https://henrikgerdes.me/atom.xml

Native Keyless Authentication from AWS to Azure with Web-Identity TLDR: AWS STS Web-Identity-Token function allows secure, low maintenance authentication via OIDC for all none AWS Services at no additional cost.

Kubernetes & IPv6 Let’s bring some technologies with very different adoption metrics closer together: Kubernetes is just over 11 years old, as of writing.

Gateway API doesn’t solve real problems - yet 🧾📖 PDF version Disclaimer: This tells my personal experiences with the Kubernetes Gateway-API and shows the value Ingress-Nginx provided.

Reduce your Token-Usage for all non AWS-Apps with AWS Web-Identity-Token TLDR: AWS new STS Web-Identity-Token function allows secure, low maintenance authentication via OIDC for all none AWS Services at no additional cost.

I can’t recommend Grafana anymore Disclaimer: This tells my personal experiences with Grafana products.

Rootless GitLab Runners TL;DR: Rootless Docker has become easy!

Follow Up: Let’s talk about anonymous access to Kubernetes TL;DR: Kubernetes default anonymous-auth allows unended information exposure, but disabling it was hard.

Level up your Ansible Code - Creating Golden Images TL;DR: The combination of Ansible and Packer can be a terrific solution to improve provisioning time, increase reliability and reduce stress on other infrastructure.

Understanding modern day Authentication with OAuth2 and OIDC ℹ️ This post was written in the context of my employment at ARES.

What is new in containerd 2.0?

Improving OnPrem Kubernetes & making it feel like managed k8s Managed Kubernetes services like AKS, EKS or GKE are awesome.

New Website - Abandoning JavaScript frameworks This is the third generation of my website.

The Engines that run our Kubernetes Workloads 🧾📖 PDF version Target audience: This article is a deep dive for people living the Kubernetes lifestyle, for people who know or want to know how the low level stuff works and performs.

Using GitLab to manage Kubernetes access Recently I have been tasked to share access to a Kubernetes test cluster with other teams.

The recurring problem of the Metrics Server and Insecure Kubelet certificate What is this about: Currently the kubelet, the client agent coordinating container lifecycle on each node, also runs a server, using a self signed certificate by default.

Using AWS from GitHub without Credentials AWS allows external services to authenticate without any secrets, which increases security and also reduces management overhead.

Comparing GitHub Actions with GitLab CI/CD Introduction GitLab just announced the availability of their GitLab CI/CD Catalog (2023/12), which states a perfect opportunity to compare the current state of the two CI/CD systems of everyone’s favourite version

Building preconfigured OS images with Packer Introduction Hetzner Cloud provides a number of different operating system images to select from when creating a new virtual machine.

Building and Cracking the Enigma - Part I As more and more parts of our lives are shifted to the internet, the subject of security is becoming increasingly relevant.

Sending metrics to Azure - with Prometheus With this post, I want to provide a quick demonstration on how to send Prometheus metrics to Azure managed Prometheus.

Joplin: The notebook for Devs How do you keep your digital life organized?

Broken NodeJS Apps due to security dot-release On July 7th the vulnerabilities CVE-2022-32213, CVE-2022-32214 and CVE-2022-32215 where publicly disclosed.

Productive Working - Be lazy & get things done - Part II My math teacher always told me that mathematicians are lazy and so should we.

Productive Working - Be lazy & get things done - Part I My math teacher always told me that mathematicians are lazy and so should we.

Getting started with LaTex as a Dev About LaTeX LaTeX is a typesetting system that allows the user to write plain text, while the formatting is provided via markup tags, similar to HTML.

One Day Build: WebApp to download Videos from Reddit It has become kind of annoying to download a simple video from Reddit.

Install & Configure Promtail for Grafana Loki This post will demonstrate a reliable and easy way to install Promtail to your server in order to collect all system logs in a central place for proper monitoring.

How to build a Docker image for a TypeScript based NodeJS project You just finished your TypeScript project and now you want to release it to the internet by using ECS, GKE, Azure or any other cloud service?

More is comming soon Lorem ipsum dolor sit amet, consectetur adipiscing elit.