Hashicorp Vault in High Availability Mode on RedHat OpenShift 4.10.10

Hashicorp Vault is a widely-used open-source tool for securely storing, managing, and accessing secrets, such as passwords, API keys, and certificates. It provides a centralized platform for managing secrets across different environments and integrates with various authentication and authorization systems. Vault offers features such as dynamic secrets, secret leasing, and revocation, making it a popular choice for managing secrets in modern application architectures. Configuring Hashicorp Vault on Openshift in High Availability mode can be a challenging task, as the official documentation may not provide all the necessary information....

March 6, 2023 · 11 min · 2272 words · Selwyn Rogers

How to harden Debian Buster

To install the necessary dependencies, you can use apt. Run the following command to update the package list and upgrade the system: apt-get update -y && apt-get upgrade -y Then, install the required packages: apt-get install -y git ufw fail2ban sudo Add a new user You can skip this step if you already have a user with sudo privileges that is not root. useradd -m -s /bin/bash your_username SSH Keys To begin, generate an SSH Key pair on your local machine....

October 8, 2020 · 4 min · 683 words · Selwyn Rogers

Run GitLab Runners in Podman Containers with Docker Executors

Download my example here: https://github.com/selloween/podman-gitlab-runner-docker-executor Creating directory structure I prefer to create a podman directory in /opt for all container bind mounts. mkdir -p /opt/podman/gitlab-runner mkdir -p /opt/podman/gitlab-runner/certs mkdir -p /opt/podman/dind/docker touch /opt/podman/gitlab-runner/config.toml Docker in Podman Container First, create a Podman container using the official dind (“Docker in Docker”) Image from Dockerhub. For this, I created a simple bash script located in the /dind directory. It’s important that the “Docker in Podman” container is started before starting the GitLab Runner container....

August 27, 2020 · 3 min · 552 words · Selwyn Rogers

Get Admin Email Notifications from Keycloak using Python and the Keycloak Admin API

To receive email notifications from Keycloak using Python and the Keycloak Admin API, we will need to perform the following steps: Authenticate with the Keycloak Admin API and fetch an access token. Request registration events from the API. Extract user information from the response. Perform any optional actions, such as adding a user to a specific group (this will be covered in another tutorial). Send an email containing user information to a specified email address....

March 19, 2019 · 12 min · 2437 words · Selwyn Rogers