ChatOps uses GitHub status checks, so it's decidedly GitHub specific and won't work with another provider.
However, if you're just after notifications, what about Heroku's App webhooks? They have an 'entity' for new app releases (api:release) which might partially help you... in that you can set up a notification for successful releases, at least.
What is the Kubernetes version? Is it >1.8 ? (which has RBAC enabled by default).
The error message says that the Kubernetes Dashboard service account is not allowed to list configmaps in default namespace. RBAC by default is deny-all. You need to explicitly grant permissions.
You can create the following ClusterRoleBinding to grant dashboard full admin ...
I would really prefer to not have to also manage a separate Active Directory Domain within our VNets
You've already found the answer: centralized authentication.
If you use a tool like Okta, you can indirectly tie GSuite to AD (or an LDAP server). And then of course you can tie OpenSSH there as well.
or deal with revoking ssh keys
I suspect what is happening here is you are trying to insert the private key into the authorized_keys file, which is invalid as only the public key is required on the target machine.
What you need to do is extract the public key from the private key:
- name: Generate an OpenSSL public key with a passphrase protected private key
I'm trying to architect a micro-service application, that runs in Kubernetes. It consists of several RESTful APIs. I want a central point to implement authentication for these APIs.
This is a good idea.
So what I'm looking for is a/the way to have central authentication in Kubernetes for users accessing the APIs. I would also require to be able to ...
The error message here is telling you that you are not allowed to enable MFADelete without having an authenticated token with mfa. Meaning the executing principal must have logged in with MFA.
essentially the API call on the cli would be something like this
aws --profile my_profile s3api put-bucket-versioning --bucket bucket-name --versioning configuration '...
I was looking into a similar use case and found this github issue in the terraform public repo:
As quoted in that issue:
"Indeed it does seem like the Terraform AWS provider would need to do something special to make this work. As I noted in my other comment, we don't consider ...
Are you doing the building using web hooks or just polling? I think it's inevitable that you'll have to create a Jenkins account to manage API access. This Gitlab link explains how to use the Jenkins Gitlab plugin to manage building when changes are pushed. You'll see they use a Jenkins account as well. This is common practice in my organization to remove ...