Configuring the #Kubernetes #OIDC provider
Published on 06 Mar 2025XXX
OpenID Connect (OIDC) and workload identity have been hot topics for a couple of years. This post demonstrates how to use GitLab as an OIDC provider to authenticate against a Kubernetes cluster - covering interactive access by users as well as automated access from pipeline jobs. The challenge is to combine both use cases in a single configuration.
I just attended this year’s ContainerConf in Mannheim. It was awesome meeting old and new friends and talking all things containers. I had the pleasure to contribute a full-day workshop about CI/CD with GitLab as well as a talk about tricks and caveats when using Kubernetes Role Based Access Control (RBAC).
Part of my daily work is operating a GitLab instance for our development teams. Based on this experience I held a workshop for heise Academy to share my knowledge.
How did I miss this? Late in 2023, Docker buildx v0.12.0 introduced an integrated debugger for image building. This is a great feature to help you analyze why a build is failing. Instead of reading the build output you can now check the build interactively after it failed.
Your Dockerfile
properly documents the steps to produce an image. But how do you document the build command to produce the image? This post shows how to document the build command with Docker Compose.
I gave a talk at DevOps Meetup Freiburg about RBAC in Kubernetes with a focus on little known facts, tricks as well as caveats.
This week, I had the pleasure to talk about using Renovate for automated promotion in GitOps at Mastering GitOps.
Part of my daily work is operating a GitLab instance for our development teams. Based on this experience I held a workshop for heise Academy to share my knowledge.
This week, I had the pleasure to talk about automated dependency updates using Renovate at heise devSec.