Tremolo Security

@tremolo.io

Creators of OpenUnison, the easiest way to add authentication and Namespace as a Service to any Kubernetes cluster. Follow this account for updates! Docs - https://openunison.github.io/

It's been 2 years since we released the third edition. It's now $30 on Amazon and is still one of the top selling kubernetes books. If you haven't picked it up yet, you should take a look. It will get you through most enterprise focussed topics with labs that we recorded videos for you can follow.

Marc Boorshtein@mlbiam.dev · last yr.

Packt is giving Kubernetes: An Enterprise Guide, 3rd Ed away for $38US. Get the paperback, you get the PDF for free. Kube, auth, networking, monitoring, vCluster, Vault, Istio, Pulumi, and more! a.co/d/7dwcw20

Picture of the cover of Kubernetes: An Enterprise Guide, 3rd ed

OpenUnison 1.0.50 has been released! This is a small release but the operator now handles all webhooks, eliminating issues with conflicts when deploying with Helm. Also, proper ownerReferences make Argo CD work better for deployment too! github.com/TremoloSecur...

Release 1.0.50-2026052501 · TremoloSecurity/OpenUnison

Tasks: 1.0.50 build #1076 enhancements: explicitly shutdown jms sessions #1081 oidc idp - kubernetes sessions - create ownerRef #1080 bugs: Remove headers, session vairables from loginTEst.jsp...

github.com

Just added a new app's RESTful API for user management for a customer. Using our new testing harness we went from zero to production in less then a week. Tested everything offline, then quick rollout. Even integrated short lived tokens, so no API keys!

We're going to have a @headlamp.dev plugin for OpenUnison that adds namespace limiting based on an API and a "who am i" page so you can see you ask kubernetes sees you. We're also going to add some other operational support tasks that are common too.

BildBildBild

Just finished rewriting Openunison 's Traefik support. Moving forward, Traefik will likely be my go-to Ingress controller. Gateway API support added too but with lack of consistent re-encryption support and no standard for sticky sessions I don't recommend it yet.

Rewrote the websockets layer to be simpler, now Head Lamp with impersonation is working great for logs and terminals! Next release will default to Head Lamp instead of the Kubernetes dashboard. Will also remove the need for a second chart.

Bild