Kloak, A secret manager that keeps K8s workload away from secrets

In plain words

Kloak is a secret manager designed for Kubernetes environments that isolates workload access from sensitive data. It prevents Kubernetes pods and applications from directly handling secrets, instead managing credential access through a separate layer. The tool is built for DevOps teams and engineers who deploy containerized applications on Kubernetes clusters and need to enforce secure secret management practices without exposing credentials to workloads.

written from the facts on this page · September 2026

From the sources

Kloak transparently intercepts HTTPS traffic in Kubernetes using pure eBPF, replacing hashed placeholders with real secrets at the network edge. Your applications never see the actual credentials, so a compromised process cannot leak what it never had. # Your app sends this header: Authorization: kloak:MPZVR3GHWT4E6YBCA01JQXK5N8 # Kloak transforms it to: Authorization: Bearer sk-live-xyz123... ✓ Secret never exposed to application quick start # Install Kloak with Helm $ helm repo add kloak https://chart.getkloak.io $ helm repo update $ helm install kloak kloak/kloak \ -n kloak-system --create-namespace \ --set demo.enabled=true Copy Features Everything You Need for Secure Secret Management…from getkloak.io

• 
  Kubernetes Certificate Manager – Native Let's Encrypt Integration2016 · github.com · ▲186

  Manage Lets Encrypt certificates for a Kubernetes cluster. - kelseyhightower/kube-cert-manager

• 
  KSOPS – A Flexible Kustomize Plugin for SOPS Encrypted Resources2019 · github.com · ▲16

  KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources - viaduct-ai/kustomize-sops

• 
  K8s Gatekeeper Policy Manager, Easily Visualize Policies and Violations2020 · blog.sighup.io · ▲26

  A simple to use, open-source, web-based tool to see the OPA Gatekeeper's policies deployed in your cluster and their status.

• 
  konfd – Manage Kubernetes secrets and configmaps with Go templates2016 · github.com · ▲115

  Manage application configuration using Kubernetes secrets, configmaps, and Go templates. - kelseyhightower/konfd

• 
  Kubescape 2.02022 · cloud.armosec.io · ▲112

  End-to-end Kubernetes security open-source platform

• KC
  K8s Cleaner – Roomba for Kubernetes2024 · sveltos.projectsveltos.io · ▲68

  Hello HN community! I'm excited to share K8s Cleaner, a tool designed to help you clean up your Kubernetes clusters. As Kubernetes environments grow, they often accumulate unused resources, leading to confusion, waste, and clutter. K8s-cleaner simplifies the process of identifying and removing unnecessary components. The tool scans your Kubernetes clusters for unused or orphaned resources—including pods, services, ingresses, and secrets—and removes them safely. You can fully customize which resources to scan and delete, maintaining complete control over what stays and what goes. Getting…

• 
  /dev/null▲494

  a social network for devs

  Dev tools · 4d ago · dev-null.sh

• 
  Run full iOS 16.5 firmware on Android Devices▲474

  Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

  Dev tools · 23h ago · github.com

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 29d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 24d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 22d ago · talanoa.email

• 
  Brila▲1,364

  One-page websites from real Google Maps reviews

  AI · Apr 2026 · brila.ai

• AG
  A game where you build a GPU▲964

  Thought the resources for GPU arch were lacking, so here we are

  Life & fun · Apr 2026 · jaso1024.com

• 
  I built a tiny LLM to demystify how language models work▲915

  Built a ~9M param LLM from scratch to understand how they actually work. Vanilla transformer, 60K synthetic conversations, ~130 lines of PyTorch. Trains in 5 min on a free Colab T4. The fish thinks the meaning of life is food. Fork it and swap the personality for your own character.

  AI · Apr 2026 · github.com

• 
  Fathom 3.0▲800

  AI meeting notes: now bot-free, in ChatGPT & Claude + more

  AI · Apr 2026 · fathom.ai

• 
  Brutalist Concrete Laptop Stand (2024)▲786

  I made a laptop stand out of solid concrete, in the style of brutalist architecture, with themes of urbex and urban decay

  Life & fun · Apr 2026 · sam-burns.com

• 
  I built a frontpage for personal blogs▲783

  With social media and now AI, its important to keep the indie web alive. There are many people who write frequently. Blogosphere tries to highlight them by fetching the recent posts from personal blogs across many categories. There are two versions: Minimal (HN-inspired, fast, static): https://text.blogosphere.app/ Non-minimal: https://blogosphere.app/ If you don't find your blog (or your favorite ones), please add them. I will review and approve it.

  AI · Apr 2026 · text.blogosphere.app