Kubernetes 1.37 Preview: What’s New for Cluster Operators
Platform teams preparing for the Kubernetes 1.37 release (codenamed Garhwal) face a shift away from legacy cluster assumptions. With cgroup v1 support fading, IPVS mode in kube-proxy entering deprecation, and static pod config restrictions tightening, 1.37 reinforces cluster security and operational observability—headlined by the long-awaited graduation of metrics.k8s.io to stable.
Sandboxes Are Becoming the New Security Perimeter for AI Agents
As autonomous AI agents move from chat interfaces to executing arbitrary code, browsing external endpoints, and invoking cloud APIs, traditional security boundaries are collapsing. To prevent prompt injections, poisoned code execution, and indirect sandbox escapes, platform engineering teams are shifting security to the runtime level—leveraging lightweight microVMs, gVisor, Kata Containers, and the Kubernetes Agent Sandbox project to turn execution runtimes into the new security perimeter.
Kubernetes Storage Is Cloud-Native’s Hardest Scaling Problem
While Kubernetes abstracts compute and memory with elastic ease, persistent storage introduces physical boundaries around IOPS, latency, network topology, and node locality. As stateful databases and AI inference workloads scale across cloud-native clusters, managing data gravity through Container Storage Interface (CSI) volume expansion, shared vs. local storage trade-offs, and throughput capacity planning has become cloud computing’s toughest operational hurdle.
Kubernetes Just Got A Chatty New Assistant, And It Speaks Fluent YAML
Red Hat has introduced an open-source Model Context Protocol (MCP) server for Kubernetes and OpenShift, allowing AI coding assistants to interact directly with cluster resources using natural language. Unlike wrappers that execute command-line utilities, this Go-based tool connects directly to the Kubernetes API server, delivering high-performance, RBAC-enforced cluster troubleshooting and resource management.
How Cerbos Secures Probabilistic AI Agents With Deterministic Authorization
Emre Baran, CEO and co-founder at Cerbos, explains why authorization is the one security layer most teams still hand-roll in code. Externalizing it into human-readable
Civo’s Konstruct: A GitOps-Powered IDP in Minutes, Not Months
Integrating Kubernetes, GitOps controllers, secrets synchronization, and DNS automation into a functioning Internal Developer Platform (IDP) often demands months of platform engineering friction. Civo’s Konstruct accelerates this architecture by delivering an out-of-the-box, GitOps-powered IDP that unifies Argo CD, Crossplane, External Secrets, and multi-tenant management clusters into a pre-integrated, production-ready framework.
Talos 1.13 Adds VRF Routing and Live CPU Hot-Add for Kubernetes
Talos Linux treats Kubernetes nodes as API-managed appliances, eliminating SSH, shells, and package managers to ensure immutable node predictability. Discover how Talos 1.13 advances host-level management—introducing declarative Virtual Routing and Forwarding via VRFConfig and live udev CPU hot-add support to streamline multi-tenant bare-metal routing and rebootless VM scaling.
Intezer: 100% Alert Coverage. How AI + forensics catch what Human SOCs miss
Mitchem Boles, Field CISO at Intezer, argues the SOC model is broken: human teams only reach 30-55% of alerts, and real attacks hide among the
Anchore Enterprise V6: How Anchore Cuts 1,200 Vulnerabilities Down to a 7-Item Fix List
Alex Rybak, Senior Director of Product at Anchore, joins us to walk through Enterprise V6, the company’s biggest release in years. Built on an SBOM-first
How Aiven Keeps Open-Source Data Infrastructure on Any Cloud
Operating open-source databases and event-streaming clusters in production often forces platform teams into a relentless cycle of patching, failover management, and broker scaling. Discover how Aiven provides a multi-cloud managed data platform across AWS, Azure, and Google Cloud—simplifying infrastructure operations for Apache Kafka, PostgreSQL, and ClickHouse while preserving open-source flexibility.
Secure-by-Design Cloud Security: How Native Moves Security Into the Architecture
Detection-based cloud security tools leaves a critical exposure window where attackers can exploit misconfigurations before remediation occurs. On the Software Plaza podcast, Native co-founder Gal Ordo explains how shift-down security translates architectural policy intent directly into native cloud-provider primitives—enforcing secure-by-design boundaries across AWS, Azure, Google Cloud, and OCI to eliminate risks before deployment.
Sweet Attack: How Sweet Security Proves Real Attack Paths With Runtime Intelligence
Chris Lentricchia, Product Marketing at Sweet Security, returns to the show to break down Sweet Attack, the AI red-team agent that doesn’t model the attacker,
