Landing Zone in Azure

I recently renewed my associate administrator certification, and feel it’s a good opportunity to brush up on Azure landing zone. The lame part of this is the semantics. I found many similar terms across cloud service provider (CSPs). In the context of Azure, it makes sense to clarify the terms again for Cloud Adoption Framework … Read moreLanding Zone in Azure

Computing services: from PaaS to Serverless

Silicon Valley startups in mid-2000s likely do not run their own IT operations (i.e. renting their own data centre spaces, purchasing their own rack-mounted servers). Since the launch of EC2, AWS has been renting extra computing capacity to those startups, in the IaaS model. The leased infrastructure requires maintenance work, and AWS realized that many … Read moreComputing services: from PaaS to Serverless

MinIO for S3-compatible Object Storage

I reviewed some storage technologies on Kubernetes but they are all for block and file storage. In this post, I will discuss the current available options for container workload to use object storage. I will also touch on MinIO as an object storage solution. Object storage Block and file system are more native to operating … Read moreMinIO for S3-compatible Object Storage

FSx ONTAP – Enterprise storage on AWS

Even though object storage has gained a lot of popularity, file storage is still prevalent. AWS has Elastic File System but the performance is insufficient for enterprise workload. The FSx product line has enterprise storage options and on Sept 2, 2021, AWS launched FSx ONTAP. This post is my impression about FSx ONTAP. As previously … Read moreFSx ONTAP – Enterprise storage on AWS

Istio External Authorization via OIDC

Istio service mesh allows application developers to offload non-core features to infrastructure layer. We explored authentication and authorization with Istio in a basic lab. In this post we continue to explore its capabilities with OIDC integration. This capability is made available thanks to the CUSTOM action in authorization policy, supported since the release of 1.9. … Read moreIstio External Authorization via OIDC

FluxCD: Continuous Deployment with GitOps

This post explains why I land on FluxCD GitOps for my project. Let’s star Background In the Korthweb project, I landed on Istio for the Ingress Gateway technology. I first attempted to expand the orthanc Helm Chart to bring Istio as dependency (sub-chart). One of the external chart for Istio gateway needs to be referenced … Read moreFluxCD: Continuous Deployment with GitOps