Long form

Writeups 2

Long form writeups by Nurdaulet Bolat on Kubernetes, DevSecOps, cloud security and CTF work.

Posts
2
Topics
5
Reading
20 min
Latest
Sep 7, 2026

Showing 2 of 2

14 min read easy Kyverno

RBAC cannot see inside your YAML, and that is the whole problem

RBAC decides who may create a Pod. It has no opinion on what is inside it. Here is where admission control fits, and how to prove it on a kind cluster in ten minutes. KubernetesKyvernokind #kubernetes#devsecops#policy-as-code#kyverno 6 min read medium KubeBuddy

Suppressions that expire: how KubeBuddy handles ignored findings

Most cluster scanners let you silence a finding forever. KubeBuddy makes the exception expire, and I verified it on a kind cluster. KubernetesHeadlampKubeBuddy #kubernetes#devsecops#policy-as-code#headlamp