OpenClaw on Kubernetes: Test the Boundary Before Adding the Tools
An agent can run in a Kubernetes Pod and still have far too much authority. A mounted credential, a reachable management API, or a powerful tool …
Read articleTopic archive
Security
Articles filed under this topic.
Kubernetes NetworkPolicy: Open One Path and Prove the Rest Stay Closed
A NetworkPolicy exists in the API, but your connection still succeeds. Or you allow ingress and the connection still fails. Both are …
Read article
IP Filtering Behind a Proxy: Whose Address Are You Blocking?
You add an address to a blocklist, but the request still gets through. Or every visitor gets blocked at once. Both outcomes can come from …
Read article
Put Traefik in Front of WordPress, Then Test the Boundary
A reverse proxy gives you a place to apply request policy before traffic reaches WordPress. To use it well, you need to understand which router …
Read article
TLS Keys and Certificates: Make the Files, Then Verify Them
A service asks for a PEM file, a PKCS#8 key, and an X.509 certificate. Those names describe different things, and mixing them up makes TLS setup …
Read article