So here we are again. In less then a week I will be speaking again at Red Hat Summit. Last year I showed how you can deploy multi-tier multi-host applications across AWS, GCP, Azure and RHV with CloudForms, Satellite6 and Ansible Tower. A year went by but requests from customers wanting to testdrive the power…
In May 2015 banyan published that they found over 30% of Official Images in Docker Hub Contain High Priority Security Vulnerabilities. In August 2015, FlawCheck surveyed enterprises asking which piece of the security equation was their top concern about running containers in production environments. At 42%, Vulnerabilities & Malware in container workloads was the top…
In my home lab I have 4 Juniper in a virtual chassis. I currently use fedora 24 as my host system so I had to install some binaries and fix some code before I got this running. First you have to install the latest stable ansible version. Then you need junos-eznc. For fedora run the…
I realized today that the current OpenShift 3.4 documentation around installing the standalone registry is missing an important parameter. Here is the link to the bug openshift_master_default_subdomain missing . Its a small error but has some impact as the route registry-console-default.yourdomain will not be exposed externally. Remember the standalone OpenShift registry is a full OpenShift…
I’ve been waiting for this feature since quite a while and its finally here and working. CloudForms 4.2 and OpenShift 3.4 have the ability combined of scanning docker images and define if the images are compliant or not. If the image is not compliant CloudForms annotates the image in OpenShift with images.openshift.io/deny-execution: true and if…
Today I finally finished my Ikea Helmer rack project. The goal of the project was to have enough resources to build a full Red Hat Cloud Suite lab. I am in IT now since 1996 and learned that the only way to stay on top of the game is by playing with the technology. I have…
My 2017 redhat summit talk Button Push Deployments With Integrated Red Hat Open Management got accepted. I have the big honor of sharing the talk not just with my last years co presenter Michael Dahlgren but also with Red Hat EMEA’S configuration management extraordinaire Maxim Burgerhout. As we combine our talks you can expect an…
To enable Cloudforms to connect to the AWS provider you need to following policies: AmazonEC2FullAccess AWSConfigUserAccess IAMReadOnlyAccess IAMUserSSHKeys AWSCloudFormationReadOnlyAccess As well as two custom policies CFMESNS { “Version”: “2012-10-17”, “Statement”: [ { “Effect”: “Allow”, “Action”: [ “sns:*” ], “Resource”: “arn:aws:sns:us-east-1:${AWS-ACCT_ID}:AWSConfig_topic” } ] } CFMESQS { “Version”: “2012-10-17”, “Statement”: [ { “Effect”: “Allow”, “Action”: [ “sqs:*”…
Here find the slides of the talk “Cloudforms, Satellite 6, Ansible Tower and RH Insights” at the NJ RHUG from Nov 1st 2006
I had multiple requests if CloudForms is able to provision containers via self service to the Red Hat OpenShift container platform. I liked the idea as you can not expect from every developer in your company to know how to create templates or build configs. I will walk you through, step by step how this…