https://blog.pavelsklenar.com/Personal blog pageHugo -- gohugo.ioensklenar.pav@gmail.com (Pavel Sklenar)sklenar.pav@gmail.com (Pavel Sklenar)This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.Thu, 31 Mar 2022 00:00:00 +0000https://blog.pavelsklenar.com/azure-functions-in-k8s/Thu, 31 Mar 2022 00:00:00 +0000sklenar.pav@gmail.comPavel Sklenarhttps://blog.pavelsklenar.com/azure-functions-in-k8s/Introduction This tutorial shows how to deploy two simple examples of Azure Functions written in Python to Kubernetes (AKS used here, but not required). Envrironment setup Install prerequisites Docker (e.g. https://www.docker.com/products/docker-desktop) Kubectl (https://kubernetes.io/docs/tasks/tools/install-kubectl/) Azure cli (https://docs.microsoft.com/cs-cz/cli/azure/install-azure-cli) Func cli (https://docs.microsoft.com/en-us/azure/azure-functions/functions-run-local) Download Functions source code git clone git@github.com:pajikos/cloud-samples.git cd cloud-samples/azure-functions-in-k8s Setup your custom properties Edit file .env and fill correct values. Load envrironment properties # Load env properties source .env Login to the Docker registry You need a Docker registry with push rights to be able to upload images with two functions.https://blog.pavelsklenar.com/two-node-nomad-cluster/Sun, 12 Dec 2021 00:00:00 +0000sklenar.pav@gmail.comPavel Sklenarhttps://blog.pavelsklenar.com/two-node-nomad-cluster/Nomad is an interesting alternative to Kubernetes. As authors of Nomad say, it is a suplement to Kubernetes and offers some great features. Here you can find a guide on how to create a fresh Nomad cluster with two nodes. The first node acts as a server and client, the second node acts as a client only. I know this architecture is not recommended for production purposes, but I would like to test it only.https://blog.pavelsklenar.com/extend-local-network-to-cloud-with-nebula/Sun, 12 Dec 2021 00:00:00 +0000sklenar.pav@gmail.comPavel Sklenarhttps://blog.pavelsklenar.com/extend-local-network-to-cloud-with-nebula/Nebula Network Nebula is a scalable overlay networking tool with a focus on performance, simplicity, and security. It lets you seamlessly connect computers anywhere in the world. This post is about extending the local network by another server running anywhere in the world, everything secured by the Nebula network. Devices on the local network should be able to access devices on the Nebula network and some devices need to access devices on the local network as well.https://blog.pavelsklenar.com/azure-functions-system-integration/Fri, 22 Oct 2021 00:00:00 +0000sklenar.pav@gmail.comPavel Sklenarhttps://blog.pavelsklenar.com/azure-functions-system-integration/Introduction This simple demo shows possible integration between two systems (system A and system B) using Azure Functions. Note The full example with all resources could be found here on GitHub. The architecture constraints: All updates from the system A must be transfered into the system B The system A is listening on HTTP with REST API The system B is listening on HTTP with REST API The system B is not fully compatible in message definitions, so field mapping must be used The mapping must be saved in DB (I chose CosmosDB) Due to missing push notification in the system A, its API must be periodically checked The system B may be occasionally offline, so some type of persistent bus should be used.https://blog.pavelsklenar.com/iaac-aro/Thu, 23 Sep 2021 00:00:00 +0000sklenar.pav@gmail.comPavel Sklenarhttps://blog.pavelsklenar.com/iaac-aro/You can find here the guide: how to create an Azure Red Hat OpenShift 4 (ARO) cluster, how to setup connectivity to the new ARO cluster, how to deploy an example application. Note The full example with all resources could be found here on GitHub. Create Azure Red Hat OpenShift 4 (ARO) cluster Prepare environment Set the correct subsription: az account set -s TestingSubscription The file .https://blog.pavelsklenar.com/jenkins-creating-dynamic-project-folders-with-job-dsl/Wed, 01 Jan 2020 00:00:00 +0000sklenar.pav@gmail.comPavel Sklenarhttps://blog.pavelsklenar.com/jenkins-creating-dynamic-project-folders-with-job-dsl/This post is about the dynamic creating of project folders in Jenkins using Job DSL Plugin. The newly created project folders will be accessible by a specific group or user only, so you are able to use your Jenkins instance by multiple teams and each team will have their own folder for their projects. Before we can start, the following plugins must be installed: Matrix Authorization Strategy Job DSL Plugin Setting Up Correct Authorization Type The first step is related to set up a correct authorization type in the Configure Global Security menu:https://blog.pavelsklenar.com/vulnerability-scan-as-part-of-continuous-integration/Wed, 27 Feb 2019 00:00:00 +0000sklenar.pav@gmail.comPavel Sklenarhttps://blog.pavelsklenar.com/vulnerability-scan-as-part-of-continuous-integration/Have you ever image how many vulnerabilities exist in your applications since it was created? And how many of them comes from its dependencies? The high secure environments require to perform regularly checks to discover any new vulnerability issue in your application. These checks can be done manually, but it may take a lot of time, especially if you are using the current frameworks (e.g. Spring Boot) with many and many transitive dependencies.https://blog.pavelsklenar.com/spring-boot-run-and-build-in-docker/Sun, 16 Dec 2018 00:00:00 +0000sklenar.pav@gmail.comPavel Sklenarhttps://blog.pavelsklenar.com/spring-boot-run-and-build-in-docker/It exists many “Docker for Java developers” guides, but most of them does not take care of small and efficient Docker images. I have combined many resources how to make a simple and fast Docker image containing any of Spring Boot like application. My goals: Create a single and portable Dockerfile (as general as possible). Make Maven build inside Docker (no need to have Maven locally). Don’t download any Maven dependencies repeatedly, if no changes in pom.https://blog.pavelsklenar.com/securing-rest-api-with-client-certificate/Wed, 10 Oct 2018 00:00:00 +0000sklenar.pav@gmail.comPavel Sklenarhttps://blog.pavelsklenar.com/securing-rest-api-with-client-certificate/This post is about an example of securing REST API with a client certificate (a.k.a. X.509 certificate authentication). In other words, a client verifies a server according to its certificate and the server identifies that client according to a client certificate (so-called the mutual authentication). In connection with Spring Security, we will be able to perform some additional authentication and authorization. Technologies used: Spring Boot 2.0.5.RELEASE Spring Web + Security 5.https://blog.pavelsklenar.com/tcp-port-scanner-using-spring-shell/Tue, 18 Sep 2018 00:00:00 +0000sklenar.pav@gmail.comPavel Sklenarhttps://blog.pavelsklenar.com/tcp-port-scanner-using-spring-shell/This post is about using Spring Shell to make a simple application for scanning open TCP ports. Technologies used: Spring Boot 2.0.5.RELEASE Spring Shell 2.0.1.RELEASE Quick Overview: Final Project Structure Creating a new base Spring Boot project Needs for parallelism How check whether a port is open? Integrating with Spring Shell How it works Final Project Structure The final project structure" The final project structure