Search

Lessons (8)

• RBAC and Cluster Security

  Control who can do what with RBAC, harden pods with security contexts and Pod Security Standards, and protect …

• Practical Project: Deploy a Real CRM App on EKS

  … source code to a secure AWS deployment: ECR images, an EKS cluster, Pod Identity for Secrets Manager, private …

• Containers at Scale: ECS Deep Dive and EKS

  … ip ). - Enforce NetworkPolicies with VPC CNI network policy support or Cilium, and attach security groups for pods when …

• Internals, Upgrades, Resilience and Interview Questions

  … How would you secure a cluster? Least-privilege RBAC, dedicated ServiceAccounts with workload identity, Pod Security restricted , default …

• StatefulSets, DaemonSets, Jobs and CronJobs

  … one pod per node Use a DaemonSet for node-level agents: log shippers, metrics exporters, CNI plugins, security …

• API Gateway, BFF & Service Discovery

  … Orders"] A[Orders app] <-- PA[🛡️ sidecar proxy] end subgraph PodB["Pod: Payments"] PB[🛡️ sidecar proxy] <-- B …

• C4 Architecture Diagrams: Context, Container, Component and Code

  … Do not put classes, folders, endpoints or Kubernetes Pods in the first two diagrams. That is too much …

• Practical Lab: S3 File Upload and CloudFront Delivery with NestJS

  … the SDK reads env vars locally // and the task/instance/pod role when running on AWS. this.s3 …