Automation for everyone I Often find myself wandering what is automation and how to achieve it in the most generic and efficient way and more often then none I don’t come up with a clear answer. Our IT world is a very complex organism that keeps changes as we move forward and grow…

Past and Future When dealing with technology for a long time you starting to see some things repeat them self but in many variations and in interesting scenarios. I think this is a classic case where tools from the past help getting into a better future using automation tools to make sure what…

Simplify I really like to keep things simple but on the other hand I need to know how things work on the inside. in most cases clicking double TAB ( <tab><tab>) can save us between a few seconds of writing to a complete hours finding out the next argument, And it really…

day 2 operation During my work with OpenShift I notice that in more then one cases we need command line tools to be available to us from within the cluster (to save resources on external servers). One good example is the ssh client in case one of our workers become unavailable we can…

The Old World In the (not so) old world our organization provided internal service over VPN and the available authentication method was LDAP authentication for each service. Time past and then need for a Single sign one grow with it. The most common and available SSO at the time with Kerberos authentication (must by…

why Jumbo Frames Kubernetes (And OpenShift as a result) uses SDN (Software define network) to manage the Pod and the services IP addresses. During my line of work I notice that the east / west network connectivity when Pods are running on 2 different nodes is reaching only about 25% of the actual bandwidth…

Into the thick of it When we deploy OpenShift 4 in a full Open Source environment it is recommended to use HAproxy as the cluster external Load Balancer. HAproxy has to ways of load balancing the traffic , The first and the most used is by TCP so the packet does not go through any inspection…

Why This Tutorial ? There are only a few places where we can create policies to check whether security/high availability requirements are met or change the way the application is been deployed to enforce such policies. Admission controller is such place! Who is it for ? This tutorial is for PAAS admins which are NOT developers but do want…

Why this Tutorial In the past I have written a tutorial about how to connect OpenShift 4 with NFS storageClass but a lot has changed sense then. Today (from Kubernetes 1.20 to be precise) the old tutorial will not work due to required Kubernetes changes There for I am writing a new tutorial…