Basic (CSV) Authentication to the API Server
Configure HTTP basic authentication on a kubeadm-managed Kubernetes cluster using a CSV credentials file. Covers mounting the file into kube-apiserver, defining RBAC roles, and verifying access with curl.
read more
Docker and Container Capabilities
An in-depth overview of Linux capabilities and how they govern privilege inside Docker containers and Kubernetes pods. Covers capability sets, file capabilities, bounding sets, securebits, and user-namespace interactions.
read more
K8s Impersonation: Stepping Into Someone Else's Pods
Learn how Kubernetes administrators can verify permissions and impersonate other users using kubectl auth can-i and the –as flag.
read more
Kubernetes TLS Check List
A practical checklist covering X.509 certificate requirements for Kubernetes nodes, users, and the API server. Includes deployment methods, cert-manager workflows, and Extended Key Usage configuration.
read more
Finding Which Java Threads Are Eating Your CPU for Breakfast
When a Java process is eating your CPU, you need to know exactly which thread is responsible. This guide walks through JVisualVM, jstack, top, and jvmtop to pinpoint the culprit.
read more
How to Inspect a Thread Dump Like a Pro
Learn how to capture, read, and interpret Java thread dumps using JDK tools like jstack and jcmd. Covers thread states, CPU analysis, deadlock detection, and practical tools for spotting performance issues.
read more