Cilium

Securing CI/CD for an open source project: Locking down dependencies

Part two This is the second post in a three-part series on how Cilium hardens its CI/CD pipeline. Part 1 covered access control: who can trigger builds and what code CI is allow...

Understanding Kubernetes Network Security

The ephemeral nature of cloud-native workloads has fundamentally changed the Network Security models. In a microservices architecture…

Kubernetes Runtime Security : The Guide

Runtime security is the continuous process of protecting applications, workloads, and infrastructure while they are actively running…

Understanding Kubernetes Microsegmentation

Introduction Kubernetes Microsegmentation is the security practice of dividing a cluster into small, isolated segments to limit the blast…

Securing CI/CD for an open source project: lessons from Cilium

Tetragon 1.7: Precision filtering, richer context, and better performance

Blog: Bootstrapping Flux with Terraform, the right way

This post introduces a new Terraform module (fully compatible with OpenTofu) that bootstraps Flux Operator into a Kubernetes cluster and then steps aside, letting Flux do what F...