#kubernetes

Hari 35: Rego Policy Pertama — Wajib Resource Limits

Tulis Rego policy pertama untuk Gatekeeper: Pod/Deployment tanpa resource limits dan requests ditolak. 4 violation rules, enforcementAction deny, 0 violations.

devsecops

kubernetes

opa gatekeeper

12 Jul 20264 min read

Hari 34: Install OPA Gatekeeper — Bouncer K8s Cluster

OPA Gatekeeper terinstall sebagai admission controller di k3d cluster. 2 pods running, 17 CRDs, validating webhook aktif. Besok tulis Rego policy pertama.

devsecops

kubernetes

opa gatekeeper

12 Jul 20264 min read

Hari 33: SecurityContext Hardening — 20 Temuan ke 0

Deployment.yaml di-hardened: non-root, read-only filesystem, cap drop ALL, probes, resources. 3 scanner: Kubesec 0→11, Checkov 20→0, Trivy 16→0. Pods tetap running.

devsecops

kubernetes

securitycontext

10 Jul 20264 min read

Hari 32: Scan K8s Misconfig — 3 Scanner, 20+ Temuan

Kubesec, Checkov, Trivy scan deployment.yaml yang sengaja insecure. Hasilnya: 14 advise, 20 failed, 16 findings. Ini perbandingan POV 3 scanner K8s.

devsecops

kubernetes

k8s security

9 Jul 20263 min read

Hari 31: Deploy SecureBank API ke Kubernetes dengan k3d

Fase 3 dimulai! Bikin k3d cluster lokal, deploy distroless image 7.97MB ke K8s dengan secret. 2 replicas running, endpoint tested.

devsecops

kubernetes

k3d

8 Jul 20263 min read

Autoscaling di GKE Pakai KEDA dan GCP Pub/Sub

Bikin worker pod di GKE auto-scale berdasarkan antrian Pub/Sub pakai KEDA. Dari 1 pod jadi 10 pod saat traffic tinggi, balik lagi saat sepi.

gke

keda

gcp

19 Mei 20264 min read

Page 4 of 5 • 29 articles