Recently, as I worked through an issue with Service Discovery in a multi-cluster setup with a Google managed control plane, I needed to configure Mesh-wide settings. I won’t get into the actual story, that’s a topic for another blog, as I want to focus on the configuration step When looking…

Developing OPA policies requires a combination of Rego language and YAML configuration. To validate that the policy is valid, there are a few approaches: Unit Testing — Validate individual set of assertions with unit tests. Rego, like most language has a unit testing framework. Based on the complexity of the…

In my previous blog entry, I shared details about a tool called konstraint. That entry focused on generating YAML. As a follow up, I will delve deeper into the documentation generation capabilities. Many programming languages make the use of documentation conventions in code and will often have annotations to support…

Recently, I’ve started writing policies to be enforced on Kubernetes clusters using Open Policy Agent (OPA) Gatekeeper. The process involves creating policies/assertions using the Rego language, and then packaging the logic into the OPA CRD’s: ConstraintTemplate — Resource with the rego logic and defines whether the policy has input parameters…

Recently, I have been involved with a project where we will be integrating GKE with Vault. Having worked with external Secret solutions on AKS in the past, it was a good starting point to expand my knowledge and apply it to GKE/Vault. I was also keen on understanding the excitement…

Azure peeps, you may have heard, Microsoft has finally established its exam renewal program. If you have certifications expiring in less than 6 months, you probably have received an email…or will be soon. So what does it mean and entail to recertify your Azure credentials? TL;DR — It is not…

Recently, some of our modules have required breaking changes and we didn’t have a good way to communicate the impacts to users and allow them to pin to a specific version. While an astute Terraform user could pin to a Git SHA, it is a less than ideal approach. …

Developing unit tests for Terraform modules is critical to validating behavior and also doing regression testing. Recently, I had to do regression testing on about 15 modules during a Terraform 0.14 migration and the tests were a life saver. However, I have found that validating outputs from modules using Terratest…

In my latest blog entry, I brought up details about the new feature in TF 0.14 where you can mark inputs and outputs as sensitive. This feature was also the cause of a panic issue found in 0.14.3. I am happy to announce this has been resolved in 0.14.4 …