Bradley Massey - LazyBit.ch

The perfect SSH login flow

Looking to implement the perfect login flow for SSH? Let's setup OpenSSH Server Certificate Authentication using signed certificates from Hashicorp Vault issued after authenticating to the Vault against a Keycloak OIDC client. Setup For local development we'll use kind to deploy keycloak and vault,

actions-runner

Docker Registry in-cluster kaniko cache

Caching the image layers when building with kaniko can significantly enhance the speed of your builds. When your workspace isn't persisted during your builds then local caching isn't an option. In this blog post we'll take a look at running our self-hosted Github Actions

sonarqube

Code quality scanning using SonarQube

We use SonarQube in our CI/CD pipelines, don't you? Setup For the purpose of this blog post we'll be using a Google Kubernetes Engine cluster with external-dns configured to manage our Google Cloud DNS records and cert-manager deployed and configured for issueing ACME

ingress-nginx

Expose TCP services using ingress-nginx

A no nonsense guide to exposing TCP services using ingress-nginx. Install the TCP service Install the Service that binds the TCP port you need to expose. For this example we'll install a dind (Docker in Docker) deployment and expose TCP port 2376. helm repo

registry

Docker Registry Maintenance

If you're hosting a private Docker Registry backed by local storage then you may have noticed the servers available disk space decreasing over time. If you're running low on disk space then you might be happy to know that we can get away with

actions-runner

GitHub Actions Runners self-hosted in Kubernetes

Have you been looking for self-hosted GitHub Actions Runners for Kubernetes? Look no further! We've got you covered with our public Helm Charts to bootstrap your cluster \o/ In this blog post we'll take a look at a couple of deployment options for installing

harbor

Harbor Keycloak Auth

Loving Harbor as much as I am? Looking for a way to secure your Harbor installation? In this blog post we'll deploy Keycloak and configure it as the authentication provider for Harbor. Pre-requisites You'll need a publicly accessible Kubernetes cluster and TLS certificates to

tekton-pipelines

Tekton Pipelines (v0.11.0-rc2)

Looking for a Cloud Native CI/CD pipelines for your Kubernetes cluster? Check out the tekton-pipelines project from the great folks over at Tekton. Tekton bridges the ever-decreasing gap between Development and Operations a little bit more with their state of the art pipeline

kind

(DinD(KinD()))/SSH

Need to deploy a quick Kubernetes cluster? Need to expose it on the Wide Area Network? Got a public facing SSH server? How about exposing a Kubernetes in Docker cluster deployed locally in a Docker in Docker container over SSH. Setup Run the kind

jenkins-x-labs

Jenkins X Labs (0.0.100)

Jenkins X Labs is alpha! jxl builds on jx adding support for helm3 along with other enhancements. In this blog post we're going to take a sneak peak at the extension model for adding services on top of the jx core installation (tekton-pipelines, nexus,