Workload Identity on Kubernetes 2 of 2 – EKS

I discussed in my previous post on workload identity and dived into how it works in AKS (Azure Kubernetes Service). In this post I will continue the topic with AWS as the example. From the perspective of CSP, we consider any running process on the cloud resource as workload. Therefore, I’ll start with control plan … Read moreWorkload Identity on Kubernetes 2 of 2 – EKS

Workload Identity on Kubernetes 1 of 2 – AKS

As applications are moved to the cloud, the application workload hosted on virtual machines need to interact with cloud resources. For this, we need an IAM solution with two mechanisms: CSPs such as Azure and AWS have their own implementations of the two mechanism. In Azure, we have Entra workload identity (including service principal and … Read moreWorkload Identity on Kubernetes 1 of 2 – AKS

Single-node Kubernetes cluster – docker desktop

While there are many tools to set up single-node Kubernetes cluster (e.g. minikube, MicroK8s, kind, or k3s with the k3d wrapper), docker-desktop has a significant advantage: it comes with Docker installation, on MacOS, or on Windows. It is installed simply by enabling the option “Enable Kubernetes”. It can be blown away and reset in a … Read moreSingle-node Kubernetes cluster – docker desktop

AWS CDK example in Typescript – provision an AWX server

This post provides an example of using AWS CDK in Typescript. Ansible Tower and AWX We have used open-source Ansible extensively in the past. While the automation is convenient, the lack of UI makes it not as suitable as a team collaboration tool. One way to allow team collaboration with open-source Ansible, is to use … Read moreAWS CDK example in Typescript – provision an AWX server

Automatic deployment of Orthanc on AWS

[Update] Some security improvement was introduced in may 2021. Here‘s detail. [Update] Here’s the link to the orthweb repository. In this project we introduce a medical imaging web service based on Orthanc, an open-source project of DICOM server, and a pipeline to deploy such server automatically and consistently. We deploy Orthanc on AWS automatically. This … Read moreAutomatic deployment of Orthanc on AWS

Host legacy application in Docker 2 of 2

My previous notes include some tricks in hosting legacy application in docker. This is a continuation from that work, after 1.5 months… Use Case I decided to use docker to host application for a good reason, and let me start with what this Java-based application does as a single process. When it is up it … Read moreHost legacy application in Docker 2 of 2