Fabian Lee : Software Engineer

GCP: LDAP authentication for Anthos VMware clusters using Anthos Identity Service

October 18, 2022
Categories: Hyperscaler, Kubernetes

Anthos Identity Service allows an organization to tie into their existing Identity Provider to authenticate and authorize users into their Anthos clusters. In this article, I will show how the authentication for an Anthos on VMware cluster can be integrated into an existing Active Directory deployment, and further how a user’s AD group membership can … GCP: LDAP authentication for Anthos VMware clusters using Anthos Identity Service

Kubernetes: testing RBAC authorization of a Kubernetes Service Account

May 23, 2022
Categories: Kubernetes

A Kubernetes Service Account (KSA) can be used to provide least-privileged access to a pod for a cluster that has Role-based access control (RBAC) enabled. This is done by making the KSA the subject in an RBAC role. But it can be challenging to discover and test whether the KSA has the correct set of … Kubernetes: testing RBAC authorization of a Kubernetes Service Account

Ansible: Login to Ubuntu with Windows Active Directory using SSSD

January 7, 2021
Categories: Automation, Linux

A centralized authentication/authorization mechanism is a key part of a security stance as well as a convenience to end users. There are multiple packages and systems to achieve this, and in this article I will focus on integrating back into Windows Active Directory using SSSD for login and group membership. When complete, you will have … Ansible: Login to Ubuntu with Windows Active Directory using SSSD

CloudFoundry: Authenticating and running CF API commands using curl

February 26, 2018
Categories: Containers

The Cloud Foundry CLI makes it easy to authenticate into a target API endpoint to consume the Cloud Controller API (CAPI). The “cf login” command allows you to pass or interactively provide the user, password, org, and space. Once logged in, if you want to run raw commands, the “cf curl” can execute a request … CloudFoundry: Authenticating and running CF API commands using curl

EMC OnDemand: Federated Identity Management and Silent SSO

July 4, 2013
Categories: Documentum

Identity Management for On-Premise Applications Our industry today has some very proven technologies for providing a single set of login credentials to applications installed on-premise. Most commonly, companies use a central Identity Management system (e.g. Microsoft Active Directory/Oracle Internet Directory/IBM Tivoli), and these systems implement an LDAP interface that 3rd party applications can call to … EMC OnDemand: Federated Identity Management and Silent SSO