k8spractice Ingress Rules

This is part 1 of a 4-part series on deploying an application to Azure Kubernetes. Here's a full list of this series: k8spractice Overviewk8spractice PostgreSQL Service Deploymentk8spractice Servicesk8spractice Ingress Rules (this post) Deploy Nginx Ingress Controller To help with exposing our web services we need to setup an ingress controller. For k8spractice I'm using NGINX … Continue reading k8spractice Ingress Rules →

k8spractice Overview

This is part 4 of a 4-part series on deploying an application to Azure Kubernetes. Here's a full list of this series: k8spractice Overview (this post)k8spractice PostgreSQL Service Deploymentk8spractice Servicesk8spractice Ingress Rules I started k8spractice after completing the Kubernetes Fundamentals course as part of preparing for the Certified Kubernetes Administrator exam. Aside from practicing what … Continue reading k8spractice Overview →

k8spractice Services

This is part 3 of a 4-part series on deploying an application to Azure Kubernetes. Here's a full list of this series: k8spractice Overviewk8spractice PostgreSQL Service Deploymentk8spractice Services (this post)k8spractice Ingress Rules Now that we have a running PostgreSQL server with the necessary database, tables, and roles configured it's time to deploy k8spractice web app … Continue reading k8spractice Services →

k8spractice PostgreSQL Service Deployment

This is part 2 of a 4-part series on deploying an application to Azure Kubernetes. Here's a full list of this series: k8spractice Overviewk8spractice PostgreSQL Service Deployment (this post)k8spractice Servicesk8spractice Ingress Rules Motivation First, I want to point out that Azure provides a PostgreSQL service (see here for info) that you should prefer in a … Continue reading k8spractice PostgreSQL Service Deployment →

Return Proper Exit Code, One Must

While working on functional tests for tlslookieloo I discovered that it's not returning an error exit code when it exits because of a configuration issue. This oversight would make it difficult to use tlslookieloo as part of automated testing.

tlslookieloo 0.1.0 Released

After a few months of working on it on the side tlslookieloo 0.1.0 is finally out the door. I'm releasing it as an alpha version; because, I worked on it alone for the most part. Keane Wolter (@d43m0n3y3, LinkedIn) helped out by reviewing the documentation and smoke tested it on a different platform. Why build … Continue reading tlslookieloo 0.1.0 Released →

Mocking C APIs in testing

I started working on tlslookieloo after failing to find a utility that I can use to basically MITM a client-server application I was testing at work. I looked at sslsniff and Cisco Talos' Mutiny Fuzzing Framework and Decept Proxy to see if it provides what I need, or modify it for my own needs. In … Continue reading Mocking C APIs in testing →

Keeping Upstream and Working git Repos In Sync

This tutorial is intended for git beginners who need to sync up their working repo with changes made to the upstream repo. Cloning repos within collaboration platforms such as gitlab will not be part of this tutorial. Setup For the purposes of this project, we will use https://github.com/w3c-social/activipy as the upstream repository. Create a clone of the project, and … Continue reading Keeping Upstream and Working git Repos In Sync →

A Broader Issue Exposed by CVE-2018-14665

CVE-2018-144665 refers to "An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges." Here's the link to Matthew Hickey's tweet that shows the exploit. I'm not … Continue reading A Broader Issue Exposed by CVE-2018-14665 →