kubernetes
Safeguard articles tagged "kubernetes" — guides, analysis, and best practices for software supply chain and application security.
100 articles
Flux CD vs Argo CD: Security Comparison for 2026
A security-focused comparison of Flux 2.5 and Argo CD 3.1: trust models, multi-tenancy, secret handling, signature verification, and the operational differences.
Kubernetes 1.33 Security Deep Dive
Kubernetes 1.33 shipped with meaningful security changes: stronger admission controls, expanded structured authorization, and several deprecations that will affect production clusters.
Kubernetes SecurityContext, Field by Field
SecurityContext in Kubernetes is where pod and container hardening actually lives — here's what each field controls and which defaults you should never leave in place.
How Does a Kubernetes Security Breach Happen and How Do You Prevent One?
Most Kubernetes security breaches trace back to exposed dashboards, leaked credentials, and over-permissive RBAC. Here is how the real attacks unfolded and what stops them.
GCP Binary Authorization Enforcement Runbook 2026
A practical 2026 runbook for enforcing GCP Binary Authorization in production, including attestation pipelines, break-glass procedures, and rollout sequencing.
What a Cloud Native Security Platform Actually Does
A cloud native security platform unifies posture, workload, and supply chain controls for containerized apps. Here is what the category covers and how to tell the marketing from the substance.
Container Security and Gartner: Reading the CNAPP Market Guide
When people search for container security Gartner coverage, they usually mean the CNAPP Market Guide. Here is what Gartner's framing says about securing containers.
Zarf Air-Gap Deployment: A 2026 Walkthrough
How Zarf 0.45 packages and deploys Kubernetes workloads into disconnected environments, where the design works well, and the operational realities to plan for.
Open Source Container Security: A Practical Guide
You can build a solid container security stack entirely from open source tools — here's which ones cover which layer, and where the gaps show up at scale.
Container Hardening Guide 2025: From Base Image to Production
A practical guide to hardening container images and deployments. Covers base image selection, build-time security, runtime protections, and Kubernetes-specific controls.
Kubernetes Ingress TLS: Setup, Certificates, and Common Mistakes
How Ingress TLS works in Kubernetes: terminating HTTPS at the ingress, wiring TLS secrets, automating certificates with cert-manager, and the mistakes that break it.
What a Container Security Platform Should Actually Do
A container security platform has to cover images, registries, and running workloads. Here is what real coverage looks like and how to evaluate one.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.