K8s-Security

In this post I will show you how you can rotate your Kubernetes Engine Certificates.

Kubernetes offers rich configuration options, but defaults are usually the least secure. Most sysadmins don’t know how to secure a Kubernetes cluster. So this is my Best Practice list for keeping Kubernetes Clusters Secure.

With the official Kubernetes Dashboard being deprecated and moved to the retired projects, finding a reliable, feature-rich dashboard for your Kubernetes clusters has become more important than ever. In 2026, several excellent alternatives have emerged. This post reviews the top Kubernetes dashboards available today.

Learn how to deploy HAProxy Ingress Controller on AlmaLinux in a DMZ network outside your Kubernetes cluster—without Cilium’s deprecated external workload mode. This guide covers BGP peering with BIRD, Cilium’s Pod CIDR export, firewalld configuration, and production-ready setup for secure ingress traffic isolation.

When you check resource usage inside a Kubernetes pod, you might be surprised to see the full host machine’s resources - even when you’ve set strict limits. Let’s explore why this happens and how to fix it.

In this post I will show you how you can automate the Kubernetes Certificate renewal.

In this post I will show you how to nstall HAProxy Igress Controller on a separate VM instad of running it in the Kubernetes cluster as a pod. For this I will use cilium external-workload option.

In this post I will show you how to nstall HAProxy Igress Controller on a separate VM instad of running it in the Kubernetes cluster as a pod. For this I will use cilium BGP pod CIDR export option.

In this post I will show you how to install a Kubernetes cluster in a secure way with.

Today I am happy to announce the release of KubeDash 1.0. This blog post focuses on the functionality provided by the KubeDash 1.0.