If you have an existing PKI infrastructure, mutual TLS is a convenient way to do authentication and authorization. OpenSearch supports it, although the documentation is lacking in practical examples. Let's fix that!
This post uses the OpenSearch security YAML files for configuration. While …
Have you installed OpenSearch via Deb or RPM? Check your plugins: you have 26 along for the ride, whether you need them or not. This article describes how to selectively enable plugins using systemd. Obviously this doesn't apply to Docker, but there's an easier solution …
Although Tuned's website is looking pretty dated these days, I still believe tuned is useful for creating and managing performance profiles in a modern Linux system. Red Hat is still keeping it updated and it is still packaged in Fedora, Debian, and …
In my homelab, I prefer to turn everything up to 11. That means I'm using bonds, bridges, jumbo frames, software-defined networking, etc. Maybe I'm reliving my glory days of working for a large public cloud.
I learned Linux in the Red Hat world, so Debian/Ubuntu …
According to its purveyors, Incus is "next-generation system container, application container, and virtual machine manager." It is a fork of LXD which retains a more open-source friendly license.
Although Incus/LXD are typically associated with Linux containers, I was more interested in testing its virtual machine capabilities …
Although I've supported Elasticsearch/OpenSearch for a number of years in my professional life, I've never had the opportunity to use the security plugins.
All that changed rather abruptly when we decided to run OpenSearch on Kubernetes using the OpenSearch Kubernetes Operator. Suddenly, the security plugins are required.
Rather …
According to its purveyors, "Traefik is a leading modern open source reverse proxy and ingress controller that makes deploying services and APIs easy." At a previous job, we were migrating our Hashicorp Nomad environment from Fabio to Traefik when I left. I didn't …
As you probably know, ansible-vault is a good way to keep your secrets...secret.
There's at least two ways to handle vault secrets in your ansible roles: - Put them in a separate file, such as 'secrets.yml'. This makes it easy to encrypt/decrypt …
Page 1 / 1