Andrew Martin ⚡☸️

Flux 2.10 is out! 🚀 - SPIFFE Workload and Object Identity - Alerts & Providers -> v1 - multi-tenant ArtifactGenerator - Improvements across all of Flux (kustomize/helm/sources/image-updates) Thank you to all of our contributors! fluxcd.io/blog/2026/10...

Thanks to Dan for sharing the flux9s CLI with the community! It's always lovely to see how people extend and interface with Flux. Check out Dan's writeup here: fluxcd.io/blog/2026/10...

Check out part 4 of Alex's blog series on OpenBao's features, talking about improvements to the plugin ecosystem: openbao.org/blog/feature... What integrations would you like OpenBao to have? How would you like to see writing plugins made easier? #OpenBao #Secrets #OpenSource #HashiCorp #Vault

Check out Flux Schema! Our brand new #FluxCD CLI plugin that validates manifests and helps AI Agents stop hallucinating Kubernetes YAML. After extensive benchmarks my conclusion is that the Flux Schema MCP Server gets you 57% fewer tokens compared to web tools. fluxcd.io/blog/2026/07...

Sandbox Probe is a great tool to find holes in your coding agent sandboxes. Created by Andrew Martin ( @sublimi.no ) and his team at ControlPlane - github.com/controlplane...

Had a lot of fun as “particimod” on this panel with @adrianmouat.com and @sublimi.no - and great comments and questions from the audience. ➡️ “Mitigate & update” ⬅️

This is going to be a really fun conversation with @adrianmouat.com and @sublimi.no at the @openuk.bsky.social SOOCon event in Edinburgh! We’ll be looking forward to your questions and thoughts on this fast-moving security topic

Morgan Stanley scaled Flux to 500+ clusters, 100k+ containers, and 10k+ Flux resources. Their 5-year journey covers: multi-tenancy, performance tuning, moving to S3 sources, and devX fluxcd.io/blog/2026/03/stairway-to-gitops-morgan-stanley/ FluxCon Europe is next Monday - come say hi! #kubecon

#OpenBao gets enterprise support from ControlPlane. Why this company? They say they are #1 contributor to OpenBao and their "core team created Vault at HashiCorp". Sounds convincing enough and fantastic for this #OpenSource project. control-plane.io/enterprise-f...

So much happening around Flux @ KubeCon next week :) Here's what's up! fluxcd.io/kubecon #KubeCon #FluxCD

Flux v2.7 is out 🚀 Big thanks to all contributors ❤️ Image automation goes GA, new ArtifactGenerator API for advanced sources composition and decomposition patterns, hub-and-spoke OIDC auth, and so much more. fluxcd.io/blog/2025/09... #FluxCD #GitOps #Kubernetes

📅 Starting next week: Continuous Delivery with FluxCD & Understanding Kubernetes for Beginners https://ku.bz/drM2Qkb4y Root cause analysis in Kubernetes, Kubernetes data protection https://ku.bz/F-b8nPHK_ Devopsdays Eindhoven https://ku.bz/-N82cyzWX

🧰Workshop: Building Assured Software Supply Chains by Andrew Martin Learn to spot risks across the SDLC and defend against threats like dependency poisoning & build compromise. Hands-on threat modeling with real-world cases + a reusable framework. https://bsorl.org/workshops

Nominate yourself or a colleague in the OpenUK Awards 2025 Open Source Security category sponsored by @controlplane.io 💫 openuk.uk/awards Shortlist September #security #cybersecurity#openukawards #opensource 🏆🌟

Blog: Post-Quantum Cryptography in Kubernetes-

OpenSSF TTX Panel Session - John Kjell, ControlPlane; Seth Larson, Python Software Foundation; Mihai Maruseac, Google; Yesenia Yser, Microsoft; Megan Knight, Arm & Moderated by Christopher "CRob" Robinson, OpenSSF #OpenSSFCommunityDay

Mark your calendar: fwd:cloudsec Europe 2025 lights up Berlin on September 15-16! This two-day event is a non-profit cloud security conference, and we expect over 350 attendees this year!

New BLACK MIRROR very imminent indeed. As in tomorrow (Thursday).

KCD rocked in Rio! Thank you for having me in your beautiful country, here's my best effort at Kubernetes Security in 20m 🤖⭐🛡️🔒🇧🇷 drive.google.com/file/d/1dhhV... #kubernetes #community #k8s #security #cloudnative #brazil #latam

FINOS community call is live! Join to learn about open source initiatives for financial services organizations coordinated by the Linux Foundation, including a presentation from @sublimi.no about the AI Gorvernance framework we have been working on. 👉https://www.youtube.com/watch?v=MOZxQhd3rIQ

This was a lot of fun! Slides for "K8s vs Agent Smith: Exploding GPUs and AI Security" drive.google.com/file/d/1afeh... Thanks to @ipedrazas.bsky.social @rawkode.dev and K8s London crew ❤️ bsky.app/profile/iped...

What day is today? It’s Kubernetes London Meetup day!! Today @sublimi.no speaks about threat modelling and attacking AI agents

What are the biggest security challenges on Kubernetes, and what does AI add to the mix? I got a chance to catch up with @sublimi.no at the State of Open Con last week and this is what he shared with me. Did he miss anything?

Join us on February 27: "AI Safety London" with our first talks! 👉"AI Alignment: Practical Evaluations and Strategies", by @kabirkumar.bsky.social from ai-plans.com 👉"Cybersecurity as the Catalyst for Real-World AI Safety", by @sublimi.no, CEO at control-plane.io AI Safety and Security at Scale!

I just finished our #shmoocon talk on container security. Here's my seccomp bpf disassembler and diffing tool. github.com/antitree/sec...

Stoked to be airdropping into DC for a couple of days and (the final?) #schmoocon ⚡

I'm co-hosting the Future of Open Source Track at State of Open Con, and we have some amazing sessions lined up, so I hope you can join us on Feb 4-5! You can combine it with FOSDEM and take the Eurostar from Brussels - it's a lovely way to travel! stateofopencon.com #soocon25 #stateofopencon.

A Christmas present from Broadcom! Get ready for rate limits if you are freeloading the Bitnami Helm charts and containers from DockerHub 😆 github.com/bitnami/cont...

@openuk.bsky.social's State of Open Con CFP is closing Sunday 8th! Spicy security and software topics welcome 🌶️🔥 🔗 sessionize.com/state-of-ope... 🎓 Open Source Software and Security ⚡ #soocon25 #stateofopencon

Join us tomorrow at the Service Mesh meetup in London. We're celebrating Flagger's 6th year anniversary 🎉

Service Mesh London: Pints & Protection tomorrow! 🍻💥 💻 Brewing a DIY Service Mesh (James Callaghan @controlplane.io) 💻 Envoy WAF Plugin: WASM & ext_proc (@mt165.bsky.social Tetrate) 💻 Flagger is 6! A Bright Future with Gateway API (@stefanprodan.com @controlplane.io) www.meetup.com/service-mesh...

100 players over two jam-packed CTF intros at Kubecon today! The big game day starts tomorrow, we'll make sure there's lots of space available ☸️ 💥

Open Source Security on Tap is tonight! 18:00 at Loft of the Squatters, with our pals Kusari and ActiveState 🎉 Securing the supply chain from field to stein 🍻 www.eventbrite.com/e/open-sourc...

eBPF Foundation's eBPF Threat Model is released! How to securely adopt eBPF for Fortune 500 CISOs 🛡️🔒💻 Kudos to Jack and James at @controlplane.io for collaborating with the BPF Steering Committee to release this work 🎉 github.com/ebpffoundati... #ebpf #linux #security

I made a starter pack that includes all the folks in the tech industry who are sometimes inclined to jam. The list also includes @questlove.bsky.social because he should be on ALL lists the include musicians for all time. I hope this list expands! go.bsky.app/3ZPr5q4

It's going to be a beguiling, intriguing and tricky KubeCon CTF with @controlplane.io again! Come and play in SLC next week ☺️🙏 #kubecon #kubernetes #container #breakout

The first recording of a newly unearthed Frédéric Chopin waltz www.nytimes.com/2024/10/27/a... echoing with shimmering beauty throughout the ages /ht @fkautz.bsky.social ✨

Interest in #platformengineering but not sure who to follow? Here's a little Starter Pack i've been working on. Let me know if you'd like me to add you to it 👍🏼 go.bsky.app/SVTURgj

If Donald Trump’s team OPSEC is so weak that they are open to people claiming to be him on random burner phones, AI voice synthesis presents an existential danger https://alecmuffett.com/article/110542 #DonaldTrump #opsec

We're going to DevSecCon at Synk London! CP folk are talking about breaking all things K8s (Mr @smarticu5.bsky.social ), James Callaghan on "I Wanna Know what Trust is 🎵", and Antonio Juanilla from JPMC on "How attack and defend a Kubernetes cluster" 💥 www.meetup.com/devseccon-lo...

Next up at #kcduk @smarticu5.bsky.social and @sublimino.bsky.social talking about Kubernetes privilege escalation!

And we're at KCD London bsky.app/profile/did:... today with @smarticu5.bsky.social and lots of other nice ControlPlaners 😊

I'm super excited to introduce Flux Operator, a new component in the #FluxCD ecosystem, with a focus on high-level abstractions for #GitOps. control-plane.io/posts/flux-o...

Looking forward to seeing all and sundry at KCD UK tomorrow and Wednesday 😊 @smartyboy.ninja and I are presenting our favourite "I'll Let Myself In: Kubernetes Privesc Techniques" on Weds arvo — beware the possibly bonus demo! 💥 #kcd #kubernetes #security

Not long now until @kcduk.bsky.social! 🎉 Hopefully will see some of y'all there on Tuesday! If you see me come say "hi 👋" and grab a sticker from me! 😉 and if you’re so inclined please come to my talk on Tuesday! sessionize.com/view/effqi9t... #KCD #KCDUK #Kubernetes #CloudNative