GitOps Intro GitOps uses Git repositories as a single source of truth to deliver infrastructure as code. Submitted code initiates the CI process, while the CD process checks and applies requirements for things like security, Infrastructure as Code, or any other boundaries set for the application framework. All changes to code are…

Objective VPC service controls is an amazing security feature from the Google Cloud Platform which I was really curious about, and fortunately, I got to work with an environment where this was implemented. VPC Service Perimeters function like a firewall for GCP APIs. If you want to create a resource in…

Purpose This article is intended as an introduction to Gatekeeper and will show you how to use the OPA gatekeeper to create and enforce policies and governance for your Kubernetes clusters so the resources you apply comply with that policy. Kubernetes admission webhooks Before we dive into how OPA Gatekeeper works under the hood…

Introduction I previously wrote a post on How to connect to TLS-enabled Oracle DB using SQL Developer, and I am pleased to see that people have found it to be a simple and useful resource. Now that Oracle Cloud is getting more and more popular and the Autonomous DB free tier…

Objective In my last post regarding Implementing GCP VPC Service controls using Terraform (Terragrunt), we prepared the infrastructure and resources required to test some scenarios related to VPC Service control in a Shared VPC network environment. In this post, we will make changes to the service perimeters like adding and removing…

Objective In one of my older posts, I discussed how we can use Dynatrace to monitor kubernetes. Many clients running SQL Server on GCP Cloud SQL have a very common requirement about monitoring their business critical application databases reliably. Dynatrace is a commonly favored observability tool for cloud native and on-premises…

Purpose This augments my previous post about Testing Business continuity of a sample application using GKE and GCP Cloud SQL. The purpose of compiling this post is to share the caveats related to restoring backups when the target Instance is different and is in different region. We will test and document…

Purpose Another Blog on enabling TLS for Oracle Database? I will try to make this post more useful for you by adding “Using TLS Certificates for authentication” and by sharing a small ansible repository to manage this configuration. This article can help you fulfill the requirement for TLS encryption on the…

Purpose Using the GKE Loadbalancer service is not a complex topic in general. When a LoadBalancer for a GKE service gets provisioned, automatic firewall rules also get created, so why do we need this post? The motive of this post is to share the experience related to an issue I encountered…