Articles tagged with "security"
Kubernetes certificate management is technically a matter of days. What actually takes time is the organizational process of getting sign-off. Here's how cert-manager automates the technical side, and how to design away the operational debt that remains.
Code generated and executed by AI agents can no longer be treated as a trusted, reviewed product. This article explains the limits of container isolation and why Kata Containers' microVM isolation is becoming essential when designing AI agent sandboxes on Kubernetes.
Container image signing explained: tags can be overwritten by anyone, and passing CI tests doesn't guarantee the image running in production is the one you built. Learn how Sigstore and Kyverno work together to reject unsigned images on Kubernetes/K3s, integrated into a GitOps workflow.
Kubernetes Secrets are only Base64-encoded, not encrypted. Learn how plaintext-equivalent storage in etcd and over-permissioned RBAC lead to real incidents, plus the concrete Secrets management practices you need for production K3s.
Shadow AI isn't just unauthorized SaaS tools. It's happening inside your Kubernetes clusters too. Here's the risk it creates, and how Admission Control turns detection into real governance.
Explore how to leverage Kubernetes v1.36 'Haru' enhanced User Namespaces and security features in K3s lightweight environments. Discover managed K3s operational strategies and 2026 infrastructure selection guidelines that achieve 60% cost reduction compared to EKS.
Automate TLS certificate issuance and renewal in Kubernetes using cert-manager. Covers Let's Encrypt, ACME challenges, Ingress integration, and best practices.
A practical guide to ci-cd pipeline security from a DevSecOps perspective. Covers SAST/DAST, supply chain protection, the SLSA framework, and Policy as Code.
Discover how Cilium uses eBPF to transform Kubernetes networking. Compare with traditional CNIs, explore L7 policies, and leverage Hubble for observability.
Complete guide to deploying and operating Harbor as your private container registry. Covers Trivy integration, RBAC, image replication, Helm deployment, and enterprise security features.
A practical guide to integrating vulnerability scanning into your container ci-cd pipeline. Compare Trivy, Snyk, and Grype, implement shift-left security, and build defense-in-depth with Harbor.
Comprehensive 2025 Dockerfile best practices guide covering minimal base images, layer optimization, security hardening, BuildKit features, and production-ready container image construction.
Learn how to run K3s in production with confidence. Covers HA architecture, security hardening, monitoring, backup strategies, and resource management.
Implement zero trust networking in Kubernetes with Network Policies. From Default Deny to Cilium and Calico advanced policies with real YAML examples.