This article follows on from the previous one on AKO with Cert-Manager and External DNS. In which we built a single-region VKS Kubernetes environment with AVI DNS service and enterprise-ready CNAME aliasing. This is a foundation for multi-region global server…
In this article, I will unpack the use of AVI Kubernetes Operator (AKO) alongside Certificate Manager and External DNS. We will deploy an application that will allow us to leverage Ingress and Gateway API. Everything will be automatically plumbed in…
If you’ve been following along, this is the fourth part in the “Perfect PKI” series. In this article we will be exploring how we replace an existing PKI hierarchy with a fresh one. Usually, this is done when the old…
If you’ve been following along, this is the third part in the “Perfect PKI” series. In this article we will be exploring how we upgrade the Windows operating system which Certificate Services runs on, without doing a complete rebuild. We…
Here is a topic which comes up time and time again with my clients. It’s usually phrased as “How can I safely renew the root certificates?” – Hopefully, this question isn’t coming with only a few weeks before the current…
Ok, so nothing is perfect, right? I tend to think one of the best qualities in human beings is to appreciate imperfection. For technology, we need standards and so-called “best practices” so that things are coherent and function well with…
