Why This Tutorial ? There are only a few places where we can create policies to check whether security/high availability requirements are met or change the way the application is been deployed to enforce such policies. Admission controller is such place! Who is it for ? This tutorial is for PAAS admins which are NOT developers but do want…

Why this Tutorial In the past I have written a tutorial about how to connect OpenShift 4 with NFS storageClass but a lot has changed sense then. Today (from Kubernetes 1.20 to be precise) the old tutorial will not work due to required Kubernetes changes There for I am writing a new tutorial…

Why this Article Today the very basic of securing your application is running it with a TLS encryption. When running the application on top of OpenShift we can utilized the Kubernetes Abilities and sign the application certificate when the CA is already part of OpenShift. In OpenShift the CA certificate are being recycled…

TLS and Secrets In Today modern world running application without TLS is on the verge of forbidden. All web application must run their front end with some time of TLS termination. Running Web application on OpenShift is no different and on OpenShift we have several options. TLS Termination When Running Application on top of OpenShift…

Why this article ? In some cases during our work over Kubernetes Infrastructure we need to run a response test over HTTP to see how long does the response takes to complete. for that purpose we need a simple command line tools such as CURL. In sort , cURL is a command-line tool for getting or…

Why this article ? Working with RH-SSO is multiple customers sites raised a very interesting question. “can we deploy RH-SSO on OpenShift with an external DB?” It took a while but finally the answer to this question is “YES”. from version 7.3 we can create update the current set of files which RH-SSO uses in…

Why this story Wireguard has been the main talk in the VPN community for the past year and lately I wanted to give it a try. As it turns out it really is as simple as it seems. Setup ? For this setup we will need a server in our home internal network that will…

Why This Article ? Working with OpenShift/Kubernetes is an enterprise environment can present interesting challenges, one of them is make sure that none HTTP services are available outside of the OpenShift/Kubernetes Cluster SDN (Software defined Network). for HTTP/HTTPS services we can use route/ingress to expose them outside of our cluster but for TCP services we…

Why This Tutorial In the PAAS Admin world there are (roughly) 2 types of admins . One type (like me) are Linux Dinosaurs which have adopted and learn a lot on the Kubernetes’s ins and outs while retaining their long Linux experience. the other type are briete new admins with a fresh per…