Agentic Identity Management and Shadow Agents in Kubernetes
Designing Zero-Trust Identity Architecture for AI Agents and Autonomous Workloads

What happens when your Kubernetes cluster stops running predictable services, and starts running autonomous AI agents?
Static service accounts. Long-lived API keys. Broad RBAC roles. These controls were built for deterministic workloads. But AI agents are different. They reason, delegate, and act dynamically across services at machine speed. When identity remains static while behavior becomes probabilistic, your attack surface expands dramatically.
Agentic Identity Management and Shadow Agents in Kubernetes addresses this exact challenge. This book provides a practical, engineering-focused blueprint for designing Zero-Trust identity architecture specifically for AI agents and autonomous workloads inside Kubernetes environments.
If you are responsible for cloud-native security, platform engineering, or DevSecOps governance, this book equips you with the architectural patterns and operational controls required to secure non-human identities at scale.
You will learn how to:

Replace static secrets with cryptographically verifiable workload identities using SPIFFE and SPIRE
Enforce mutual TLS (mTLS) and identity-based network policies across service meshes
Implement Just-in-Time (JIT) credential provisioning to eliminate standing privileges
Detect and contain Shadow AI workloads using eBPF-driven runtime observability
Prevent cross-agent privilege escalation in multi-agent systems
Design precision revocation workflows that isolate rogue replicas without impacting availability
Apply attribute-based access control (ABAC) and policy-as-code to agent delegation chains
Build federated identity across multi-cluster and multi-cloud Kubernetes environments

Rather than treating AI agents like traditional microservices, this book introduces the concept of Agentic Workload Identity, a security model where identity is continuously verified, tightly scoped, and instantly revocable. You will see how to shrink blast radius to the individual pod, bind identity cryptographically to workload state, and enforce Zero-Trust principles at every delegation hop.
Shadow agents, confused deputy attacks, prompt injection side effects, and cross-agent escalation are no longer theoretical risks. They are operational realities in modern AI-driven infrastructure. This book provides concrete strategies and production-ready architectural patterns to defend against them.
Clear, direct, and technically grounded, this guide avoids hype and focuses on what matters: secure, scalable Kubernetes infrastructure for autonomous systems.
If you are building or securing AI agents in Kubernetes, and want identity to become your strongest control plane rather than your weakest link, this book belongs on your desk.
Equip your platform with Zero-Trust architecture built for the agentic era.
Order your copy today and design identity systems that keep pace with autonomous intelligence.

"Synopsis" may belong to another edition of this title.

Rarewaves.com USA

London, London, United Kingdom

5-star seller

AbeBooks seller since June 11, 2025

Shipping rates from United Kingdom to U.S.A.

Item	9 to 14 business days	9 to 14 business days
First item	£ 0.00	£ 0.00

Delivery times are set by sellers and vary by carrier and location. Orders passing through Customs may face delays and buyers are responsible for any associated duties or fees. Sellers may contact you regarding additional charges to cover any increased costs to ship your items.

Payment methods

Seller's business information

RAREWAVES.COM LIMITED

Elsley Court, 20-22 Great Titchfield Street
London, United Kingdom W1W 8BE

Contact sellerView this seller's itemsView seller's storefront

Right of withdrawal

If you are a consumer you can withdraw from the contract in accordance with the following. Consumer means any natural person who is acting for purposes which are outside his trade, business, craft or profession.

Information regarding the right of withdrawal

Statutory right to withdraw

You have the right to withdraw from this contract within 14 days without giving any reason.

The withdrawal period will expire after 14 days from the day on which you acquire, or a third party other than the carrier and indicated by you acquires, physical possession of the last good or the last lot or piece.

To exercise the right of withdrawal, electronically fill in and submit a clear statement on our website, under "My Purchases" in "My Account". We will communicate to you an acknowledgement of receipt of such a withdrawal on a durable medium (e.g. by e-mail) without delay.

To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.

Effects of withdrawal

If you withdraw from this contract, we will reimburse to you all payments received from you, including the costs of delivery (except for the supplementary costs arising if you chose a type of delivery other than the least expensive type of standard delivery offered by us).

We may make a deduction from the reimbursement for loss in value of any goods supplied, if the loss is the result of unnecessary handling by you.

We will make the reimbursement without undue delay, and not later than 14 days after the day on which we are informed about your decision to withdraw from this contract.

We will make the reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.

We may withhold reimbursement until we have received the goods back, or you have supplied evidence of having sent back the goods, whichever is the earliest.

You shall send back the goods or hand them over to Rarewaves.com USA, Unit 144 The Lightbox, 111 Power Road, W4 5PY, London, London, United Kingdom, without undue delay and in any event not later than 14 days from the day on which you communicate your withdrawal from this contract to us. The deadline is met if you send back the goods before the period of 14 days has expired. You will have to bear the direct cost of returning the goods. You are only liable for any diminished value of the goods resulting from the handling other than what is necessary to establish the nature, characteristics and functioning of the goods.

Exceptions to the right of withdrawal

The right of withdrawal does not apply to:

The delivery of newspapers, journals or magazines with the exception of subscription contracts; and
The supply of digital content which is not supplied on a tangible medium (e.g. on a CD or DVD) if you accepted when you placed your order that we could start to deliver it, and that you could not withdraw once delivery had started.

Shipping terms

Please note that we do not offer Priority shipping to any country.

We currently do not ship to the below countries:

Russia
Belarus
Ukraine

Please do not attempt to place orders with any of these countries as a ship to address - they will be cancelled.

Agentic Identity Management and Shadow Agents in Kubernetes

Bibliographic details