Articles tagged with "ci-cd"
GitLab Auto DevOps runs SAST/DAST automatically the moment you turn it on. But a scan 'running' and a vulnerable image never reaching your production K3s cluster are two completely different things. Here's how to build an audit gate between CI/CD and the cluster.
Container image signing explained: tags can be overwritten by anyone, and passing CI tests doesn't guarantee the image running in production is the one you built. Learn how Sigstore and Kyverno work together to reject unsigned images on Kubernetes/K3s, integrated into a GitOps workflow.
The quality-gate mindset and test automation skills QA engineers already have map directly onto Kubernetes operations aptitude. Here's a realistic six-month roadmap for making the switch, and how to clear the biggest obstacle in the way.
Most production incidents happen because teams deploy everything at once. This article walks through how to design canary releases, automated rollback, and monitoring on Kubernetes using Argo Rollouts and GitOps — with practical steps small teams can actually sustain.
As AI automates infrastructure, are DevOps engineers really becoming irrelevant? The reality is the opposite — demand for MLOps Kubernetes talent is surging. Here are the 5 skills you need in 2026.
A practical guide to GitOps-based Kubernetes declarative deployment with ArgoCD. Covers repository structure, Sync Waves, ApplicationSets, and multi-cluster management.
A practical guide to ci-cd pipeline security from a DevSecOps perspective. Covers SAST/DAST, supply chain protection, the SLSA framework, and Policy as Code.
Master Docker multi-stage builds to reduce production images by up to 97%. Learn stage separation, layer caching, distroless base images, and ci-cd integration techniques.
Learn how to build a Kubernetes ci-cd pipeline with GitHub Actions. Covers Helm deployments, ARC auto-scaling, security scanning, and production best practices.
A practical guide to automating container deployment with GitLab ci-cd and the Kubernetes Agent. Covers pipeline setup, Auto DevOps, security, and multi-environment strategies.