Security

~/posts/dapr 20 min · 4245 words

$ Dapr - Building a Safe Platform for Citizen Developer Apps on Kubernetes

// How to use Dapr, Flux, Harbor, and a shared Helm chart to safely host apps built by non-technical citizen developers using LLMs on Kubernetes.

~/posts/oauth2-proxy 21 min · 4283 words

$ OAuth2-Proxy - Securing MCP Servers on Kubernetes Before Hackers Find Them First

// MCP servers like DBHub expose databases, filesystems, and code execution over HTTP with zero authentication. Learn how to deploy OAuth2-Proxy on Kubernetes to add SSO, group-based access control, and session management to any MCP server without changing a single line of code.

~/posts/k8s-multi-tenancy 21 min · 4444 words

$ Building a Multi-Tenancy Platform with Capsule and vCluster - Hard vs Soft Isolation

// Learn how to build secure, scalable multi-tenant Kubernetes platforms using Capsule for namespace-based isolation and vCluster for virtual cluster deployment. Compare architectures, explore production use cases, and implement cost-effective multi-tenancy patterns with practical examples and complete demos.

~/posts/tetragon 10 min · 2101 words

$ Cilium Tetragon - Next-Generation Runtime Security for Kubernetes

// Explore Cilium Tetragon, an eBPF-based security observability and runtime enforcement platform that provides kernel-level protection for Kubernetes workloads with minimal overhead.

~/posts/istio-ambient-mesh 4 min · 785 words

$ Simplifying Kubernetes Service Mesh - A Deep Dive into Istio Ambient Mesh

// A comprehensive guide to Istio Ambient Mesh, exploring its sidecar-less architecture, performance benefits, and practical implementation steps. Learn how zTunnel and Waypoint Proxy revolutionize service mesh deployment while reducing resource overhead.

~/posts/kubernetes-security-with-kubescape 3 min · 585 words

$ Embracing Enhanced Kubernetes Security with Kubescape

// Discover how Kubescape enhances Kubernetes security and compliance.

~/posts/minimal-base-images 3 min · 507 words

$ Embracing Minimalist Containerization

// Explore how minimalist containerization with tools like Scratch and Alpine can transform application deployment, enhancing efficiency and security.

~/posts/admission-controller-policies 6 min · 1073 words

$ Admission Controller policies

// Kubernetes Admission Controllers are gatekeepers that enforce rules on API requests, with Kyverno providing flexible policy management through validation, mutation, and generation of resources.

posts tagged #Security