Article archive

More articles

Browse older engineering guides and field notes, page 20.

Continue browsing

Articles

DevOps

Pod Security Standards: A Security-First Guide

Kubernetes Pod Security Standards 📌 TL;DR: I enforce PSS restricted on all production namespaces: runAsNonRoot: true, allowPrivilegeEscalation: false, all capabilities dropped, read-only root filesystem. Start with warn mode…