# Didi Berman

> Platform Engineer and Kubernetes Security Specialist in Berlin. CKA, CKAD, CKS, Kubestronaut. I build secure Kubernetes platforms with Terraform, GitOps, and AWS.

## Portfolio

- [Home](https://didibe.dev/): Platform engineering portfolio, projects, certifications, and client references
- [Blog](https://didibe.dev/blog): Notes on Kubernetes, platform engineering, and cloud infrastructure

## Blog

- [The Trivy CI/CD Hack: Hijacked Pipeline Secrets and the Kubernetes Clusters They Could Reach](https://didibe.dev/blog/trivy-supply-chain-attack): Trivy scans your software for security holes. In March 2026, attackers hacked Trivy itself, hunted for Kubernetes kubeconfig files in CI/CD, and used them to break into clusters. Here is the simple version.
- [KServe in Plain English: Model Serving on Kubernetes](https://didibe.dev/blog/kserve-inference-made-simple): Model serving on Kubernetes is its own problem - autoscaling, rollouts, HTTP glue. KServe is the layer that turns model artifacts into a production API the Kubernetes way.
- [Virtual Clusters: A Real Kubernetes Cluster for the Price of a Namespace](https://didibe.dev/blog/virtual-clusters-explained): Every platform team faces the same tenancy dilemma. A cluster per team is safe but expensive. A namespace per team is cheap but leaky. Virtual clusters are the middle path, the isolation of a real cluster at the cost of a namespace.
- [Four Ways Organisations Build Internal Developer Platforms](https://didibe.dev/blog/idp-approaches-compared): Ticket queues, golden modules, GitOps, and full self-service portals. I've built versions of each. Here's what each one buys you, and what it quietly costs.
- [Kubernetes for Dummies: It's Just Objects All the Way Down](https://didibe.dev/blog/kubernetes-for-dummies): Kubernetes stopped being scary the day I realized it's not a machine you command. It's a pile of objects, a handful of tireless robots, and one idea repeated forever: the reconciliation loop.

## Optional

- [GitHub](https://github.com/didiberman): Open-source platform projects (EKS IDP, vCluster, AKS, GKE, TokenGuard)
- [LinkedIn](https://www.linkedin.com/in/didibermans): Professional profile and recommendations
- [Terms](https://didibe.dev/terms): Terms and conditions