May 22 · 10 min read · Previously in Part 6: We wired up Vault Kubernetes auth, installed Crossplane with the AWS provider, and applied LimitRanges mirroring the production configuration that resulted from a real disk-press
Join discussion
Nov 28, 2025 · 5 min read · This is a quick notes and summary from office doc. this is a quick look at log audit. more detail about the log audit, pls refer to the official doc about audit and also can check my previous article: kubernets related logs & configurations which ...
Join discussionNov 27, 2025 · 2 min read · TLS # generate TLS cert and key openssl command [ options ... ] [ parameters ... ] 1. TLS config files About TLS we will mainly focus on 3 levels/types encryption in this article. inside cluster communication (/etc/kubernetes/pki/*) client (kubect...
Join discussionNov 25, 2025 · 2 min read · For Pod Security, there are basically two layers/types: Pod security settings for each pod namespace labels for Pod Security Admission (PSA) Layer A: Pod security settings Defined in: spec.containers[*].securityContext spec.securityContext This ...
Join discussionNov 24, 2025 · 3 min read · Previous Notes about the Apiserver request security we have shown two identities (node identity /etc/kubernetes/kubelet.conf and admin cluster identity ~/.kube/config ). Now we will talk about another identity, it is used for the Pods — ServiceAccoun...
Join discussionNov 21, 2025 · 3 min read · With the experience shared by people on the internet, I summarized some key aspects as a series of articles for preparing the CKS exam. Each aspects should be in short concise points, so this is not a detailed tutorial, just some practical reminders....
Join discussionNov 13, 2025 · 7 min read · When working with Kubernetes, developers often need a way to access applications or services running inside the cluster — without exposing them to the public internet. 1. Why Do We Need Local Access to Cluster Resources? In a secure Kubernetes archit...
Join discussion
Oct 31, 2025 · 2 min read · Ao longo da minha jornada profissional com Kubernetes, enfrentei (e venci!) o desafio de obter as principais certificações oferecidas pela CNCF. Foram meses de estudos focados, prática intensa e aprendizado contínuo – que resultaram nas seguintes con...
Join discussionAug 12, 2025 · 5 min read · Redirection operators(>> vs >) : > and >> are redirection operators used to send output to files instead of the terminal. Here's what they mean: > : Redirect and Overwrite Redirects stdout (standard output) to a file. Overwrites the file if it exi...
Join discussion
Jun 21, 2025 · 6 min read · Si estás leyendo esto, probablemente compartas conmigo esa fascinación por el mundo Cloud Native. Cuando me enteré del programa Kubestronaut de la CNCF, lo tomé como un reto interesante, una forma objetiva de medir en qué nivel realmente me encontrab...
Join discussion
