Technology needs to be secure, but we also want to make it easy to use. This is the same for us engineers managing SSL Certificates and their rotation. You can get long life certificates, but why when you can get free ones generated via the Automated Certificate Management Environment (ACME protocol). This is normally dueContinueContinue reading “Automatic ACME SSL Certificate Rotation”
Category Archives: Cloud
Connect Azure MySQL to Private Endpoint with Terraform
To connect an Azure MySQL Database, or other services in Azure, one of the most secure methods to do this is with a Private Endpoint. Microsoft document the architecture they recommend using an App Service connecting to a MySQL Server, which is good if you are using the Azure Portal, but there are some missingContinueContinue reading “Connect Azure MySQL to Private Endpoint with Terraform”
Create User on Azure MySQL Database with Terraform
After you create you Azure MySQL Server, you would like to create a Database, but for security you would like to have a new custom user added with permission. Unfortunately the Azure Providers do not provide this, so we need to use some other skills to get these users in. First we can go aheadContinueContinue reading “Create User on Azure MySQL Database with Terraform”
Unable to delete Azure Subnet due to Resources
With Azure Subnets there is an order to deleting the resources. You must disconnect the Virtual Network Subnets before deleting the resources, or you can’t delete the Subnet. This caused myself some issue, while using Terraform as I kicked a Destroy command and did it in the wrong order. However, I found a method onContinueContinue reading “Unable to delete Azure Subnet due to Resources”
Auto Purge Azure Container Registry Images
When adding images into the Azure Container Registry you might start getting a backlog of images that need to be cleaned down. Azure CLI has some features, but you might want more… With the Azure CLI you can use the ‘ACR’ commands, which contain the option of ‘purge’. This can be combined with a tagContinueContinue reading “Auto Purge Azure Container Registry Images”
Automate Security for Azure Container Registry
From March 2021 Azure is deprecating the Container Setting in Azure Web Apps, which changes you to use the new Development Center. This look very nice, but there is a change that is going to force you to have weaker security. This change is to have the Admin Credentials enabled, but there is something youContinueContinue reading “Automate Security for Azure Container Registry”
Testing Azure DevOps Pipelines Locally
I have tried and tried before, plus also read a lot of other people asking for the ability to test Azure YAML Pipelines locally. Now although it is not perfect and some room for improvement, Microsoft has create a way to test your pipeline with some local testing and remote testing without having to checkContinueContinue reading “Testing Azure DevOps Pipelines Locally”
Create Identity in Google Cloud Platform and GSuite
Compare to some other cloud providers, creating an identity via code in GCP is a little fragmented if your using GSuite for your identity storage. The Google Cloud Platform holds your users identity reference and permission, while the other system GSuite hold the security of the users authentication. This can also make the documentation feelContinueContinue reading “Create Identity in Google Cloud Platform and GSuite”
