Installing Cert-Manager On OKECert-manager is a crucial security component in Kubernetes, making your endpoints secure with TLS. Under the hood, a Kubernetes operator…Jan 13Jan 13
Tweaking Installation of Ingress Nginx on OKE With HelmKubernetes workloads are often exposed through an Ingress rather than the plain Service itself. Ingress is the de facto standard when…Sep 6, 2024Sep 6, 2024
Best Kept OKE’s Secrets: Storing Secrets in OCI VaultSecret management is a hot topic around Kubernetes security. Common challenges, such as secrets stored as plain text ¹ or the lack of…May 17, 2024May 17, 2024
Best Kept OKE's Secrets: Storing Secrets in EtcdKeeping secrets safe is one of the leading security concerns in cloud-native architectures. We often store critical credentials as…May 15, 2024May 15, 2024
Safeguarding OKE: Super-Admin vs. Regular UserOCI IAM policies significantly influence OKE internals and security. Depending on the Policy verbs for the cluster resource (e.g., manage…Apr 18, 2024Apr 18, 2024
Safeguarding OKE: Kubernetes API Server Access Control With OCI IAM and RBAC ExplainedEvery cluster owner’s mission is to safeguard the OKE API server perimeter. You probably don’t want to expose kubectl access to the public…Apr 16, 2024Apr 16, 2024
Safeguarding OKE: Kubernetes Authentication and AuthorizationSafeguarding OKE starts with access control for the Kubernetes API Server. The API Server is a part of the managed control plane of OKE…Apr 10, 2024Apr 10, 2024
How to Resolve Multi-Attach Error With Block Storage PVC in OKE ProperlyIf you faced an error Multi-Attach error for volume "csi-..." Volume is already used by pod(s) when creating a pod, it means that…Apr 9, 2024Apr 9, 2024
How to Define Cloud-Init Script in OKE Terraform ResourceThe OCI provider for Terraform often provides minimalistic documentation around OKE, especially popular oci_containerengine_cluster and…Apr 3, 2024Apr 3, 2024
How to Customize Kube Reserved Resources in OKEDid you ever experience sudden kubelet failure at runtime, resulting in disconnected worker nodes? It’s easy to spot since worker nodes are…Mar 26, 2024Mar 26, 2024