SPIFFE/SPIRE

Tech Radar Digest October 2026: Cilium 1.17, Tetragon 1.4 & eBPF Autonomous Agent Security Answer-First: The October 2026 Tech Radar establishes in-kernel eBPF as the mandatory architectural foundation for autonomous AI agent infrastructure. By pairing Cilium 1.17 sidecarless socket splicing (eliminating 15ms–35ms Envoy IPC tax with sub-1.2ms P99 latency) with Tetragon 1.4 synchronous in-kernel enforcement (SIGKILL in under 12 microseconds), platform engineering teams achieve hardware-grade zero-trust sandboxing and unassailable egress containment. ...

Tech Radar: NIST AI 600-1 & OWASP ASI01–ASI10 — Hardening Enterprise Agent Gateways in Kubernetes Answer-First: Deploying autonomous AI agent swarms into enterprise Kubernetes clusters demands transitioning from Least Privilege to Least Agency. Unifying NIST AI 600-1 with OWASP ASI Top 10 enforces 4-tier defense: L7 Gateway API with CEL for tool sanitization, SPIFFE/SPIRE for ephemeral NHI mTLS attestation, and Cilium Tetragon eBPF for real-time kernel syscall termination (SIGKILL < 15µs). ...

Tech Radar: Stateless MCP 2.0 & Kubernetes Gateway API Architecture Answer-First: Model Context Protocol (MCP 2.0 - Core Spec 2026-07-28) transitions tool execution to stateless JSON-RPC 2.0 over HTTP/SSE, eliminating sticky-session bottlenecks. Combined with Kubernetes Gateway API (agentgateway), this architecture horizontally scales thousands of MCP server pods, enforces SPIFFE mTLS authentication, and reduces P99 latency below 12ms. 1. Architectural Context & Failure Modes of Stateful MCP 1.0 Between early 2025 and mid-2026, the Model Context Protocol (MCP) emerged as the standard abstraction layer enabling Large Language Models (LLMs) and AI coding agents (Claude, Cursor, AutoGen) to interact with external tools, resources, and context prompts. ...

Answer-First: The August 2026 Tech Radar highlights enterprise shifts toward AI-native infrastructure and optimized cloud-native runtimes. Key recommendations include Go 1.26 Green Tea GC, Argo CD 3.4, SPIFFE/SPIRE with Istio Ambient Mesh, and the Official Go MCP SDK, while cautioning against naive vector-only RAG and legacy sidecars to guarantee sub-50ms P99 latency and strict isolation. 1. Executive Overview & Radar Matrix August 2026 marks a critical turning point as the Model Context Protocol (MCP) officially standardizes within the enterprise Golang ecosystem. Simultaneously, the Golang runtime upgrade to version 1.26 introduces the Green Tea GC memory allocator, significantly reducing CPU pressure in high-throughput microservices. ...