PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Kubernetes — A Journey Has Just Begun

hackerone.com | blog | #gitlab | #kubernetes | #devops | #ci-cd | #eks | #infrastructure | #argocd | #gitlab-runners
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne's infrastructure team recounts its 'Container Journey': building an EKS CI cluster with ArgoCD, VPC networking, and the pitfalls of wiring GitLab Runners, IAM roles, and Kubernetes RBAC.
Published
Collected

Related coverage

blog · about.gitlab.com
How to design GitLab for enterprise scale
A guide to enterprise GitLab rollouts comparing GitLab.com, Dedicated, and self-managed models, with planning guidance for runners, availability, disaster recovery, and pipeline performance at scale.
blog · about.gitlab.com
Get every merge request in front of the right reviewer, faster
GitLab 19.5 recommends the right reviewer for every merge request, so reviews start sooner and route faster, and DevOps teams can ship more changes.
blog · about.gitlab.com
GitLab Transcend: Speed you can trust, all the way to production
Every new GitLab innovation announced at Transcend: what shipped, what's coming, and how to get started.
blog · about.gitlab.com
How to calculate DevOps platform total cost of ownership
GitLab's guide to DevOps platform TCO: beyond license fees, CI/CD compute, AI usage, tooling and staff time all count — model a fixed one-year scope and watch for tool sprawl inflating spend.
blog · about.gitlab.com
From OpenTofu to Argo CD: GitLab as your AWS control plane
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · wiz.io
The Jenkins Threat Landscape
Wiz data: Jenkins runs in over a third of cloud environments; 59% have instances vulnerable to critical core flaws, 87% contain end-of-life versions, and 48% use highly privileged service accounts.
Back