The CI-CD tunnel, which leverages the GitLab agent for Kubernetes, enables users to access Kubernetes clusters from GitLab CI-CD jobs. In this short video, we'll review how you can securely access your clusters from your CI-CD pipelines by using generic impersonation, a capability introduced in GitLab 14.5. In addition, we will show the activity list of the GitLab agent for Kubernetes, a feature introduced in GitLab 14.6 that can help you detect and troubleshoot faulty events. For this example, we create a GKE standard Kubernetes cluster and name it CSVEDRA GA4K cluster. We select the zone and version 1.21 of Kubernetes and ensure that our cluster will have three nodes. We leave the security and metadata screens with their defaulted values and click on the Create button. Let's proceed now to this top-level group, which contains three projects, which we will use to show impersonation with the CI-CD tunnel. You can do this at the project or group level. In this example, we will show setting impersonation at the project level. Project GA4K will configure the GitLab agent for Kubernetes and also set impersonations with the CI-CD tunnel. Project sample application will use the CI-CD tunnel managed by the agent to connect to the Kubernetes cluster and execute a pipeline using different impersonations. Project cluster management will also use the CI-CD tunnel to connect to the cluster and install the ingress application on it. Not only does the CI-CD tunnel streamline the deployment management and monitoring of Kubernetes native applications, but it also does it securely and safely by using impersonations that leverage your Kubernetes clusters' RBAC rules. Project GA4K contains and manages the configuration for the GitLab agent for Kubernetes called CSEVEDRA agent K. Looking at its config.yaml file, we see that the agent points to itself for manifest projects. But most importantly, it provides CI-CD tunnel access to two projects, sample application and cluster management. This means that these two projects' CI-CD pipelines will have access to the Kubernetes cluster that the agent is securely connected to. Project sample application has a pipeline, which we will later execute under different impersonations. And project cluster management has a pipeline that will install only the ingress application on the Kubernetes cluster as configured in its helm file.yaml file. Let's head back to project GA4K and connect to the Kubernetes cluster via the agent. We select agent CSEVEDRA agent K to register with GitLab. This step generates a token that we can use to install the agent on the cluster. We copy the Docker command to our local desktop for later use. Notice that the command includes the generated token, which you can also copy. From a local command window, we ensure that our connectivity parameters to GCP are correct. We then add the credentials to our kube config file to connect to our newly created Kubernetes cluster CSEVEDRA GA4K cluster and verify that our context is set to it. Once this is done, we can list all the pods that are up and running on the cluster. Finally, we paste the Docker command that will install the GitLab agent for Kubernetes to this cluster, making sure that its namespace is GA4K agent. We list the pods one more time to check that the agent pod is up and running on the cluster. The screen will refresh and show our Kubernetes cluster connected via the agent. Clicking on the agent name takes us to the agent's activity information page, which lists agent events in real time. This information can help monitor your cluster's activity and detect and troubleshoot faulty events from your cluster. Connection and token information is currently listed with more events coming in future releases. Let's go ahead and deploy the Ingress application to the Kubernetes cluster from project cluster management. Let's make a small update to the project pipeline to launch it. Once the pipeline launches, we navigate to its detailed view to track its completion and check in its log that it was able to switch to the agent's context and successfully ran all the installation steps. For further verification, we list the pods in the cluster and check that the Ingress pods are up and running. Before we start the impersonation use cases, let's start trailing the agent's log file from a command window and increase its login to debug. Find grained permissions control with the CICD tunnel via impersonation allows you to leverage your Kubernetes authorization capabilities to limit the permissions of what can be done with the CICD tunnel on your running cluster. It also lowers the risk of providing a limited access to your Kubernetes cluster with the CICD tunnel. It can also segment find grained permissions with the CICD tunnel at the project or group level. And finally, it can control permissions with the CICD tunnel at the username or service account. By default, the CICD tunnel inherits all the permissions from the service account used to install the agent in the cluster. Let's see this first use case. We head to the project sample application whose pipeline will be run under the agent's impersonation, which is the default. Notice that the pipeline has a test stage and a test job. It sets the variable cube context first, loads an image with the version of cube control that matches the version of the Kubernetes cluster and executes two cube control commands that access the remote cluster via the agent. We run the pipeline manually and we see in the test job log output that the context switch was successful and that the cube control commands executed correctly. Let's now impersonate the CI job that accesses the cluster. For this, we modify the agent's configuration and add the access as attribute with the CI job tag under it. As we save the updated configuration, we verify in the log output that the update has taken place in the running agent. We execute the pipeline of the sample application project again and like before, verified in the job log output that the context switch was successful and that the cube control commands executed correctly. The last use case is the impersonation of a specific user or system account defined within the cluster. I have pre-created a service account called Jane on the Kubernetes cluster under the default namespace. And Jane has been given the permission to do a get, list and watch on the cluster pods as you can see by the output in the command window. Remember that the service account GitLab agent and their namespace GA4K agent was created earlier when we installed the agent by running the Docker command. In order for the agent to be able to impersonate another service account or user, it needs to have the permissions to do so. We do this by creating a cluster role impersonate for impersonating users, groups and service accounts and then create a cluster role binding, allow impersonator to give these permissions for the default namespace to the agent, GitLab agent in the GA4K agent namespace. We then edit the agent's configuration and add the impersonate attribute and provide the service account for Jane as the parameter for the username tag. As we commit the changes, we check the log output to verify that the update has taken place in the running agent. Since we know that Jane has the permission to list the running pods in the cluster, let's head to the project sample application pipeline and add the command kubectl getpods all namespaces to it. We commit the update and head over to the running pipeline and drill into the test job log output to see that the context switch was successful and that the kubectl commands executed correctly, including the listing of the running pods in the cluster. In this short video, we reviewed how you can securely access your Kubernetes clusters from your CI-CD pipelines by using generic impersonation. In addition, we showed the activity list of the GitLab agent for Kubernetes, which can help you detect and troubleshoot faulty events from your cluster. I hope you enjoyed this video and until next time.


Not this chapter with a study of variables which are a combination. Still, now we have relative to space. What is relative to space? Relative to space. If you have small objects, take it from there. Like size. It has a distance and direction. So, no exact distance is represented less than zero. Can it be equal to zero? How simple is it?


Let me ask you a question, as a married man and both of y'all, like in your marriage, give me an example of a time where you realize that you made the right choice. Yeah, we on boss talk one on one, one on one. Yeah, we gon' talk. So, I know you were talking about black women and so forth. First of all, let me introduce Money Moses.  And you ain't even been on the show, nigga. You ain't been on the show, nigga. Don't worry about that. You ain't gone for a minute. Yeah, I been taking time to myself. Oh, okay, you been listenin' at the end of you, nigga. I ain't been listenin' at the end, but I understand what he was sayin', bro, you gotta put the phone down. Oh, yeah?  He don't have no cell phone. You gotta catch him at the house. No word. Yeah, we got out. He ain't been to jail. No? He ain't been to jail? No, he ain't been to jail. He just don't know why you don't just phone. I just don't know he been to jail. He ain't got no phone. He ain't been to jail. I was just talkin' about him today. It's crazy, just you gotta catch him at the house. If you don't catch him at the house, you don't catch him. I feel him. That's old school. You know that, don't you? Yeah, you gotta leave a message. Man, so Money Moses, what's up? Do you know anything about 85 South when Carlos called you out last time on here? When he said you was mad, Moses? I wasn't, what you got to say? I wasn't mad back then. I told him I put my phone down, bro. I ain't mad, nothing like that. I thought it was a woman that was making you mad about the phone. Yeah, cause she blocked on everything, the ledee, can't text me, none of that stuff. One time I know she callin' when it's like a, no call ID. No, it's not. Nah, you just assume it's her, nigga. Nah, nah, nah, nah. You're gonna say it's her, and it's gonna get paid for that contract with her. I don't hear nothin', I don't hear nothin' at all. My name ain't no nothin', so they can't call me. Man, what's goin' on? What you got from him, Miss Lady? No, you were talkin' about Black women earlier. So I remember listenin' to an interview that you were in and you were sayin' something about you've never dated a white girl? Mm-mm. Ever? No, no. I ain't never been around them to date them. You know what I'm sayin'?  Like, no, nigga, nah, I never have, no. Never got one. No, no, no, no, man. And I just, you know, I don't see nothin' wrong with it. I don't judge nobody, but I just love Black women, man. That's real.  Like, I was raised around some of the strongest Black women that ever, in my opinion. Wait a minute, so you sayin' niggas weak cause they can't deal with a Black woman? I'm not sayin' they weak. I'm just sayin' that the things that they say are the deal breakers, aren't deal breakers for me. Give me one example of it. I knew that would come. Just, you know, having to be responsible to one, like, in regards to being held to your word, you know what I mean? And not being allowed to do certain things. It's certain things that you can get away with from a woman that don't know no better.  But I think a lot of that comes from niggas not being who they say they are. I really am who I say I am. So I don't mind you challenging me on who I say I am cause I am that, so therefore it won't be a problem. I'm just, if I have to re-remind you of who I am, that's not a problem for me. So that's just one example, you know what I'm sayin'? And it's just, you know, I love Black women, man. You know what I mean? No disrespect to nobody else, but I love Black women. I mean, you both, man. Yeah, you got it going down.  More than 20 years, man. You know what I mean? Jamaica ain't got you one. Yeah, well, everybody say that, you know, but she came over here, her brother didn't have over it. Yeah, she came and found you. You know God sent her to me. Don't make it seem like she needed a green card, nigga. I'm God sent her to me, man. You lucky to have this woman. I'm blessed, I don't even believe in a woman, nigga. Yeah, yeah, you definitely are. This is her, this is one of the luck, like I said, that's the reason I'm here, man. Man, listen, nigga. If you ask me to do that, she's gonna be like, hey, man, hey, man, uh. Listen, I see you. Hey, man, I'm a hollet you Black man. I've seen you, man. When you showed us love at the show, man, thank you so much, man. I have no problem, man, and I respect that. Even though I don't, you know, I have no desire to ever be married or in a relationship, I respect relationships that I see. Don't worry about it. No, no, no, no, no, we need to go into that. Well, no, we don't wanna wait. We don't wanna wait. We don't wanna wait. We don't wanna wait. We don't wanna wait. But I respect relationships, even though I don't have a desire to be in one, I respect the ones that I see that I can tell are stern, you know what I mean? And what I mean by stern is that from the way that y'all interact and communicate with each other, I see that one of the most important aspects of any relationship to communication is present and active amongst you too. And that's something that I think that you guys are given to the people that you might not even recognize that you're given in regards to the importance of communication because that's the biggest deal breaker in relationships, you know what I mean? It's like finances and fucking, but those two things are driven by the communication, you know what I'm saying? They are driven by the communication. So when I see two people that communicate in the way that I've seen y'all communicate outside of when the camera's on, just in my space and how y'all interact, it's like bravo because it's possible to really have a relationship that lasts. I'm not saying that people think that when I say that, that means that I'm against it.  If you're not really willing to communicate until you're a woman, the truth, that's my perspective. There's no woman that I can have and stand in front of God and the pastor and listen to Brian McNeist songs and say, tell Def do us part.  That's so real. But I posted something on threads today and I said, I can't read your mind. You have to say what you need and then I can fulfill your need. You understand what I mean? But that's the thing, I'm glad that you said that because as a man, in my opinion, we have the responsibility of being honest about what our needs are and the biggest problem that we have is the fear of taking the ill.   Period, ever. I have no desire to do that and it's not just about sex.  Sometimes I just wanna be in the presence of some different women and I'm gonna do that because that makes me happy. So if that makes you unhappy, I'm not the nigga you need to be dealing with. So is that your major problem? No, it's not a problem. It's just the way that I communicate, you know what I'm saying? No, no, not a major problem as in your part. I'm talking the females that you encounter, is that one of their major problem? Oh for sure, like because you know we are, you know it's what you raise to believe. You know what I mean? And that's something that I always find funny is that we will question everything but the sanctity of male-female interaction, you know what I mean is people are questioning God and religion and government and all that but when it comes to the way that a man is supposed to interact with a woman, the only way it's supposed to look is the way you've been told it was supposed to look growing up and I disagree. Everybody is different and you just better hope you find somebody who's true about whatever it is that they differences are. Would you have a problem with her having a lot of male friends?  That's the thing, I just was saying this the other day, like I don't have, I was, I have a different perspective. I was raised around a lot of different things, you know what I'm saying? And I say this, it might sound like a joke but I'm being serious, I love hoes. Like real hoes, like women that are hoes because they're the honest women. And if you are willing, if they respect you enough to give you real game, they give you the reality of how a woman's mind works in a lot of ways that we as men will never get because y'all are so much better at dealing with your emotions than we are. Whether it be being honest about it or hiding the shit, you way better at emotions than we are. So just being able to get the game that I've got from the women that I've got, like if you don't wake up in the morning and wash your pussy, it don't belong to you, it's yours. So my job is never to control what you do with it. My job is to be the best version of myself that I can be so whatever you decide to do with it is beneficial when I show up. But outside of that, do what you do as long as whatever you do, when I'm not around don't bring me no problems when I am around, have at it. Because I can care less about that.  I think that's relating to honesty. I think that's something that, that's how relationships work as well. To be honest with you, if you're gonna stay with somebody, you gotta be straight up with them about what you're gonna be able to put up with or what you're not gonna be able to put up with. And if you choose to do it with one, you got people that do it all counter ways. Well let me ask you a question as a married man and both of y'all, like in your marriage, give me an example of a time where you realize that you made the right choice. Because I think that's something that's not discussed enough. Like that moment where it was, where you realize, okay, this really the person I'm supposed to be with for the rest of my life. I think mine was more, well I met her, I already knew it, you know what I mean? So. I mean the outside of that, see that's what I mean, that you get that answer all the time, but I'm talking about how long y'all been married? 20 years. In that 20 years, outside of what you knew, when you had it confirmed, like when was that moment? That's been for me several times, you know, and the reason I say that because of the kids and just it's all type of different things that happen through the course of us being together. The way she interacted with my kids, I got two kids before I even had my children by her and the way she interacted with them, that was something that was important. You got a daughter, so if you had somebody that mesmerized you when they met your daughter and they treated her better or just the same as you did, that's not easy to find.  You know what I'm saying? Everybody's versatile. So to see how she interacted with them and the way they received her, that was an eye opener because I had been, I was single, so I was dating and I was bringing girls around and they was not trying to hear none of that. But I love my kids because I had just, I've been through some stuff, but when they met her, it was dope. And then to have my kids by her, those were other pretty much great moments where I never forget those times that my children was brought in. The way she have taken care of us, that's, those are big factors, just the way she always cooking, always cleaning, always, you know, I really did battle with the kids, I believe, cause she didn't really go in there with them. She just be like, I'll go whatever. She trusted them. You know, me, I'm like, you need to check on them from time to little, but she had a way of dealing with them no matter what they learned on their own and I always valued that too. So there are several different things that has to do with family that make me, reconfirms every day, I'm with the right one. And that's the reason why I ask, because that level of confirmation is something that I think people negate in relationships in regards to the conversations that I have, the daily confirmations and affirmations that you got to provide to a person that you said you dedicated your life to. Because in my opinion, the reason people get divorced so much in this country is because you don't have to get divorced the same way you get married.  And then y'all gotta have a divorce reception like y'all did, a wedding reception and how you came out to your first song, what's your first song you gonna play when you getting away from this bitch? That's twisted. You know what I mean?  Are you here only one side of it because I've known people who get divorced and they go through a divorce party because nowadays they're doing parties for everything. Yeah, but there's the same people that came into it with them. But even if that was, you're still only hearing one side of the story.  Because both parties are not at that party to hear both sides. Because my philosophy with all of this stuff is always there's three sides to a story. There is your side, my side, and the truth. And the reason why I'm saying that, people don't understand that, I used to always say that as a kid, but as you get older, you get wiser.  Yeah, I say it all the time. I have those conversations with women that I deal with all the time, like just in regards to the general interaction, like if I'm looking at you right here and somebody's standing behind you looking at you and we both giving descriptions of what we see, we're describing the same thing, but it's gonna be two totally different descriptions that we're giving. That's real. So how do you get to a point where we, either I need to come around to your side or you need to come around to my side. But if we keep trying to describe it from where we're looking, we ain't gonna never get nowhere. That's so true.