Kloak swaps placeholders for real secrets inside the kernel with eBPF, just before TLS encryption, so applications never hold credentials and need no sidecars or code changes.
Secrets can be pinned to specific hosts and ports.
More: https://ku.bz/2tGP1vSc3
August 20, 2026 176 5
