Mar 5 · 5 min read · Day 4 of 100 Days of DevOps Permission drift is the silent killer of production automation. You deploy a script with chmod 755, and three months later it's 000 or 777. Your cron job fails at 2 AM, you
Join discussion
Mar 3 · 4 min read · Day 2 of 100 Days of DevOps Introduction Every production environment has them. Contractors who need temporary access. Consultants brought in for specific projects. Developers rotating through on-cal
Join discussion
Sep 11, 2025 · 2 min read · The Problem Statement There are two pods: "logger" and "logshipper" living in the default namespace. Unfortunately, logshipper has an issue (crashlooping) and is forbidden to see what logger is trying to say. Could you help fix Logshipper? Do not cha...
Join discussion
May 12, 2025 · 4 min read · Kubernetes is one of the most powerful container orchestration platforms, but it comes with a steep learning curve—especially when it comes to understanding authentication and authorization. One common point of confusion for beginners and even interm...
Join discussion
Jan 10, 2025 · 1 min read · This is a quick recap for RBAC, more details can check the official doc or click the tiltle links. ServiceAccount (sa) 1. Yaml File 2. CMD kubectl create serviceaccount NAME -n NAMESPACE Role/Clusterrole 1. Yaml File 2. CMD kubectl create [role|clu...
Join discussionNov 10, 2024 · 4 min read · In Kubernetes, ServiceAccounts are integral to how processes within a Pod securely communicate with the API server. By default, every Pod is assigned a ServiceAccount, enabling access to the Kubernetes API. However, for more fine-grained security and...
Join discussion
Sep 26, 2024 · 2 min read · In Kubernetes, fine-grained access control is essential for securing cluster resources and defining who can do what. Role-Based Access Control (RBAC) is the built-in mechanism that lets you assign permissions to users, groups, and service accounts. I...
Join discussion
Sep 26, 2023 · 4 min read · What is iRSA? IAM Roles for Service Accounts (IRSA) is a system that automates the provisioning and rotation of IAM temporary credentials, known as Web Identity tokens, which a Kubernetes ServiceAccount can utilize for making AWS API calls. With IRSA...
Join discussion
