Using Cloudflare Zero Trust with Kubernetes to enable kubectl without SOCKS proxies

The idea of GCP service account impersonation is to run and deploy Terraform infrastructure without the need of using service account keys as it introduces security risks along the way – not rotating keys frequently enough and hardcoding them being only part…

GitHub EMU (Enterprise Managed Users) in general allows users to manage their enterprise members through IdPs (identity providers). Azure Active Directory and Okta are the only ones supported at the time of writing.

Nuke a whole AWS account and delete all its resources. - rebuy-de/aws-nuke

Another Terraform error from the vault, this time being: Error: Invalid resource instance data in state .. data could not be decoded from the state: unsupported attribute "manage_run_tasks".

If your company uses Kubernetes, you are likely expending energy on something that doesn't take you towards your mission.

If you are getting this kind of warning: [DEPRECATION WARNING]: Distribution Ubuntu on host 2.2.2.2 should use /usr/bin/python3, but is using /usr/bin/python for backward compatibility with prior Ansible releases

One more issue from the Terraform error list that I want to share with y’all. While I was struggling with GCP on a day-to-day basis, I tried to initialize the remote TF state file stored in a GCS bucket and received the following console output: Error: Failed…

Migrating Terraform state to a remote location such as a cloud object storage is a no-brainer since it solves the shared access to state challenge when working with multiple members and teams.

You may wonder if it’s possible to rename an Elasticsearch index while doing a restore from an Elasticsearch snapshot but keeping the existing index as it is. Let’s see the scenario. I have an index devcoops and have a backup snapshot of it as well. I will…

It’s not a new thing to loop through Terraform outputs though, so here are a few solutions that could help since count can’t be used as part of the output itself.

By default, once you enable the Compute Engine API in GCP, two Google-managed service account principals will be created Compute Engine default service account and Google APIs service account. Both assigned with the Editor role.

OpenFaaS - Serverless Functions Made Simple. Contribute to openfaas/faas development by creating an account on GitHub.

If you want to update your currently running ECS tasks and launch new ones, there is a cool option --force-new-deployment which will start a new deployment of the service and recycle all the tasks. It’s very useful if you need to refresh the containers and…

Yes, you read that right. I deleted almost 80% of the code from the Redis bitnami container image on Docker Hub and it still does…

Given that Redis supports optional authentication, it would be outrageous to deploy it to a public subnet hence exposing to the Internet. So, once you setup and configure Redis in a private subnet, bind the address, add a firewall rule, and on top of that…

While installing some Certbot packages I stumbled upon the No package python3-certbot-nginx available. error. Let’s take a look.

For today’s Terraform error of the week series we are going to take a look at the following one: │ Error: Failed to install provider │ │ Error while installing terra-farm/xenorchestra v0.23.2: the current package for │ registry.terraform.io/terra-farm/xenorchestra…

It’s been a while since I’ve encountered any issues and errors related to Docker. It has to do with one of two things. Docker became more stable, or I’m not spending time on it as I was before. Either way, here’s the error I’ve faced this week when I was…

Some of your Docker Debian-based containers can be killed due to heavy processes running inside the container. If your preferred choice is the top command, most likely you will get the following error: top: command not found. Let’s see how to install top…