Kubernetes Pod Security Standards 📌 TL;DR: I enforce PSS restricted on all production namespaces: runAsNonRoot: true, allowPrivilegeEscalation: false, all capabilities dropped, read-only root filesystem. Start with warn mode to find violations, then… Read article
Category: DevOps
DevOps on orthogonal.info covers the tools, workflows, and architectural patterns that bridge development and operations — from container orchestration and GitOps to CI/CD pipelines and infrastructure as code. This category is built on the conviction that great DevOps is not about adopting every trending tool, but about building reliable, observable, and repeatable systems. Every guide reflects real production experience, not sandbox demos.
With 16 detailed posts spanning Kubernetes, Docker, ArgoCD, and beyond, DevOps is a core pillar of the site’s mission to deliver practical DevSecOps knowledge.
Key Topics Covered
Kubernetes operations — Cluster setup, namespace strategies, resource management, Helm chart authoring, and day-two operations like upgrades, backup, and disaster recovery with k3s, kubeadm, and managed clusters.
GitOps and continuous delivery — Implementing declarative deployments with ArgoCD and Flux, managing Kustomize overlays, and structuring Git repositories for multi-environment promotion.
CI/CD pipelines — Building efficient pipelines with GitHub Actions, GitLab CI, and Gitea Actions, including matrix builds, caching strategies, and secure artifact publishing.
Docker and container engineering — Multi-stage Dockerfiles, image optimization, layer caching, and container runtime configuration for both development and production workloads.
Infrastructure as code (IaC) — Provisioning and managing infrastructure with Terraform, Pulumi, and Ansible, including state management, module design, and drift detection.
Observability and monitoring — Setting up Prometheus, Grafana, Loki, and OpenTelemetry for metrics, logs, and distributed tracing across containerized services.
Networking and service mesh — Configuring ingress controllers (Traefik, NGINX), cert-manager for automated TLS, and service mesh fundamentals with Istio and Linkerd.
Who This Content Is For
The DevOps category is written for platform engineers, site reliability engineers (SREs), backend developers managing their own deployments, and system administrators transitioning to cloud-native workflows. Whether you are running a single-node k3s cluster at home or managing production Kubernetes across multiple clouds, the content scales to your context. Articles assume familiarity with Linux and containers but explain orchestration and IaC concepts from first principles when needed.
What You Will Learn
Through the DevOps guides on orthogonal.info, you will learn how to design and implement modern deployment pipelines that are reproducible, auditable, and secure. You will gain hands-on experience with GitOps workflows, understand how to structure Kubernetes manifests for multi-environment promotion, build CI/CD pipelines that catch failures early, and set up observability stacks that give you real visibility into your systems. Each article includes tested manifests, pipeline configurations, and architecture diagrams you can adapt to your own infrastructure.
Browse the posts below to level up your DevOps practice.
-

I Tested ArgoCD and Flux Side by Side — Here’s What Won for Secure GitOps
I run ArgoCD on my TrueNAS homelab for all container deployments. Every service I self-host — Gitea, Immich, monitoring stacks, even this blog’s CI pipeline — gets deployed through ArgoCD syncing from… Read article
-

Mastering Kubernetes Security: Network Policies &
Network policies are the single most impactful security control you can add to a Kubernetes cluster — and most clusters I audit don’t have a single one. After implementing network segmentation across… Read article
-

Securing Kubernetes Supply Chains with SBOM & Sigstore
Secure your Kubernetes supply chain with SBOMs and Sigstore. Production-proven approach to container image signing, verification, and DevSecOps compliance. Read article
-

Kubernetes Secrets Management: A Security-First Guide
Most Kubernetes secrets are dangerously insecure by default. Learn sealed secrets, external vaults, RBAC policies, and encryption-at-rest best practices. Read article
-

Kubernetes Security Checklist for Production (2026)
A comprehensive Kubernetes security checklist for production in 2026. Covers RBAC, network policies, image scanning, runtime security, and audit logging. Read article
-

GitOps Security Patterns for Kubernetes
Production-proven GitOps security patterns for Kubernetes. Covers sealed secrets, policy-as-code, drift detection, and secure ArgoCD configurations. Read article
-

Secure C# ConcurrentDictionary for Production
Production-ready C# ConcurrentDictionary with a security-first approach. Covers thread safety, DoS-resistant patterns, and DevSecOps best practices. Read article
-

Boost C# ConcurrentDictionary Performance in Kubernetes
Learn how to optimize C# ConcurrentDictionary for high performance in Kubernetes. Explore thread safety, scalability, and best practices for developers. Read article
-

Scaling GitOps Securely: Kubernetes Best Practices
Learn best practices for scaling GitOps securely in Kubernetes. Covers RBAC, secrets management, policy enforcement, and multi-cluster security patterns. Read article
