In this article, I will unpack the use of AVI Kubernetes Operator (AKO) alongside Certificate Manager and External DNS. We will deploy an application that will allow us to leverage Ingress and Gateway API. Everything will be automatically plumbed in…
In the first of a two-part series, we will explore deploying Tanzu with AVI Load Balancer. In this article we will explore integration with NSX Classic networking. In part #2, we will explore AVI with NSX VPC networking. Tanzu built…
There are a number of concepts to think through before we get into deploying Tanzu. Below outlines design guidelines and contextual thinking for the various patterns you will see within Tanzu and Kubernetes generally. If you’re new to this, concepts…
If you’ve been following along, this is the fourth part in the “Perfect PKI” series. In this article we will be exploring how we replace an existing PKI hierarchy with a fresh one. Usually, this is done when the old…
If you’ve been following along, this is the third part in the “Perfect PKI” series. In this article we will be exploring how we upgrade the Windows operating system which Certificate Services runs on, without doing a complete rebuild. We…
Here is a topic which comes up time and time again with my clients. It’s usually phrased as “How can I safely renew the root certificates?” – Hopefully, this question isn’t coming with only a few weeks before the current…
Ok, so nothing is perfect, right? I tend to think one of the best qualities in human beings is to appreciate imperfection. For technology, we need standards and so-called “best practices” so that things are coherent and function well with…
