Access control via OpenID Connect (OIDC)
This blog post gets hands-on about access control, including everything from the difference between authentication and authorization, how this works in a couple of CNCF…
Elastisys Engineering
Elastisys Engineering in-depth posts featuring copy-paste friendly code snippets & GitHub repos about cloud native technology and DevSecOps best practices.
What was observability again?
Let us dive deeper into observability: What it is, the different types and what it technically means to implement observability.
Redundancy across Data Centers with Kubernetes, WireGuard and Rook
In this post, we will show you how we solve Cross-data-center redundancy using Kubernetes, Rook / Ceph, Calico and WireGuard.
Kube-Prometheus – A Complete Monitoring Stack Using Jsonnet
Monitoring your application and its platform is basic hygiene for running a healthy software-as-a-service business. But how exactly do you monitor your application? In this post, we will illustrate how to achieve that using kube-prometheus.
Enforcing Policy as Code using OPA and Gatekeeper in Kubernetes
Enforcing organizational policies on a Kubernetes cluster allows you to be in control of the resources being deployed. For example, you can prevent deploying non-vetted…
Elastisys Engineering: How to use Dex with Google accounts to manage access in Kubernetes
In this blog post, we will go through everything needed to use Google as your identity provider in a Kubernetes cluster. If you have an…
Elastisys contributes Kubespray support for UpCloud
Elastisys is committed to open source, and to supporting Kubernetes on a wide range of cloud infrastructure. As part of our work, we have recently submitted…
Elastisys Engineering: How to set up Kubernetes on Exoscale
HOWTO set up Kubernetes using kubespray and Terraform on clouds without a managed Kubernetes service. Uses Rook for Persistent Volumes.
