Search

Lessons (5)

• RBAC and Cluster Security

  … Treat get / list on secrets as sensitive. - Beware escalation verbs: create on pods, bind , escalate , impersonate . ServiceAccounts for …

• Your Practical Kubernetes Workflow

  … or error. Minimum safety rules - Use a dedicated ServiceAccount with only the permissions the app needs (least-privilege …

• Internals, Upgrades, Resilience and Interview Questions

  … How would you secure a cluster? Least-privilege RBAC, dedicated ServiceAccounts with workload identity, Pod Security restricted , default …

• Practical Project: Deploy a Real CRM App on EKS

  … link the role to a Kubernetes service account bash kubectl create namespace "$NAMESPACE" kubectl -n "$NAMESPACE" create serviceaccount …

• Containers at Scale: ECS Deep Dive and EKS

  … Map Kubernetes ServiceAccounts to IAM roles : - EKS Pod Identity (simpler, association-based) or IRSA (OIDC-based). - The pod …