Kubernetes

Using Bitwarden Secrets Manager with Kubernetes

Lessons Learned

Managing secrets in Kubernetes is one of those topics that looks simple at first and slowly becomes more opinionated the deeper you go. Over time, tooling choices start to matter less in theory and much more in day-to-day operations. Recently, I...

Run NGINX Securely in Kubernetes

Why You Should Stop Using the Default Image

When deploying NGINX in Kubernetes, many teams still use the default nginx image from Docker Hub, it’s what most quick-start examples show, so it feels natural. But there’s a hidden problem: that image runs as root by default. That might not sound...

From Observability to Action: Using Falco for Kubernetes Threat Detection

Learn how to integrate Falco into your cluster for real-time alerts, custom rules, and enhanced runtime security.

Modern cloud-native environments built on Kubernetes offer unprecedented flexibility and scalability, but with this power comes a new set of security challenges. Containers are ephemeral, workloads are dynamic, and threats can appear and disappear...

CIS Benchmark for Kubernetes

A kube-bench Approach

In today’s rapidly evolving IT landscape, ensuring the security and compliance of container orchestration platforms like Kubernetes is more critical than ever. The kube-bench tool, developed by Aqua Security, plays a pivotal role in this domain. It...

Hardening Kubernetes Nodes on Ubuntu

A CIS Benchmark Approach

Hardening a Kubernetes cluster begins at the node level. This guide explains how to secure Ubuntu-based Kubernetes nodes by applying the CIS (Center for Internet Security) Benchmark, which provides a detailed set of best practices for reducing...

Understanding the Components of Kubernetes

Understanding the Basics Part 2

Kubernetes is renowned for its ability to orchestrate containerized applications at scale. To fully appreciate how it works, it’s important to understand the key components that make up its architecture. In this article, we’ll dive into the core...

Introduction to Kubernetes

Understanding the Basics

Kubernetes has emerged as one of the leading platforms for managing containerized applications at scale. In this article, we’ll provide a high-level overview of Kubernetes, explore its core architecture and highlight how it compares to Docker or...

Integrating Zitadel as an OIDC Provider in Grafana

Improve your Grafana authentication flow with Zitadel’s OpenID Connect integration

While securing my Grafana instance with Zitadel as an OpenID Connect (OIDC) provider, I encountered several challenges and gained valuable insights. Since documentation on this integration is limited, I’m sharing my step-by-step guide to help others...

Resume

About Me I build Kubernetes platforms that scale, secure, and simplify complex systems. Senior Platform Engineer with 8+ years of experience designing and operating cloud-native platforms across on-premise and cloud environments. I specialize in...