If you want to bootstrap a Kubernetes cluster in no-time, then you may want to follow the below steps. Here I describe how I set up a three node cluster using a Server and two Agents and a storage driver using longhorn.io. NOTE: I assume you have at least three Servers…

I recently had to configure Hashicorps Vault to be integrated with our SSO provider Keycloak using Openid-Connect. NOTE: You need a running and unsealed vault already. Vault is running at the URL: https://vault.example.com You need an admin login or be able to administer a Keycloak realm Keycloak is running at…

In this post I’d like to explain my view of the inventory/classes and inventory/targets and give a few examples. If you need a little introduction you can read my previous post “Kapitan — rise and shine” and you can also follow along with the whole Kapitan blog. With this post…

I searched for a new tool. Which we can use to ease our Kubernetes configuration management. Here is why I will use Kapitan over Helm, Kustomize or Pulumi. Why Kapitan? I searched for a new tool. Which we can use to ease our Kubernetes configuration management. Therefore I personally tested Helm, Kustomize…

I try to help you here with kustomize issues I had and how got along with them. You can follow for more updates in near future Basic Preparations $ brew install kustomize [...] $ mkdir -p myrepo/base myrepo/sonarqube/ $ cd myrepo $ kustomize init Case 1: Preparation Replace your ingress hostname with kustomize configMapGenerator +…

I recently tried to create an aditional user in my Kubernetes Cluster. Therefore I searched for hours to find nothing. With this post I’d like to help you find the solution quicker . First of, there are no “User” like in LDAP or Active Directory in Kubernetes (K8s). This is…

In this post I try to help you to get along with certain harbor issues. Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Harbor extends the open source Docker Distribution by adding the functionalities usually required by users such as security, identity…

In the following article I try to describe all configurations which I came a long when creating and destroying ROOK.IO with CEPH. As my company moves on from simple docker-compose especially for internal services like DNS, LDAP, RADIUS etc. …