Security
Let's Encrypt on Kubernetes with cert-manager
Set up cert-manager and Let's Encrypt on Kubernetes: how ACME issuance works under the hood, staging first, HTTP-01 vs DNS-01, and renewal that keeps up.
10 min readRead article
Security
Falco on Kubernetes: install, tune, and route alerts
Install Falco with the Helm chart, trigger a real alert, write one custom rule, then tune the noise the way the stock rules file actually expects you to.
12 min readRead article
Security
CIS Benchmark for Kubernetes with kube-bench and Kubescape
Audit a Kubernetes cluster against the CIS Benchmark with kube-bench and Kubescape, triage the findings, and turn a one-off scan into a routine.
11 min readRead article
Security
Tetragon on Kubernetes: in-kernel runtime enforcement
A Tetragon Kubernetes tutorial: installation, TracingPolicy design, monitor mode, and the difference between detecting a runtime event and blocking it in-kernel.
10 min readRead article
Security
PodSecurityPolicy replacement: Pod Security Admission
A practical PodSecurityPolicy replacement guide: roll out Pod Security Admission in stages, pin policy versions, and avoid the traps that break workloads.
9 min readRead article
Delivery Workflows
Renovate for platform engineers: Helm, images, OpenTofu
A practical Renovate Kubernetes guide: keep Helm charts, Argo CD manifests, image tags, OpenTofu providers, and GitHub Actions current without the PR flood.
9 min readRead article
Security
Auto-rotating RDS credentials with AWS Secrets Manager
Automatically update RDS credentials and application config on EC2 instances.
3 min readRead article
Security
Auto-update AWS security groups with Cloudflare IPs
How to auto update security groups with Cloudflare IPs using AWS Lambda
3 min readRead article
Security
Protecting your ALB with AWS WAF and CloudFront
Learn how to protect your ALB with AWS WAF and CloudFront.
4 min readRead article