Year: 2022

RBAC or Role-based Access Control, is a key feature of Kubernetes (a.k.a. k8s) that provides access control by roles and role bindings. A role will be defined with a set of api_groups (“” for default, “apps”, “autoscaling”, “batch”, “extensions”, “networking.k8s.io”, “authentication.k8s.io”,”storage.k8s.io”,”certificates.k8s.io), resources (pods, deployments, namespaces, secrets, persistentvolumes, configmaps, nodes), and vebs (create, get, delete, list, […]

I’m currently on a cool project where we are automating the deployment of EKS clusters with Terraform. The TFE server is configured with an IAM user, that TF user will automatically be added to the aws-auth section of the configmap. We have EKS module code to add our SSO group’s rolearn to the configmap. The […]

If you are like me you have a ton of accounts with username/password required to access the service/site. A couple of years ago I started using a password manager (LastPass) and have reset all my accounts with a crazy random/complex password/passphrase. I now only have a single password to remember, the one for my vault. […]

My current project is a datacenter migration where we’re moving Windows workloads up to AWS. One item we had been struggling with was with two large file share servers. The shares are multiple terabytes in size with lots of small files/docs and subfolders. The challenge we had been dealing with the performance of DataSync with […]

For most of my IT career I’ve been in the Microsoft space. And much of my first “cloud” work was with Azure…but I was also doing some AWS. Then my mentor told me I had to make a choice. I like to say that I was given the choice between the orange pill or the […]