Sachin Chaurasiya
Search articles, labs, tools…

Archive

Everything, by month

41 articles and labs published since May 2026. Only months with content are listed.

2026

September 2026 · 28

  1. Argo CD ApplicationSets for Multi-Environment Delivery Article CI/CD
  2. Attestations and Provenance: Binding the SBOM to the Image Article DevSecOps
  3. Cloud Identity and Least Privilege: Humans, Workloads and CI Article Cloud Security
  4. Cloud Network Security Boundaries: Exposure, Tiers and Default Deny Article Cloud Security
  5. Debugging Kubernetes Workloads: A Repeatable Process on Real Failures Article Kubernetes
  6. Generate an SBOM with Syft and Read What It Tells You Article DevSecOps
  7. Kubernetes Health, Resources and Reliability Article Kubernetes
  8. Kubernetes Observability with Prometheus, Grafana and Loki Article Observability
  9. Kubernetes Scaling, Rollouts and Recovery Article Kubernetes
  10. Kubernetes Services, Networking and DNS: Following One Request Article Kubernetes
  11. Kubernetes Workloads and Controllers: Choosing and Reading Them Article Kubernetes
  12. Logging, Audit and Security Visibility: Who Did What, From Where Article Cloud Security
  13. Platform Engineering Foundations: Defining the Platform Contract Article DevOps
  14. Platform Guardrails with Kyverno and GitOps Article DevOps
  15. Production Cloud Hardening: A Checklist That Connects the Controls Article Cloud Security
  16. Reusable GitLab CI Templates and Components: A Golden Delivery Path Article CI/CD
  17. Scan Images and SBOMs with Grype: From 183 Findings to 3 Article DevSecOps
  18. Secrets and Configuration Security: Images, Kubernetes, Vault and Rotation Article Cloud Security
  19. Sign and Verify Container Images with Cosign Article DevSecOps
  20. Understanding the Software Supply Chain Article DevSecOps
  21. Building Reliable Pipelines: Pinning, Caching, Artifacts and Failure Handling Article CI/CD
  22. CI/CD Fundamentals: How a Pipeline Actually Runs Article CI/CD
  23. Deployment Strategies: Rolling, Blue/Green and Canary on Kubernetes Article CI/CD
  24. IaC Security in CI/CD: Gates, Exceptions and Baselines Article Infrastructure as Code
  25. Rollback and Recovery: Versioned Artifacts, Rollout Undo and the Database Problem Article CI/CD
  26. Scan Infrastructure as Code with Checkov Article Infrastructure as Code
  27. Secure Terraform Foundations: Pinning, State, Secrets and Review Article Infrastructure as Code
  28. Building Minimal Container Images with Multi-Stage Builds Article Docker

August 2026 · 2

  1. A GitLab CI/CD Security Pipeline That Developers Do Not Route Around Article CI/CD
  2. GitOps Deployment with Argo CD Article CI/CD

July 2026 · 2

  1. Hardening a Static Site on Cloudflare: TLS, Headers and a Hash-Based CSP Article Cloud Security
  2. Enforce Pod Security with Pod Security Admission and Kyverno Lab 45 minutes

June 2026 · 5

  1. Kyverno Policies for Kubernetes Security: Validate, Mutate, Generate Article Kubernetes
  2. Generate an SBOM with Syft and Scan It with Grype Lab 35 minutes
  3. Least-Privilege Kubernetes RBAC for a Deployer Service Account Lab 35 minutes
  4. Kubernetes Security Checklist for Production Clusters Article Kubernetes
  5. Scan Git Repositories with Gitleaks Lab 25 minutes

May 2026 · 4

  1. Secrets Detection with Gitleaks Article DevSecOps
  2. Secure Docker Images with Trivy Lab 30 minutes
  3. Container Image Scanning with Trivy Article Security Tools
  4. Building a Secure CI/CD Pipeline with Jenkins Article CI/CD