Security Posts

Security engineering notes for infrastructure platforms, identity, defaults, reviews, and control planes.

• Kubernetes Etcd Encryption With OpenBao Transit

  7 Jun, 2026

  A practical walkthrough of Kubernetes envelope encryption, KMS v2 providers, and a runnable kind lab using OpenBao Transit.

• Kubernetes Operators Are Security Boundaries

  Updated: 23 May, 2026

  A practical look at how Kubernetes operators turn small API objects into privileged cluster changes, and how OpenBao Operator constrains that boundary.