Rohan's Personal Blog
Container, Kubernetes, CI/CD
In simple terms with Azure policy, you can audit, deny, and modify if any resource is misconfigured. It’s very helpful for creating secure defaults in Azure Cloud.why would you create secure defaults?For example, if someone from your organization is...
If you have not gone through part-1(istio), I would recommend you to please visit- https://osquery.net/service-mesh-1/ & the labs are identical for this blog also. It really took a few days of effort.Linkerd uses a Rust-based micro proxy called Linkerd2-proxy....
In this blog, We will discuss how to implement end-to-end security between microservices. I will cover mostly Istio service mesh,linkerd service mesh & a hint of tenzu.If you want to reproduce the below labs you can use- https://github.com/c0ldb00t3r/k8s-poc/tree/main/service-mesh-demo.Set up...
What’s an admission controller?First of all, do you know what happens when you create a pod via Kubectl? Let’s do that -So when you create a pod, the API request goes to authentication and authorization. Then the pod object...
PSP admission controller was used by teams to validate and mutate security contexts. In simple terms, we define a set of controls with which pods can be created. If the control doesn’t satisfy it rejects or updates.If you to...