Nurdaulet Bolat Нурдаулет Болат

Senior DevSecOps & Platform Engineer (nvimq). Kubernetes, AWS, Terraform and GitOps.

Get in Touch Read Writeups

01Long form

Writeups 2

Kubernetes and DevSecOps deep dives, each one checked on a real cluster. All writeups

No.01Latest

RBAC cannot see inside your YAML, and that is the whole problem

RBAC decides who may create a Pod. It has no opinion on what is inside it. Here is where admission control fits, and how to prove it on a kind cluster in ten minutes.

Platform
Kyverno
Level
easy
Read
14 min
Stack
Kubernetes · Kyverno · kind
Read the writeupAlso in Russian

02Runs in your browser

Tools 7

Things I built to make the writeups hands-on: audit a manifest, break a cluster, boot Linux. All tools

01 manifest audit What admission would say about your YAML Paste a manifest and get the verdict the API server would give it. the whole Kubernetes schema, in your browser, nothing leaves the page 02 architecture shapes What each shape costs you to run opinion, not a standard, and it says so 03 terminal Replay of the verified sessions from my writeups about 6 KB, starts instantly 04 kubernetes playground A cluster you can break on purpose restyled from an Apache 2.0 project, runs on your machine 05 linux A real x86 machine emulated in your browser about 21 MB, boots on click 06 cloud shell A real Linux machine with Docker, on Google free, 50 hours a week, needs a Google account 07 ready-made clusters A real kubeadm cluster, already running free, one hour a day, needs an account with them

03Verified

Certifications 20

Each card opens the credential details and its verification link. Filter by issuer or search by name.

04Hands-on

Activity 77

Labs, CTFs and contests by platform. Open one to see every badge and result.

  1. LetsDefend alert triage · malware analysis · cloud incident response · forensics 34solved
  2. Hack The Box Top 7.7% DFIR · Active Directory · traffic analysis · web fuzzing 25solved
  3. TryHackMe Kubernetes runtime security · container escapes · web exploitation 14solved
  4. HackerRank Top 0.02% algorithms · SQL · Go 2solved
  5. LeetCode systems design · data structures 2solved

05Reach out

Let's build something secure.

Code on GitHub and GitLab, work history on LinkedIn, quick questions on Telegram or email.

Email me