How to Audit a Production Kubernetes Cluster
What a real Kubernetes cluster audit actually checks, how findings should be prioritized, what a useful audit report looks like, and when it's...
Read more →12 posts
What a real Kubernetes cluster audit actually checks, how findings should be prioritized, what a useful audit report looks like, and when it's...
Read more →CrashLoopBackOff is a status, not a diagnosis — here's how to systematically tell apart an application crash, an OOM kill, a failing liveness...
Read more →Having backups and being able to recover are different claims. Most teams have verified the first one and assumed the second.
Read more →Most Kubernetes monitoring setups collect metrics without knowing which ones actually predict an incident. Here's what to instrument first, and why.
Read more →Replica count alone isn't high availability. What actually keeps workloads running through node failures and deployments is PodDisruptionBudgets,...
Read more →Requests and limits control two entirely different things — scheduling and runtime enforcement. Confusing them is why clusters get OOMKilled pods,...
Read more →A practical approach to rolling out default-deny NetworkPolicy in a live cluster — how the allow-list model actually works, the rollout sequence...
Read more →A hands-on guide to auditing Kubernetes RBAC — the exact kubectl commands to find cluster-admin bindings, wildcard permissions, and...
Read more →A working security checklist for production Kubernetes clusters — securityContext, Pod Security Standards, secrets, image provenance, and the...
Read more →A systematic way to diagnose Kubernetes DNS failures — from CoreDNS crashes and NetworkPolicy egress blocks to the ndots:5 latency trap and the...
Read more →What "production-ready" actually means for a Kubernetes cluster — architecture, security, resources, networking, availability, observability, and...
Read more →A practical checklist covering the security, resource, and networking issues I find most often when auditing production Kubernetes clusters.
Read more →