MRMuhammad Rafayinblog.muhammadrafay.com路18h ago 路 7 min readHow to Design a Production-Grade Google Cloud Landing Zone with TerraformBefore you deploy applications to Google Cloud, you need clear boundaries. You need to know which project each resource lives in, which network it uses, who can access it, and which security controls 00
MRMuhammad Rafayinblog.muhammadrafay.com路Aug 15 路 9 min readProduction Kubernetes Security: Enforcing Zero Trust with Kyverno & OPA GatekeeperScanning and signing can confirm an image is acceptable, but they don't prevent unsafe images from running. Admission control fills this gap. However, many teams either skip this step or only partiall00
MRMuhammad Rafayinblog.muhammadrafay.com路Aug 15 路 8 min readProduction Kubernetes Security: Building a Zero-Trust Supply Chain with Trivy, Cosign, and FalcoKubernetes made orchestration easier, but it didn鈥檛 fix security. In fact, for many organisations, it quietly made things harder. Teams that once focused on securing a few monolithic servers now manag00
