Fabian Lee : Software Engineer

Kubernetes: targeting the addition of array items to a multi-document yaml manifest

July 2, 2022
Categories: Kubernetes, Scripting

If you have a Kubernetes yaml manifest that contains multiple documents, targeting a single document for modification while still outputting the other documents untouched can be a challenge. As an example, consider the simple example below were you have a single yaml file that contains: a Namespace, Deployment, and DaemonSet. And we want to add … Kubernetes: targeting the addition of array items to a multi-document yaml manifest

Java: Spring Boot REST service with OpenAPI/Swagger documentation

June 30, 2022
Categories: Development, Java

Spring Boot excels as a framework that makes it convenient to expose a set of REST based services. But once an application is developed, it is so trivial to create a new resource or modify a method signature that it becomes difficult to keep the documentation up-to-date so that clients can properly consume the REST … Java: Spring Boot REST service with OpenAPI/Swagger documentation

Kubernetes: query by annotation with kubectl

June 18, 2022
Categories: Kubernetes

Although kubectl has the native ability to query on labels, it does not provide the same support for annotations. This is unfortunate, because the need to target deployments and services by annotation is commonplace. You can, however, use the power of jsonpath to find these objects. Below is an example of finding all Services that … Kubernetes: query by annotation with kubectl

GCP: enabling Cloud Armor on GCP HTTPS LB for Anthos Service Mesh

March 6, 2022
Categories: Hyperscaler

If you are using Anthos Service Mesh to deliver your public applications from a GFE HTTPS LB, I would strongly suggest enabling Cloud Armor which is a WAF (web application firewall) that can mitigate and defend against a variety of attacks such as cross-site scripting and denial of service. As a summary overview, the first … GCP: enabling Cloud Armor on GCP HTTPS LB for Anthos Service Mesh

Kubernetes: adding and removing pod template annotations using kubectl

September 19, 2021
Categories: Containers

Although ‘kubectl annotate‘ will set an annotation on a object directly, it will not set the annotation on the more deeply nested pod template for a Deployment or Daemonset. If you want to quickly set the annotation on a pod template (.spec.template.metadata.annotations) without modifying the full manifest, you can use the ‘patch‘ command. As a … Kubernetes: adding and removing pod template annotations using kubectl