jwright b18c6589bf blog: 'The most secure credential is the one you never mount' ...

Least-privilege for Kubernetes workloads — own ServiceAccount + no auto-mounted
API token, then non-root + dropped caps, then Pod Security as the enforced floor.
Adds a matching house-style SVG diagram (workload-least-privilege).

2026-06-23 19:17:03 +10:00

..

diagrams

blog: 'The most secure credential is the one you never mount'

2026-06-23 19:17:03 +10:00

favicon.svg

Initial portfolio site: Astro + Tailwind MVP

2026-06-17 16:22:53 +10:00

og.png

Hero/OG: Platform & Infrastructure Engineer, RHEL-led tagline with ▸; fix :8080 links (relative nginx redirects)

2026-06-17 20:35:51 +10:00

robots.txt

Initial portfolio site: Astro + Tailwind MVP

2026-06-17 16:22:53 +10:00

site.js

M4: security pass — strict CSP, header split, build-time scan

2026-06-17 17:12:57 +10:00