https://subhash.net/tags/kubernetes-security/Recent content in Kubernetes Security on Subhash DasyamHugoenTue, 23 Dec 2025 21:36:22 +0400https://subhash.net/posts/policy-as-code-for-ai-workloads-in-kubernetes/Tue, 23 Dec 2025 21:26:17 +0400https://subhash.net/posts/policy-as-code-for-ai-workloads-in-kubernetes/<h2 id="1-why-this-matters">1. Why This Matters</h2> <p>Your container is signed. Your image is scanned. Your CVE count is zero.</p> <p>None of that stops a backdoored model from running inference.</p> <p>Container security and model security are different problems. Traditional Kubernetes hardening protects the runtime environment. It does not protect against:</p>https://subhash.net/posts/a-few-of-crazy-ways-to-secure-secrets/Wed, 18 Jun 2025 20:36:00 +0400https://subhash.net/posts/a-few-of-crazy-ways-to-secure-secrets/<p>Injecting sensitive secrets like API keys, credentials, and tokens into running containers presents significant security challenges that go far beyond the basic Kubernetes Secret mechanisms. While standard approaches like environment variables and mounted files work functionally, they often expose secrets too broadly, making them visible to any process in the container or even to operators who exec into pods.</p>