I Deployed a Purple Team Inside My Kubernetes Cluster. The Scanners Never Saw It Coming.
7.8 relevance
Score Breakdown
technical depth 9
novelty 8
actionability 8
community 5
strategic 5
personal 9
Scored daily by a customisable AI persona to surface the most relevant engineering leadership news.
Kubernetes purple team, highly relevant to security and K8s.
Summary
A purple team platform called NEMESIS, deployed as a Kubernetes DaemonSet, executed attack scenarios from inside the pod network and uncovered a ClusterRoleBinding granting cluster-reader to the default service account, plus a readable ConfigMap with a hard-coded PostgreSQL password—findings that Trivy, kube-bench, and Polaris all missed. The platform uses a Python controller for orchestration and a Go attack agent for sub-second cold-start primitives like token abuse and lateral movement, with eBPF integration via Cilium for kernel-level packet observability.