Enroll an Ubuntu 24.04 Server as a Teleport SSH Resource (Community Edition, Web UI)
This is a follow-up to my Teleport installation guide: That post builds a single-node Teleport cluster (Auth + Proxy + […]
Identity, Security & PKI
Identity, Security & PKI
Identity, Security & PKI
Install Teleport Community Edition on Ubuntu 24.04 (Internal DNS + Let’s Encrypt DNS-01 via Cloudflare, TLS on :443)
This guide installs a single-node Teleport cluster (Auth + Proxy + SSH service on one host) on Ubuntu 24.04, secured
Identity, Security & PKI
Use Step CA as an ACME Server (ACME v2) and Issue/Renew TLS Certificates with Certbot + NGINX
This guide enables ACME v2 on an existing Smallstep Step CA deployment, then shows how a host like test.maksonlee.com can
Identity, Security & PKI
Enable Step CA SSH Certificates with Keycloak OIDC (Groups → Principals) + Configure Ubuntu Servers to Trust the CA (Ubuntu 24.04 + Windows 11)
This post extends my previous Step CA deployment: Here we add SSH short-lived certificate login using: What you’ll build Users
Identity, Security & PKI
Move HashiCorp Vault OSS to Another AWS EC2 Instance (Ubuntu 24.04, File Storage, AWS KMS Auto-Unseal)
This post shows how to move a single-node Vault OSS deployment from one EC2 instance to another existing EC2 host
Identity, Security & PKI
Sync HashiCorp Vault Secrets into Kubernetes using External Secrets Operator (ESO)
This post shows how to sync secrets from HashiCorp Vault OSS into a kubeadm Kubernetes cluster using External Secrets Operator
Identity, Security & PKI
Enable Keycloak SSO (OIDC + PKCE) for Argo CD
This post shows how to enable Keycloak authentication for an existing Argo CD deployment using OIDC + PKCE, so you
Identity, Security & PKI
Use the Kubernetes Cluster CA to Sign Each Node’s Kubelet Serving Certificate (kubeadm Bare-Metal Ubuntu 24.04)
If you run Metrics Server (or anything that connects to the Kubelet HTTPS endpoint on 10250), you may see TLS
Identity, Security & PKI
Authenticate Artifactory OSS with OpenDJ LDAP
This post shows how to configure JFrog Artifactory Open Source (OSS) to authenticate users against OpenDJ using LDAPS and a
Identity, Security & PKI
Sync Backstage Users and Groups from LDAP (With Keycloak SSO, No Docker)
In a previous post, I installed Backstage on Ubuntu 24.04, wired it to Keycloak for OIDC login, and ran it