40 Articles

DevOps & Cloud Articles

Cloud computing, CI/CD pipelines, containerization, infrastructure as code, and DevOps practices.

The Security Hole in My Monitoring Stack I Didn't Know I Had
DevOps & Cloud 4 min read

The Security Hole in My Monitoring Stack I Didn't Know I Had

I was sitting in a security audit last quarter when the consultant casually mentioned that my Prometheus node exporter had "unrestricted container execution capabilities." I laughed. It's just reading metrics. Then she showed me the RBAC role I'd written three years ago, and my s...