• 0 Posts
  • 29 Comments
Joined 1 year ago
cake
Cake day: June 4th, 2023

help-circle









    • Authentik is pretty resource intensive. Needs something like 3 servers/instances. A database, a server and a worker. Uses something like 800+ MB ram just for this service. Since I run my services on raspberry Pi 3s, I ended up moving away from this
    • Keycloak works great but is a bit difficult to set up and doesn’t support all the authentication protocols that Authentik does





  • I have mixed architecture cluster as well. It works great as long as you set your manifests up properly and either use public images that support both or you build your own, or you set up node affinity to ensure the architecture-specific pod runs only on the node with the correct architecture.






    • Dynamic inventory. I haven’t used it on a cloud api before but I have used it against kube API and it was manageable. Are you saying through kubectl the node names are different depending on which cloud and it’s not uniform? Edit: Oh you’re talking about the VMs doh

    • I’ve tried ansible vault and didn’t make it very far… I agree that thing is a mess.

    • Thank god I haven’t ran into interpreter issues, that sounds like hell.

    • Ansible output is terrible, no argument there.

    • I don’t remember the name for it, but I use parameterized template tasks. That might help with this? Edit: include_tasks.

    • I think this is due to not a very good IDE for including the whole scope of the playbook, which could be a condemnation of ansible or just needing better abstraction layers for this complex thing we are trying to manage the unmanageable with.