<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Kubernetes on CyFun</title><link>https://cyfun.dev/tags/kubernetes/</link><description>Recent content in Kubernetes on CyFun</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Mon, 05 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://cyfun.dev/tags/kubernetes/index.xml" rel="self" type="application/rss+xml"/><item><title>The Terminal Could Delete Its Own Firewall</title><link>https://cyfun.dev/blog/terminal-could-delete-its-own-firewall/</link><pubDate>Mon, 05 Oct 2026 00:00:00 +0000</pubDate><guid>https://cyfun.dev/blog/terminal-could-delete-its-own-firewall/</guid><description>Per-player browser terminals next to CTF target VMs, confined by an nftables fence each pod applies to itself.</description></item><item><title>Our Dev Cleanup Job Deleted 28 Production Labs</title><link>https://cyfun.dev/blog/dev-cleanup-job-deleted-production-labs/</link><pubDate>Tue, 08 Sep 2026 00:00:00 +0000</pubDate><guid>https://cyfun.dev/blog/dev-cleanup-job-deleted-production-labs/</guid><description>A Kubernetes orphan-cleanup job that treated &amp;#34;no row in my database&amp;#34; as permission to delete, and the three production bugs that came from it.</description></item><item><title>Our VMs Needed an Empty File, Not More CPU</title><link>https://cyfun.dev/blog/empty-file-not-more-cpu/</link><pubDate>Thu, 30 Jul 2026 00:00:00 +0000</pubDate><guid>https://cyfun.dev/blog/empty-file-not-more-cpu/</guid><description>Running deliberately vulnerable VMs, each with its own k3s cluster inside, as on-demand CTF labs on GKE with KubeVirt and CDI.</description></item></channel></rss>