Kubernetes – Persistent NFS Storage On Control Plane For Minimal Cluster
Got a minimal (k3s) cluster running? Need persistent storage, NOT dependent on the pods worker node? For testing and small scale deployments, an NFS-server can be installed on any of the control nodes and mounted on the worker nodes. Here’s how: First, install and configure nfs-server on control node Second, install nfs-client on all the […]
Docker – Automate Snyk Docker Image Scanning With GITHub Actions
Snyk is a great tool for vulnerability scanning, it’s included in Docker Desktops docker scan feature (10 “free” scans, then requires registration) and has it’s own CLI tools for code and container scanning. It is, also, available as a pipeline action. Here is how to use it with GITHub actions. First, Create a secret on […]
Docker – Administer Docker Server Remotely With Docker Context (Over SSH)
Once you have deployed your single, or multiple, Docker server(s) and find Kubernetes a bit much or overkill. You may want to administer your swarm of containers, much in the same manner as kubectl helps administer Kubernetes pods. This is possible with Docker Context. Here’s how to connect administer your docker runtime(s) remotely using Docker […]
Kubernetes – Issue Certificates With Cert-Manager And LetsEncrypt
Buying certificates, even the extended validation ones, is (in my opinion) part of the old ways. I personally don’t see the value in authorizing more than domain, or IP-address, ownership when issuing certificates via the PKI model. This can be done with Let’s Encrypt, and automated with cert-manager in your Kubernetes cluster. Here’s how I’ve […]
Docker – Allow Delete From Docker-Registry
Once your start to build and push new, fresh docker images to your private registry. Or even worse, start automating CI/CD pipeline builds that builds and pushes.. You may end up with Docker images you do not want any more, or that you have created by mistake. Here’s how to remove them when you are […]