DevOps Daily with Fexingo · 2026-08-21 · 8 min
In this episode of DevOps Daily, Lucas and Luna dig into the surprisingly common but often misunderstood world of Kubernetes Pod Security Contexts. They use a real-world case of a microservice that kept failing with permission errors after an update to show how securityContext settings interact with container images, volumes, and admission controllers. You'll learn why setting the right user ID and file system group matters, the difference between fsGroup and supplementalGroups, and how to debug these issues using ephemeral containers and securityContext validation. They also touch on the shift to Pod Security Standards and how to audit your cluster for risky configurations. If you're tired of guessing why Pods start but can't write to volumes or read from ConfigMaps, this episode gives you a clear mental model and practical tips to fix it fast.
How Kubernetes Namespace Quotas Trigger Unexpected Failures58 / 100Why Your Kubernetes Cost Reports Are Lying To YouHow Kubernetes Node Pools Can Cost You More Than You ThinkHow Kubernetes Pod Overhead Changes Node Capacity CalculationsHow Kubernetes Pod Security Admission Blocks Risky Workloads