Categories
Network Automation

Querying JSON: YAQL vs JSONpath vs JMESPath (and new entrants)

These days many api’s over HTTP that we query return JSON. That is great and all, it is much more readable for humans than XML. What about when there is a large set of JSON and you only need a small part of it? There are different ways of doing it, like converting the json […]

Categories
IAM Integration Keycloak

Using Keycloak Identity Provider for Rancher SSO

In Rancher 2.1.0 they added support for SAML authentication with Keycloak. What this means is Rancher will use a Keycloak realm to authenticate users. This means that there is one place to manage users for a host of your applications. It also means that if they have logged on to the realm with their browser […]

Categories
IAM

OpenID Connect Clients for Python

What OpenID Connect clients are available for python? If we look at the certified implementations for python: Python-OIDC-RP PyOIDC However I also found this one: Mozilla Django OIDC The Mozilla one has nicer docs and a nicer readme, so I’m going to start with that. They also have some info on OpenID Connect and seem […]

Categories
Containerisation Containers

Alpine Python Docker Base image problem with gcc

An important thing to do with process based containers or any container is to keep them slim and ensure that only what is necessary is packaged into the image. For that reason I went with the python:3.8-alpine base image. After all was said and done the size of the resulting image was 208MB. No GCC […]

Categories
IAM

Open-Source Single Sign-On (SSO) and IAM

On wikipedia  you can get a list of all SSO platforms / frameworks, you can view the licenses of the products on there. You will see there are so many proprietary solutions and it makes it difficult as they are harder to test out. We are trying to solve the problem of having one a […]