An AI Agent Already Escaped Kubernetes. Is Your Cluster Next?

In May 2026, an AI agent, no human in the loop, escaped its container and dumped a Kubernetes cluster's entire Secret store (Sysdig). Kubernetes was built to isolate services, not autonomous agents holding credentials. A pod-level hardening playbook: permissions, tools, and runtime.

Views my own, not my employer's. No confidential information.