Kubernetes Bytes

AI agents can do far more than answer questions — they can call tools, access data, execute actions, and act on behalf of users. But once agents start taking actions, an important question emerges: who is the agent actually acting as, and what should it be allowed to do?
In this episode of Kubernetes Bytes, Bhavin sits down with Maia Iyer, Research Software Engineer at IBM Research, to explore identity, authentication, authorization, and zero trust for AI agents.
They discuss why static API keys and simply passing user credentials to agents can create security problems, and how existing standards such as OAuth 2.0, SPIFFE, SPIRE, and Keycloak can help establish verifiable user and workload identities.
Maia also explains the work her team is doing around Rosso CTL and Cortex, including using a runtime layer around agents to handle identity, observe inbound and outbound interactions, apply guardrails, and explore intent-based access control.
Topics covered include:
• The building blocks of agentic applications
• Security anti-patterns for AI agents
• Static credentials and over-permissioned agents
• User identity vs. workload identity
• OAuth 2.0 and delegated identity
• SPIFFE and SPIRE
• Keycloak
• Rosso CTL and Cortex
• Intent-based access control
• Prompt injection and unexpected tool calls
• MCP and agent-to-tool communication
• Stateful AI agents
• Safely running agents that generate and execute code
If you're building AI agents on Kubernetes or thinking about how identity and authorization need to evolve for agentic systems, this episode provides a practical mental model for getting started.
Subscribe to Kubernetes Bytes for conversations about Kubernetes, cloud native infrastructure, platform engineering, security, AI infrastructure, and the CNCF ecosystem.

In this episode of the Kubernetes Bytes podcast, Bhavin talks to Pushkar, Staff Software Engineer at Snap Inc. The discussion starts by talking about how platform teams support developers by building internal developer platforms, what are the capabilities developers expect in an IDP. They then talk about how reusing a Continuous Integration tool for Continuous Deployment led to issues and pagerduty alerts. Finally the discussion focusses on Argo Rollouts and the benefits it offers for rolling out updates to your production environment. This is a real world scenario where Pushkar shares lessons learnt, best practices, etc. from his experience onboarding Argo inside their organization.
Check out our website at https://kubernetesbytes.com/
Show Notes:
https://argoproj.github.io/rollouts/
https://argo-cd.readthedocs.io/en/stable/
https://buildkite.com/home/

In this episode of the Kubernetes Bytes podcast, Bhavin talks to Phil Andrews, Global Field CTO at Cast AI about all things AI. The discussion starts by talking about why you don't need an Opus class or Fable/Mythos class model for each task, and how Kimchi from Cast AI can help manage the quality of your output with the cost associated with routing between different models. They also talk about Omni which allows customers to get GPUs across hyperscalers and neocloud providers. Listen to learn more!
Check out our website at https://kubernetesbytes.com/
Show Notes:
https://www.linkedin.com/in/philip-andrews-iii/
https://cast.ai/kimchi/
https://docs.cast.ai/docs/omni-overview
https://cast.ai/blog/

In this episode of the Kubernetes Bytes podcast, Bhavin talks to Alex Zenla, Founder and CTO of Edera. The discussion starts by talking about why Alex and team decided to start Edera, where in the stack does it fit in, and how can it work with existing Kubernetes clusters. They also talk about GPU security, what Kubernetes DRA is, and how to plan for the new era of Mythos-class models. Listen to learn more!
Check out our website at
https://kubernetesbytes.com/
Show Notes:
https://www.linkedin.com/in/azenla/
https://edera.dev/
https://github.com/azenla
https://edera.dev/stories

In this episode of the Kubernetes Bytes podcast, Bhavin talks to Rob Zuber, CTO at CircleCI about all things Software Delivery. The discussion starts by talking about the evolution of Software Delivery over the last decade, but then dives into how Vibe coding impacts CI pipelines. Rob also shares his insights about running an AI-first engineering organization at CircleCI. Listen to learn more!
Check out our website at https://kubernetesbytes.com/
Show Notes:
https://www.linkedin.com/in/robzuber/
https://circleci.com/
https://circleci.com/blog/