Posts

• Trivy security scanning in Buildkite

• Enforcing policies on Selinux profiles in Kubernetes

• A quick update on SELinux as a resource in Kubernetes

• How to automatically remediate issues using the compliance Operator

• Writing RHACM policies to leverage the Compliance Operator

• Compliance Operator CIS benchmark

• Compliance Operator GitOps

• protectKernelDefaults in OpenShift

• Compliance Operator or OPA?

• SELinux as a resource in Kubernetes

• Kubernetes operator day 2 development workflow

• Integrating Udica into the Kubernetes workflow

• SELinux, kubernetes & Udica

• Modifying node configurations in OpenShift 4.X

• Uploading container images to your openshift registry

• Oslo Policy Deep Dive (part 2)

• Oslo Policy Deep Dive (part 1)

• Adding custom databases and database users in TripleO

• Testing TLS everywhere with tripleo-quickstart

• TripleO Denver 2018 PTG notes

• Adding a custom HAProxy endpoint in TripleO

• Dissecting TripleO service templates (part 4)

• Dissecting TripleO service templates (part 3)

• Dissecting TripleO service templates (part 2)

• Dissecting TripleO service templates (part 1)

• TripleO service deployment steps

• Configuration files in TripleO

• Rewriting OpenStack policy files in Open Policy Agent's Rego language

• Setting up Kerberos for Keystone auth with mod_auth_gssapi

• Kubecon Copenhagen 2018

• SELinux and docker notes

• Spawning your first OpenStack instance with Ansible

• Using FreeIPA SubCAs

• TripleO IPSEC setup

• Run ansible playbook on TripleO nodes

• Using FreeIPA as an LDAP domain backend for keystone in TripleO

• Testing TLS with Nova live migration

• Testing containerized OpenStack services with kolla

• Deploying a containerized overcloud

• Deploying a TLS everywhere environment with oooq and an existing FreeIPA server

• Changing the SSL cypher and rules for TripleO's HAProxy

• Testing out the TLS everywhere patches for TripleO

• How is TLS powered by certmonger being done

• Porting Glance to run over Apache HTTPd

• Adding packages to overcloud images

• FreeIPA TripleO integration notes

• Certificates for the undercloud's public endpoints using FreeIPA

• Test changes to TripleO's undercloud

• Where is the certmonger local CA cert?

• Modifying Your Overcloud Images

• Deploying latest TripleO using TripleO-quickstart

subscribe via RSS