Day 8 of my Kubernetes journey covers two things that are really one thing, how you talk to a cluster:Your ~/.kube/config isn't a config file. It's a credential. Treat it like an SSH private key. 馃攽 Kubeconfig = clusters (where) + users (who) + contexts (which user on which cluster). current-context Jul 8 路 1 min readkkubernetes-k8s.hashnode.dev
Day 7: Kubernetes Certificates, Finally Explained Without the Hand-WavingI ended my last post saying the whole cluster trusts one thing: the TLS mesh between its components. That felt like a cop-out to leave hanging, so this is me actually opening it up. Every piece of KubJul 6 路 2 min readkkubernetes-k8s.hashnode.dev
Day 6: Who Are You, and What Can You Do? Kubernetes Auth, DemystifiedEvery command you run against a cluster goes through one door: the API server. So the first real question in Kubernetes security isn't "how do I stop attackers", it's simpler and sharper. Who are you,Jul 5 路 2 min readkkubernetes-k8s.hashnode.dev
Day 5: Stop Guessing Whether Your Kubernetes Cluster Is HardenedHere's a question that's been nagging me: I can list a dozen ways a cluster gets popped, but how do I actually prove mine isn't sitting wide open? "I think it's fine" isn't an answer I'd accept from aJul 5 路 2 min readkkubernetes-k8s.hashnode.dev
Day 4: The 4Cs of Cloud Native Security, and the Poll That LiedPicture an online poll where thousands of people vote for their favourite programming language. The results page shows Python running away with it, miles ahead of everything else. The votes look real.Jul 5 路 2 min readkkubernetes-k8s.hashnode.dev
