- Published on
Exploring separation of duties across the application lifecycle. Whose responsibility is it to manage CVEs in base images, vs the application? And how do you provide tools to manage this security boundary?
Latest
Building applications, securing infrastructure and applications, and everything in-between.
- Published on
The StackRox MCP server brings AI assistants into a Kubernetes security architecture. In this article I look at what an MCP server is, why it matters in the context of AI harness engineering, and how to get started.- Published on
That is the question. Whether 'tis nobler to run a dedicated control plane, or to consolidate control plane and worker nodes. In this article I look at when to consolidate OpenShift control plane and worker nodes on bare metal, and when to keep them separate.- Published on
OpenShift 4.20 introduced support for direct OpenID Connect authentication, allowing you to configure the OpenShift API / console to authenticate directly with OpenID Connect providers. In this article I take a closer look at one of the use cases this enables - Microsoft Entra Service Principal Name (SPN) direct authentication to OpenShift.- Published on
It's Easter in Australia, and what better time to look at Easter Eggs in OpenShift.