Search

Lessons (6)

• Cluster Networking, DNS and NetworkPolicies

  … The plugin you choose decides performance, observability and whether NetworkPolicies are enforced. How a Service really works A …

• Troubleshooting Playbook

  … name DNS problem Works from one namespace only NetworkPolicy Test from inside the cluster: bash kubectl run -it …

• RBAC and Cluster Security

  … runtime anomalies with Falco or Tetragon. - Combine with NetworkPolicies and keep the API server off the public internet …

• GitOps, Progressive Delivery and Observability

  … neighbours. - Use namespaces with ResourceQuota , LimitRange , RBAC and NetworkPolicies per team. - Use spot or preemptible nodes for fault …

• Internals, Upgrades, Resilience and Interview Questions

  … with workload identity, Pod Security restricted , default-deny NetworkPolicies, encrypted and externalized secrets, image scanning and signing, admission …

• Containers at Scale: ECS Deep Dive and EKS

  … ip ). - Enforce NetworkPolicies with VPC CNI network policy support or Cilium, and attach security groups for pods when …