2 min read
Sign every image, then refuse the ones that are not signed
Signing artifacts is the easy half. The half that changes anything is the admission controller that turns an unsigned image into a failed deploy.
- Supply chain
- Kubernetes
- Policy
Writing
Notes from the platform.
Notes on DevSecOps, Kubernetes, platform engineering and the parts of getting to production that are easy to get wrong.
2 min read
Alerts worth waking up for
Most alerting rules measure the system. The useful ones measure whether anybody is having a bad time, which is a much shorter list.
- Observability
- SRE
- OpenTelemetry
No posts with that tag.