How prepared is the Kubernetes ecosystem for the ever-growing threat of quantum computers?

After a deep-dive research week at ControlPlane, I wrote an article for the K8s blog answering that very question.

Read the answer here:
kubernetes.io/blog/2025/07...

#pqc #kubernetes #k8s #security #tls

Great news for #GitHubActions security! My data shows fully pinned actions rose from 2% to 3%, and partially pinned from 11% to 15%. A small but vital improvement, possibly due to incidents like tj-actions/changed-files. See the data: pin-gh-actions.kammel.dev

#DevSecOps #SupplyChainSecurity #CICD

I saw a lot of talk about #GitHubAction Static Code Analyzers in the wake of some high profile supply chain attacks. Primarily #poutine and #zizmor, but I also came across #octoscan and a research project by #Snyk. Here is my comparison of the four:

blog.kammel.dev/post/github_...

#Cloudflare released OpenPubkey SSH #opkssh less than a month ago and the project already hit 1k ⭐ on GitHub!
Since I wrote about #kanidm the other day, I thought it be fun to see how easy it is to run OPKSSH with your own #IdP, actually pretty easy: blog.kammel.dev/post/opkssh/

This week we will explore how to secure your #Kubernetes cluster using #passkeys and #OIDC for a secure and user-friendly (because we actually like UX) log-in flow. We deploy our own identity provider using #kanidm for a truely self-hosted #homelab experience!

blog.kammel.dev/post/k8s_hom...

Let's get the final infrastructure service in our #Kubernetes #homelab cluster:
persistent storage! In this post we will deploy an #nfs server and configure
#storageclasses for dynamic provisioning of #pvc.
blog.kammel.dev/post/k8s_hom...

After a one week hiatus, we are back on track with the #kubernetes #homelab series.

In this post we will secure our cluster by setting up #certmanager and connecting

it to #cloudflare and #letsencrypt, for automatic TLS certificate generation.

blog.kammel.dev/post/k8s_hom...

I just published the next post in the #kubernetes #homelab series, on my journey
to #kubestronaut. In this post we will get traffic into our cluster, by setting
up an #nginx Ingress controller and #metallb.
blog.kammel.dev/post/k8s_hom...

Let's keep the series going. This week we set up automated dependency updates using #renovate and #fluxcd to keep our #kubernetes #homelab up to date and vulnerability free!
blog.kammel.dev/post/k8s_hom...

The #kubernetes #homelab saga continues. In this weeks post we will answer the age old question: "Which came first the #CNI or #GitOps?" by analysing the dependencies
between #Flux and #Cilium.
blog.kammel.dev/post/k8s_hom...

Come join me on a journey building out a #Kubernetes #homelab. This will be an environment to study for my #Kubestronaut certifications. In this first post we will bootstrap a #kubeadm cluster using Infrastructure as Code (IaC) based on #libvirt and #kvm.
blog.kammel.dev/post/k8s_hom...