Installing NGINX Ingress with Helm on Digital Ocean
This is a guide on installing a NGINX Ingress controller on a managed Digital Ocean Kubernetes cluster.
Patrick Kerwood¶
Installing NGINX Ingress with Helm on AKS
This is a guide on installing a NGINX Ingress controller on Azure Kubernetes Service.
Creating a WireGuard VPN exit node
In this how-to I'll create a WireGuard VPN exit node, which is NAT'ing connections for clients. I will give an example on using both iptables and firewalld and how to forward ports to a WireGuard client.
Creating a Kubernetes service account
This is an example on how to create a service account in Kubernetes, with a couple of role bindings. I'll also show how to create a kubeconfig file to use the service account with kubectl.
Installing Cert Manager with Helm 3
Here's a quick how-to on installing Cert Manager in your Kubernetes cluster and setting up Issuers with Let's Encrypt HTTP and DNS validation. With Helm 3 the installation process is a breeze.
OS Query Launcher
This is a follow up on the "Kolide Fleet + OS Query" post. In the previous post we installed Fleet and enrolled a server manually, by installing OS Query and setting it up. In this post, we are going to create a package that includes everything. The package will be using gRPC instead of the REST.
VPN mesh with Nebula
Nebula is a VPN mesh technology that Slack has created and later open sourced. It is absolutely great for creating an overlay networks between nodes in different locations, whether it's Azure, Amazon, on-prem or in your garage. Even if your nodes are behind a NAT or firewall, Nebula will sprinkle some magic and punch a hole in that sucker.
Fedora Workstation Setup
A couple of years ago I installed Fedora on my laptop. And honestly I haven't looked back since, I absolutely love my Fedora desktop. This post is just a list of commands I use to install my applications after a fresh Fedora install, for my own deteriorating memory.
Setting up the Kube Prometheus Stack
In this post I will show you how to install the Kube Prometheus Stack in your Kubernetes cluster, which will give you 20+ Grafana dashboards to let you know everything about what's going on in your cluster. This installation process is extremely simple with Helm 3. I will also add some Grafana configuration to enable OAuth2 logins.
Grafana Auth Proxy Authentication
Instead of managing a local user database in Grafana, you can let a reverse proxy handle the authentication and Grafana will create a user based on that login. In this example I use Pomerium as the authenticating proxy.