mTLS Between Services: Certificate Rotation Without Downtime
Implement mTLS between services with certificate rotation without downtime using SPIFFE/SPIRE, cert-manager, and overlapping valid...
Read moreDevOps
DevOps related stuff
Kubernetes Pod Security Admission: Enforcing Baseline and Restricted
Learn how Kubernetes Pod Security Admission enforces Baseline and Restricted standards to prevent privilege escalation and secure...
Read more
SLSA Provenance: Hardening Your CI/CD Supply Chain Step by Step
Implement SLSA Provenance to cryptographically verify your CI/CD build artifacts and prevent supply chain attacks with this step-b...
Read more
Cutting AWS NAT Gateway Costs: Practical Patterns That Work
Cutting AWS NAT Gateway costs requires replacing hourly charges with VPC endpoints, S3 gateways, and self-managed proxies for pred...
Read more
FinOps on Kubernetes: Attributing Pod Cost with OpenCost
Learn FinOps on Kubernetes by attributing pod cost with OpenCost to track spend per namespace, label, and workload across AWS, Azu...
Read more
OpenTelemetry Metrics vs Prometheus: Choosing an Instrumentation Path
OpenTelemetry Metrics vs Prometheus: Choosing an Instrumentation Path compares native OTel metrics with direct Prometheus scraping...
Read more