1. “Kubernetes security fundamentals: Admission Control” by Rory McCune, Datadog.
“In this post we'll take a look at admission control, another key aspect of Kubernetes security. Admission control is the last of the three stages that requests go through when they're being processed by a Kubernetes cluster. Assuming that the request has valid credentials and is authorized, Kubernetes admission controllers will process the request and may modify or reject it during that process.”
2. “High Availability Alertmanager on Kubernetes: No Alerts Left Behind” by Joe Banks.
“For alerting in Python Discord and other personal projects I am a big fan of AlertManager. Unlike other much more complex alerting and on-call systems, AlertManager is a dead-simple Go application which is easy to deploy and configured solely with YAML files. [..] This article covers my approach to making AlertManager highly available on Kubernetes, and how you can do the same.”
3. “Developer's Guide to Installing OpenTelemetry Collector” by Prathamesh Sonpatki, Last9.
“Learn how to install and configure the OpenTelemetry Collector for enhanced observability. This guide covers Docker, Kubernetes, and Linux installations with step-by-step instructions and configuration examples.”
4. “Using GitHub as a Helm Chart Repository” by Christian Huth.
“GitHub Pages in combination with the GitHub Releaser Action make it really easy to publish your Helm Charts securely and reliably. You can use a custom domain to change the default domain to suit your needs and make the Helm Repository easily accessible. [..] In this guide, I'll show you how to set up a Helm Chart Repository in less than 10 minutes using GitHub Pages and GitHub Action Workflows.”
5. “Securing Kubernetes and Containers: Best Practices to Reduce Attack Surface” by Nathan Hueck.
“By following these best practices for securing Kubernetes and Containers in cloud environments, you can significantly reduce the attack surface and ensure that your containerised workloads are protected from common security threats. [..] Secure the Kubernetes API; Secure the Kubelet; Pod Security; Network Security; Secrets Management; Image Security; Monitoring and Logging; Regular Patching and Updates; Auditing Kubernetes; Additionally Securing Containers.”
#articles