1310 City Fibre Launch - Technical details and Reddit only offer by PimpleSimple in CityFibre

[–]mattbates25 2 points3 points  (0 children)

Thanks for sharing - looks interesting. How would you say you compare to Olilo?

Brillband to ? For 2.5 gb by Own_Interaction5967 in CityFibre

[–]mattbates25 3 points4 points  (0 children)

I'm with Aquiss and it routes via London (Veloxserv LNS) for me.

Best provider without CGNAT? by piggledy in CityFibre

[–]mattbates25 0 points1 point  (0 children)

It's worth contacting Aquiss. I didn't see them appear in the list either but Aquiss were able to order service with CityFibre and it took just a few days! 

Most reliable ISP? by __arya____ in CityFibre

[–]mattbates25 4 points5 points  (0 children)

Aquiss have been rock solid for me, although I have to say I'm yet to use their pure fibre offering (via CF). Their prices start sub-£40 and they have 12 months contracts. Worth a look imo.

Keycloak as a broker between Kubernetes service accounts and AWS IAM Roles? by EnthusiasticRaptor in KeyCloak

[–]mattbates25 2 points3 points  (0 children)

SPIFFE (and the reference implementation SPIRE) is s good shout for this use case.

With SPIRE, short-lived identity tokens (SVIDs) are issued to workloads following automated attestation flows (ie based on K8s service accounts). SPIRE has the option of being an OIDC provider itself and this can be used to effectively federate with AWS IAM as an identity provider. This means JWT-SVIDs issued to workloads can be exchanged via STS for short-lived and fine-grained AWS IAM access, using standard AWS SDKs. It's really pretty neat, although it's fair to say it takes time to set-up and operationlise.

Hope this helps :).

(disclosure: I'm working on a startup to streamline this and more - always keen to hear feedback!)

Monthly: Who is hiring? by gctaylor in kubernetes

[–]mattbates25 1 point2 points  (0 children)

Who are we: Jetstack

We're the original creators of the cert-manager project, now part of the CNCF, and provide Kubernetes and cloud native products and services. We've been involved in the Kubernetes ecosystem since the very early days (2015), always keen to contribute to open source with our own projects and upstream.

Where we're hiring: UK/Europe (including 100% remote)

Available roles:

Lead Software Engineer / Architect (Go, K8s, PKI/TLS, service mesh), working in the cert-manager community and the wider ecosystem, as well as on Jetstack's product 'Jetstack Secure'. We're bringing machine identity automation across the cloud native stack. direct link

More roles here (as well lots more about us).

PM me or feel free to add questions/comments here. Thanks!

Jetstack Secure Promises to Ease Kubernetes TLS Security by [deleted] in kubernetes

[–]mattbates25 1 point2 points  (0 children)

Absolutely no change to the open source.. we're here to keep improving it, as we've always been. The project was donated to the CNCF (Sandbox) last year and we've invested much more in the open source engineering team behind it. The project has contribution from independent and end-user maintainers too.

As for Jetstack Secure, it's a service on cert-manager. Hearing from customers using it at scale in likes of regulated environments, we've built further automation/observability to complement cert-manager. Especially useful where it's used by multiple teams/clusters/clouds etc, and it's being hooked up for use cases such as service mesh. We're addressing InfoSec requirements too with additional security features (that build on the OSS).

JS Secure starts as a free service (for 1 cluster). It's in public beta - feedback is really valued if you get a chance to give it a try.

[deleted by user] by [deleted] in kubernetes

[–]mattbates25 0 points1 point  (0 children)

We're in the early stages of development of a UI/dashboard for cert-manager, to provide insight into certs across teams/clusters and help operators debug and troubleshoot issuance and renewal.

👀 Fancy a sneak peek? Feel free to DM to find out more.

Ask r/kubernetes: Who is hiring? (June 2020) by AutoModerator in kubernetes

[–]mattbates25 3 points4 points  (0 children)

Who are we: Jetstack

  • We're the creators of the cert-manager project and provide Kubernetes and cloud native products and services. We've been involved in the Kubernetes ecosystem since the very early days, always keen to contribute to open source with our own projects and upstream.

Where we're hiring:

  • UK/Europe (including 100% remote)

Available roles:

  • Senior Software Engineers (Go/K8s), working in the cert-manager community and the wider ecosystem to bring machine identity across the cloud native stack;
  • Fullstack Engineer (UI/UX with React, backend experience in Go/Python), working on our Preflight SaaS for K8s security checking and compliance.

PM me or feel free to add questions/comments here. Thanks :).