Pinned Loading

1. calabi calabi Public

   Ansible-driven disconnected OpenShift 4 lab on one bare-metal host: nested KVM, OVS segmentation, IdM/AD/Keycloak auth, agent-based install, and day-2 automation

   Shell 3

2. eigenstate-ipa eigenstate-ipa Public

   Ansible collection for Red Hat IdM / FreeIPA with live inventory, Kerberos, secrets, policy, and OpenShift ecosystem workflows for AAP.

   Python 1

3. openstack-cgroup-tiering openstack-cgroup-tiering Public

   Ideas about nova / watcher in RHOSO.

4. privileged-automation-security privileged-automation-security Public

   Some ideas about the problems surrounding privileged automation

   HTML

5. deterministic-density deterministic-density Public

   A practical reflection on deterministic virtualization, cgroup tiering, and symmetric CPU capacity planning.

   HTML

6. blastwall blastwall Public

   SELinux, IdM, and AAP proof of concept for confining privileged automation and denying kernel exploit surfaces before jobs reach managed RHEL hosts.

   Python