Security
Let's Encrypt on Kubernetes with cert-manager
Set up cert-manager and Let's Encrypt on Kubernetes: how ACME issuance works under the hood, staging first, HTTP-01 vs DNS-01, and renewal that keeps up.
10 min readRead article
Back to blog
Tag archive
kubernetes
Platform engineering notes on cluster design, workload operations, and the systems around running Kubernetes well.
GitOps
GitOps with Helm for small teams: what's actually worth it
What GitOps with Helm is worth on a small team: base values plus a file per environment, Argo CD or Flux, a secrets plan, and what to skip.
13 min readRead article
Security
Falco on Kubernetes: install, tune, and route alerts
Install Falco with the Helm chart, trigger a real alert, write one custom rule, then tune the noise the way the stock rules file actually expects you to.
12 min readRead article
Security
CIS Benchmark for Kubernetes with kube-bench and Kubescape
Audit a Kubernetes cluster against the CIS Benchmark with kube-bench and Kubescape, triage the findings, and turn a one-off scan into a routine.
11 min readRead article
Cloud Foundations
Kubernetes is not a platform: it is a toolkit
Kubernetes is a control-plane substrate, and it needs product thinking, self-service and paved roads on top before it becomes a platform.
8 min readRead article
Cloud Foundations
Kupe Cloud is in alpha: Kubernetes, without the assembly
Kupe Cloud is in alpha. We built it after wiring the same GitOps, secrets, ingress, and observability layer around Kubernetes clusters one time too many.
7 min readRead article
Security
Tetragon on Kubernetes: in-kernel runtime enforcement
A Tetragon Kubernetes tutorial: installation, TracingPolicy design, monitor mode, and the difference between detecting a runtime event and blocking it in-kernel.
10 min readRead article
Kubernetes
What good developer experience looks like in Kubernetes
Good Kubernetes developer experience comes from shorter feedback loops, lower cognitive load, and workflow defaults that keep developers out of raw YAML.
10 min readRead article
Security
PodSecurityPolicy replacement: Pod Security Admission
A practical PodSecurityPolicy replacement guide: roll out Pod Security Admission in stages, pin policy versions, and avoid the traps that break workloads.
9 min readRead article