Tag archive

kubernetes

Platform engineering notes on cluster design, workload operations, and the systems around running Kubernetes well.

Security

Zero-trust networking in Kubernetes with Istio

Zero trust architecture in Kubernetes, from implementation and policy to observability.

Infrastructure as Code

A practical guide to managing Kubernetes resources with OpenTofu or Terraform.

Security

Use External Secrets Operator to sync AWS Secrets Manager values into Kubernetes with IRSA, sane refresh policies, and less secret material in git.

Security

How to set up and use IAM Roles for Service Accounts in EKS to securely manage pod-level IAM roles

Networking

Lowdown on the AWS Load Balancer Controller for Kubernetes ingress.

GitOps

Deploy to Kubernetes from Git with Argo CD, and keep clusters in sync with what the repo says.