/ archive
12 articles covering Kubernetes, DevOps, CI/CD, cloud infrastructure, and security.
A practical guide to securing the Kubernetes container image supply chain: scan images for vulnerabilities, sign with Cosign, enforce admission policies with Kyverno, and verify provenance from build to runtime.
9 min readKubernetes Secrets need encryption, strict RBAC, rotation, and external secret stores before they are safe for production clusters.
9 min readAdmission and network policies are not enough. Falco adds runtime detection for suspicious shells, file access, and process activity in Kubernetes.
9 min readGitOps needs cluster-side trust checks. Admission control, signed images, and provenance can stop risky manifests before production.
8 min readKubernetes can isolate LLM infrastructure, but prompt injection, retrieval leakage, and tool misuse require application-layer AI security controls.
7 min read