Building better platforms with Azure, GitHub, Terraform and AI
Have you ever pushed code to production only to lie awake wondering, “Did I just deploy a vulnerability?” You’re not alone. But what if I told you that you can automate security scanning right within your GitHub workflows? I am going to be creating a few upcoming blog posts on various tools that can be … Read more
A quick blog post to detail how to fix error Resource Not Accessible by Integration within your GitHub Actions. I came across this initially when trying to upload a .sarf report as part of Trivy scanning. The error In my case, I attempted to upload a SARIF report. This file helps with code scanning. I … Read more
OpenID Connect (OIDC) authentication for GitHub Actions and Azure deployments is a real game-changer in the world of security. It significantly enhances security when deploying to your Azure environment. In this blog post, I’ll explain why to use OIDC, walk through setting up an Azure AD application with federated credentials using Azure CLI, and demonstrate … Read more
Using Azure Logic Apps within your environment and wanting to get the current date and time within the Logic App? In this blog post I will show how you can do this with using the function utcNow() What is utcnow() ? utcNow(), as I mentioned above, is a function in Azure Logic Apps. It is … Read more
Writing a lot of Terraform modules and trying to maintain accurate and up-to-date Terraform documentation becomes increasingly challenging. This is where terraform-docs along with GitHub actions can assist you, they automate the generation of Terraform documentation. In this blog post, I will show you how to use terraform-docs with GitHub Actions. This setup will automatically … Read more
I have written a lot of Terraform over the years and learned the importance of testing Terraform configurations. Testing is often overlooked but is crucial for ensuring the reliability and correctness of your infrastructure code. In this blog post, I will show you how to write Terraform Tests along with an Azure example. Why Test … Read more
Time-consuming meeting recordings and extracting key points can be a thing of the past. This Python-based solution uses Azure Open AI to automate the summarisation process for Teams meeting transcripts. The tool efficiently breaks down meetings into five key areas. These areas include Overview, Concerns, and Current Model. It also covers Questions/Thoughts to Address and … Read more
Terraform preconditions enforce specific criteria before managing resources, enhancing reliability and reducing deployment risks. By integrating preconditions within the lifecycle block, users can enforce checks, preventing potential errors. Benefits include improved consistency, error prevention, compliance, and documentation. Simplifying preconditions, using variables, and thoroughly testing are key practices. Ultimately, preconditions bolster infrastructure integrity while maintaining manageable configurations.
Terraform variable validation, introduced in version 0.13, enables developers to enforce specific criteria for variable inputs, thus preventing errors and misconfigurations in resources. This includes defining conditions and error messages for various variables. Best practices emphasise clear messaging and the use of Terraform functions to improve reliability and maintainability in configurations.
The post discusses an Azure Kubernetes Service (AKS) user’s experience with preview API retirements and shares a script to check current API versions in use. AKS preview APIs last about a year, and the script functionality includes querying the activity log for specific API versions. It generates a report detailing API usage, enabling proactive management to avoid deprecated versions and ensuring timely updates in Azure environments.