Found 9 results for: CI/CD Runners
Pods lose DNS after an egress NetworkPolicy is applied. This article covers the wrong namespace label, the missing TCP port 53 rule and a tested-in-theory fix.
How an Nginx API gateway with rate limiting and upstream keepalive, plus an opossum circuit breaker, limits cascading failures between microservices (2022…
Enforce CIS network sysctl baselines with Ansible, gate deployments on OpenSCAP results, and reject Ingress objects without TLS using an OPA admission policy.
Build an OpenVPN 2.2 gateway on CentOS 6 with a private CA, and fix the usual failures: missing TUN device, no forwarding or NAT, and iptables rule order.
How to link a hyperscaler workload to a database on a Norwegian VPS with WireGuard, what the tunnel does not fix, and the common mistakes in such setups.
Trivy exits 0 even with CRITICAL findings. I built it from source and made it a real CI gate, then found a secret-scan skip that a green result can hide.
What the Schrems II ruling changed, why a region label is not compliance, and how LUKS, MariaDB encryption, TLS 1.3 and WireGuard reduce exposure in 2020.
How to keep a local HAProxy in step with a ZooKeeper service registry: ephemeral znodes, a watcher that regenerates the config, and a graceful reload.
Why plain FTP exposes credentials, and how to lock users into a directory with OpenSSH ChrootDirectory and internal-sftp on CentOS 5.