Kubernetes NetworkPolicy: Designing Default-Deny Without Breaking Your Cluster
A practical approach to rolling out default-deny NetworkPolicy in a live cluster — how the allow-list model actually works, the rollout sequence...
Read more →Field notes on Kubernetes, CI/CD, and building infrastructure that doesn't page you at 3am.
A practical approach to rolling out default-deny NetworkPolicy in a live cluster — how the allow-list model actually works, the rollout sequence...
Read more →A hands-on guide to auditing Kubernetes RBAC — the exact kubectl commands to find cluster-admin bindings, wildcard permissions, and...
Read more →A working security checklist for production Kubernetes clusters — securityContext, Pod Security Standards, secrets, image provenance, and the...
Read more →A systematic way to diagnose Kubernetes DNS failures — from CoreDNS crashes and NetworkPolicy egress blocks to the ndots:5 latency trap and the...
Read more →What "production-ready" actually means for a Kubernetes cluster — architecture, security, resources, networking, availability, observability, and...
Read more →A practical checklist covering the security, resource, and networking issues I find most often when auditing production Kubernetes clusters.
Read more →