[{"data":1,"prerenderedAt":34},["ShallowReactive",2],{"blog-tag-en-zero-trust":3},[4,15,24],{"path":5,"title":6,"description":7,"date":8,"tags":9},"\u002Fblog\u002Fen\u002Fk3s-zero-trust-kubectl-management-access","Stop Trusting Your Corporate VPN: 3 Steps to Make K3s Management Access Boundary-Free","Are you still designing K3s cluster management access around a corporate VPN? Learn 3 practical steps to secure kubectl and Rancher dashboard access with identity instead of network perimeter, plus the pitfall most teams hit when they implement zero trust.","2026-09-05",[10,11,12,13,14],"k3s","kubernetes","zero-trust","security","rancher",{"path":16,"title":17,"description":18,"date":19,"tags":20},"\u002Fblog\u002Fen\u002Fai-agent-authentication-kubernetes-keycloak-spiffe","Don't Hand AI Agents the Keys. A Keyless Design for Authenticating MCP Servers on Kubernetes","Handing AI agents static API keys is an operating model that eventually breaks down. This article explains why static secrets hit a wall when running MCP servers on Kubernetes, and how Keycloak combined with SPIFFE\u002FSPIRE enables a 'keyless' authentication design.","2026-08-18",[10,11,21,22,23,12],"ai-agent","mcp","keycloak",{"path":25,"title":26,"description":27,"date":28,"tags":29},"\u002Fblog\u002Fen\u002Fkubernetes-network-policies-security","Zero Trust Security with Kubernetes Network Policies: A Practical Guide","Implement zero trust networking in Kubernetes with Network Policies. From Default Deny to Cilium and Calico advanced policies with real YAML examples.","2026-05-27",[11,30,12,13,31,32,33],"network-policy","cilium","calico","networking",1792488946111]