Browsed by
Tag: cloud

WebLogic Major Upgrade Without Downtime

WebLogic Major Upgrade Without Downtime

A trip down memory lane… A long time ago, in 2015, we were running an Oracle WebLogic 11G cluster, which needed to be upgraded to 12C. However, Oracle did only support rolling upgrades for minor versions, not for major versions… In the image above, you see a simplified layout of our cluster (there were more servers and instances in the real setup). Traffic comes in from the left, via a load-balancer (and some apache’s). It was spread across the managed…

Read More Read More

Micro-services Architecture with Oauth2 and JWT – Part 4 – Oauth2/Scopes

Micro-services Architecture with Oauth2 and JWT – Part 4 – Oauth2/Scopes

The last number of years I have been working in the area of migrating from legacy monolith (web) applications to a (micro) service oriented architecture (in my role of Java / DevOps / Infrastructure engineer). As this is too big of a subject to put in a single blog post, I will split this in 5 parts; (1) Overview, (2) Gateway, (3) Identity Provider, (4) Oauth2/Scopes, (5) Migrating from Legacy. Introduction Recap: In the previous articles we have seen where…

Read More Read More

Send new created Jira ticket info to MS-Teams Channels

Send new created Jira ticket info to MS-Teams Channels

Summary We are using (self hosted) Jira (the Atlassian Issue Tracker / Scrum / Kanban Board) at the office. And we wanted to receive a chat notification for each newly created ticket, to be received in Microsoft Teams Channels. Teams is a collaboration messenger tool like Slack or RocketChat. Jira can send new ticket/story creations using a web-hook to external tools. The web-hook sends a Jira specific JSON payload, no configuration options possible. The project you are looking at, consists…

Read More Read More

Fluent Bit Elastic Search Data Type Filter

Fluent Bit Elastic Search Data Type Filter

Summary I have created a Fluent Bit LUA Filter to force proper data types to be send to our Elastic Search (log collector) Database, to prevent Elastic from rejecting the log records. GitHub Project: https://github.com/atkaper/fluent-bit-lua-filter-elastic-data-types Environment We are running a bunch of (on premise) Kubernetes clusters, all having around 20 nodes, with many deployments on it. The deployments use different technologies; Java, Kotlin, Node.js, GO, Python, C, … and quite some standard open source applications. Most of them have been…

Read More Read More

K8S Tiller/Helm History Cleanup

K8S Tiller/Helm History Cleanup

GitHub Project: https://github.com/atkaper/k8s-tiller-history-cleanup Introduction In our on premise Kubernetes cluster, we use Helm for a big part of our application / micro-services deployments. Helm uses an engine called Tiller (which is a deployment in the cluster). It executes the installs / updates / deletes, and it stores the results of deployments in the system as config maps. While migrating our applications to a new K8S cluster, we saw that we forgot to set a limit on the history which is…

Read More Read More

Docker Log Plugin

Docker Log Plugin

A quest I took at 2 November, making my own docker log plugin. Suitable to share with everyone. At the office, we are mixing docker-only hosts, with on-premise kubernetes clusters. For example our databases do run better / more stable on plain docker hosts, with no kubernetes intervention. That’s mainly due to the sub-optimal distributed storage in our on-premise cluster. But… we do want to send all of the logs from both kubernetes and docker hosts to a central logging…

Read More Read More

K8S Check Certificate Chains

K8S Check Certificate Chains

Github Project: https://github.com/atkaper/k8s-check-certificate-chains Ingress/nginx (running in Kubernetes / K8S) does not like silly certificates, therefore I created two scripts to find wrong ones. The script get-all-k8s-certificates.sh retrieves all certificates from kubernetes, and the check-certificate-chains.sh script verifies the chain’s are complete and in proper ordering. Added md5 hash check on crt and key file to verify the two belong to each other. The check-certificate-chains.sh just reports on WRONG certificates. Run with “-v” option to also show OK’s. Thijs.