My story began by seeking a solution for signing container images at my company Trendyol. You will appreciate that few solutions were available at that time, almost two years ago. The only solution was DCT (Docker Content Trust) based on a Notary project, which is an implementation of the TUF…

A while ago, we wrote a blog about GoReleaser, “The fanciest way of releasing Go binaries with GoReleaser,” and yes, I’m still thinking the same 🙈 In that blog post, we gave a higher-level introduction to GoReleaser. In addition, we explored a bunch of features supported in it. So I…

Before talking about the security of the software supply chains, we should mention what should come to our minds first when we are talking about software supply chains. In most basic terms, you can think of software supply chains are anything that's needed to deliver your product — including all…

Securing our software supply chains has become more critical with the rise of software supply chain attacks. Also, over the past few years, container adoption has increased too. In the light of these pieces of information, it has grown the need to sign container images to help prevent supply chain…

Special thanks to Erkan Zileli and Furkan Türkal for their effort while developing this project In the previous blog post, we talked about a brand new toolkit (lima + nerdctl + rancher-desktop) that we can use to work with container images, and in that blog post, we mentioned the buildkit-machine…

Co-authors: Erkan Zileli Furkan Türkal Most of us stepped into the containerization world with Docker. So, we’ll always be grateful to Docker for that. But, to be honest, even we’re working with Docker, we know that it is not the only solution to work with container images but the most…

Authors: Furkan Türkal developer-guy Erkan Zileli 📦 Table of Contents · ⛵️ Kubernetes Admission Controllers · 📝 cert-manager and CA Injector · 🔐 Vault PKI (Public Key Infrastructure) · 💻 Installation · 👀 How to monitor certificates? · ✨ How to accomplish hot-reloading your HTTP server with renewed certificates without having downtime? · 🎯Conclusion …

Written by Furkan Türkal developer-guy Erkan Zileli The first thing that comes to our minds when we want to release our Go binaries is doing it with the help of the command "go get," and of course, there is nothing wrong with this approach. But even "go get" is a…

Written by Erkan Zileli & Furkan Türkal & developer-guy In Trendyol, we are using Kubernetes Admission Webhooks quite heavily. Because Kubernetes is an extensible platform and we love to extend it by writing our own Kubernetes Admission Webhooks and Operators according to our business requirements. If you decide to do…