security
Posts tagged "security"
In-depth articles from the OrchesTerra engineering team.
Kubernetes
Kyverno Policies That Teams Will Actually Keep Enabled
Validate, mutate, and generate with Kyverno without turning every deploy into a 403 — policy types, failure actions, exceptions, and a starter set for platform clusters.
2026-09-07 · 4 min read
CI/CD
GitHub Actions OIDC for Terraform: Apply Without Long-Lived Cloud Keys
Wire GitHub’s OIDC token to AWS, GCP, or Azure so Terraform CI can plan and apply without storing static access keys in repository secrets.
2026-08-25 · 4 min read
Kubernetes
External Secrets Operator: Stop Committing Sealed Blobs to Git
A practical ESO setup: ClusterSecretStore, ExternalSecret refresh, IRSA/Workload Identity, and the failure modes that look like “the app has empty env vars.”
2026-08-22 · 4 min read
Kubernetes
Kubernetes Cost and Security Hygiene Checklist
A platform-team checklist to keep clusters cost-efficient and security-hardened: quotas, least privilege, network restrictions, and rightsizing.
2026-06-20 · 2 min read