how-to - LazyBit.ch

The perfect SSH login flow

Looking to implement the perfect login flow for SSH? Let's setup OpenSSH Server Certificate Authentication using signed certificates from Hashicorp Vault issued after authenticating to the Vault against a Keycloak OIDC client. Setup For local development we'll use kind to deploy keycloak and vault,

ingress-nginx

Expose TCP services using ingress-nginx

A no nonsense guide to exposing TCP services using ingress-nginx. Install the TCP service Install the Service that binds the TCP port you need to expose. For this example we'll install a dind (Docker in Docker) deployment and expose TCP port 2376. helm repo

registry

Docker Registry Maintenance

If you're hosting a private Docker Registry backed by local storage then you may have noticed the servers available disk space decreasing over time. If you're running low on disk space then you might be happy to know that we can get away with