From Browser Click to MongoDB Query: How Traffic Actually Flows Inside a Kubernetes ClusterNode IPs, Pod IPs, ClusterIPs, DNS, kube-proxy, and why my database Service has no IP at all15 min read·devseccloud.hashnode.devOct 25
Running a Database as a Kubernetes Deployment? Watch Out for This Rolling-Update TrapHow ReadWriteOnce volumes can stall a database rollout, what StatefulSets actually fix, and what they don't.6 min read·devseccloud.hashnode.devOct 22
Catching over-permissive IAM in the pull request, not in productionWhy I built Cloud Policy Guard: a small Python CLI that reads a Terraform plan, scores IAM risk, and fails the pipeline before a wildcard policy ever reaches AWS.3 min read·devseccloud.hashnode.devOct 15
Hardening a 3-tier app before Kubernetes: 6 things that were quietly brokenBefore moving Deal Aggregator to Kubernetes I audited it the way an attacker would. Public delete endpoints, a ReDoS hole, an unauthenticated database and internal tools on the open internet. Here is what I found and how I fixed each one.5 min read·devseccloud.hashnode.devOct 15
