Using Google Cloud Platform Secret Manager service is a convenient way to store and manage secrets. It has many features like automatic rotation, audit logging, access control and many others. It is integrated with GCP services like Cloud Functions, ...
My recent task was to search in bucket for objects located in selected "directories" using PHP. Directory list inside bucket is not constant. New directories can be added every few months. Search should fetch all "main directories" that match some pa...
If you don't want to spend hours debugging GitHub CI jobs, avoid using job outputs that may contain secrets inside. Job outputs will not be passed to dependent jobs if they contain secrets in any part of output value. There is a tiny note about this ...
Sometimes you have to deal with multiple CPU architectures within your team. For example you have devs using macOS (arm64) and Linux (amd64). This may create some issues when you want to use base image with specific SHA256 inside your app Dockerfile....
Introduction When working with VMs you may come across cloud-init tool that could be used to provision your instances. It is a well documented tool and is widely used by cloud providers. You may be quite surprised though that there can be some situat...
Introduction In today's fast-paced development environment, where multiple developers are collaborating on projects using different operating systems and architectures, automating development and CI tasks is crucial for consistency and efficiency. Th...
As the name suggests, docker COPY copies stuff from the host to the docker image, right? Right. Well, mostly right... TLDR You need to watch out for small details of how COPY in Dockerfile works. It is copying source directory contents and never the ...
This was a rather interesting problem to fix. I'm running a PHP app as Google Cloud Run Service. This app is connected to the Cloud SQL instance using a Cloud SQL connection like this: resource "google_cloud_run_service" "pricing" { provider ...
Let's assume I have two Docker Compose projects: # project-a/compose.yml version: '3.7' services: app: image: alpine command: ['tail', '-f', '/dev/null'] # project-b/compose.yml version: '3.7' services: app: image: nginx db: ...
