How To Use pip on read-only System

pip boto3 success

Many of the Kubernetes cluster and Docker on production, have a policy to run on read-only system for all the directory except certain explicit folder that customizable by user. In read-only file system, not all of the application can run smooth by default, but trivial to fix as well. For this tutorial lets take pip … Read more

Update Keycloak Password Using kcadm.sh

script running successfully

kcadm.sh is the admin CLI for Keycloak, we can do most of the operation using this script. Download the Keycloak file, kcadm.sh are inside that file. wget https://github.com/keycloak/keycloak/releases/download/24.0.1/keycloak-24.0.1.tar.gz extract the keycloak-24.0.1.tar.gz tar zxvf keycloak-24.0.1.tar.gz Move to the folder bin cd keycloak-24.0.1/bin run the kcadm.sh Optional: Run Keycloak on Docker If you didn’t have a Keycloak … Read more

Setup Superset 3 with Keycloak 24 SSO

login to superset via keycloak

Superset is a powerfull analytic web-based tools, that had support many databases, it’s good for data exploration and visualization. In this tutorial we’ll start from scratch to install Keycloak and Superset Superset version 3.1.1 Keycloak version 24.0.1 The configuration should work for any environment, docker, kubernetes or VPS. But keep in mind on the PATH … Read more

How to Setup Vault on Kubernetes

vault policy kubernetes

Vault is one of the most used secret solution in the Kubernetes, it’s used by big player. Vault is application that store, and tightly control access to tokens, passwords, certificates, encryption keys for protecting secrets, and other sensitive data using a UI, CLI, or HTTP API. We can use Vault for different use case, but … Read more

How To Setup Read-Only Kubernetes Dashboard

Kubernetes dashboard working without token

Kubernetes Dashboard it’s really helpfull for sharing the URL with team mate or anyone, because by share the URL we can see the same thing. We don’t need to ask people to open their terminal and poking around looking for logs. prerequisite: – Kubernetes cluster – helm – kubectl Create a namespace monitoring for a … Read more

How To Deploy Configure fluent-operator with Fluentbit

elasticsearch fluentbit logs

Fluentbit is created as a fluentd successor for cloud native, which use less memory and faster to process the logs. To make is easy managing fluentbit in Kubernetes, like update the config, reload the pod, etc we’ll use fluent-operator. Let’s setup the fluent-operator from scratch. Deploy fluent-operator and fluentbit To deploy fluent-operator and fluent bit, … Read more

How To Update Docker Image UID/GID User

Many companies with dedicated security team, requires the UID user used by docker images greater than 1000 to avoid conflict with host id. By default, Linux will assign 1000 UID for the first non-root non-system user account. For docker images that use ENTRYPOINT we need to use the command # command is command line that … Read more

How To Install Latest WordPress on Rocky Linux 9

In this tutorial, we’ll learn how to install the latest version of WordPress using Rocky Linux 9. Before doing this tutorial, you’ll need a domain name and Linux server with Rocky Linux 9 installed. It’ll take maximum 30 minutes to finish this tutorial, so stay tuned and take the necessary food and drink to accompany … Read more

How to Manage Grafana Users with Keycloak OpenID

sign in with keycloak

In this tutorial, we’ll use Keycloak to manage Grafana users. Keycloak is a well-known application in SSO (Single Sign On) space, it can handle SAML and OpenID (OAuth), depending on your company internal, you can use LDAP in Keycloak or Google Workspace as the user base if your company uses Google Workspace for email. Since … Read more

How to Cleanup Docker Images and Volumes

If you are playing around with many docker images, the storage may be fillup in no time. Then it’s time to do the cleaning up of all images and volumes. But please really really careful, because this command will delete everything that docker created, no matter whether it’s still running or not. 1. Delete container … Read more