All of the catalog
Scenario
Security & Compliance
Policy enforcement with Kyverno, TLS certificates via cert-manager, encrypted secrets with Sealed Secrets, namespace network isolation, and security best-practice policies.
SecurityVerifiedk3dkind
Definition on GitHubPrerequisites
These are installed into the lab cluster for you — listed so you know what the scenario actually depends on.
ingressmonitoring/metricsmonitoring/grafanasecurity/policy/kyvernosecurity/tls/cert-managergo-api
Related scenarios
- Secrets Management & Rotationgo-api consumes a Vault-backed secret synced by External Secrets. Stage 1 wires the sync and seeds a baseline value; stage 2 rotates it in Vault. A check verifies the new value propagated to the Kubernetes Secret with no redeploy.
- Autoscaling Under LoadWatch KEDA scale go-api on Prometheus RPS: a spike drives it from 1 to several replicas, then cooldown brings it back. The flagship 'autoscaling actually works' demo, verified under traffic from the load generator.
- Chaos EngineeringFailure injection with Chaos Mesh — pod kills, network delays, CPU/memory stress, partitions. Correlate chaos experiments with application metrics via Grafana dashboard.