Testing
Pod Security Standards: Validating Kubernetes PSS with Policy Tests
Pod Security Standards (PSS) replaced PodSecurityPolicy (PSP) in Kubernetes 1.25.
DevOps
Latest
Testing
Falco: Runtime Threat Detection Testing for Kubernetes Workloads
Runtime security is the last line of defense. If a container escapes, an attacker pivots laterally, or malware executes inside your cluster — Falco is what catches it. But Falco rules that go untested are rules that fail silently when it matters most. This guide covers how to write, validate, and
Testing
OPA/Gatekeeper Policy Testing: Unit Tests for Admission Control Rules
OPA Gatekeeper extends Kubernetes admission control with custom policies written in Rego.
Testing
AppArmor and SELinux: Testing Mandatory Access Control Policies
Mandatory Access Control (MAC) is what runs underneath discretionary permissions.
Background Jobs
Testing Scheduled Jobs and Cron Tasks: Strategies for Time-Sensitive Code
Scheduled jobs and cron tasks are notoriously difficult to test. They run at specific times, interact with the real world (databases, APIs, files), and often involve time-sensitive logic. A monthly billing job that ran at 2:01 instead of 2:00 for a daylight saving transition can cause real
Testing
Pulumi CrossGuard: Policy-as-Code Testing for Infrastructure
Unit tests verify that your Pulumi code produces the resources you intend.
Testing
Terratest Advanced Patterns: Table-Driven Tests, Parallel Testing, and Module Fixtures
Most Terratest tutorials cover the basics: deploy a module, assert an output, destroy it.
Testing
AWS CDK Integration Testing with integ-tests-alpha: Real Deployment Assertions
CDK unit tests with assertions.Template are fast and require no AWS account — but they only verify the CloudFormation template you generate, not what AWS actually creates. Integration tests deploy real stacks, make real API calls, and assert on real cloud state. The @aws-cdk/integ-tests-alpha library is
Database
Atlas Schema Testing: Automated Schema Change Validation
Atlas brings declarative schema management to database migrations, letting you define what your schema should look like rather than how to get there. This post covers automated schema validation with atlas schema diff, lint-driven migration safety checks, CI/CD pipeline integration, and drift detection to keep your database and
DevOps
Testing Flux GitOps Pipelines: From Kustomization Validation to E2E
Flux automates GitOps deployments, which means a broken Kustomization or HelmRelease can silently fail to reconcile — or worse, reconcile incorrectly — without anyone noticing until a production incident. This guide covers the full Flux testing stack: flux build for local manifest rendering, flux diff for live drift detection, envtest for controller
DevOps
Platform Engineering QA: Testing Internal Developer Platforms End-to-End
Internal developer platforms (IDPs) are the infrastructure that your engineering teams depend on every day. A broken platform breaks every team simultaneously. This guide covers the full QA strategy for IDPs: from the testing pyramid for platform components, to golden path validation, self-service workflow smoke tests, chaos testing for
DevOps
ArgoCD Testing Strategies: Validate GitOps Deployments Before They Land
ArgoCD makes GitOps deployments feel effortless — until a bad sync silently rolls out a broken config to 40 namespaces via an ApplicationSet. This guide covers how to validate ArgoCD applications, ApplicationSets, and sync policies before they reach a production cluster, using argocd app diff, local kind/k3d clusters, and automated