Turf Dev Journal
Practical notes on Kubernetes, platform security, and the decisions that keep production running.
Latest field note
PHP2Shell is being exploited in the wild. Here is how to patch PHP on Debian, Ubuntu and RHEL servers, rebuild your container images, roll the fix out across Kubernetes, and prove it is actually running.
The library
7 articles and counting
PHP, Node.js and GitLab all shipped emergency RCE patches in October 2026, and PHP2Shell and a GitLab file-read flaw are already exploited in the wild. Here is what happened, how to check your exposure and what to patch today.
A Kubernetes Pod can be Running while the application remains unreachable. We walk through how to trace the traffic path from Ingress or Gateway to Service, endpoints, readiness, ports, and the application itself.
A Kubernetes cluster had available capacity, yet one worker node reached 96% utilization while another remained at 48%. We break down how to investigate uneven workload distribution, what Kubernetes autoscaling does—and does not—solve, and the scheduling controls that help prevent node hotspots.
A walkthrough of the control areas a CIS-aligned Kubernetes audit covers, and why a passing dashboard doesn't mean a passing score.
From reading to doing
Bring your production challenge to an architecture review with Turf Dev.
