#kubernetes (2024-12)
Archive: https://archive.sweetops.com/kubernetes/
2024-12-02
does anyone have the name of the tool that can re-write manifests with private registry URL’s? for e.g. if someone deploys a chart from [charts.external-secrets.io](http://charts.external-secrets.io)
, the webhook updates it with [my-private-repo.git.io](http://my-private-repo.git.io)
for e.g
https://github.com/jainishshah17/tugger ? Or Kyverno should work
Kubernetes Admission Webhook to enforce pulling of Docker images from the private registry.
thanks mate.. been meaning to start looking into Kyverno, might be the time to switch over from OPA
Hi all, Are there any recommended ways to authenticate to AWS service from non-eks clusters? Does IRSA work here or there is some other way to authenticate to AWS, I’m preferring IAM role over IAM user credentials. Non-eks k8s is k3s cluster.
have you tried SSM hybrid activation?
otherwise, something like IAM roles anywhere
Yea I’ve come across IAM roles anywhere, will take a look
its a little late……but if anyone else is looking take a look at this article <https://medium.com/@pavankumarn6997/enable-aws-iam-role-for-service-accounts-on-self-hosted-kubernetes-clusters-8a9e0df07e50>
2024-12-03
2024-12-10
2024-12-13
2024-12-15
2024-12-16
Does Cloud Posse have a common library for Helm charts that is similar to [context.tf](http://context.tf)
for Terraform? I’m curious how something like that would be implemented, perhaps comparable to New Relic’s approach: https://github.com/newrelic/helm-charts/tree/master/library/common-library
I use this for basically everything https://bjw-s.github.io/helm-charts/docs/app-template/
2024-12-18
Hi Folks, How do we preserve source IP in istio <> Azure LB without updating the externaltrafficpolicy to local ?