In a previous article I wrote about using Hashicorp Vault as an SSH certificate authority. As of version 1.9, Vault has gained the ability to act as an OpenID Connect Identity Provider as well.
This is an exciting development which greatly increases the scope and utility of Vault. The feature…
I was born in the late 1960's.
My father (now retired) was a field service engineer in a mainframe company. He built me my first computer from a kit¹ while I will still at primary school.
This computer was based on the Motorola 6800 processor running at 1MHz. After we…
Part 1 gave an overview of jsonnet syntax and semantics. I’m now going to suggest some ways to use these with kubernetes. These are not hard-and-fast rules, but some patterns you may or may not find useful.
To illustrate this, I’m going to build a complete configuration of the docker…
In these two articles I’m going to introduce jsonnet as a clean and powerful alternative to helm charts and kustomize for configuring kubernetes resources.
Jsonnet is a general-purpose language for generating JSON, and I needed to play with it for a while to find the best way to apply it…
Have you ever come across Hashicorp’s Vault? It started life as a place to store application “secrets” (e.g. database passwords) securely, without hard-coding them in configuration files. Over time, it has grown into something much more powerful.
There are a number of ways in which users can authenticate themselves to…
In a previous article, I introduced Linstor. Now I’m going to explain some of the concepts needed to use it.
If you’ve read the Linstor user’s guide but are still confused about the relationship between resource-groups, resource-definitions, resources and volumes, then this is for you.
I’m going to leave storage…
Prometheus is a metrics collection system, and its node_exporter exposes a rich range of system metrics.
In this article I’m going to break down the individual metrics for disk I/O. …
When running your own infrastructure, persistent storage has always been a problem for virtual machines and stateful containers.
On the one hand, you have local storage — which means your VMs and containers cannot move without copying their entire disk image.
On the other hand, you have network-attached storage (SANs…
From the Functional Programming illustrated in Python series
Monads, Monads, Monads… have you got anything without Monads?
Well, there’s Direct Function Application. That doesn’t have much Monad in it.
The problem is, functions don’t do anything. Sooner or later you’re going to want to write a program which interacts with…
From the Functional Programming illustrated in Python series
If you’re reading about functional programming, sooner or later you’re going to come across Monads. People seem to find Monads a very difficult topic to understand, so strap yourself in for a bumpy ride.
