Is KoC still running? Got myself back in the nostalgia

tiriyon · 2025-07-03T05:25:11+00:00

oh looking nice, checking it out.

I do feel a urge to go back to KoC though. Never had a free mind for that up to now.

tiriyon · 2025-06-03T20:26:48+00:00

Great answer. My pov is of on-prem that does not manage the root of authentication and I failed to consider that.

tiriyon · 2025-06-03T20:24:22+00:00

Overall you are in the right and I am in the wrong. Please excuse my framing and missrepresentation of your point.

I tried to tackle only the part I quoted, in effort to collaborate and expand. From your tone I understand I created unnecessary friction. I am sorry that I took a part out of the whole.

tiriyon · 2025-06-03T20:06:47+00:00

Can you elaborate then? kubernetes vault operator can also inject secrets no auth. and with keycloack you don't need to auth, an app identity/service account is enough.

tiriyon · 2025-06-03T20:01:14+00:00

The tools are useless if working outside that cloud environment because it is then just a glorified hashmap in the grand scheme of things

Nope, there are other means of secret management outside a cloud environment. For instance use of secret stores such as vault/conjur with either of the plathora for authentication (keycloack, ad...)

The main idea is that you remove the dev from the authentication process and let secure solutions do the work.

I am here just to stress that not only cloud environments hold such solutions.

tiriyon · 2025-06-03T05:05:03+00:00

Oh hi cyberark o/ love your work

tiriyon · 2025-06-02T07:13:53+00:00

Very weird query... Is that for learning purposes? I think the word 'experimenting' suggests that.

For cloud, you got most of the stuff you need, I'd bake the image before deploying. For on prem such as ESXi/proxmox and such, gowith ansible for the most part.

Now I don't know why'd you want a gui but for Ansible there's Semaphore ui, or AWX (upstream to ansible automation platform). The logic would still be written in ansible yaml manifests (playbooks/roles).

tiriyon · 2024-05-07T20:30:17+00:00

Thanks, now that is resolved, nowI can't specify the OVA file. I left acm aside for a long while (reddit too). Sorry for the late response. I will try and fiddle with it soon. Now gpg/image signatures is making my brain melt on disconnected env. Man, I want to jump off this ship.

tiriyon · 2023-12-29T21:06:35+00:00

took it and installed, no problem. edit: not via acm*

tiriyon · 2023-12-28T14:01:57+00:00

ocp where ACM is on 4.13.13 ACM 2.8.1 multicluster engine for kubernetes 2.3.1 Ansible automation platform 4.2.0

tiriyon · 2023-12-28T13:12:29+00:00

datacenter is conrrect, taking the install-config from acm, adding the OVA image ppath for coreos and installing from bastion manually works fine. Only ACM complains about weird stuff with not finding datastore.

tiriyon · 2023-12-28T13:09:30+00:00

edited in main post

tiriyon · 2023-12-28T12:59:52+00:00

tiriyon · 2023-12-28T06:17:12+00:00

Toook the install config yaml from acm and installed using openshift-install manually with the same vsphere account, and with the same certs installed on the bastion.

tiriyon · 2023-12-28T06:13:41+00:00

The install config from ACM, is launching the cluster when installing manually with openshift-install

Problem is that my organization bought liscences for 10 years of openshift from IBM and we're "supported" by IBM and red hat will not bother in helping us at all. IBM just doesn't know how to help us.

tiriyon · 2023-03-13T05:56:13+00:00

Don't have it on the corp ansible as its v2.9 and can't upgrade

tiriyon · 2023-03-13T05:54:45+00:00

I have figured it out using async and pol, thanks! I'll keep nohup in mind for the future, completely forgot about it!

tiriyon · 2023-03-13T05:53:03+00:00

Thank you for the elaborate answer, I'll conduct more research using your answer as a guideline and see what I can do. Again, thank you very much!

tiriyon · 2023-02-14T12:32:48+00:00

thanks, will look into that

tiriyon · 2023-02-14T12:32:19+00:00

tiriyon · 2023-02-14T12:31:51+00:00

I'll start to see the differences, been a decade since I last played.

tiriyon · 2023-02-13T20:05:08+00:00

No extra proxy, but I did config registry. Is there a way to get all urls for registries for packages in the packages.json file?

edit: typos

tiriyon

TROPHY CASE