top of page
Rafael Natali
DevOps, K8s, Cloud, and more...
Search


Using Linux kernel hardening tools to secure a K8s cluster
Using AppArmor and seccomp to harden your Kubernetes nodes.
Rafael Natali
Mar 36 min read
53 views
0 comments


Securing the Kubernetes Host Operating System
It is crucial to prioritise Kubernetes security by safeguarding the Kubernetes host from the containers operating on it.
Rafael Natali
Feb 194 min read
202 views
0 comments


Restrict K8s Secret access to a specific ServiceAccount
Restrict K8s Secret access to a specific ServiceAccount. Good practices for Kubernetes Secrets.
Rafael Natali
Oct 4, 20242 min read
140 views
0 comments


Hands-on: Assigning Pods to Nodes using Affinity Rules
Create a highly available and resilient Kubernetes platform using Pod Affinity/Anti-affinity.
Rafael Natali
Sep 21, 20242 min read
98 views
0 comments


Handling Kubernetes vulnerabilities with CIS Benchmark
In this article, I will use a tool called kube-bench to evaluate a Kubernetes cluster for vulnerabilities covered in the CIS benchmark.
Rafael Natali
Sep 13, 20244 min read
32 views
0 comments


Securing your Azure Kubernetes Services Cluster with RBAC
In this article, I will present my perspective on securing an Azure Kubernetes cluster with the principle of least privilege as a top priori
Rafael Natali
Sep 7, 20242 min read
24 views
0 comments


Kubernetes Network In Action - 3/3
This is the third and final articles explaining and detailing the Kubernetes Network model with a hands-on approach. In the first article...
Rafael Natali
Feb 5, 20242 min read
58 views
0 comments


Kubernetes Network In Action - 2/3
This is the second of three articles explaining and detailing the Kubernetes Network model with a hands-on approach. In the first...
Rafael Natali
Jan 30, 20243 min read
64 views
0 comments


Kubernetes Network In Action - 1/3
This is the first part of three articles explaining and detailing the Kubernetes Network model with a hands-on approach. The series will...
Rafael Natali
Jan 22, 20242 min read
129 views
0 comments


Monitoring Kafka Container Health with Probes
This article will describe how to use Kubernetes Probes to monitor the health of your Kafka pods. Container Health K8s provides a number...
Rafael Natali
Jan 15, 20242 min read
135 views
0 comments


Backing up an etcd cluster
All Kubernetes objects are stored on etcd. Periodically backing up the etcd cluster data is important to recover Kubernetes clusters...
Rafael Natali
Dec 18, 20231 min read
26 views
0 comments


Monitoring Kafka with Prometheus and Grafana
This page describes the steps to quickly implement basic monitoring for Kafka Brokers using Prometheus and Grafana. Enabling Prometheus...
Rafael Natali
Nov 23, 20232 min read
78 views
0 comments


Running Kafka in Kubernetes with Kraft mode and SASL authentication.
Learn how to launch an Apache Kafka with the Apache Kafka Raft (KRaft) consensus protocol and SASL/PLAIN authentication. This article is...
Rafael Natali
Sep 26, 20233 min read
1,208 views
0 comments


Running Kafka in Kubernetes with KRaft mode and SSL
Learn how to launch an Apache Kafka with the Apache Kafka Raft (KRaft) consensus protocol and SSL encryption. This article is a...
Rafael Natali
Sep 20, 20233 min read
199 views
0 comments


Running Kafka in Kubernetes with KRaft mode
Learn how to launch an Apache Kafka with the Apache Kafka Raft (KRaft) consensus protocol, removing Kafka's dependency on Apache...
Rafael Natali
Sep 14, 20233 min read
2,211 views
0 comments


Deploying Applications in Kubernetes Engine Made Easy with Ansible
Ansible infrastructure-as-code to automate Nginx deployment in Google Kubernetes Cluster (GKE) on Google Cloud Platform (GCP)....
Rafael Natali
Aug 22, 20233 min read
14 views
0 comments


Automate Your Kubernetes Cluster Setup Using Ansible: A Comprehensive Tutorial
Using Ansible to install, setup, and configure a Google Kubernetes Cluster (GKE) on Google Cloud Platform (GCP). Automating the setup of...
Rafael Natali
Aug 22, 20234 min read
12 views
0 comments


How to expose Kubernetes services to external traffic using Istio Gateway
Use a Gateway to manage inbound and outbound traffic for your mesh, letting you specify which traffic you want to enter or leave the...
Rafael Natali
Aug 15, 202310 min read
14 views
0 comments
bottom of page