blog

  •  Home
  •  About
  •  Blog
  •  Projects
  •  Posts
  •  Categories
  •  Contact
  • Search
  • Menu
  •  Home

  •  About

  •  Blog

  •  Projects

  •  Posts

  •  Categories

  •  Contact

Recent Posts

Hosting Kubernetes in Canada: Sovereign Infrastructure and Self-managed Clusters

August 26, 2026

Managing Eks Access at Scale with Centralized Identity and Short-lived Credentials

August 23, 2026

Single-node K3s: Production-grade Homelab Foundation

August 22, 2026

Running Gitea Actions Without Docker on Kubernetes

August 20, 2026

Migrating Kubernetes Workloads: Tools and Tradeoffs for Cluster, Storage, and Dependencies

August 19, 2026
View more posts

Avoiding Extended Support Tax in Production Kubernetes

Proactive lifecycle management and strict version control prevent extended support costs in Kubernetes environments.

March 26, 2026 JR

3 minute read

Proactive lifecycle management and strict version control prevent extended support costs in Kubernetes environments.

  • Continue Reading
    • Kubernetes
    • Security
    • DevSecOps

Secure Internal Applications with Layered Access Controls on Envoy Gateway

Use IP allowlisting for a basic perimeter, combine with OIDC for identity verification.

March 25, 2026 JR

3 minute read

Use IP allowlisting for a basic perimeter, combine with OIDC for identity verification, and consider zero trust overlays like OpenZiti for scalable security.

  • Continue Reading
    • Kubernetes
    • Security
    • DevSecOps

RBAC Audit Compliance for Kubernetes: Practical Enforcement and Verification

Implement RBAC audits by enforcing policies with Kyverno, validating access controls.

March 24, 2026 JR

2 minute read

Implement RBAC audits by enforcing policies with Kyverno, validating access controls, and maintaining audit trails to meet compliance requirements.

  • Continue Reading
    • Kubernetes
    • Security
    • DevSecOps
  • Previous Page
  • Next Page
Hugo Future Imperfect

OpenShift & Kubernetes Mechanic

Preventative maintenance, routine care, and repairs for Kubernetes & OpenShift clusters

Recent Posts

Hosting Kubernetes in Canada: Sovereign Infrastructure and Self-managed Clusters

August 26, 2026

Managing Eks Access at Scale with Centralized Identity and Short-lived Credentials

August 23, 2026

Single-node K3s: Production-grade Homelab Foundation

August 22, 2026

Running Gitea Actions Without Docker on Kubernetes

August 20, 2026

Migrating Kubernetes Workloads: Tools and Tradeoffs for Cluster, Storage, and Dependencies

August 19, 2026
View more posts

Categories

devsecops 183

kubernetes 183

security 183

news 16

coding 14

infrastructure-management 12

infrastructure 11

k8s 5

living 4

nagios 3

openshift 3

check_mk 1

features 1

hugo 1

motorycles 1

powershell 1

About

I’m a Red Hatter working as a Solutions Architect, formerly a Senior Cloud Success Architect, with a focus on and passion for OpenShift and Ansible. Previous life? Cloud Advanced Technology Lead & Big Data Engineer for Lockheed Martin Space, IT/IS Data Center Manager for Lockheed Martin IS&GS, and Senior Infrastructure Designer/Administrator for the City of Gainesville & City of Alachua.

Learn More

© 2026 Live Average . Powered by Hugo