(p)retired

I’ve been tinkering with ways to “unit-test” my assumptions when using cloud platforms.

Google has published two, very good blog posts on cost management: How to identify and reduce costs of your Google Cloud observability in Cloud Monitoring Cloud Logging pricing for Cloud Admins: How to approach it & save cost This post is about my applica…

The majority of Ackal’s components are deployed to Google Cloud.

I’m building a Google Sheet that interacts with Google Cloud Storage (GCS) objects using Apps Script.

Google publishes interface definitions of Google APIs (services) that support REST and gRPC in a repo called Google APIs.

Ackal uses a Kubernetes Operator to orchestrate the lifecycle of its health checks.

NOTE cert-manager is a better solution to what follows.

I’m using Google Managed Service for Prometheus (GMP) and liking it.

As I contemplate moving my “thing” into production, I’m anticipating aspects of the application that need maintenance and how this can be automated.

I’d not used Google’s Domain-wide Delegation from Golang and struggled to find example code.

[Tailscale] is really good.

While testing Firestore export and import yesterday and checking the IAM permissions on a Cloud Storage Bucket, I noticed some Member (member) values (I think Google refers to these as Principals) were logical but unfamiliar to me: deleted:serviceAccount:…

I’m using Firestore to maintain state in my “thing”.

It’s been a while!

NOTE cert-manager is a better solution to what follows.

I’ve begun exploring Vultr after the company announced a managed Kubernetes offering Vultr Kubernetes Engine (VKE).

I was introduced to HackMD while working on an open-source project.

I’ve been on a roll building utilities this week.

Table of Contents Artifacts Pushover Caveat Cloud Monitoring Webhook Cloud Functions Cloud Run Artifacts GitHub: go-gcp-pushover-notificationchannel Image: ghcr.io/dazwilkin/go-gcp-pushover-notificationchannel:220515 Pushover Logging in to your Pushover a…

I have several Cloud Run services that I want to map to a domain.

For my “thing”, I use Firestore to persist state.

I’ve a day to catch up on blogging.

Last year, I wrote about using Automatic Certs w/ Golang gRPC service on Compute Engine.

Some time ago, I wrote about using Prometheus Service Discovery w/ Consul for Cloud Run and also Scraping metrics exposed by Google Cloud Run services that require authentication.

I needed to deploy a healthcheck-enabled gRPC TLS-enabled service.

I’m using Firebase Authentication in a project to authenticate users of various OAuth2 identity systems.

If you use jq, you’ll know that, its documentation uses examples that you can try locally or using the excellent jqplay: printf "[1,2,3]" | jq .[1:] [ 2, 3 ] And here If you use Google Cloud Platform (GCP) CLI, gcloud, this powerful tool includes JSON

UPDATE There’s an issue with my naive implementation of RenderValuesHook as described in this post.

I’ve been on a digression (gcp-oidc-token-proxy) this week.

I’ve read about Podman and been intrigued by it but never taken the time to install it and play around.

I’ve written a solution (gcp-oidc-token-proxy) that can be used in conjunction with Prometheus OAuth2 to authenticate requests so that Prometheus can scrape metrics exposed by e.g.

I’ve multiple components in an app and these are deployed across multiple Google Cloud Platform (GCP) services: Kubernetes Engine, Cloud Functions, Cloud Run, etc.

This is very useful: I am building an application that comprises multiple repos.

TL;DR I’m working on a project that includes multiple Cloud Run services.

Problem I’m building an application that comprises: Kubernetes¹ Kubernetes Operator Cloud Firestore Cloud Functions Cloud Run Cloud Endpoints Stripe Firebase Authentication ¹ - I’m using Google Kubernetes Engine (GKE) but may include other managed Kuberne…

I’ve written before about a project in which I’m using Firebase Authentication in combination with Google Cloud Endpoints and a gRPC service running on Cloud Run: Firebase Authentication, Cloud Endpoints and gRPC (1of2) Firebase Authentication, Cloud Endp…

For… reasons, I wanted to pre-filter gRPC requests to check for authorization.

It’s been almost a month since my last post.

Earlier this week, I wrote about using Firebase Authentcation, Cloud Endpoints and gRPC (1of2).

I’m building a service that requires user authentication.

See: Multiplexing gRPC and HTTP endpoints with Cloud Run gRPC, Cloud Run & Endpoints ESPv2: Configure Cloud Endpoints to proxy traffic to a Cloud Run multiplexed (gRPC|HTTP) service Challenges: Cloud Run permits single port Cloud Run services publishing e…

Julia’s post Blog about what you’ve struggled with resonates because I’ve been struggling with Golang structs in a project.

I’ve written a basic discoverer of Google Cloud Run services.

Google Cloud Run is useful but, each service is limited to exposing a single port.

I’m using Google’s Golang SDK for Firestore.

I’m working on a project that will programmatically create Google Cloud Run services and I want to be able to dynamically discover these services using Prometheus.

I spent some time over the weekend understanding Fly.io.

I was pleased to discover that Google provides a non-Node.JS mechanism to subscribe to and act upon Firestore triggers, Google Cloud Firestore Triggers.

This works great but it wasn’t clearly documented for non-Firebase users.

Phew!