What Is a Rootless Container? Hardening an Image from Root to Non-Root, Measured Security · 02 November 2026 · 17 min read
What Is the Difference Between SAST and DAST? Semgrep, Bandit and OWASP ZAP Against 10 Planted Bugs Security · 30 October 2026 · 19 min read
What Is a Git Branching Strategy? GitFlow, GitHub Flow and Trunk-Based Development for GitOps, and How to Promote Images DevOps · 28 October 2026 · 20 min read
What Is a Zero-Downtime Deployment? Rolling, Recreate, Blue/Green and Canary, Measured on Kubernetes platform-engineering · 26 October 2026 · 10 min read
What Is Tetragon? What It Solves, What You Gain, and a Kubernetes Lab That Kills a Process Before It Reads a Secret Security · 23 October 2026 · 10 min read
What Is Cilium Cluster Mesh? What It Solves, What You Gain, and a Lab with Two kind Clusters and Failover platform-engineering · 21 October 2026 · 11 min read
What Is a Sidecar-less Service Mesh? What It Solves, What You Gain, and a Cilium Lab with WireGuard and Mutual Auth platform-engineering · 19 October 2026 · 10 min read
What Is Cilium Gateway API? What It Solves, What You Gain, and a Lab Without a Separate Ingress Controller platform-engineering · 16 October 2026 · 9 min read
The Road to Default-Deny with CiliumNetworkPolicy: L3/L4, DNS and L7 HTTP Rules Security · 14 October 2026 · 11 min read
Cilium IPAM: Pod CIDR Modes, LB-IPAM and L2 Announcements for a Bare-Metal LoadBalancer platform-engineering · 12 October 2026 · 12 min read