One Kubernetes YAML can abuse Config Connector when org-level IAM is too broad, letting a low-privilege K8s user escalate to Google Cloud org control through the ConfigConfusion confused deputy flaw. #ConfigConnector #KCC #ConfigConfusion
How One Kubernetes YAML Can Hand Over A GCP Organization
Config Connector (KCC) removes the need for developers to handle Google Cloud credentials by letting Kubernetes controllers manage resources on their behalf through GitOps. But if KCC has broad organization-level IAM permissions, a user with limited Kubernetes access can exploit the confused deputy flaw in ConfigConfusion to gain Google Cloud control. #ConfigConnector #KCC #ConfigConfusion #WorkloadIdentity #GoogleKubernetesEngine
www.hendryadrian.com
October 2, 2026 at 4:30 AM
One Kubernetes YAML can abuse Config Connector when org-level IAM is too broad, letting a low-privilege K8s user escalate to Google Cloud org control through the ConfigConfusion confused deputy flaw. #ConfigConnector #KCC #ConfigConfusion
Check out the guide on safely migrating to Microservices with Google Kubernetes Engine. Learn how to effectively Strangle the Monolith and modernize your infrastructure. #GoogleKubernetesEngine #Microservices https://blog.stackademic.com/migrating-from-monolith-to-microservices-with-gke-hands-on-pr…
https://blog.stackademic.com/migrating-from-monolith-to-microservices-with-gke-hands-on-practice-83f32d5aba24?source=rss----d1baaa8417a4---4
Strangling the Monolith: How to Safely Migrate to Microservices with Google Kubernetes Engine.
blog.stackademic.com
May 3, 2025 at 3:06 AM
Check out the guide on safely migrating to Microservices with Google Kubernetes Engine. Learn how to effectively Strangle the Monolith and modernize your infrastructure. #GoogleKubernetesEngine #Microservices https://blog.stackademic.com/migrating-from-monolith-to-microservices-with-gke-hands-on-pr…
FortiGuard Labs found persistent P2Pinfect infections in Google Kubernetes Engine clusters, tied to exposed Redis and dormant botnet activity, with one compromise lasting six months. #P2Pinfect #GoogleKubernetesEngine #Redis
Misconfigured, Enrolled and Dormant: Anatomy of a P2Pinfect Kubernetes Compromise
FortiGuard Labs found persistent P2Pinfect infections inside Google Kubernetes Engine clusters, traced back to exposed Redis instances and long-dormant botnet activity that can later deliver miners or ransomware. The campaign expanded to use Metro4Shell and possibly RediShell for initial access, with overlap to React2Shell mining activity and identified P2Pinfect deployment artifacts and peer infrastructure. #P2Pinfect #GoogleKubernetesEngine #Metro4Shell #RediShell #React2Shell
www.hendryadrian.com
May 27, 2026 at 4:00 AM
FortiGuard Labs found persistent P2Pinfect infections in Google Kubernetes Engine clusters, tied to exposed Redis and dormant botnet activity, with one compromise lasting six months. #P2Pinfect #GoogleKubernetesEngine #Redis
#うひーメモ
2023-11-27 18:00:48
Google Cloud、マルチクラスタ管理機能を備えた「GKE Enterprise」の一般提供を開始
#IT
#google
#cloud
#gkeenterprise
2023-11-27 18:00:48
Google Cloud、マルチクラスタ管理機能を備えた「GKE Enterprise」の一般提供を開始
#IT
#cloud
#gkeenterprise
Google Cloud、マルチクラスタ管理機能を備えた「GKE Enterprise」の一般提供を開始
GoogleCloudはマネージドKubernetesサービスのGoogleKubernetesEngineの新エディションにあたるGKEEnterpriseの一般提供を開始すると発表した
atmarkit.itmedia.co.jp
November 27, 2023 at 9:00 AM
#うひーメモ
2023-11-27 18:00:48
Google Cloud、マルチクラスタ管理機能を備えた「GKE Enterprise」の一般提供を開始
#IT
#google
#cloud
#gkeenterprise
2023-11-27 18:00:48
Google Cloud、マルチクラスタ管理機能を備えた「GKE Enterprise」の一般提供を開始
#IT
#cloud
#gkeenterprise
I work on #Kubernetes these days. Recently, I wrote a series on how one could design a full-fledged testing pipeline targeting #GoogleKubernetesEngine. The 2nd part mentions creating a #GKE instance in a GitHub workflow. In this post, I want to assess #Crossplane by creating such an instance.
Getting my feet wet with Crossplane
In the early days of IT, we manually configured servers–each one a precious snowflake, lovingly maintained and documented. But the size of the infrastructure grew and this approach couldn’t scale. Che...
blog.frankel.ch
May 4, 2025 at 4:47 PM
I work on #Kubernetes these days. Recently, I wrote a series on how one could design a full-fledged testing pipeline targeting #GoogleKubernetesEngine. The 2nd part mentions creating a #GKE instance in a GitHub workflow. In this post, I want to assess #Crossplane by creating such an instance.
- Updated to use GKE Inference Quickstart GA. So you can deploy LLMs from Gemini CLI.
github.com/GoogleCloudP...
#GoogleCloud #GKE #GoogleKubernetesEngine
github.com/GoogleCloudP...
#GoogleCloud #GKE #GoogleKubernetesEngine
GitHub - GoogleCloudPlatform/gke-mcp
Contribute to GoogleCloudPlatform/gke-mcp development by creating an account on GitHub.
github.com
October 30, 2025 at 5:46 PM
- Updated to use GKE Inference Quickstart GA. So you can deploy LLMs from Gemini CLI.
github.com/GoogleCloudP...
#GoogleCloud #GKE #GoogleKubernetesEngine
github.com/GoogleCloudP...
#GoogleCloud #GKE #GoogleKubernetesEngine
gcloud beta container clusters create gkecluster --cluster-version 1.34.0-gke.1497000 --release-channel rapid
Happy Kuberneting ⛵ ⛵
#GKE #GoogleCloud #GoogleKubernetesEngine
Happy Kuberneting ⛵ ⛵
#GKE #GoogleCloud #GoogleKubernetesEngine
September 8, 2025 at 12:59 PM
gcloud beta container clusters create gkecluster --cluster-version 1.34.0-gke.1497000 --release-channel rapid
Happy Kuberneting ⛵ ⛵
#GKE #GoogleCloud #GoogleKubernetesEngine
Happy Kuberneting ⛵ ⛵
#GKE #GoogleCloud #GoogleKubernetesEngine
[1] cloud.google.com/blog/product...
[2] cloud.google.com/blog/product...
#GKE #GooglCloud #GoogleKubernetesEngine
[2] cloud.google.com/blog/product...
#GKE #GooglCloud #GoogleKubernetesEngine
How GKE powers AI innovation | Google Cloud Blog
At Google Cloud Next, we announced Google Kubernetes Engine (GKE) innovations to help platform engineering teams adopt new AI workloads and users.
cloud.google.com
August 28, 2025 at 9:10 AM