Renjith Ravindranathan

Published in AWS Tip

·Jul 29

IAM role creation with Terraform

In this short article, I will take you through the steps for creating an IAM user and assigning a role to it with policies with a view to accessing S3 resources. A commonly used pattern in AWS IAM is to create an IAM user, assign the user a role with…

Security

2 min read

Published in AWS Tip

·Jul 18

Manage AWS EKS Secrets using SSM

In this article, I will show you how we can integrate AWS EKS secrets with the AWS system manager. Kubernetes secret management is an important topic. By default, Kubernetes store the secrets in etcd in base64 encoded format. The secrets must be externally stored to have a more secure way…

AWS

2 min read

Published in AWS Tip

·Jul 11

Securing Kubernetes clusters using OSS tools-Part 1

Securing Kubernetes is a critical task for any team whose primary workloads run on multiple clusters. Primarily security needs to be enforced in 4 layers — Code, Container, Cluster, and Cloud Level. Each of these layers needs to be separately strengthen and monitored continuously for better outcomes. There are multiple…

Security

3 min read

Securing Kubernetes clusters using OSS tools-Part 1

Published in Towards AWS

·Jun 22

Manage AWS S3 lifecycle policies through Terraform

In this short article, I will show you how we can enforce lifecycle policies for the S3 bucket. Lifecycle policies are required when you have tons of files that exist in your bucket and want to efficiently store them improving the readability from S3 and maintainability. In usual cases, when…

AWS

2 min read

Manage AWS S3 lifecycle policies through Terraform

Published in FAUN Publication

·Jun 12

Manage Redhat MicroShift Cluster through Shipa

In this article, I will take you through the steps to set up Lightweight Kubernetes distribution — MicroShift and manage the same cluster using Shipa. MicroShift is a research project started by RedHat, in helping to run Kubernetes clusters for resource constraint environments such as Edge/IoT devices. It is a…

Kubernetes

6 min read

Manage Redhat MicroShift Cluster through Shipa

Published in FAUN Publication

·Jun 5

Trivy — The Swiss Army Knife for Security Scanning

In this short article, you will explore the different capabilities that Trivy provides from a security standpoint. Trivy is a comprehensive security scanner from Aquasecurity, which is really fast, easy to set up, and can be utilized in a wide range of target platforms in the DevOps space. Trivy helps…

Security

3 min read

Published in Towards AWS

·May 23

Building C++ Projects using Azure Pipelines and Azure Artifacts

This short article will explain how we can build a simple C++ project leveraging Azure Pipelines and Azure Artifacts. Building C++ projects is a time-consuming one, as the C++ compiler produces machine code and optimization of the code happens during the compilation. …

Azure Devops

3 min read

Building C++ Projects using Azure Pipelines and Azure Artifacts

Published in FAUN Publication

·May 9

Provisioning Infrastructure using Pulumi (YAML) and GitHub Actions

In this article, we will explore the possibilities of provisioning infrastructure using the Pulumi’s YAML extension. Recently Pulumi released Universal Infrastructure as Code offering, supporting the widest range of builders, clouds, programming languages, and cloud architectures. Now using Pulumi you can define infrastructure using NodeJs, C#, Java, Go, Python and…

Github

4 min read

Published in techbeatly

·Apr 26

Terraforming Service Fabric Managed Cluster

Azure Service Fabric is Microsoft’s Platform-as-a-Service (PaaS) and is used to build and deploy microservices-based cloud applications. So in this short article, how I provisioned a simple 3 node SF Managed Cluster using Terraform. The entire codebase is on Github and here you can find the repo link here. …

Azure

3 min read

Terraforming Service Fabric Managed Cluster

Published in FAUN Publication

·Apr 25

Yet another Docker In Docker Issue

Recently I come across an issue with Docker, specifically in which the container that runs inside another parent container is not able to talk with a docker daemon on the host machine. This is fundamentally a security misconfiguration and ideally should be restricted in any public-facing environment. …

Docker

3 min read