0 views collected around this technical thread.
The mixed version proxy, introduced as an alpha feature in Kubernetes 1.28, enables correct handling of HTTP requests across clusters with multiple API server versions by routing requests to a compatible peer, preventing 404 errors during upgrades and providing flags for configuration and security.
The article explains how to enable Kubernetes audit logging and use its detailed fields—such as userAgent, responseStatus, requestURI, and object references—to detect CDK‑generated attacks and other threats like CVE‑2022‑3172, privilege escalation, and backdoor deployment, offering practical detection examples and security recommendations.
This article details the architectural background, challenges, and practical solutions implemented in SOFAStack CAFE for cloud‑native multi‑cluster deployment, including a custom multi‑topology CRD, an independent federation API server, enhanced KubeFed controller features, and network proxy integration to support hybrid‑cloud scenarios.