Why Your Database Will Crash in a Kubernetes Deployment (And Why You Need a StatefulSet)
The subtle multi-attach volume bug that takes down databases during rolling updates—and how StatefulSets and headless services solve it.
Latest articles
Catching over-permissive IAM in the pull request, not in production
Why I built Cloud Policy Guard: a small Python CLI that reads a Terraform plan, scores IAM risk, and fails the pipeline before a wildcard policy ever reaches AWS.
Hardening a 3-tier app before Kubernetes: 6 things that were quietly broken
Before moving Deal Aggregator to Kubernetes I audited it the way an attacker would. Public delete endpoints, a ReDoS hole, an unauthenticated database and internal tools on the open internet. Here is what I found and how I fixed each one.