Back to Kubernetes
🔐
Phase 6
Security, Packaging & Operating a Cluster
Locking the cluster down, managing manifests at scale, and building the debugging instinct that separates operators from copy-pasters.
1
RBAC, ServiceAccounts and Pod Security Admission
Who can do what, which identity workloads use, and why PodSecurityPolicy tutorials will waste your time — it was removed in v1.25.
kubernetesrbacserviceaccount
2
Packaging: Helm and Kustomize
Templating versus patching, when each fits, and the render-before-apply habit that makes any generated manifest safe to trust.
kuberneteshelmkustomize
3
Debugging and Cluster Operations
A fixed triage order, what each failure state actually means, and how to get a shell into a distroless pod that doesn't have one.
kubernetesdebuggingkubectl-debug