---
title: "Discussion on \"Harden & Lockdown RKE2 Cluster with a 4-Layer DevSecOps Stack\" | Hashnode"
description: "Discussion on \"Harden & Lockdown RKE2 Cluster with a 4-Layer DevSecOps Stack\". I poured the concrete with Terraform. I framed the house with Ansible and RKE2. Before moving the furniture in, I installed the locks, cameras, alarms, and guards."
url: "https://hashnode.com/posts/harden-lockdown-rke2-4-layer-devsecops-stack/6aa72f10cca5078c78064081"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Harden & Lockdown RKE2 Cluster with a 4-Layer DevSecOps Stack](https://georgeezejiofor.com/harden-lockdown-rke2-4-layer-devsecops-stack?utm_source=hashnode&utm_medium=feed)

I poured the concrete with Terraform. I framed the house with Ansible and RKE2. Before moving the furniture in, I installed the locks, cameras, alarms, and guards.

Sep 13 · 26 min read · georgeezejiofor.com  
Read the article

-   [#kyverno](https://hashnode.com/tag/kyverno)
-   [#devsecops](https://hashnode.com/tag/devsecops)
-   [#kubernetes](https://hashnode.com/tag/kubernetes)
-   [#kubearmor](https://hashnode.com/tag/kubearmor)
-   [#falco](https://hashnode.com/tag/falco)
-   [#trivy](https://hashnode.com/tag/trivy)
-   [#devops](https://hashnode.com/tag/devops)
-   [#kubernetes-container](https://hashnode.com/tag/kubernetes-container)
-   [#kubernetes-architecture](https://hashnode.com/tag/kubernetes-architecture)
-   [#kubeweekchallenge](https://hashnode.com/tag/kubeweekchallenge)
-   [#kubernetes-persistent-volumes](https://hashnode.com/tag/kubernetes-persistent-volumes)
-   [#kubernetes-pods](https://hashnode.com/tag/kubernetes-pods)
-   [#kubectl](https://hashnode.com/tag/kubectl)
-   [#homelab](https://hashnode.com/tag/homelab)
-   [#keycloak](https://hashnode.com/tag/keycloak)
-   [#containers](https://hashnode.com/tag/containers)
-   [#platform-engineering](https://hashnode.com/tag/platform-engineering)

## Written by

[George Ezejiofor](https://hashnode.com/@georgeezejiofor)

@georgeezejiofor · London, United Kingdom

  
[View profile](https://hashnode.com/@georgeezejiofor)

Director & AI/ML Platform / MLOps Engineer at GeoCloudTech | Kubestronaut | Kubernetes, DevSecOps and MLOps for regulated industries

I'm an AI/ML Platform and MLOps Engineer and a Kubestronaut, with 13+ years in IT and 5+ in DevOps and DevSecOps. Through my consultancy, GeoCloudTech, I design secure, highly available Kubernetes platforms for regulated industries, on cloud and on-premises. What I build: - Kubernetes platforms: RKE2, AKS, EKS, GKE - MLOps: Kubeflow, KServe, MLflow, NVIDIA GPU Operator - DevSecOps: Vault, Kyverno, KubeArmor, Trivy, signed supply chains with Tekton and Cosign - GitOps and automation: Argo CD, Flux, Terraform, Ansible - Storage and identity: Rook Ceph, CloudNativePG, Keycloak - Observability and networking: Prometheus, OpenTelemetry, Cilium, Istio Most of what I publish comes from my multi-datacentre homelab: RKE2 on Proxmox, run through GitOps. My rule: build it, break it, understand it, then harden it. Every article is a real build, traps included. Certifications: Kubestronaut (CKA, CKAD, CKS, KCNA, KCSA), HashiCorp Terraform Associate.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.