security

Automating SSL/TLS Certificate Rotation in AKS

August 8, 2024
Posted by Luca Berton
AKS, SSL/TLS, certificate rotation, Kubernetes, Cert-Manager, automation, Let’s Encrypt, Kubernetes Secrets, Azure Kubernetes Service, security, Kubernetes CronJob, Kubernetes Ingress, Kubernetes Jobs, Certbot, certificate management, Kubernetes automation, Kubernetes security, Helm, Kubernetes tools

Introduction A Custom Resource Definition (CRD) in Kubernetes allows you to extend the Kubernetes API by defining your own custom resources.

Ensuring Quality with Ansible-Lint: A Guide to Best Practices

June 24, 2024
Posted by Luca Berton
Ansible-Lint, IT automation, Ansible, code quality, CI/CD, security, best practices, playbooks, roles, linting, automation, open source, DevOps, configuration management, Ansible Tower, automated testing, Ansible rules, continuous integration, continuous deployment, IT security

Ensuring Quality with Ansible-Lint: A Guide to Best Practices In the realm of IT automation, maintaining the quality and consistency of your Ansible playbooks and roles is crucial for effective and reliable automation.

Ansible Troubleshooting SSH Connection Issues

June 12, 2024
Posted by Luca Berton
ansible, SSH connection, paramiko, pylibssh, Ansible troubleshooting, host key checking, Ansible playbook, automation, IT infrastructure, Ansible error, known hosts file, Ansible configuration, paramiko error, SSH authentication, security, Ansible module, ansible_ssh_common_args, DevOps, system administration, infrastructure as code

Error Overview When running an Ansible playbook, you may encounter the following error message:

Ansible Vault Guide: Secure Your Automation Workflows

December 29, 2023
Posted by Luca Berton
ansible, vault, automation, security, encryption, secrets, credentials, sensitive data, dynamic secrets, cloud deployments, troubleshooting, auditing, secure workflow, IT professional, sysadmin, tutorials, guides, beginners

🔒 Unlock the secrets of secure automation with the “Ansible Vault Unveiled”!

Ansible troubleshooting - Error no-log-password

November 7, 2023
Posted by Luca Berton
security, automation, Ansible, playbook, password, sensitive data, secrets, no-log-password, IT, configuration management, security best practices, secure automation, playbook security, no_log attribute, secret protection, data security, loop, automation workflows, Ansible Lint, playbook security, sensitive information

Introduction In the world of IT automation and configuration management, security is paramount.

Ansible-Lint Rule Analysis and Best Practices

October 31, 2023
Posted by Luca Berton
Ansible-Lint, Automation, Ansible Playbooks, DevOps, Best Practices, Rule Categories, Security, Code Quality

Introduction Ansible-Lint is a powerful tool that helps Ansible users identify and correct issues in their playbooks and roles.

Pluralsight The IT Ops Sessions: Ansible Sign, Verify, Event-Driven and Ansible Generative AI

August 30, 2023
Posted by Luca Berton
ansible, Pluralsight, gpg, security, ansible-sign, supply chain, Event-Driven, event, ansible-rulebook, Rulebook

Pluralsight The IT Ops Labs: Maintain, Monitor, and Troubleshoot Kubernetes Title: The IT Ops Labs: Maintain, Monitor, and Troubleshoot Kubernetes

Automate CIS Benchmark Hardening for RHEL 9 with Ansible

July 28, 2023
Posted by Luca Berton
ansible, security, hardering, linux, security, RHEL, CentOS, Fedora, Ubuntu, Debian, SUSE, CIS

Introduction As organizations increasingly prioritize cybersecurity and compliance, the need for robust security measures has become paramount.

Strengthening Security: Automating CIS Benchmark Hardening for RHEL 9 with Ansible

July 6, 2023
Posted by Luca Berton
ansible, security, hardering, linux, security, RHEL, CentOS, Fedora, Ubuntu, Debian, SUSE, CIS

CIS Benchmark In today’s cybersecurity landscape, hardening your systems is crucial to protect against evolving threats.

Project signature verification with GPG and ansible-sign

January 14, 2023
Posted by Luca Berton
ansible, ansible-sign, security, signature, GPG, command-line, project, trusted code

How to verify an Ansible project signature? A step to step guide to verify the signature using the ansible-sign of a GPG-signed Ansible project.

Project signing with GPG and ansible-sign

January 13, 2023
Posted by Luca Berton
ansible, ansible-sign, security, signature, GPG, command-line, project, trusted code

How to sign an Ansible project? From a non-signed to a GPG-signed Ansible project.

Pluralsight The IT Ops Sessions: Using Ansible Sign and Verify

December 25, 2022
Posted by Luca Berton
ansible, Pluralsight, gpg, security, ansible-sign, supply chain

Title: The IT Ops Sessions: Using Ansible Sign and Verify

Ansible troubleshooting - Attempting to decrypt but no vault secrets found

November 13, 2022
Posted by Luca Berton
ansible, troubleshooting, vault, ansible-vault, ansible-playbook, security, secrets, password, security, error, fatal

Today we’re going to talk about Ansible troubleshooting, specifically about the attempt to decrypt but no vault secrets found error.

Decrypt an Ansible Vault - ansible vault

November 13, 2022
Posted by Luca Berton
ansible, terminology, ansible-vault, playbook, security, YAML

How to decrypt an Ansible Vault? From an encrypted file to plaintext using the correct password.

Use Ansible Vault in Ansbile Playbook - ansible vault

November 13, 2022
Posted by Luca Berton
ansible, terminology, ansible-vault, playbook, security, YAML

How to use an Ansible Vault in an Ansible Playbook? How to use an Ansible Vault to Protect Sensitive Data such as passwords, access keys, etc.

Ansible terminology - What is an Ansible Vault?

November 12, 2022
Posted by Luca Berton
ansible, terminology, ansible-vault, playbook, security, YAML, sensible data, encryption, password

Ansible terminology - What is an Ansible Vault? How to store variables and files in an encrypted way using the ansible-vault command line utility.

Deploy Kubernetes Resources with Ansible Playbook

May 4, 2022
Posted by Luca Berton
kubernetes, openshift, k8s, containers, ocp, cluster, pod, security, yaml

How to Apply Multiple Yaml Files at Once on Kubernetes K8s or OpenShift OCP with Ansible?

Assign Memory to Kubernetes Pods with Ansible

April 19, 2022
Posted by Luca Berton
kubernetes, openshift, k8s, containers, ocp, cluster, pod, security, yaml

How to Assign Memory Resources to Kubernetes K8s or OpenShift OCP Containers and Pods with Ansible?

Configure a Pod to Use a Volume for Storage on Kubernetes or OpenShift with Ansible

April 19, 2022
Posted by Luca Berton
kubernetes, openshift, k8s, containers, ocp, cluster, pod, security, storage, volume

How to Configure a Pod to Use a Volume for Storage on Kubernetes K8s or OpenShift OCP?

Ansible troubleshooting - Kubernetes K8s or OpenShift OCP 401 Unauthorized

April 14, 2022
Posted by Luca Berton
kubernetes, openshift, k8s, containers, ocp, cluster, namespace, security, error, fatal

Ansible troubleshooting - Kubernetes K8s/OpenShift OCP 401 Unauthorized Today we’re going to talk about Ansible troubleshooting, specifically about the “Kubernetes 401 Unauthorized” message.

Optimize Kubernetes CPU Resources with Ansible Playbooks

April 14, 2022
Posted by Luca Berton
kubernetes, openshift, k8s, containers, ocp, cluster, pod, security, yaml

How to Assign CPU Resources to Kubernetes (K8s) or OpenShift (OCP) Containers and Pods with Ansible Welcome to another episode of Ansible Pilot!

Create Kubernetes K8s or OpenShift OCP Service - Ansible module k8s

April 13, 2022
Posted by Luca Berton
kubernetes, openshift, k8s, containers, ocp, cluster, service, security

How to create Kubernetes K8s or OpenShift OCP Service with Ansible?

Create Kubernetes K8s or OpenShift OCP Pod - nginx - Ansible module k8s

April 12, 2022
Posted by Luca Berton
kubernetes, openshift, k8s, containers, ocp, cluster, pod, security

How to create Kubernetes K8s or OpenShift OCP Pod with Ansible?

Create Kubernetes K8s or OpenShift OCP Secret - Ansible module k8s

April 11, 2022
Posted by Luca Berton
kubernetes, openshift, k8s, containers, ocp, cluster, secret, security

How to create Kubernetes K8s or OpenShift OCP secret with Ansible?

Mitigate CVE-2021-4034 on RHEL with Ansible Playbook

January 27, 2022
Posted by Luca Berton
ansible, polkit, PWNKIT, module, linux, security, devsecops, RHEL, CentOS, Fedora, Ubuntu, Debian, SUSE

What is Polkit Privilege Escalation - (CVE-2021–4034)? “A memory corruption vulnerability in Polkit’s pkexec, witch allows any unprivileged user to gain full root privilege on a vulnerable system using default polkit configuration” cit.