Show HN: Kloak, A secret manager that keeps K8s workload away from secrets
6 hours ago
- #eBPF
- #Secret Management
- #Kubernetes Security
- Kloak intercepts HTTPS traffic in Kubernetes using eBPF, replacing hash placeholders with real secrets at the network edge.
- Applications never see actual credentials, preventing leaks from compromised processes; use labeled Kubernetes Secrets and ULID placeholders.
- Install via Helm, works without SDKs or sidecars, offers fine-grained access control, and is open source under AGPL-3.0.