Your Agent's LLM Key Survives Every Kubernetes Secret Control

Originally published at webofmike.com on 2026-09-13. The demo repo and every command in it were run before publishing. I gave an agent pod an LLM API key the normal way, as a Secret projected into its environment. Then I turned on every Kubernetes control that sounds like it protects secrets: the restricted Pod Security Standard enforcing at...