Author:Ritesh Patel

From Policy Engine to AI-Native Platform: Introducing Cloud Agents for Infrastructure Governance

PRODUCT LAUNCH  Nirmata’s new Cloud Agents give platform engineers a one-click way to run deterministic, LLM-powered diagnostics directly on their clusters — no scripts, no setup, no surprises. When we launched Nirmata, the goal was straightforward: give teams a better way to govern Kubernetes at…

0

AI Bots Are Now Exploiting Your Automation — And Kubernetes Is Next

Last week, an autonomous bot called hackerbot-claw — describing itself as “an autonomous security research agent powered by claude-opus-4-5” — spent seven days systematically attacking CI/CD pipelines across major open source repositories. It targeted seven projects belonging to Microsoft, DataDog, Aqua Security, and multiple CNCF…

0

Kubernetes nodes/proxy GET → RCE: how “telemetry” permissions can compromise a cluster

A subtle (and frankly surprising) Kubernetes authorization behavior has resurfaced as a practical cluster-compromise path: an identity granted nodes/proxy access with an HTTP Get can be leveraged to execute commands in Pods across the cluster—effectively turning what many teams treat as “read-only node telemetry access”…

0

CNCF Annual Cloud Native Survey 2025: Kubernetes Is Becoming the Default AI Runtime – But “AI Platform Readiness” Is the Real Differentiator

A familiar pattern is playing out again. A decade ago, the big shift wasn’t “containers” themselves—it was everything that had to solidify around them: repeatable delivery, production operations, observability, and guardrails that made change safe, i.e. making everything container-native. Many of us at Nirmata lived…

0
NVIDIA AI Platforms

How Kyverno Strengthens Security, Compliance, and Reliability Across NVIDIA AI Platforms

What is Kyverno and Why Does NVDIA Use it for GPU Management? Kyverno is a Kubernetes-native policy engine that NVIDIA embeds directly into its AI platform stack—including DGX Cloud, Mission Control, and NeMo microservices—to enforce security, compliance, and operational stability for GPU workloads. Created by…

0