gabrielt
Product and Topic Expert
Product and Topic Expert
Member since ‎2015 Sep 05

User Statistics

  • 6 Posts
  • 0 Solutions
  • 1 Kudos given
  • 40 Kudos received

User Activity

Kubernetes Cross-Cluster Communication: Ditching Long-Lived Credentials

2023 Sep 22
This blog post provides a comprehensive guide on how to utilize Kubernetes service accounts and their OIDC tokens to establish secure communication between two Kubernetes clusters, referred to as “upstream” and “downstream” clusters. Imagine you want...

The Case for Automating Dependency Updates!

2023 Sep 11
 On June 25th 2024 at 13:00 UTC we will have a webinar for "How to fight the dependency hell". Register now here and join the conversation and discussion! Looking forward to seeing you there!We began the process of automating our software dependency...

Using Jenkins OpenID Connect Provider Plugin in Kubernetes

2023 Apr 18
Continuous Integration (CI) systems like Jenkins often use long-lived credentials to authenticate to Kubernetes clusters. While some CI systems have native support for issuing short-lived OpenID Connect (OIDC) tokens, Jenkins doesn’t have this native...

Using GitHub Actions OpenID Connect in Kubernetes

2022 Sep 23
Update (12.04.2023): Another approach leveraging Kubernetes’ native credential plugin is now available at the end of this post. Insufficient credential hygiene is one of the top security threats to automatic CI/CD pipelines and connected environmen...

Use Kubernetes Service Accounts in Combination with OIDC Identity Federation for imagePullSecrets

2022 Sep 01
In this blog, I will share how you can use Kubernetes service accounts and their OIDC tokens to securely pull container images from private registries without having to copy secrets around. In this blog, I will focus on how to set it up using a Kuber...
Kudos given to