Tag "kubernetes"

OPA Gatekeeper and issue while doing a cluster restore

We recently encountered a huge problem, when using OPA Gatekeeper in a Rancher cluster and performing a restore of this cluster

Manage AlertmanagerConfigs in Rancher Projects using Terraform

When using Prometheus monitoring stack, Alertmanager is an essential part of the monitoring, while responsible to send alerts. I explain here how I manage, the respective configuration using Terraform.

Manage Rancher Projects in Terraform

While working on managing our Rancher clusters is the management of Rancher projects. I want to talk about the approach I have taken, which may be useful to you as well.

OPA Gatekeeper Metrics and Grafana Dashboard

Now, as we have installed OPA Gatekeeper in our clusters successfully, I wonder how to get metrics in Prometheus and show them in Grafana Dashboard

What is Open Policy Agent (OPA) and OPA Gatekeeper

I finally caught up on our clusters to have a look at the replacement of the pod security policies which haven been deprecated and it's possible successor/replacement.

Import a Rancher apps and Kubernetes manifest into Terraform

While initially setting up our Rancher clusters manually, we started to use Terraform, which simplifies the management of the clusters tremendously.

Testing webhooks with webhooks.site in an air-gapped environment

As a reader of my blog you are aware that at my employer we are using Rancher and MS Teams for alerting. Unfortunately this was not working properly, so I had to start debugging.

Debugging Network Issues in K8s

Troubleshooting networking issues in docker and kubernetes is often difficult and the root cause can be in different places including the underlying networking infrastructure. I have collected some information which might be helpful.

Docker images for debugging network issues in K8s

Troubleshooting networking issues in docker and kubernetes is often difficult and the root cause can be in different places including the underlying networking infrastructure. I have collected some information which might be helpful.

Useful kubectl and helm commands

Some commands you also might find useful when working with kubectl

Deploy RHACS with Rancher fleet

In my last post I talked about Rancher fleet, as a next step we will manage RHACS with fleet.

Fleet, the GitOps tool embedded in Rancher

There are a lot of different GitOps solution out in the field. But when you are using Rancher, you already have one at hand. As a Rancher user, I had a look what it is and how it works

How to add encoded key- and truststore to K8s secret

Working with java applications in kubernetes, you might come use

Rancher 2.5.x v2 logging using splunk

Installing and configuring logging with Rancher is quite easy, but in combination with Splunk some guidance might be helpful. I guide you trough the process of the complete installation and configuration

Rancher 2.5.x monitoring and alerting with MS Teams

Installing monitoring and configuration with Rancher is quite easy, but in combination wit alerting for MS Teams some guidance might be helpful. I guide you trough the process of the complete installation and configuration

Your first Kubernetes deployment

Kubernetes is complex and at first overwhelming if you never did something with it. In this post I want to focus on a simple deployment and putting some pieces (Pod, Deployment, ConfigMap, Ingress) together to get a better understanding for newbies.

Upgrade istio, monitoring and logging from Rancher 2.4.x. to 2.5.x

While we are using Rancher 2.5.x our current cluster management solution, we actually still are using the old istio- and monitoring-stack v1 rather than v2. We want to change that but it is not as easy as we thought.

Authentication and Authorization in Kubernetes

Authentication (who am I) and authorization (what I am allowed to do) are essential and thus having a basic understanding on how Kubernetes handles this, is very useful.

What is the Kubernetes API and CRD

When working with Kubernetes CRDs is something that you will stumble upon, so you should know what it is. But this does not go without understanding the main principles of the Kubernetes API