You might be thinking: Oh no, another article about tips for senior engineers, genius idea Abdel, Bravo 👏 But these are my learned tips, stuff I learned working in the IT field for ~15 years and growing my career and knowledge along the way. I recently discussed this topic at…

When deploying a GCLB (Google Cloud Load Balancer) with the native Ingress on GKE (aka gce-ingress). Depending on the rules configured in the Ingress object a default backend is added automatically for you. The purpose of this default backend is to handle traffic routing when a request doesn’t match the…

Wow another article about DNS on Kubernetes/GKE, aren’t there enough of these already on the Internet? Yes, there are but I wrote this as a resumed version of what I learned when I attempted to understand everything DNS on GKE. …

Notes In this article, I’m assuming your implementation is Kubernetes based, you might notice I reference sidecars, clusters, or pods. While theoretically, a Service Mesh can extend into VM’s, they are primarily built for Kubernetes. In this article I’m making a lot of assumptions and generalizations, this is on purpose…

PS: If you read this article now. Linux Foundation is running the Cyber Monday discounts week. up to 65% on courses and exam bundles are offered until Dec 6th, 2021. Head to the website. I recently passed the exam for the shiny new Cloud Native Compute Foundation (CNCF) certification called…

Google Secret Manager(GSM) is GCP’s flagship service for storing, rotation and retrieving secrets. A secret in GSM could be a password, a token or a key or any random string your application needs to authenticate to an endpoint, database or API. Google Secret Manager is a global API that support…

The Linux Foundation just released a brand new DevOps BootCamp and as of the moment of this writing, it comes with a 30% discount using Coupon code DEVOPS30 at checkout. Below are my analysis and thoughts about this new offering. Why a DevOps Bootcamp? I’m not a Linux Foundation employee…

NB: This article provides a workaround, this is not a Google Cloud officially documentation procedure, use at your own risk and only on non-production systems What problem we are trying to solve? GKE cannot pull images from a registry that uses certificates that are not signed by a trusted CA: if the kubelet on the node is…

Solving the Workload Identity sameness with IAM Conditions Context GKE offers a unique feature called Workload Identity. This feature allows you to configure a Kubernetes Service Account (will call this one KSA for the remaining of the article) to use a Google Service Account (will call this one GSA for…