#kubernetes (2024-12)

kubernetes

Archive: https://archive.sweetops.com/kubernetes/

2024-12-02

IK avatar

does anyone have the name of the tool that can re-write manifests with private registry URL’s? for e.g. if someone deploys a chart from [charts.external-secrets.io](http://charts.external-secrets.io), the webhook updates it with [my-private-repo.git.io](http://my-private-repo.git.io) for e.g

ravioli code avatar
ravioli code
jainishshah17/tugger

Kubernetes Admission Webhook to enforce pulling of Docker images from the private registry.

1
IK avatar

thanks mate.. been meaning to start looking into Kyverno, might be the time to switch over from OPA

akhan4u avatar
akhan4u

Hi all, Are there any recommended ways to authenticate to AWS service from non-eks clusters? Does IRSA work here or there is some other way to authenticate to AWS, I’m preferring IAM role over IAM user credentials. Non-eks k8s is k3s cluster.

IK avatar

have you tried SSM hybrid activation?

IK avatar

otherwise, something like IAM roles anywhere

akhan4u avatar
akhan4u

Yea I’ve come across IAM roles anywhere, will take a look

Binoy George avatar
Binoy George

its a little late……but if anyone else is looking take a look at this article <https://medium.com/@pavankumarn6997/enable-aws-iam-role-for-service-accounts-on-self-hosted-kubernetes-clusters-8a9e0df07e50>

1

2024-12-03

2024-12-10

2024-12-13

2024-12-15

2024-12-16

Michael avatar
Michael

Does Cloud Posse have a common library for Helm charts that is similar to [context.tf](http://context.tf) for Terraform? I’m curious how something like that would be implemented, perhaps comparable to New Relic’s approach: https://github.com/newrelic/helm-charts/tree/master/library/common-library

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

We do not

1
Kalen Arndt avatar
Kalen Arndt

I use this for basically everything https://bjw-s.github.io/helm-charts/docs/app-template/

1
1

2024-12-18

Azar avatar

Hi Folks, How do we preserve source IP in istio <> Azure LB without updating the externaltrafficpolicy to local ?

1
    keyboard_arrow_up