https://1shubham7.blog/tags/security/ Recent content in Security on Shubham Singh Hugo -- gohugo.io en-us https://1shubham7.blog/what-i-learned-reading-the-cyber-resilience-act/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/what-i-learned-reading-the-cyber-resilience-act/ I read the whole of Regulation (EU) 2024/2847, every article and every annex, and mapped KubeAid and LinuxAid against it for my employer. These are the things that surprised me, the mental model I ended up with, and what I would tell the next engineer who has to do the same reading. https://1shubham7.blog/cnp-antipatterns/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/cnp-antipatterns/ Lessons from writing CiliumNetworkPolicies for the KubeAid-addons chart - toServices port traps, labels Cilium ignores, toFQDNs without a DNS rule, default-deny surprises, and why every namespace needs exactly one default-deny. https://1shubham7.blog/experience/obmondo/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/experience/obmondo/ Outline Worked as an SRE, handling production systems and managing Kubernetes clusters and Linux servers across both internal and customer environments. As the youngest SRE at Obmondo, regularly took ownership of production alerts and incidents, performing root cause analysis and implementing long-term fixes. Led the rewrite of the most business-critical internal tool, improving its reliability, testing, and integration into GitOps workflows. Authored and improved a large part of the company’s ISMS, strengthening both the company’s and customers’ information security. https://1shubham7.blog/audit-logging/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/audit-logging/ A breakdown of how kube-apiserver audit events actually work - request stages, audit levels, writing policies, and how SREs tune them differently for prod vs dev clusters. https://1shubham7.blog/ciso-assisstant/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/ciso-assisstant/ Deploying CISO Assistant via Helm, creating your first superuser, adding users, and how evidence storage actually works.