We deployed Istio...now what? Does it work? Can my app run? How do I know the mesh is running? Join us at noon EST to find out! youtube.com/live/hMFX7EI...

We've released OpenUnison 1.0.43! We've made building Security Token Services easier, simplified kubernetes logins with a new kubectl plugin, and made privileged access to Kubernetes a snap. Check out our new features with more blog posts coming soon! www.tremolo.io/post/openuni...

Trick or treat, smell my skeet, give me a great service mesh. If you don't, I don't care, I'll pull out your token there! OK, know it doesn't all rhyme but let's learn how to deploy Istio!

Are you also at #kcddc? Come find me and say hi!

Your Pods, they're talking to you....can you hear them? We'll walk through how Kubernetes manages your logs using OpenSearch. youtube.com/live/VeArPBy...

No, also, no one likes old pictures of them being posted on socials without their permission!!!!!

A customer did an accessibility review of OpenUnison's UI. Try hard to get it right, don't pretend to always do and was pretty happy at how well the report came back. Been in the weeds the last couple of days getting the few issues they found corrected.

Backups and disaster recovery is so hot we couldn't keep it in just one live stream! We'll wrap up our chapter on backups today at noon EST! youtube.com/live/ibE6I5_...

This was @tremolo.io first conference booth. Red Hat Summit 2015. We were talking about applications and OpenShift and almost everyone we talked to was asking about Satellite🤣🤣🤣. This was our official exit from "stealth".

In a stream that's too hot for TV....the sexiest topic in all of enterprise infrastructure...BACKUPS!!!! Join us at noon for deep dive on our backups chapter with Velero! youtube.com/live/yByl5Zm...

For TBT, how can you use your Kubernetes ServiceAccount tokens to access AWS services? www.tremolo.io/post/securel...

Packt is giving Kubernetes: An Enterprise Guide, 3rd Ed away for $38US. Get the paperback, you get the PDF for free. Kube, auth, networking, monitoring, vCluster, Vault, Istio, Pulumi, and more! a.co/d/7dwcw20

One more vCluster lab! We're wrapping up the chapter building a self service portal for vCluster deployment, integrating our vClusters with Vault for secrets management and our enterprise authentication. Hope to see you there! youtube.com/live/udRnQWd...

If you're using OpenUnison, we're looking for help testing out our new kubectl authentication plugin! Any feedback would be greatly appreciated! www.reddit.com/r/kubernetes...

🚨In thirty minutes let's talk vClusters!🚨 youtube.com/live/QDOU1Jd...

Anyone want to test it out? kubernetes krew install --manifest-url=https://nexus.tremolo.io/repository/openunison-cli-betas/openunison-cli.yaml

This is going to make accessing clusters even easier!

Did you know RBAC isn't just a source a existential dread, fear, and loathing? It's also the first line of authorization in Kubernetes! Join us tomorrow (3/26) at noon EST to dive into RBAC policy management and policy logs! youtube.com/live/Whu5KmO...

With Android's new terminal i'm logged into my clusters using kubectl securely using OpenUnison on my phone. No config files, no certs, no long lived tokens. MFA with passkeys.

Today's coffeeshop project: when we update @tremolo.io helm charts, we now generate a json doc with latest versions and publish. Then we automatically update our argocd template so it's always got the latest versions so you don't need to manually check them!

Next Wednesday, we talk about something near, and dear, to my ❤️, authentication! Come join and hang out! youtube.com/live/Pl93-Xy...

Let's get OpenShift Namespace as a Service working with EntraID! Recording for a blog post, come hang out! youtube.com/live/g6q3Ltl...

Most enterprises need high availability across multiple data centers. Usually in different regions. How does that work? We'll talk about that tomorrow at noon est! youtube.com/live/TbURZ3W...

(in my Darth Vader voice) My lab is complete, I will never again have to enter a password to access the systems in my lab!

Chapter 4 - Kubernetes Networking Part II! Attack of the Ingress! Tomorrow at noon EST we'll dive right into the labs of our first networking chapter. Hope to see you there! youtube.com/live/aFwv_gA...

Started working with Argo Workflows for another blog post and realized that it doesn't just do SSO via OIDC, you need to map the login to a ServiceAccount. OpenUnison's just-in-time provisioning makes this really easy to do, along with lining up permissions too!

We've updated our docs to make it easier to deploy OpenUnison using Argo CD's multi source Applications, so we're deprecating the old tremolo/orchestra-login-portal-argocd chart. We know it takes time to migrate, so we're going to continue supporting it until the end of 2025.

This week we're streaming labs from Kubernetes: An Enterprise Guide Chapter 4 - Services, Load Balancing, and Network Policies on February 5th at noon EST. Hope to see you there! youtube.com/live/G6rjJ5h...

We're not entirely sure what Marc's up to. There are some loud noises and explosions coming from his office. We're just going to apologize in advance. Sorry.

"I swear Ellmo needs to talk to like, half the adults in the world" - @withenoughcoffee.com makes a great forking point! We're thrilled to sponsor another episode of @fafo.fm ! Accessibility is important. Use the frameworks. Listen to your users. Don't treat it as an afterthought.

And here I am, building products running over a decade in production that my customers and users love.

When you deploy Kubernetes, you usually begin your access with a certificate. It's easy, it's simple, it doesn't require a login, and it's a TERRIBLE IDEA!!!!! Friends don't let friends use certificates for accessing Kubernetes. For TBT, our blog post explains why!

I love this episode for so many reasons. Beyond Yasmin's insights and story, I loved the parts where @withenoughcoffee.com and @justingarrison.com provide....constructive criticism....of the security world. SKEET THREAD!!!!!

This episode hits. HARD!! Thrilled to sponsor another forking awesome episode!

We're going to talk about developer portals and home labs! come say hi! community.cncf.io/e/mn3z73/

SSO for @argoproj Workflows is more complex then most applications. Learn how to delegate user's access to a Kubernetes ServiceAccount securely in a way that makes both your users and security team happy with OpenUnison.

Going to test out my new streaming setup by having fun with @siderolabs.com Talos deployments to KVM. Come hang out! youtube.com/live/ShYy9CH...

OpenUnison 1.0.42 has been released! In addition to the great new features, OpenUnison now supports ARM! Run OpenUnison on your Pis, your macs, or your Graviton clusters! updates to the helm charts to make OpenUnison easier to customize for your environment, too. https://buff.ly/4ahxdQ5

We're again thrilled to be sponsoring such a forking awesome episode!

We're thrilled to be @fafo.fm first sponsor!

As the ancient Cloud Native Sith would say

OpenUnison+Argo Workflow SSO on login: Creates the ServiceAccount and annotation with secret Provisions and deprovisions ServiceAccount to (Cluster)RoleBindings based on mapping Gives both visibility and easy access!!!

OpenSearch, OpenUnison, Istio, Kiali, AppArmor, Velero, ArgoCD, vCluster, Vault, Harbor, Pulumi, GitLab...i think that's everything. Wow, that's not even counting the GitHub repo with 509,639 lines of code of examples for under $30??????