@sulaa29

Sulakshana Karunarathne

@sulaa29ColomboJoined October 2026

About

Nothing here yet.

Available for

Nothing here yet.

Sulakshana Karunarathne's blogs

Technical Docsdevseccloud.hashnode.dev4 posts

From Browser Click to MongoDB Query: How Traffic Actually Flows Inside a Kubernetes Cluster

The Question That Started This When I deployed DealVault to Kubernetes, everything just worked. I opened the browser, deals showed up, and the scraper filled the database every 12 hours. Then I asked

6d ago · 15 min readdevseccloud.hashnode.dev

Running a Database as a Kubernetes Deployment? Watch Out for This Rolling-Update Trap

The Tempting Shortcut: "Everything is a Deployment" When you first move an app to Kubernetes, it's tempting to run every workload the same way: apiVersion: apps/v1 kind: Deployment # ⚠️ Works, but has

Oct 22 · 6 min readdevseccloud.hashnode.dev

Catching over-permissive IAM in the pull request, not in production

Over-permissive IAM is one of the most common AWS misconfigurations: "Action": "*", iam:PassRole granted on every resource, a trust policy with "Principal": "*". The problem is usually found during an

Oct 15 · 3 min readdevseccloud.hashnode.dev

Hardening a 3-tier app before Kubernetes: 6 things that were quietly broken

Kubernetes gives you strong security controls: runAsNonRoot, read-only root filesystems, readiness-based routing. But they only work if your containers already support them. So before moving Deal Aggr

Oct 15 · 5 min readdevseccloud.hashnode.dev

Sulakshana Karunarathne

About

Available for

Sulakshana Karunarathne's blogs

From Browser Click to MongoDB Query: How Traffic Actually Flows Inside a Kubernetes Cluster

Running a Database as a Kubernetes Deployment? Watch Out for This Rolling-Update Trap

Catching over-permissive IAM in the pull request, not in production

Hardening a 3-tier app before Kubernetes: 6 things that were quietly broken

Search Hashnode

Sulakshana Karunarathne

About

Available for

Sulakshana Karunarathne's blogs

From Browser Click to MongoDB Query: How Traffic Actually Flows Inside a Kubernetes Cluster

Running a Database as a Kubernetes Deployment? Watch Out for This Rolling-Update Trap

Catching over-permissive IAM in the pull request, not in production

Hardening a 3-tier app before Kubernetes: 6 things that were quietly broken