[{"data":1,"prerenderedAt":95},["ShallowReactive",2],{"blog-tag-en-ci-cd":3},[4,16,24,31,39,47,55,64,71,80,89],{"path":5,"title":6,"description":7,"date":8,"tags":9},"\u002Fblog\u002Fen\u002Fcicd-pipeline-devsecops-gate-design-four-layers","Still Bolting Security Checks Onto Your CI\u002FCD Pipeline Without Deciding Where They Belong? A Four-Layer Model for DevSecOps Gate Design","You've adopted SAST, DAST, and container scanning — yet incidents still slip into production. This article reframes CI\u002FCD pipeline security as a four-layer design problem and walks through concrete implementation patterns for K3s\u002FKubernetes environments.","2026-08-28",[10,11,12,13,14,15],"k3s","kubernetes","ci-cd","devsecops","admission-control","gitops",{"path":17,"title":18,"description":19,"date":20,"tags":21},"\u002Fblog\u002Fen\u002Fgitlab-auto-devops-k3s-admission-controller-gate","Why GitLab Auto DevOps' 'It Just Works' CI Is the Closest Threat to Your Production K3s Cluster","GitLab Auto DevOps runs SAST\u002FDAST automatically the moment you turn it on. But a scan 'running' and a vulnerable image never reaching your production K3s cluster are two completely different things. Here's how to build an audit gate between CI\u002FCD and the cluster.","2026-08-17",[10,11,22,12,13,23],"gitlab","admission-controller",{"path":25,"title":26,"description":27,"date":28,"tags":29},"\u002Fblog\u002Fen\u002Fkubernetes-image-signing-sigstore-supply-chain","Anyone Can Rewrite an Image Tag. Why Kubernetes Needs Sigstore-Backed Signing to Prove Provenance","Container image signing explained: tags can be overwritten by anyone, and passing CI tests doesn't guarantee the image running in production is the one you built. Learn how Sigstore and Kyverno work together to reject unsigned images on Kubernetes\u002FK3s, integrated into a GitOps workflow.","2026-08-06",[10,11,12,15,30],"security",{"path":32,"title":33,"description":34,"date":35,"tags":36},"\u002Fblog\u002Fen\u002Fqa-to-devops-kubernetes-career-transition","A QA Engineer's 'Instinct to Break Things' Transfers Directly to Kubernetes Operations: The Fastest Path from Test Automation to a DevOps Career","The quality-gate mindset and test automation skills QA engineers already have map directly onto Kubernetes operations aptitude. Here's a realistic six-month roadmap for making the switch, and how to clear the biggest obstacle in the way.","2026-07-19",[11,10,37,12,38],"devops","career",{"path":40,"title":41,"description":42,"date":43,"tags":44},"\u002Fblog\u002Fen\u002Fcanary-release-kubernetes-auto-rollback-gitops","Why Every Team Ends Up at the Same CI\u002FCD Wall — Designing 'Safe-to-Break' Kubernetes Deployments with Canary Releases and Automated Rollback","Most production incidents happen because teams deploy everything at once. This article walks through how to design canary releases, automated rollback, and monitoring on Kubernetes using Argo Rollouts and GitOps — with practical steps small teams can actually sustain.","2026-07-15",[11,10,12,45,15,46],"canary-release","argo-rollouts",{"path":48,"title":49,"description":50,"date":51,"tags":52},"\u002Fblog\u002Fen\u002Fmlops-kubernetes-devops-ai-skills-2026","\"DevOps Engineers Are Becoming Obsolete\" Is a Lie. 5 MLOps Skills Every Kubernetes Operator Must Master in the AI Era","As AI automates infrastructure, are DevOps engineers really becoming irrelevant? The reality is the opposite — demand for MLOps Kubernetes talent is surging. Here are the 5 skills you need in 2026.","2026-07-11",[11,53,37,10,12,54],"mlops","ai-infrastructure",{"path":56,"title":57,"description":58,"date":59,"tags":60},"\u002Fblog\u002Fen\u002Fargocd-gitops-kubernetes-guide","Getting Started with ArgoCD GitOps: Practical Kubernetes Declarative Deployment","A practical guide to GitOps-based Kubernetes declarative deployment with ArgoCD. Covers repository structure, Sync Waves, ApplicationSets, and multi-cluster management.","2026-05-27",[61,15,11,12,62,63],"argocd","deployment-automation","declarative-management",{"path":65,"title":66,"description":67,"date":59,"tags":68},"\u002Fblog\u002Fen\u002Fcicd-pipeline-security-devsecops","ci-cd Pipeline Security: A Practical DevSecOps Guide","A practical guide to ci-cd pipeline security from a DevSecOps perspective. Covers SAST\u002FDAST, supply chain protection, the SLSA framework, and Policy as Code.",[13,12,30,69,70,11],"supply-chain","slsa",{"path":72,"title":73,"description":74,"date":59,"tags":75},"\u002Fblog\u002Fen\u002Fdocker-multi-stage-build-optimization","Optimizing Production Images with Docker Multi-Stage Builds","Master Docker multi-stage builds to reduce production images by up to 97%. Learn stage separation, layer caching, distroless base images, and ci-cd integration techniques.",[76,77,78,37,12,79],"docker","multi-stage-build","container-optimization","image-size-reduction",{"path":81,"title":82,"description":83,"date":59,"tags":84},"\u002Fblog\u002Fen\u002Fgithub-actions-kubernetes-cicd","Building a Kubernetes ci-cd Pipeline with GitHub Actions","Learn how to build a Kubernetes ci-cd pipeline with GitHub Actions. Covers Helm deployments, ARC auto-scaling, security scanning, and production best practices.",[85,11,12,86,87,88],"github-actions","helm","containers","automation",{"path":90,"title":91,"description":92,"date":59,"tags":93},"\u002Fblog\u002Fen\u002Fgitlab-ci-container-deployment","How to Automate Container Deployment with GitLab ci-cd","A practical guide to automating container deployment with GitLab ci-cd and the Kubernetes Agent. Covers pipeline setup, Auto DevOps, security, and multi-environment strategies.",[22,12,11,87,94,62],"auto-devops",1792488948528]