Usually when we setup a Jenkins server, we usually use the master to build jobs. The master node is in charge of scheduling jobs, assigning slave nodes, and sending builds to slave nodes for execution. It will also keep track of the slave node state (offline or online), retrieve build…

Usually when developer need to access to the bastion host, we will give them the private key or they give us the public key then we will add the public key to bastion host. But there is another way, it’s Session Manager. Session Manager is a fully managed AWS Systems…

When you create an Amazon EKS cluster, the AWS Identity and Access Management (IAM) entity user or role, such as a federated user that creates the cluster, is automatically granted system:masters permissions in the cluster's role-based access control (RBAC) configuration in the Amazon EKS control plane. …

In this post, i will guide you to install self-hosted github action runner, then setup a simple workflow to run some command on that runner. To setup github action self-hosted runner, we will use action-runner-controller. I will use minikube and create a private repository on github for demo purpose. …

When doing work on many micro services, i have to find a way to manage environment variable for them, previously i used AWS Secret Manager but when working on multiple environment with many account, the effort for manage IAM Account, Role, Permission is very large, so i switched to Vault…

When i’m using Azure Cloud, they do not provide a free certificate that can be used with their service, unlike AWS, so we need to find a way to get a free TLS certificate. Luckily when i go around the internet, i saw acme.sh, this is a ACME client that…

Use Amazon Elastic Kubernetes Service for development environment is not a good choice if the customer or we have not enough credit. The workload for development environment is usually small so we can create 1,2 node to save money. …

This article assume that you have basic knowledge about Kafka, and Docker Compose, for development environment, there is no strict requirement about high availability and durability, we will try to make our cluster same as production, staging environment as much as possible. Our infrastructure architecture is very simple, there is…

In production environment, the access is private by default, developer usually have not permission to access to the database, search engine, or the running application. In case to debug application, running specific query on database, devops need to provide access for developer to able to access to this resource. So…