Zero Trust Kubernetes: Securing Cluster Access with Keycloak and Pinniped SSO
A comprehensive production-grade guide to implementing Zero Trust authentication in Kubernetes using Keycloak as an Identity Provider and Pinniped as an authentication broker, complete with group mapping, session lifecycle management, and troubleshooting.
2636 words
|
13 minutes
Cover Image of the Post
Integrating Keycloak with GitLab — Single Sign-On via OpenID Connect
A step-by-step guide to integrating GitLab Self-Managed (Omnibus) with Keycloak as the Identity Provider using OpenID Connect (OIDC), enabling SSO login, automatic account provisioning, and auto-linking existing accounts by email.
1043 words
|
5 minutes
Integrating Keycloak with ArgoCD — Single Sign-On via OpenID Connect
A step-by-step guide to integrating ArgoCD running on Kubernetes with Keycloak as the Identity Provider using native OIDC support (without Dex), including mapping Keycloak groups to ArgoCD RBAC roles.
1559 words
|
8 minutes
Cover Image of the Post
Setting Up ArgoCD with Traefik and HTTPS (Let's Encrypt) on a Public Domain
A guide to accessing ArgoCD through a public domain with HTTPS using Traefik as the Ingress Controller and automatic certificates from Let's Encrypt — no cert-manager required.
1765 words
|
9 minutes
Cover Image of the Post
Deploying Keycloak 26 in Production on AlmaLinux 9 with PostgreSQL, Nginx & Let's Encrypt
A complete guide to deploying Keycloak 26.7.0 on AlmaLinux 9 using OpenJDK 25, Percona Distribution for PostgreSQL 17, systemd, and Nginx as a TLS-terminating reverse proxy with Let's Encrypt.
1661 words
|
8 minutes
Cover Image of the Post
Mailpit: A Self-Hosted Mailtrap Alternative for Email Testing
Learn how to set up Mailpit as a self-hosted, limit-free alternative to Mailtrap. We'll cover Docker Compose configuration, securing the Web UI, and setting up SMTP authentication.
771 words
|
4 minutes
Cover Image of the Post
Setting Up ArgoCD with NGINX Ingress on a Bare-Metal Kubernetes Cluster
A complete guide to installing ArgoCD on a bare-metal Kubernetes cluster, configuring NGINX Ingress Controller for web access, and deploying your first applications using both the CLI and Web UI.
1376 words
|
7 minutes
Cover Image of the Post
Kubernetes Single-Node Setup on AlmaLinux 9.8 with Kubeadm, Containerd & Calico
A step-by-step guide to deploying a single-node Kubernetes cluster using Kubeadm, containerd as the container runtime, and Tigera Calico as the CNI plugin on AlmaLinux 9.8.
948 words
|
5 minutes
Cover Image of the Post
1
2