Security
Tetragon on Kubernetes: in-kernel runtime enforcement
A Tetragon Kubernetes tutorial: installation, TracingPolicy design, monitor mode, and the difference between detecting a runtime event and blocking it in-kernel.
10 min readRead article
Security
PodSecurityPolicy replacement: Pod Security Admission
A practical PodSecurityPolicy replacement guide: roll out Pod Security Admission in stages, pin policy versions, and avoid the traps that break workloads.
9 min readRead article
Delivery Workflows
Renovate for platform engineers: Helm, images, OpenTofu
A practical Renovate Kubernetes guide: keep Helm charts, Argo CD manifests, image tags, OpenTofu providers, and GitHub Actions current without the PR flood.
9 min readRead article
Security
Auto-rotating RDS credentials with AWS Secrets Manager
Automatically update RDS credentials and application config on EC2 instances.
3 min readRead article
Security
Auto-update AWS security groups with Cloudflare IPs
How to auto update security groups with Cloudflare IPs using AWS Lambda
3 min readRead article
Security
Protecting your ALB with AWS WAF and CloudFront
Learn how to protect your ALB with AWS WAF and CloudFront.
4 min readRead article
Security
Zero-trust networking in Kubernetes with Istio
Zero trust architecture in Kubernetes, from implementation and policy to observability.
15 min readRead article
Security
Syncing secrets into Kubernetes with External Secrets
Use External Secrets Operator to sync AWS Secrets Manager values into Kubernetes with IRSA, sane refresh policies, and less secret material in git.
9 min readRead article