mastodontech.de ist einer von vielen unabhängigen Mastodon-Servern, mit dem du dich im Fediverse beteiligen kannst.
Offen für alle (über 16) und bereitgestellt von Markus'Blog

Serverstatistik:

1,5 Tsd.
aktive Profile

#devops

49 Beiträge46 Beteiligte5 Beiträge heute

A grumpy ItSec guy walks through the office #2

devops0: dude, we've got so many roles in this cluster my terminal buffer runs out when I try to list them all.
devops1: bro, if it works, don't touch.
devops0: sure, but neither I nor anyone else on the project knows who can access what...

ItSec (walking by): just use rbac-tool and review this...

devops1: r... rba... what?
devops0: rbac-tool probably or smth

--

It's always a good moment to verify who can do what in your Kubernetes cluster.

For basic checks, use native kubectl:

1) Can "I" read secrets?

kubectl auth can-i get secrets

2) To check another identity's permissions (e.g., a ServiceAccount) run:

kubectl auth can-i get secrets --as=system:serviceaccount:somenamespace:someserviceaccount

However, this approach will not work for complex environments. There's a more effective way to do this with rbac-tool [2]. It gives you cluster-wide visibility with simple commands. Check this:

1) Who can do a specific thing? For example: who in the entire cluster can read Secrets?

rbac-tool who-can get secrets

2) Run an RBAC health check - global analysis with risk hints (wildcards in RBAC, overly broad permissions, cross-namespace binds, etc)

rbac-tool analysis

3) Visualize the mess - produce an interactive map of roles, bindings, etc:

rbac-tool visualize

This command writes a report to rbac.html in the current directory.

Alternatives to rbac-tool like rakkess [3] can offer similar "who can" insights, though it may not be actively maintained.

Stay (more) safe!

[1] kubernetes.io/docs/reference/k
[2] github.com/alcideio/rbac-tool
[3] github.com/corneliusweig/rakke

#devops#programming#webdev

📢 Aug 28, 10 AM PT / 1 PM ET – R Consortium webinar: Unlocking Collaborative Power with Git, GitHub CI/CD & LLMs in Pharma

Learn how pharma teams use GitHub Actions for automated QC, cut errors, and speed workflows—plus an LLM preview for QC edge cases.

Speakers: Ning Leng (Roche), Eli Miller (Atorus Research), and Ben Straub (GSK)

🔗 r-consortium.org/webinars/unlo

Messy Drupal deployments are stealing your time.
At Drupal GovCon, Bob McDonald will show you how to take it back.

One GitHub Actions workflow. Any host. No duplicate configs. No endless fixes. Just faster, cleaner deploys so you can focus on the work that matters.
Build smarter. Deploy faster. Sleep better.

#drupal#drupalgovcon#devops

So, I'm coming from Fortran mostly, moving to C++, and I've this explicitly vectorized Fortran code which runs column wise operations, e.g.:

a = input(:, 1) + input(:, 2)

Now, I'm wondering how to implement this the fastest using Rcpp/C++.

I can use (Rcpp)Armadillo to implement the implicit logic, or loop through vector elements. Since the overhead of flipping between the two is quite some work I would love someone's take up front.

@eddelbuettel @eliocamp ?

PSA: Python no longer behaves the same way in #Vercel Node 22.x images as it did in Node 18.x.

If you are using raw 'pip install -r requirements.txt' you'll need to switch over to 'source venv/bin/activate && pip install -r requirements.txt' or a similar pattern.

Took me a while to figure out last night.

Our Mastodon :mastodon: instance burningboard.net

Running on energy efficient arm64 CPU (Ampere Altra Q80-30) and just 16GB of RAM in a virtual machine.

Now running on latest Debain Linux 13 :debian: with Linux kernel 6.12.

For that little hardware footprint, it's quite performance, reliable and fast (with over 100 active users).

Just the media files are offloaded to S3 storage at our provider.

#introduction time. I'm Chopper Dave (pseudonym obviously) and have recently setup this #selfhosted instance.

I work in the IT sector, predominantly as a #sysadmin but dabble in #devops too.

In my free time I work on model kits. Airfix, Tamiya and #warhammer40k mainly. I play a lot of retro games and whittle away the hours working on the #homelab.

I like to post my creations and nature shots from my walks or gardening attempts.

Feel free to follow! Boosts appreciated but not required!

Migrating my last BIND DNS Server (resolver) to PowerDNS today. Already migrated the hidden-master and one of the primaries. Let's hope, that the final one also goes smooth and doesn't cause any issues 🙂

#devops#dns#linux