Security on Dev & Platform Engineering Hub

Kubernetes Ep 13: RBAC, ServiceAccounts & Security

Mon, 10 Aug 2026 01:05:00 +0000

Security in Kubernetes follows the Principle of Least Privilege. Role-Based Access Control (RBAC) regulates who (Users, Groups, or ServiceAccounts) can perform which actions (verbs: get, list, create, delete) on which resources (nouns: pods, services, secrets).

Kubernetes Ep 7: ConfigMaps, Secrets & Environment Variables

Mon, 10 Aug 2026 00:35:00 +0000

The Twelve-Factor App methodology mandates strict separation of application code from configuration settings. ConfigMaps store non-sensitive configuration data (URLs, log levels), while Secrets store sensitive values (passwords, API tokens, TLS keys).

Kratix Ep 7: Secrets Management with ESO and Vault

Sun, 09 Aug 2026 21:10:00 +0000

GitOps has one fatal flaw: You cannot commit secrets to a Git repository. When Kratix generates a Redis password during a Pipeline execution, how does it securely deliver that password to the Worker Cluster? In this episode, we solve the GitOps secrets problem using HashiCorp Vault and ESO.

Crossplane Ep 14: Custom Composition Webhooks

Sun, 09 Aug 2026 19:30:00 +0000

OpenAPI schema validation (like type: integer) is too basic for enterprise security. What if you need to enforce that a database’s storage size is an even number, or that the requested environment matches a specific regex? In this episode, we write a Kubernetes Validating Webhook in Go to intercept and inspect Crossplane Claims.

Pulumi Ep 14: Policy as Code with CrossGuard

Sun, 09 Aug 2026 16:30:00 +0000

In Terraform, enforcing security rules requires external tools like OPA (Open Policy Agent) and Rego. Pulumi provides a native Policy-as-Code engine called CrossGuard. In this episode, we will write TypeScript policies that act as a strict firewall, preventing developers from provisioning insecure infrastructure.

Docker Ep 2: Writing Production Dockerfiles

Sun, 09 Aug 2026 16:25:00 +0000

Shipping a 1GB Docker image containing compilers, debuggers, and build tools to production is a security nightmare. Multi-Stage Builds allow you to separate the build environment from the tiny runtime container.

CKS Deep Guide: Cluster Hardening & Runtime Security

Sun, 09 Aug 2026 16:15:00 +0000

The Certified Kubernetes Security Specialist (CKS) is the pinnacle performance exam testing your ability to secure containerized workloads, harden Kubernetes clusters, and detect runtime attacks.

KCNA Ep 5: Cloud Native Security & GitOps Practices

Sun, 09 Aug 2026 13:25:00 +0000

Modern cloud-native operations rely on declarative security governance (RBAC, Network Policies) and automated continuous delivery (GitOps). In this final KCNA episode, we cover security fundamentals, GitOps workflows, and Service Meshes.

Terraform Ep 2: Providers, Plugins, and Secure Authentication

Sun, 09 Aug 2026 09:20:00 +0000

Terraform itself cannot create an AWS EC2 instance. It relies on ‘Providers’ (plugins) to translate HCL code into cloud-specific API calls. In this episode, we connect Terraform to AWS and establish a secure, production-grade authentication mechanism.