Tag: Cilium

Cilium mTLS ztunnel: Sidecar-Free Encryption Explained

Amaresh Pelleti
per-node proxy traffic flow diagram showing namespace enrollment

Cilium mTLS ztunnel doesn’t need a SPIRE server — and that’s actually the second-biggest news here. The bigger story: Cilium’s older, SPIRE-based “Mutual Authentication” feature is now officially deprecated, with removal targeted for v1.21. If you adopted it, you’re migrating… Read moreCilium mTLS ztunnel: Sidecar-Free Encryption Explained

Kubernetes Network Policies — Isolate Your Workloads Before It’s Too Late

Amaresh Pelleti

By default, every pod in your Kubernetes cluster can talk to every other pod. No restrictions. No firewall. If your frontend pod can freely open a TCP connection to your database pod, so can any other compromised workload sitting in… Read moreKubernetes Network Policies — Isolate Your Workloads Before It’s Too Late

Kubernetes Node Pools and Node Networking — Complete Guide

Amaresh Pelleti

We earn commissions when you shop through the links on this page, at no extra cost to you. Two things that trip up most engineers when running Kubernetes in production — node pools and networking. You can get a cluster… Read moreKubernetes Node Pools and Node Networking — Complete Guide