joe200

Use Debian Testing. This is the _rolling_ release from the Debian family.

And don't be fooled by the name of the release: "Testing". The name "Testing" exists due to an orthodox approach of Debian community that only the Debian stable can use "stable".

Are you encrypting every file or create some virtual encrypted volume and copy all file over ?

What encryption are you using ?

What does this change compared to the current status ? Terraform/Pulumi/AWS CDK already use AWS API. Is it just about having consistent API calls naming ?

IMHO something like Crossplane is the future for infra management.

Which of those you recommend allow me to password protect some (preview/staging) content both with list of custom users/passwords and integrated with some external SSO ?

Can keycloak let me integrate different k8s clusters running in Azure/Google/AWS with i.e.: Azure AD ? All our users have accounts in Azure AD but we would like to let them use k8s clusters running in different cloud providers without maintaining user accounts there. Is it possible with keycloak ?