Sign in

Andrew Martin ⚡☸️

@sublimi.no
3.4K followers 266 following 59 posts

Hacker // CEO controlplane.io 🌐 @controlplane.io | Cloud Native Security | CISO openuk.uk | AI sec finos.org | Hacking Kubernetes oreilly.com | Ex tag-security.cncf.io & sans.org | Ex-X @sublimino

PostsRepliesMedia
Reposted by Andrew Martin ⚡☸️
openbao-official.bsky.social @openbao-official.bsky.social · 31/07/2026
Check out part 4 of Alex's blog series on OpenBao's features, talking about improvements to the plugin ecosystem: openbao.org/blog/feature... What integrations would you like OpenBao to have? How would you like to see writing plugins made easier? #OpenBao #Secrets #OpenSource #HashiCorp #Vault
openbao.org
OpenBao Features - Declarative Plugins | OpenBao
Blog series describing OpenBao's features. This episode focuses on declarative plugin distribution and registration in OpenBao.
043
Reposted by Andrew Martin ⚡☸️
Stefan Prodan @stefanprodan.com · 13/07/2026
Check out Flux Schema! Our brand new #FluxCD CLI plugin that validates manifests and helps AI Agents stop hallucinating Kubernetes YAML. After extensive benchmarks my conclusion is that the Flux Schema MCP Server gets you 57% fewer tokens compared to web tools. fluxcd.io/blog/2026/07...
fluxcd.io
Introducing Flux Schema and the Ecosystem Catalog
Static validation for GitOps workflows with Kubernetes API server semantics, a schema catalog for the CNCF ecosystem, and a public MCP server for AI agents.
2103
Reposted by Andrew Martin ⚡☸️
Kyle Quest (the DockerSlim guy) @kcqon.bsky.social · 03/06/2026
Sandbox Probe is a great tool to find holes in your coding agent sandboxes. Created by Andrew Martin ( @sublimi.no ) and his team at ControlPlane - github.com/controlplane...
github.com
GitHub - controlplaneio/sandbox-probe: Agentic sandbox enumeration: find security issues, and seed escape automation.
Agentic sandbox enumeration: find security issues, and seed escape automation. - controlplaneio/sandbox-probe
053
Reposted by Andrew Martin ⚡☸️
Liz Rice 💛💙🐝 @lizrice.com · 05/06/2026
Had a lot of fun as “particimod” on this panel with @adrianmouat.com and @sublimi.no - and great comments and questions from the audience. ➡️ “Mitigate & update” ⬅️
041
Reposted by Andrew Martin ⚡☸️
Liz Rice 💛💙🐝 @lizrice.com · 15/05/2026
This is going to be a really fun conversation with @adrianmouat.com and @sublimi.no at the @openuk.bsky.social SOOCon event in Edinburgh! We’ll be looking forward to your questions and thoughts on this fast-moving security topic
242
Reposted by Andrew Martin ⚡☸️
Leigh Capili 🧋 @capileigh.bsky.social · 17/03/2026
Morgan Stanley scaled Flux to 500+ clusters, 100k+ containers, and 10k+ Flux resources. Their 5-year journey covers: multi-tenancy, performance tuning, moving to S3 sources, and devX fluxcd.io/blog/2026/03/stairway-to-gitops-morgan-stanley/ FluxCon Europe is next Monday - come say hi! #kubecon
fluxcd.io
Stairway to GitOps: Scaling Flux at Morgan Stanley
Reflecting on Morgan Stanley's journey to production GitOps with Flux, presented at FluxCon NA 2025.
186
Andrew Martin ⚡☸️ @sublimi.no · 12/03/2026
Thanks for the support!
020
Reposted by Andrew Martin ⚡☸️
Dmitry Shurupov @dshnow.bsky.social · 12/03/2026
#OpenBao gets enterprise support from ControlPlane. Why this company? They say they are #1 contributor to OpenBao and their "core team created Vault at HashiCorp". Sounds convincing enough and fantastic for this #OpenSource project. control-plane.io/enterprise-f...
control-plane.io
ControlPlane Enterprise for OpenBao
The open source Vault alternative, backed by its #1 contributor. Enterprise secrets management without IBM lock-in. Migration services, support, and funded development from the team that built Vault.
162
Reposted by Andrew Martin ⚡☸️
Leigh Capili 🧋 @capileigh.bsky.social · 08/11/2025
So much happening around Flux @ KubeCon next week :) Here's what's up! fluxcd.io/kubecon #KubeCon #FluxCD
061
Reposted by Andrew Martin ⚡☸️
Stefan Prodan @stefanprodan.com · 01/10/2025
Flux v2.7 is out 🚀 Big thanks to all contributors ❤️ Image automation goes GA, new ArtifactGenerator API for advanced sources composition and decomposition patterns, hub-and-spoke OIDC auth, and so much more. fluxcd.io/blog/2025/09... #FluxCD #GitOps #Kubernetes
fluxcd.io
Announcing Flux 2.7 GA
We are thrilled to announce the release of Flux v2.7.0! Here you will find highlights of new features and improvements in this release.
0105
Andrew Martin ⚡☸️ @sublimi.no · 01/10/2025
We have a historical "Catalog of Supply Chain Compromises" in TAG Security if that helps (suggested updates welcome, 9mo OOD) tag-security.cncf.io/community/ca...
tag-security.cncf.io
Compromises
Catalog of Supply Chain Compromises This repository contains links to articles of software supply chain compromises. The goal is not to catalog every known supply chain attack, but rather to capture m...
140
Reposted by Andrew Martin ⚡☸️
Kube Events @kube.events · 24/09/2025
📅 Starting next week: Continuous Delivery with FluxCD & Understanding Kubernetes for Beginners ku.bz/drM2Qkb4y Root cause analysis in Kubernetes, Kubernetes data protection ku.bz/F-b8nPHK_ Devopsdays Eindhoven ku.bz/-N82cyzWX
111
Reposted by Andrew Martin ⚡☸️
BSides Orlando @bsidesorl.bsky.social · 14/09/2025
🧰Workshop: Building Assured Software Supply Chains by Andrew Martin Learn to spot risks across the SDLC and defend against threats like dependency poisoning & build compromise. Hands-on threat modeling with real-world cases + a reusable framework. bsorl.org/workshops
052
Reposted by Andrew Martin ⚡☸️
OpenUK @openuk.bsky.social · 04/08/2025
Nominate yourself or a colleague in the OpenUK Awards 2025 Open Source Security category sponsored by @controlplane.io 💫 openuk.uk/awards Shortlist September #security #cybersecurity#openukawards #opensource 🏆🌟
043
Reposted by Andrew Martin ⚡☸️
Kubernetes @kubernetes.io · 18/07/2025
Blog: Post-Quantum Cryptography in Kubernetes-
kubernetes.dev
Post-Quantum Cryptography in Kubernetes
The world of cryptography is on the cusp of a major shift with the advent of quantum computing. While powerful quantum computers are still largely theoretical for many applications, their potential to...
0158
Reposted by Andrew Martin ⚡☸️
Aaron Wislang 🇨🇦 @aaronw.dev · 26/06/2025
OpenSSF TTX Panel Session - John Kjell, ControlPlane; Seth Larson, Python Software Foundation; Mihai Maruseac, Google; Yesenia Yser, Microsoft; Megan Knight, Arm & Moderated by Christopher "CRob" Robinson, OpenSSF #OpenSSFCommunityDay
At the OpenSSF Community Day event, six individuals participate in a panel discussion titled “OpenSSF TableTop Exercise (TTX): Continuously Integrating… Disaster!” The presentation slide is displayed behind them on a large screen with the OpenSSF logo. The event date is Thursday, June 18, 2025. One person stands at a lectern labeled “OpenSSF Community Day,” wearing a colorful hockey-style jersey and speaking into a microphone. Five panelists are seated on stools.
041
Andrew Martin ⚡☸️ @sublimi.no · 30/05/2025
I can certainly relate to absent-minded bike misplacement 🙃
020
Reposted by Andrew Martin ⚡☸️
zoph @zoph.me · 26/05/2025
Mark your calendar: fwd:cloudsec Europe 2025 lights up Berlin on September 15-16! This two-day event is a non-profit cloud security conference, and we expect over 350 attendees this year!
176
Reposted by Andrew Martin ⚡☸️
Eddie Knight @eddieknight.dev · 16/04/2025
Here's a playlist with the 7 KubeCon talks from TAG Security leads! Seven!! 🤯 @mikeneeds.rest @sublimi.no www.youtube.com/playlist?lis...
youtube.com
TAG Security @ KubeCon EU 2025 - YouTube
072
Reposted by Andrew Martin ⚡☸️
Charlie Brooker @charliebrooker.bsky.social · 09/04/2025
New BLACK MIRROR very imminent indeed. As in tomorrow (Thursday).
Black Mirror returns April 10th, which is really bloody soon
2522220
Andrew Martin ⚡☸️ @sublimi.no · 22/03/2025
KCD rocked in Rio! Thank you for having me in your beautiful country, here's my best effort at Kubernetes Security in 20m 🤖⭐🛡️🔒🇧🇷 drive.google.com/file/d/1dhhV... #kubernetes #community #k8s #security #cloudnative #brazil #latam
drive.google.com
ControlPlane — Hacking Kubernetes (KCD Rio, March 2025).pdf
050
Andrew Martin ⚡☸️ @sublimi.no · 22/03/2025
Hahah I was just talking about flaming São Paulo sushi — you are missed here @rkatz.xyz!
210
Reposted by Andrew Martin ⚡☸️
Vicente Herrera @vicenteherrera.com · 12/03/2025
FINOS community call is live! Join to learn about open source initiatives for financial services organizations coordinated by the Linux Foundation, including a presentation from @sublimi.no about the AI Gorvernance framework we have been working on. 👉https://www.youtube.com/watch?v=MOZxQhd3rIQ
142
Andrew Martin ⚡☸️ @sublimi.no · 12/03/2025
This was a lot of fun! Slides for "K8s vs Agent Smith: Exploding GPUs and AI Security" drive.google.com/file/d/1afeh... Thanks to @ipedrazas.bsky.social @rawkode.dev and K8s London crew ❤️ bsky.app/profile/iped...
042
Andrew Martin ⚡☸️ @sublimi.no · 12/03/2025
Haha human-facing link: drive.google.com/file/d/1afeh...
drive.google.com
ControlPlane — K8s vs Agent Smith - Exploding GPUs and AI Security (March 2025).pdf
000
Reposted by Andrew Martin ⚡☸️
Ivan Pedrazas @andcake.dev · 11/03/2025
What day is today? It’s Kubernetes London Meetup day!! Today @sublimi.no speaks about threat modelling and attacking AI agents
061
Reposted by Andrew Martin ⚡☸️
Bart Farrell @birthmarkbart.bsky.social · 10/02/2025
What are the biggest security challenges on Kubernetes, and what does AI add to the mix? I got a chance to catch up with @sublimi.no at the State of Open Con last week and this is what he shared with me. Did he miss anything?
061
Reposted by Andrew Martin ⚡☸️
Vicente Herrera @vicenteherrera.com · 06/02/2025
Join us on February 27: "AI Safety London" with our first talks! 👉"AI Alignment: Practical Evaluations and Strategies", by @kabirkumar.bsky.social from ai-plans.com 👉"Cybersecurity as the Catalyst for Real-World AI Safety", by @sublimi.no, CEO at control-plane.io AI Safety and Security at Scale!
meetup.com
AI Safety Group Inaugural Talks, Thu, Feb 27, 2025, 7:00 PM | Meetup
**Update! Talks for the sessions are now published here.** Welcome to the inaugural session for the AI Safety London group! Agenda: \- 7:00 PM: Greeting and brief introdu
183
Reposted by Andrew Martin ⚡☸️
Mark Manning @antitree.com · 11/01/2025
I just finished our #shmoocon talk on container security. Here's my seccomp bpf disassembler and diffing tool. github.com/antitree/sec...
github.com
GitHub - antitree/seccomp-diff
Contribute to antitree/seccomp-diff development by creating an account on GitHub.
03711
Andrew Martin ⚡☸️ @sublimi.no · 11/01/2025
Stoked to be airdropping into DC for a couple of days and (the final?) #schmoocon ⚡
030
Andrew Martin ⚡☸️ @sublimi.no · 31/12/2024
May Cthulhu bring you everything you desire 🐙🐲
130
Andrew Martin ⚡☸️ @sublimi.no · 30/12/2024
> For Timoni to fully embrace GitOps, a Kubernetes controller will be implemented when Timoni's CUE APIs reach a more stable form. Yarp, on the roadmap timoni.sh/gitops-flux/
timoni.sh
GitOps with Flux
Timoni is a package manager for Kubernetes powered by CUE lang.
030
Andrew Martin ⚡☸️ @sublimi.no · 30/12/2024
Higher-order CUE for K8s timoni.sh /ht @stefanprodan.com
timoni.sh
Timoni
Timoni is a package manager for Kubernetes powered by CUE lang.
250
Reposted by Andrew Martin ⚡☸️
Dr. Dawn Foster @geekygirldawn.bsky.social · 27/12/2024
I'm co-hosting the Future of Open Source Track at State of Open Con, and we have some amazing sessions lined up, so I hope you can join us on Feb 4-5! You can combine it with FOSDEM and take the Eurostar from Brussels - it's a lovely way to travel! stateofopencon.com #soocon25 #stateofopencon.
Social Media promo with my picture and a picture of St. Pauls's in the background with the following text: Dawn Foster. Director of Data Science, CHAOSS Project. Future of Open Source Track, Co-host OpenUK PRESENTS STATE of OPEN Con 4-5 February, 2025 Sancroft, St. Pauls, London | stateofopencon.com #stateofopencon
1126
Andrew Martin ⚡☸️ @sublimi.no · 16/12/2024
Hell yes, paying for Kagi since I saw it on hn. Love the search filters
040
Reposted by Andrew Martin ⚡☸️
Stefan Prodan @stefanprodan.com · 16/12/2024
A Christmas present from Broadcom! Get ready for rate limits if you are freeloading the Bitnami Helm charts and containers from DockerHub 😆 github.com/bitnami/cont...
github.com
🔊 Notice about LTS branches and pull rates in Docker Hub · Issue #75671 · bitnami/containers
Starting December 10th, 2024, only the latest stable branch of applications deployed by Bitnami Helm charts will receive updates in the free Bitnami catalog. Previous versions already released will...
1114
Andrew Martin ⚡☸️ @sublimi.no · 08/12/2024
@openuk.bsky.social's State of Open Con CFP is closing Sunday 8th! Spicy security and software topics welcome 🌶️🔥 🔗 sessionize.com/state-of-ope... 🎓 Open Source Software and Security ⚡ #soocon25 #stateofopencon
Andrew Martin, CEO ControlPlane, CISO OpenUK, track co-chair
191
Andrew Martin ⚡☸️ @sublimi.no · 02/12/2024
Smooth moves @gitlab.com 🙌
020
Reposted by Andrew Martin ⚡☸️
Stefan Prodan @stefanprodan.com · 26/11/2024
Join us tomorrow at the Service Mesh meetup in London. We're celebrating Flagger's 6th year anniversary 🎉
061
Andrew Martin ⚡☸️ @sublimi.no · 26/11/2024
Yes indeed, I'll post them next week ☺️
110
Andrew Martin ⚡☸️ @sublimi.no · 26/11/2024
Service Mesh London: Pints & Protection tomorrow! 🍻💥 💻 Brewing a DIY Service Mesh (James Callaghan @controlplane.io) 💻 Envoy WAF Plugin: WASM & ext_proc (@mt165.bsky.social Tetrate) 💻 Flagger is 6! A Bright Future with Gateway API (@stefanprodan.com @controlplane.io) www.meetup.com/service-mesh...
meetup.com
Service Mesh London: Pints & Protection, Wed, Nov 27, 2024, 6:00 PM | Meetup
**Join Service Mesh London for a Fun & Casual Tech Talk Meetup!** Hosted by **ControlPlane & Tetrate** at the **ControlPlane Office** in Shoreditch on **November 27th!**
142
Reposted by Andrew Martin ⚡☸️
Eddie Knight @eddieknight.dev · 23/11/2024
It'll be competitive, but I highly recommend applying for these positions posted by @sublimi.no if you have right to work in UK/EU control-plane.io/working-here/ job-boards.eu.greenhouse.io/controlplane
Image quote from Andrew Martin: "We are hiring! ⚡ K8s and Cloud Native principal, senior, and consultant engineers/DevOps, security engineers/architects, red/blue teamers — we have lots of positions open ✨☸️ Kind people and interesting work, always cloud native, always secure 😊🙏 Come and talk to us at Kubernetes Community Days UK or DevSecCon Global Community this week, or reach out to anybody at ControlPlane to understand what we do."
022
Andrew Martin ⚡☸️ @sublimi.no · 19/11/2024
I didn't, @nickeberts.dev might know
010
Andrew Martin ⚡☸️ @sublimi.no · 18/11/2024
GCP's IAP is very easy to use, specifically proxing Cloud Run services with it.
120
Andrew Martin ⚡☸️ @sublimi.no · 18/11/2024
Impressive schedule to get there from SLC, go KCD! 🙌💥
100
Andrew Martin ⚡☸️ @sublimi.no · 18/11/2024
boogers
020
Andrew Martin ⚡☸️ @sublimi.no · 16/11/2024
Please can I be added to the cyber starter pack ☺️🙏
000
Andrew Martin ⚡☸️ @sublimi.no · 15/11/2024
I remain hopeful that .io input/output analogies win through and the TLD is reserved indefinitely — Anguilla's .ai potentially a similar case
100
Andrew Martin ⚡☸️ @sublimi.no · 15/11/2024
It's existentially unclear to me
020
Andrew Martin ⚡☸️ @sublimi.no · 15/11/2024
Aka "ControlPlane guy!" via @kat.lol
120