Tag: kubernetes
All the articles with the tag "kubernetes".
-
Least Privilege Is a UX Problem
Everyone agrees with least privilege and almost nobody ships it, because the broad grant is always the easier path. Fix that, make scoping the path of least resistance, and the security follows for free.
-
The CNI Already Moves Your Packets. Calico Is for the Rules.
Running Calico in policy-only mode on top of the AWS VPC CNI, why two network layers in one cluster is the right call, and the one flag that stops Calico from breaking your cluster.
-
When Kubernetes Scales, But Your Network Design Does Not
Kubernetes can scale pods, but that does not mean your TCP connections, clients, queues and failover model are ready to scale with it.
-
How a Packet Actually Reaches Your Pod
A visual walk through every hop a request takes from load balancer to pod, why the service is a fiction, and why so many cluster network failures are silent.