DevOps Blog: Security Posts

Kubernetes, Cilium, Argo CD and platform engineering posts measured in real labs: the commands, the errors and the numbers.

Mirac Can Yılmaz DevOps & Platform Engineer LinkedIn GitHub

What Is a Rootless Container? Hardening an Image from Root to Non-Root, Measured

Security 02 November 2026 17 min read

What Is the Difference Between SAST and DAST? Semgrep, Bandit and OWASP ZAP Against 10 Planted Bugs

Security 30 October 2026 19 min read

What Is Tetragon? What It Solves, What You Gain, and a Kubernetes Lab That Kills a Process Before It Reads a Secret

Security 23 October 2026 10 min read

The Road to Default-Deny with CiliumNetworkPolicy: L3/L4, DNS and L7 HTTP Rules

Security 14 October 2026 11 min read

Kyverno Admission Webhooks: Default-Deny for Every Namespace, 3 Core Rules, and the Gap When Kyverno Goes Down

Security 07 October 2026 22 min read

Moving Secrets into Vault: From base64 in Git to Vault and ESO Without Downtime

Security 05 October 2026 20 min read

Argo CD SSO Integration: OIDC and RBAC with ZITADEL

Security 02 October 2026 18 min read