https://www.msbiro.net/tags/conjur/ Recent content in Conjur on Cloud Native & Open Source: A Team Lead’s Working Journal https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.164.0 en-us Wed, 09 Oct 2024 07:30:03 +0000 https://www.msbiro.net/posts/cyberark-conjur-134-evolution-continues/ Wed, 09 Oct 2024 07:30:03 +0000 https://www.msbiro.net/posts/cyberark-conjur-134-evolution-continues/ CyberArk Conjur 13.4 introduces exciting new features including syncing empty safes from Vault for improved policy automation, dynamic application configuration through the conjur.yml file, and extended support for regex queries in the External Secrets Operator. This release marks another step in the continuous enhancement of Conjur Enterprise, making it more powerful and flexible for enterprise secrets management. https://www.msbiro.net/posts/cyberark-conjur-132-released/ Thu, 01 Feb 2024 12:30:03 +0000 https://www.msbiro.net/posts/cyberark-conjur-132-released/ CyberArk released Conjur 13.2 with important bug fixes, support for OpenShift 4.14, and new key features including high availability for the Vault Synchronizer and enhanced support for the Container Storage Interface (CSI) driver. This release improves disaster recovery strategies and optimizes secret injection into Kubernetes pods, representing another solid step in Conjur’s ongoing evolution. https://www.msbiro.net/posts/cyberark-conjur-131-released/ Thu, 07 Dec 2023 08:30:03 +0000 https://www.msbiro.net/posts/cyberark-conjur-131-released/ CyberArk has released Conjur 13.1, a point update focusing on under-the-hood improvements that enhance the resiliency of Conjur followers. Key changes include major upgrades to the underlying container base image, PostgreSQL, and etcd versions, as well as enhanced flexibility in vault synchronization and secret segregation. This release is recommended for all Conjur Enterprise users seeking improved performance and stability. https://www.msbiro.net/posts/conjur-13-is-available/ Tue, 06 Jun 2023 18:30:03 +0000 https://www.msbiro.net/posts/conjur-13-is-available/ CyberArk has released Conjur 13.0, bringing notable enhancements like OIDC login support, secret data segregation for followers, optimized password management, and faster Vault synchronization for enterprise environments. This post covers the highlights of version 13, why you should consider upgrading, and how these improvements impact admins, security teams, and Kubernetes users. https://www.msbiro.net/posts/resolving-podman-log-rotation-issue-conjur-enterprise-129/ Wed, 24 May 2023 17:30:03 +0000 https://www.msbiro.net/posts/resolving-podman-log-rotation-issue-conjur-enterprise-129/ This post addresses a log rotation issue seen in CyberArk Conjur 12.9 container deployments running on Podman. Unlike Docker, Podman requires the container to be recreated with the AUDIT_WRITE capability added and a specific permission set on the Nginx log directory for proper log rotation. The resolution was developed collaboratively with CyberArk support and is now documented for future updates. Essential guidance for operators using Podman with Conjur containers. https://www.msbiro.net/posts/troubleshooting-conjur-follower-setup-postgres-connectivity/ Mon, 21 Nov 2022 11:23:03 +0000 https://www.msbiro.net/posts/troubleshooting-conjur-follower-setup-postgres-connectivity/ This post covers troubleshooting a CyberArk Conjur follower setup issue where the follower pod could connect to the Conjur API leader but failed to connect to the Postgres database, causing replication to stall and system errors. The solution involved verifying Postgres connectivity using openssl s_client with TLS, revealing a network load balancer misconfiguration that was subsequently corrected. Learn how to use this simple openssl command for effective container and network diagnostics. https://www.msbiro.net/posts/cyberark-conjur-authenticators-integrations/ Mon, 22 Aug 2022 10:26:03 +0000 https://www.msbiro.net/posts/cyberark-conjur-authenticators-integrations/ detailing the variety of authenticators such as host/user API key, OIDC, AWS IAM, Kubernetes with SPIFFE-compliant mutual TLS, and more. Learn how these authenticators enable secure secrets retrieval and integrations with popular DevOps tools and cloud platforms, enhancing security and flexibility for dynamic environments. https://www.msbiro.net/posts/cyberark-conjur-architecture-system-requirements/ Sun, 24 Jul 2022 11:40:03 +0000 https://www.msbiro.net/posts/cyberark-conjur-architecture-system-requirements/ This post provides a comprehensive overview of CyberArk Conjur Enterprise architecture, detailing its multi-node cluster design with auto-failover capabilities, follower deployment for scaling, and essential system requirements for production and test environments. Essential reading for anyone planning to deploy Conjur as an enterprise-grade secrets manager. https://www.msbiro.net/posts/why-you-need-kubernetes-secrets-manager/ Tue, 19 Jul 2022 16:30:03 +0000 https://www.msbiro.net/posts/why-you-need-kubernetes-secrets-manager/ Secrets management is critical to securing modern infrastructures, guarding sensitive information such as passwords, certificates, and keys from exposure and misuse. This post introduces CyberArk Conjur, an enterprise-grade secrets manager that protects secrets using programmable REST APIs, centralized security policies, and integration with CyberArk’s broader ecosystem. Learn why avoiding common mistakes like hardcoding secrets or pushing them to public repositories is vital, and how Conjur offers scalable, secure, and automated secrets management for cloud-native environments.