# Kubernetes

> Posts on Web of Mike tagged "Kubernetes".

- Canonical URL: https://webofmike.com/tags/kubernetes/
- Author: Mike Moore (https://webofmike.com/about/)
- Curated index for LLMs: https://webofmike.com/llms.txt
- Full content of every post: https://webofmike.com/llms-full.txt
- Every page is also served as raw markdown at <canonical-url>index.md

## Pages

- [Securing AI Agents in Production: The Complete Series](https://webofmike.com/agent-security/): Egress allowlists, tool allowlists, AGENTS.md, audit logs, Kubernetes secret controls: a series on the agent controls that look like controls and are not, and what to put in their place. (2026-09-16) - markdown: https://webofmike.com/agent-security/index.md
- [Agent Identity on Kubernetes: The Complete Series](https://webofmike.com/agent-identity/): How an AI agent proves who it is: workload identity federation, SPIFFE SVIDs, OAuth token exchange, RFC 8707 audience binding, and what the MCP spec does and does not cover yet. (2026-09-16) - markdown: https://webofmike.com/agent-identity/index.md
- [Your Agent's LLM Key Survives Every Kubernetes Secret Control](https://webofmike.com/agent-llm-key-kubernetes-controls/): RBAC, restricted Pod Security, and automountServiceAccountToken all on, and one file read still hands over an agent's LLM API key. Tested on a live cluster. (2026-09-13) - markdown: https://webofmike.com/agent-llm-key-kubernetes-controls/index.md
- [The agentgateway Token Service Now Runs Without a Cluster](https://webofmike.com/agent-token-service-standalone/): agentgateway enterprise 2026.9.0 ships its token service as a standalone binary on a public bucket, so a gateway-mediated agent identity setup fits on a laptop. (2026-09-10) - markdown: https://webofmike.com/agent-token-service-standalone/index.md
- [kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default](https://webofmike.com/kagent-audience-bound-agent-tokens/): kagent v0.10.0 GA can bind an agent's exchanged token to one backend using RFC 8707 resource indicators. Two environment variables, both empty by default. (2026-09-08) - markdown: https://webofmike.com/kagent-audience-bound-agent-tokens/index.md
- [Which Controls Would Have Stopped the July 2026 Agent Intrusion?](https://webofmike.com/rogue-agent-kubernetes-controls/): An autonomous agent went from sandbox escape to Kubernetes cluster-admin in under 13 hours. A stage-by-stage map of which controls would have broken the chain. (2026-09-03) - markdown: https://webofmike.com/rogue-agent-kubernetes-controls/index.md
- [Substrate Scope: a Live Visualizer for Agent Substrate](https://webofmike.com/substrate-scope/): Substrate Scope is an open source live visualizer for Agent Substrate: worker bays, restore queues, snapshot storage, telemetry, and per-agent activity. (2026-08-28) - markdown: https://webofmike.com/substrate-scope/index.md
- [Multi-Tenant MCP Federation with agentgateway](https://webofmike.com/multi-tenant-mcp-federation/): Six MCP servers federated into three business domains on agentgateway, with per-customer tool entitlements, quotas, and chargeback. No auth code in the servers. (2026-08-28) - markdown: https://webofmike.com/multi-tenant-mcp-federation/index.md
- [Thousands of AI Agents on Tens of Pods: kagent Agent Substrate](https://webofmike.com/kagent-agent-substrate/): kagent Agent Substrate is built to run thousands of AI agents on tens of pods. I stood it up on kind: snapshot restores, autoscaling, and every gotcha I hit. (2026-08-27) - markdown: https://webofmike.com/kagent-agent-substrate/index.md
- [Capping LLM Spend at the AI Gateway: Budgets and Virtual Keys](https://webofmike.com/llm-cost-controls-ai-gateway/): Token counts are not costs. I wired a price catalog, virtual keys, and budgets into agentgateway so LLM spend gets attributed, priced, and capped with a 429. (2026-08-27) - markdown: https://webofmike.com/llm-cost-controls-ai-gateway/index.md
- [Revisiting Observability: A Deep Dive Into the State of Monitoring, Costs, and Data Ownership](https://webofmike.com/revisiting-observability/): A deep dive into the current state of observability, covering instrumentation challenges, cost surprises, and data ownership. (2024-05-02) - markdown: https://webofmike.com/revisiting-observability/index.md
- [Mastering Kubernetes: Key Metrics for Cluster Monitoring](https://webofmike.com/mastering-kubernetes-key-metrics/): A deep dive into the essential metrics for effective Kubernetes cluster monitoring. (2024-04-14) - markdown: https://webofmike.com/mastering-kubernetes-key-metrics/index.md
- [Full-Stack Kubernetes Monitoring](https://webofmike.com/kubernetes-monitoring/): A practical guide to achieving full-stack visibility in Kubernetes clusters using Datadog. (2019-01-04) - markdown: https://webofmike.com/kubernetes-monitoring/index.md