One cloud consultants building journey...
One cloud consultants building journey...
January 2025 marks a couple of milestones. It will be my 3rd year at Slalom and is my 25th year in technology consulting. Wow time flies…and so I thought I would share some reflections on this journey I’ve been (and am still) on. For those who have known me long, know that my path to […]
After working with the popular and still growing container management platform, I’ve had the opportunity to use several different management tools. Here’s my current favorites. OpenLens A GUI and open source K8s management tool. Works well with a small number of clusters (10 clusters can be added/pinned to the “hotbar”). This tool has the ability […]
Hello again friend. It’s the heat of the summer and I’ve been on a rather long engagement helping a client automate the build of EKS servers. One item I was keen to automate was the target subnet where the cluster gets installed and where to place the node group(s). So I turned to the aws_subnets […]
As I continue my Terraform journey, I am always trying to find better ways to deal with the complexities of the code and the resulting resources built from the code. Security Groups are no execption. I did some web searching and found some code to parse a CSV and create a security group rule set. […]
RBAC or Role-based Access Control, is a key feature of Kubernetes (a.k.a. k8s) that provides access control by roles and role bindings. A role will be defined with a set of api_groups (“” for default, “apps”, “autoscaling”, “batch”, “extensions”, “networking.k8s.io”, “authentication.k8s.io”,”storage.k8s.io”,”certificates.k8s.io), resources (pods, deployments, namespaces, secrets, persistentvolumes, configmaps, nodes), and vebs (create, get, delete, list, […]
I’m currently on a cool project where we are automating the deployment of EKS clusters with Terraform. The TFE server is configured with an IAM user, that TF user will automatically be added to the aws-auth section of the configmap. We have EKS module code to add our SSO group’s rolearn to the configmap. The […]
If you are like me you have a ton of accounts with username/password required to access the service/site. A couple of years ago I started using a password manager (LastPass) and have reset all my accounts with a crazy random/complex password/passphrase. I now only have a single password to remember, the one for my vault. […]
My first bit of code for my new employer was help to setup a “security VPC” that hosts a pair of Palo-Alto firewalls to inspect traffic from other AWS accounts (AKA “hub and spoke”). This work was based (loosely) on repos found here and here…these repos build a similar environment but within a single AWS […]
The Challenge A client will be decomissioning a Windows print server but will keep the printers and have Windows clients print directly to print devices. How can we automate the setup of the new printer ports and printers?…and as a bonus we’ll get a simple way to mitigate your environment from Printnightmare. The key there […]
I had been using credential files in my terraform projects. Recently I switch to use AWS SSO and providing the profile name in the code. At runtime (plan, apply, etc.) terraform will use the token from the given profile. If AWS returns expired, the command will stop with authentication errors. Simply authenticate by cli via […]