Categories
Uncategorized

Minio uses the OAuth 2.0 Implicit flow to Auth with OpenIDC

Minio’s web application is a single page application. As far as I can tell it is frontend only and works like a single page application. That is why when setting up the the client for minio on keycloak. We set implicit flow to True. In that case there is no authorization code – and no […]

Categories
Uncategorized

Rancher Single Node Docker Install Completely Remove and Uninstall

docker rm -f $(docker ps -qa) docker rmi -f $(docker images -q) docker volume rm $(docker volume ls -q)

Categories
Uncategorized

Hashicorp Vault Auditing: Who has looked at what

This is a common requirement, how is it achieved? Acccording to the docs on Hashicorp audit deviced: https://www.vaultproject.io/docs/audit You simply run this as the root user: vault audit enable file file_path=/var/log/vault_audit.log

Categories
Containerisation Containers Continuous Integration DevOps git Uncategorized

Cannot use harbor robot account ImagePullBackOff pull access denied

This post is mainly about harbor robot accounts. Robot accounts are accounts used to run automated operations and have no access to the frontend. The account to use in your continuous integration or k8s registry secrets. You create a robot account by going to: Project -> Robot Accounts -> New Robot Account The Problem $ […]

Categories
Uncategorized

keycloak on k8s

https://hub.helm.sh/charts/codecentric/keycloak https://github.com/helm/charts/tree/master/stable/keycloak https://www.youtube.com/watch?v=A_BYZ7hHWXE https://dev.to/techworld_with_nana/how-to-setup-a-keycloak-gatekeeper-to-secure-the-services-in-your-kubernetes-cluster-5d2d https://www.youtube.com/watch?v=u948CURLDJA&feature=youtu.be