Istio's Envoy sidecar intercepts most outbound traffic via iptables but excludes specific UIDs, protocols.
Istio’s Envoy sidecar intercepts most outbound traffic via iptables but excludes specific UIDs, protocols, and lacks as a security boundary.
A structured approach to assess and improve your Kubernetes learning path with practical validation steps and common pitfalls.
A structured approach to assess and improve your Kubernetes learning path with practical validation steps and common pitfalls.
A production-ready Kubernetes cluster prioritizes reliability, observability.
A production-ready Kubernetes cluster prioritizes reliability, observability, and maintainability through hardened configurations, automated remediation, and strict access controls.
Use version-controlled, idempotent migrations with lifecycle hooks, test locally with kind.
Use version-controlled, idempotent migrations with lifecycle hooks, test locally with kind, and enforce policy-driven rollouts to avoid downtime and data loss.
Implement network policies, Pod Security Admission, and resource constraints to harden Kubernetes pods against common threats.
Implement network policies, Pod Security Admission, and resource constraints to harden Kubernetes pods against common threats.
Preventative maintenance, routine care, and repairs for Kubernetes & OpenShift clusters
I’m a Red Hatter working as a Solutions Architect, formerly a Senior Cloud Success Architect, with a focus on and passion for OpenShift and Ansible. Previous life? Cloud Advanced Technology Lead & Big Data Engineer for Lockheed Martin Space, IT/IS Data Center Manager for Lockheed Martin IS&GS, and Senior Infrastructure Designer/Administrator for the City of Gainesville & City of Alachua.
Learn More
Share this post
Twitter
Google+
Facebook
Reddit
LinkedIn
StumbleUpon
Pinterest
Email