We have Kubernetes. We need a cert. We want to use Let's Encrypt to create (and manage) that cert for us.
We can install cert-manager and, with three objects, do exactly that. At a high level, we create a ClusterIssuer, we configure it with our cloud credentials (in …
read moreWe've successfully implemented user authentication in our TKG clusters. Now, we'd like to update the client ID/secret for our TKG Management Cluster.
TKG uses Pinniped to support authentication, including to OIDC providers. However, exactly which Kubernetes object we need to update/reconfigure is not immediately obvious. Fortunately …
read moreWe need to reliably implement cluster autoscaling for our Kubernetes platform. How can we do that? And how can we know it's working?
TKG uses the ClusterAPI provider, part of the Cluster Autoscaler but makes it easy to configure. We'll ask TKG to enable Cluster Autoscaler for us …
read moreUser management is not part of Kubernetes. You have to tie Kubernetes to an external system. This gets.... complicated.
For TKG, we can hook our Kubernetes clusters up to any OIDC provider. For this excercise, we'll use Okta. At a high level, here's what we'll do.
We want easy GPU access for Kubernetes workloads in our TKG clusters. This is done by:
As of today, there is no single answer to the question "How do I deploy my workload?". Helm Chart? A set of yaml files? Templated yaml files?
And not just user-facing apps - how do I consistently deploy ingress controllers? K8s cluster user auth services? Diagnostics, metrics, and so forth …
read moreNow that Vsphere 7u1 is out (yay!), you, too, can run Vsphere with Kubernetes without NSX-T. But for the home lab of a former developer, what does that look like? We have our fancy Ubiquiti networking but we're not sure how to make the right networks. We also don't …
read moreYou got a Kubernetes! Your Vsphere team has given you access to a Vsphere Workload Management Namespace, which means you can start making clusters! But how, exactly? Assuming they didn't give you enough directions, how do you from 'access' to 'I have a Kubernetes workload!' ?
At a high …
read moreYou may occasionally find that a game you made in Roblox has been hijacked and immediately teleports you to another game when you start. This is a total bummer as it takes away all the time you spent creating the game and can leave you feeling helpless.
Bottom line …
read moreWe want to deploy a simple (read: development) instance of MongoDB in our Kubernetes cluster with as little work as possible. Additionally, we'd like to make that MongoDB deployment available to services outside the k8s cluster but not outside our VPC
Use Bitnami's MongoDB helm chart to deploy …
read more