@makau

Juan Makau

@makauNairobi, KenyaJoined July 2026

Securing the path from code to cluster.

About

Senior DevOps Engineer based in Nairobi, focused on DevSecOps and software supply chain security across AWS and GCP. I write about the real bugs I hit building Kubernetes policy enforcement, CI/CD pipelines, and infrastructure as code — not textbook examples.

Available for

Nothing here yet.

Juan Makau's blogs

Juan Makaujuanmakau.hashnode.dev1 post

Articles Comments

Recently published

JMJuan Makaujuanmakau.hashnode.devJul 23 · 7 min read

Testing Kyverno Attestation Policies: The Bug That Shipped Twice, and What I Built to Stop a Third

You can write a Kyverno policy, pass kubectl apply --dry-run, get a clean code review, and still ship a policy that admits exactly the images it was supposed to block. Dry-run validates that your YAML

Juan Makau

About

Available for

Juan Makau's blogs

Recently published

Testing Kyverno Attestation Policies: The Bug That Shipped Twice, and What I Built to Stop a Third

Search Hashnode

Juan Makau

About

Available for

Juan Makau's blogs

Recently published

Testing Kyverno Attestation Policies: The Bug That Shipped Twice, and What I Built to Stop a Third