Kubernetes fleet

Track 01 deploys Blekline NHIM runtime enforcement in your cluster — standalone sidecar (ClusterIP) or injected sidecar (mutating webhook). This is the primary platform eval path for regulated production teams.

Plan ~2 hours for a full eval pass with posture upload and first enforce events in Activity.

Step 0 — NHIM audit

Run static audit before sandbox install:

kubectl apply -f https://raw.githubusercontent.com/Blekline/blekline-oss/main/packages/nhim-audit/deploy/rbac/nhim-audit-reader-namespaced.yaml -n nhim-eval
kubectl apply -f https://raw.githubusercontent.com/Blekline/blekline-oss/main/packages/nhim-audit/deploy/rbac/nhim-audit-reader-cluster.yaml
npx @blekline/nhim-audit audit --profile generic --namespace nhim-eval --plain --json -o nhim-audit.json

→ [NHIM audit quickstart](/docs/get-started/nhim-audit-quickstart). Attach JSON to your sandbox grant for a scoped probe token.

Images

ghcr.io/blekline/sidecar:0.2.1-nhim
ghcr.io/blekline/admission:0.2.1-nhim

Topology A — Standalone sidecar

Platform team runs one sidecar Deployment; agent pods call it over ClusterIP.

kubectl create namespace blekline
kubectl -n blekline create secret generic blekline-sidecar-auth \
  --from-literal=token="$(openssl rand -hex 32)"
kubectl -n blekline create secret generic blekline-vault-master \
  --from-literal=masterKey="$(openssl rand -hex 32)"

helm upgrade --install sidecar blekline-ingress \
  -n blekline \
  -f sidecar/values-production.yaml

Agent env: BLEKLINE_SIDECAR_URL=http://<release>-blekline-ingress:8787

Never expose port 8787 on public Ingress.

Topology B — Injected sidecar

Mutating webhook adds blekline-sidecar to agent pods. Agents use http://127.0.0.1:8787.

Opt-in annotation:

metadata:
  annotations:
    blekline.com/inject-sidecar: enabled

helm upgrade --install blekline-admission blekline-admission \
  -n blekline --create-namespace

Mandatory-hop NetworkPolicy

Agent pods must route tool and model traffic through the sidecar — no bypass paths to the public internet or sensitive backends.

See sandbox pack for reference NetworkPolicy manifests and probe scenarios.

Auto-Route (Tier 1)

Auto-Route mode (three enforcement tiers)

When the mutating admission webhook injects blekline-sidecar, it also rewrites SDK env vars on agent containers so OpenAI / Anthropic clients route through http://127.0.0.1:8787 automatically.

* Tier 3 is required for MCP tool argument policy (ASI02). Auto-Route covers model API paths only.

Injected env vars (Tier 1)

Opt-out per pod: blekline.com/auto-route: disabled

Roadmap dataplane (not default shipped)

• iptables init redirect — transparent HTTPS redirect without env vars (Tier 1b, Phase 2)
• eBPF / Cilium — optional dataplane integration for platform teams (Phase 3)

See enterprise sandbox AUTO_ROUTE.md for operator install paths.

Apply mutating admission with blekline.com/inject-sidecar: enabled on agent workloads. OpenAI/Anthropic SDK env vars rewrite to 127.0.0.1:8787 — no application code change for LLM paths.

Verify eval success

1. /health returns 200 with sidecar auth token
2. First allow/mask/block event in Operations → Activity
3. Posture JSON uploaded with score ≥ 70 (or CRITICAL gaps documented with probe plan)
4. Optional: probe token validates runtime bypass resistance

→ [NHIM verification](/docs/enterprise/nhim-verification) · [Trust Vault sidecar](/docs/enterprise/trust-vault-sidecar) · Lineage enforcement

Enterprise sandbox

Track 01 sandbox packs include Helm values, mandatory-hop templates, checklist steps, and probe token workflow. Request via [platform eval signup](https://app.blekline.com/auth/signup?intent=platform) or book a pilot.

Other tracks: Docker sidecar · MCP self-serve · [Eval journey](/docs/get-started/eval-journey)