Configuring Elasticsearch with Terraform, by means of direct API calls — Photo by Karan Thukral on Burst If you use Terraform for automating your Elasticsearch deployments, you might find that you need to call the Elasticsearch API during your Terraform runs. Although the Elasticsearch config can cover a lot of ES settings, there are certain changes that can only be made…

How to make Kubernetes pods trust internal HTTPS services — Photo by Parsoa Khorsand on Unsplash NOTE: This post builds upon my previous post Accessing Azure Key Vault secrets from Kubernetes, and assumes understanding of the subject discussed there. A common task I face as a DevOps engineer has to do with injecting TLS (formerly SSL) certificates into an application…

Querying and injecting Azure Key Vault secrets into Kubernetes microservices — Photo by FLY:D on Unsplash If you use Kubernetes to run your applications, sooner or later your cluster pods will need access to secrets. Of course, putting secrets in code is a very bad idea. …

A tale of two Azure subscriptions — When infrastructure is declared as Terraform code, resources are usually only created in a single Azure subscription. It normally is best practice to keep multiple subscriptions separated in code, to prevent ending up with a large codebase which can be difficult to maintain and understand. However, there are times when…

As a git user, I got tired of constantly seeing my list of branches grow out of control. Git is great for keeping the history of a repository, but at least for me, there isn't a lot of value in keeping deleted branches in my local history. …

Yesterday, I had to do a two-line code change to a single source file in our project. Literally all that had to be done was to replace a hard-coded value into a variable. “Easy”, I thought. Lo and behold, after making the change, the CI pipeline decided it no longer…