iiinova — where your digital self keeps evolving

Marc Boorshtein @mlbiam.dev · 30/08/2026

Reposted by Tremolo Security

It's been 2 years since we released the third edition. It's now $30 on Amazon and is still one of the top selling kubernetes books. If you haven't picked it up yet, you should take a look. It will get you through most enterprise focussed topics with labs that we recorded videos for you can follow.

Tremolo Security @tremolo.io · 26/05/2026

OpenUnison 1.0.50 has been released! This is a small release but the operator now handles all webhooks, eliminating issues with conflicts when deploying with Helm. Also, proper ownerReferences make Argo CD work better for deployment too! github.com/TremoloSecur...

github.com

Release 1.0.50-2026052501 · TremoloSecurity/OpenUnison

Tasks: 1.0.50 build #1076 enhancements: explicitly shutdown jms sessions #1081 oidc idp - kubernetes sessions - create ownerRef #1080 bugs: Remove headers, session vairables from loginTEst.jsp...

020

Tremolo Security @tremolo.io · 13/05/2026

Good morning KCD Toronto!!!!

Marc Boorshtein @mlbiam.dev · 08/05/2026

Reposted by Tremolo Security

Just added a new app's RESTful API for user management for a customer. Using our new testing harness we went from zero to production in less then a week. Tested everything offline, then quick rollout. Even integrated short lived tokens, so no API keys!

Marc Boorshtein @mlbiam.dev · 27/04/2026

Reposted by Tremolo Security

You kube cluster is on-prem, the api is in the cloud. How do you securely connect? I'll show you how at KCD Toronto! We'll step through how to design a Pod identity that can withstand an attack in the AI age. Hope to see you there! kcdtoronto.ca

kcdtoronto.ca

KCD Toronto 2026 - Kubernetes Community Days

Join the cloud native and AI community for a day of learning, networking, and collaboration

Tremolo Security @tremolo.io · 18/02/2026

We've sponsored this great podcast, and you should too!

Tremolo Security @tremolo.io · 12/02/2026

We've updated kube-oidc-proxy. No new features, but have cut known CVEs for the code base to 0! Updated libraries and removed deprecated ones. Integrated into the OpenUnison helm charts. github.com/TremoloSecur...

github.com

Release v1.0.10 · TremoloSecurity/kube-oidc-proxy

tasks: 1.0.10 build #74

Tremolo Security @tremolo.io · 28/01/2026

This release brings native Headlamp integration, expanded OIDC capabilities, and a new SCIM 2.0 gateway. If you care about Kubernetes identity done right, take a look 👇 www.tremolo.io/post/openuni...

tremolo.io

OpenUnison 1.0.44

OpenUnison 1.0.44 adds native Headlamp support, expanded OpenID Connect features, a SCIM 2.0 gateway, and enhanced deployment security with hardened, automated TLS and streamlined namespace and…

Marc Boorshtein @mlbiam.dev · 24/01/2026

Reposted by Tremolo Security

We're going to have a @headlamp.dev plugin for OpenUnison that adds namespace limiting based on an API and a "who am i" page so you can see you ask kubernetes sees you. We're also going to add some other operational support tasks that are common too.

063

Reposted by Tremolo Security

Marc Boorshtein @mlbiam.dev · 22/01/2026

Just finished rewriting Openunison 's Traefik support. Moving forward, Traefik will likely be my go-to Ingress controller. Gateway API support added too but with lack of consistent re-encryption support and no standard for sticky sessions I don't recommend it yet.

Tremolo Security @tremolo.io · 22/12/2025

It would be pretty cool if you, I dunno, tossed kube on their and then set it up to securely talk to cloud based systems without any static keys...

media.tenor.com

a man in a suit and tie says just saying in front of a map

ALT: a man in a suit and tie says just saying in front of a map

Marc Boorshtein @mlbiam.dev · 09/12/2025

Reposted by Tremolo Security

Rewrote the websockets layer to be simpler, now Head Lamp with impersonation is working great for logs and terminals! Next release will default to Head Lamp instead of the Kubernetes dashboard. Will also remove the need for a second chart.

Marc Boorshtein @mlbiam.dev · 08/10/2025

Reposted by Tremolo Security

We deployed Istio...now what? Does it work? Can my app run? How do I know the mesh is running? Join us at noon EST to find out! youtube.com/live/hMFX7EI...

Chapter 16 Part II & Chapter 17 Part I : Building and deploying Applications on Istio

Tremolo Security @tremolo.io · 01/10/2025

We've released OpenUnison 1.0.43! We've made building Security Token Services easier, simplified kubernetes logins with a new kubectl plugin, and made privileged access to Kubernetes a snap. Check out our new features with more blog posts coming soon! www.tremolo.io/post/openuni...

tremolo.io

OpenUnison 1.0.43

Feature summary for OpenUnison 1.0.43.

Marc Boorshtein @mlbiam.dev · 30/09/2025

Reposted by Tremolo Security

Trick or treat, smell my skeet, give me a great service mesh. If you don't, I don't care, I'll pull out your token there! OK, know it doesn't all rhyme but let's learn how to deploy Istio!

Chapter 16: An Introduction to Istio

It might be the start of spooky season, but your service mesh doesn't need to be scary! We're going to introduce you to Istio and the concepts of service mes...

Marc Boorshtein @mlbiam.dev · 16/09/2025

Reposted by Tremolo Security

Are you also at #kcddc? Come find me and say hi!

Marc Boorshtein @mlbiam.dev · 10/09/2025

Reposted by Tremolo Security

Your Pods, they're talking to you....can you hear them? We'll walk through how Kubernetes manages your logs using OpenSearch. youtube.com/live/VeArPBy...

Chapter 15: Monitoring Clusters and Workloads Part II - OpenSearch

Tremolo Security @tremolo.io · 24/08/2025

No, also, no one likes old pictures of them being posted on socials without their permission!!!!!

Marc Boorshtein @mlbiam.dev · 22/08/2025

Reposted by Tremolo Security

A customer did an accessibility review of OpenUnison's UI. Try hard to get it right, don't pretend to always do and was pretty happy at how well the report came back. Been in the weeds the last couple of days getting the few issues they found corrected.

041

Reposted by Tremolo Security

Marc Boorshtein @mlbiam.dev · 20/08/2025

Backups and disaster recovery is so hot we couldn't keep it in just one live stream! We'll wrap up our chapter on backups today at noon EST! youtube.com/live/ibE6I5_...

Chapter 14: Backing Up Your Workloads - Part II

Marc Boorshtein @mlbiam.dev · 15/08/2025

031

Reposted by Tremolo Security

This was @tremolo.io first conference booth. Red Hat Summit 2015. We were talking about applications and OpenShift and almost everyone we talked to was asking about Satellite🤣🤣🤣. This was our official exit from "stealth".

Marc Boorshtein @mlbiam.dev · 06/08/2025

Reposted by Tremolo Security

In a stream that's too hot for TV....the sexiest topic in all of enterprise infrastructure...BACKUPS!!!! Join us at noon for deep dive on our backups chapter with Velero! youtube.com/live/yByl5Zm...

Chapter 14: Backing Up Workloads

Marc Boorshtein @mlbiam.dev · 29/05/2025

Reposted by Tremolo Security

Packt is giving Kubernetes: An Enterprise Guide, 3rd Ed away for $38US. Get the paperback, you get the PDF for free. Kube, auth, networking, monitoring, vCluster, Vault, Istio, Pulumi, and more! a.co/d/7dwcw20

Picture of the cover of Kubernetes: An Enterprise Guide, 3rd ed

162

Reposted by Tremolo Security

Marc Boorshtein @mlbiam.dev · 28/04/2025

One more vCluster lab! We're wrapping up the chapter building a self service portal for vCluster deployment, integrating our vClusters with Vault for secrets management and our enterprise authentication. Hope to see you there! youtube.com/live/udRnQWd...

Chapter 9: Building Multitenant Clusters with vClusters - Part III

Marc Boorshtein @mlbiam.dev · 21/04/2025

Reposted by Tremolo Security

If you're using OpenUnison, we're looking for help testing out our new kubectl authentication plugin! Any feedback would be greatly appreciated! www.reddit.com/r/kubernetes...

reddit.com

From the kubernetes community on Reddit

Explore this post and more from the kubernetes community

Tremolo Security @tremolo.io · 03/04/2025

Anyone want to test it out? kubernetes krew install --manifest-url=https://nexus.tremolo.io/repository/openunison-cli-betas/openunison-cli.yaml

Tremolo Security @tremolo.io · 31/03/2025

This is going to make accessing clusters even easier!

Marc Boorshtein @mlbiam.dev · 25/03/2025

Reposted by Tremolo Security

Did you know RBAC isn't just a source a existential dread, fear, and loathing? It's also the first line of authorization in Kubernetes! Join us tomorrow (3/26) at noon EST to dive into RBAC policy management and policy logs! youtube.com/live/Whu5KmO...

Chapter 7: RBAC Policies and Auditing

Marc Boorshtein @mlbiam.dev · 20/03/2025

141

Reposted by Tremolo Security

With Android's new terminal i'm logged into my clusters using kubectl securely using OpenUnison on my phone. No config files, no certs, no long lived tokens. MFA with passkeys.

media.tenor.com

What A Time To Be Alive Jamie Carragher GIF

ALT: What A Time To Be Alive Jamie Carragher GIF

031

Reposted by Tremolo Security

Marc Boorshtein @mlbiam.dev · 09/03/2025

Today's coffeeshop project: when we update @tremolo.io helm charts, we now generate a json doc with latest versions and publish. Then we automatically update our argocd template so it's always got the latest versions so you don't need to manually check them!

media.tenor.com

a man in a star wars costume is dancing on a stage in front of a star wars sign .

Alt: Bona fet dancing a victory dance at Disney world

151

Reposted by Tremolo Security

Marc Boorshtein @mlbiam.dev · 07/03/2025

Next Wednesday, we talk about something near, and dear, to my ❤️, authentication! Come join and hang out! youtube.com/live/Pl93-Xy...

Chapter 5: Integrating Authentication in Your Cluster

Marc Boorshtein @mlbiam.dev · 04/03/2025

Reposted by Tremolo Security

Let's get OpenShift Namespace as a Service working with EntraID! Recording for a blog post, come hang out! youtube.com/live/g6q3Ltl...

OpenShift Namespace as a Service with EntraID

YouTube video by Tremolo Security, Inc.

042

Reposted by Tremolo Security

Marc Boorshtein @mlbiam.dev · 25/02/2025

Most enterprises need high availability across multiple data centers. Usually in different regions. How does that work? We'll talk about that tomorrow at noon est! youtube.com/live/TbURZ3W...

Chapter 5: External DNS and Global Load Balancing

Marc Boorshtein @mlbiam.dev · 25/02/2025

Reposted by Tremolo Security

(in my Darth Vader voice) My lab is complete, I will never again have to enter a password to access the systems in my lab!

A screenshot of OpenUnison's portal page with SSO badges for ArgoCD, Harbor, the Kubernetes Dashboard, kubectl, and both my proxmox servers

031

Reposted by Tremolo Security

Marc Boorshtein @mlbiam.dev · 18/02/2025

Chapter 4 - Kubernetes Networking Part II! Attack of the Ingress! Tomorrow at noon EST we'll dive right into the labs of our first networking chapter. Hope to see you there! youtube.com/live/aFwv_gA...

Chapter 4: Services, Load Balancing, and Network Policies - Part II