/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

ectobit.com
| | xvnpw.github.io

In my previous post about Apache APISIX I have found path traversal in uri-blocker plugin. In this text I will focus on yet another ingress controller which is Traefik. It has feature called forward auth. At the end I will mention HAProxy ingress controller.
1.6 parsecs

Travel
| |
| | chrisshort.net

There are a lot of ways to create a Kubernetes Secret. Let's dive into a few possibilities and some helpful suggestions from the Kubernetes community.
2.5 parsecs

Travel
| |
| | blog.mariom.pl

There is an easy way to use base-auth for securing ingress access in Traefik, but, well - its base auth. Its not that secure nor easy / nice to use in browsers, especially on mobile devices. So for long time, I was thinking how to integrate Traefik Ingress with an SSO (Single Sign-On) solution. Prerequisites You will need some kind of SSO provider. Im using Forgejo (a fork of Gitea). I didnt need anything fancy, and I already had Gitea working, which had the OAuth2 provider out of the box.
1.0 parsecs

Travel
| |
| | blog.zespre.com

The dockershim has been announced as deprecated since Kubernetes v1.20. And Kubernetes v1.23 is about to step into its EOL after the end of this month. So its time to move forward! Lets upgrade the cluster to v1.24. This article is solely for the personal record about changing container runtimes to upgrade Kubernetes from v1.23 to v1.24.
10.6 parsecs

Travel
|