The goal of this article is to present a terraform code that creates multiple buckets, in multiple locations, and with multiple IAM permissions. This piece of code was used to solve the problem described in the Problem Statement section. The implementation strategy may vary from one case to the other…

Use Docker Buildkit to securely configure your Docker image to access private resources Challenges in accessing protected information Accessing private resources like a Nexus or a GitHub repository from within a Docker image and not leaking any security-related information it’s greatly appreciated. Firstly, we will never include credentials or any other secure information directly in…

Network Policies are an application-centric construct that allows you to specify how a pod is allowed to communicate with various network “entities” Prerequisite This tutorial is a continuation of my previous articles: How to automate the setup of a Kubernetes cluster on GCP. Automation: Deploying an app in GKE using Ansible …

Understand what is Helm, Helm Charts and how to configure GitHub pages to store and share your Charts. What are Helm and Helm Charts? Accordingly to the Helm official website¹: Helm helps you manage Kubernetes applications — Helm Charts help you define, install, and upgrade even the most complex Kubernetes application. A Helm Chart² is a…

Ansible infrastructure-as-code to automate Nginx deployment in Google Kubernetes Cluster (GKE) on Google Cloud Platform (GCP). Prerequisite This tutorial is a continuation of my previous article called How to automate the setup of a Kubernetes cluster on GCP. This article aimed to help you use Ansible¹ to create a Kubernetes Cluster…

Install and configure a Docker environment to run Apache Kafka locally Introducing the Apache Kafka ecosystem Apache Kafka¹ is an open-source distributed event streaming platform used by thousands of companies for high-performance data pipelines, streaming analytics, data integration, and mission-critical applications. Apache Zookeeper² is a centralized service for maintaining configuration information, naming, providing distributed synchronization…

Using Ansible to install, setup, and configure a Google Kubernetes Cluster (GKE) on Google Cloud Platform (GCP). Automating the setup of a GKE cluster As I briefly described in this article, Infrastructure as Code (IaC)¹ is paramount to maintain consistency across different environments. …

Understand the basic concepts of the Service Mesh, how it’s implemented within a Microservices architecture, and explore it in practice. — What is a Service Mesh? A service mesh is an infrastructure layer implemented to control the communication among containers (or services) in a Microservices architecture¹. The goal is to provide an improved approach for Traffic Management², Security³, and Observability⁴ across a network of services.

IT automation, also known as Infrastructure as Code (IaC), is an intrinsic part of the DevOps culture and best practices. The goal is to guarantee the same environment is created every time the code is executed. This is pivotal to the implementation of Continuous Integration / Continuous Deployment (CI/CD). …