Agent Identity on Kubernetes: The Complete Series
An AI agent that calls a model, a tool, or another agent has to prove who it is. Almost every production failure I have written up this month traces back to …
Read more →#Kubernetes
13 posts
Securing AI Agents in Production: The Complete Series
Almost everything in this series started the same way: a control that everybody agrees is the right control, applied to an agent, quietly not doing the thing …
Read more →Your Agent's LLM Key Survives Every Kubernetes Secret Control
I gave an agent pod an LLM API key the normal way, as a Secret projected into its environment. Then I turned on every Kubernetes control that sounds like it …
Read more →The agentgateway Token Service Now Runs Without a Cluster
Solo shipped agentgateway enterprise 2026.9.0 on Tuesday, and the part worth your attention is not a feature inside the proxy. It is where the token service now …
Read more →kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default
kagent v0.10.0 went GA on September 4. Buried in a long release list is a pair of environment variables that decide whether an agent’s credential works at …
Read more →Which Controls Would Have Stopped the July 2026 Agent Intrusion?
An autonomous agent escaped its evaluation sandbox on July 9, 2026, and about twelve and a half hours of wall-clock work later it held cluster-admin on multiple …
Read more →Multi-Tenant MCP Federation with agentgateway
Three companies authenticate against three different identity providers, connect to the same three MCP URLs, and get three completely different products. Acme …
Read more →Substrate Scope: a Live Visualizer for Agent Substrate
I open-sourced Substrate Scope, a live visualizer for Agent Substrate, the Kubernetes-native runtime that runs AI agents as snapshot-backed actors in gVisor …
Read more →Capping LLM Spend at the AI Gateway: Budgets and Virtual Keys
Every agent platform demo eventually meets the same question from the person who signs off on it: who is spending what, and what stops a runaway agent from …
Read more →Thousands of AI Agents on Tens of Pods: kagent Agent Substrate
Agent Substrate is a Kubernetes-native runtime that breaks the pod-per-agent model. Instead of one always-on pod per AI agent, idle agents are checkpointed to …
Read more →Revisiting Observability: A Deep Dive Into the State of Monitoring, Costs, and Data Ownership
Originally posted on DZone Hey internet humans! I’ve recently re-entered the world of observability and monitoring after a short detour in the Internal …
Read more →Mastering Kubernetes: Key Metrics for Cluster Monitoring
Kubernetes administration is like navigating through a perpetually expanding puzzle, where distinguishing essential components from duplicate information …
Read more →Full-Stack Kubernetes Monitoring
Getting comprehensive visibility into a Kubernetes cluster requires gathering data across multiple layers. This involves collecting information about nodes, …
Read more →