tags/pluralsight.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

The article announces a Pluralsight course on configuring and managing security in Kubernetes clusters. It describes training on authentication, authorization, certificates, kubeconfig files, and role-based access control for IT professionals, administrators, and developers.

### Source excerpt

My new course "Configuring and Managing Kubernetes Security" is now available on Pluralsight here! Check out the trailer here or if you want to dive right in head over to Pluralsight! This course will teach you to configure and manage security in Kubernetes clusters. This course targets IT professionals that design and maintain Kubernetes and container-based solutions. The course can be used by both the IT pro learning new skills and the system administrator or developer preparing for using Kubernetes both on-premises and in the Cloud.

## Kubernetes - Pod Security Policies

DevFeed: [Kubernetes - Pod Security Policies](<https://devfeed.tech/articles/kubernetes-pod-security-policies-15740.md>)

Original publisher: [Read original article](<https://developer.squareup.com/blog/kubernetes-pod-security-policies>)

Author: Jason Price

Published: 2020-05-07T19:00:00Z

Content type: tutorial

Language: en

Sources: [Square Corner Blog RSS Feed](<https://devfeed.tech/sources/square-corner-blog-rss-feed.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Security](<https://devfeed.tech/topics/security.md>), [Exception](<https://devfeed.tech/topics/exception.md>)

Tags: [engineering](<https://devfeed.tech/tags/engineering.md>), [exception](<https://devfeed.tech/tags/exception.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [security](<https://devfeed.tech/tags/security.md>), [security-policies](<https://devfeed.tech/tags/security-policies.md>), [troubleshooting](<https://devfeed.tech/tags/troubleshooting.md>)

### AI overview

A practical guide to deploying Kubernetes Pod Security Policies with restrictive defaults and managed exceptions. It explains how PSPs can reduce container escape risks, discusses their limitations, and covers implementation pitfalls and troubleshooting.

### Source excerpt

A fully fleshed out example with exception management