Workload Identity Federation enables workloads running in Google Kubernetes Engine (GKE) to access Google Cloud APIs. It requires that the cluster is configured accordingly, and can be achieved in two ways: by directly using the Kubernetes service ac...
The pre-commit framework is an awesome utility to enforce coding standards and run sanity checks, such as preventing large files from being committed. It's not just convenient to run locally on the developers' machines. By using pre-commit to run che...
A core feature of Amazon EKS is the ability to assume an AWS IAM role with a Kubernetes service account. This requires that the service account is annotated with the IAM role's ARN and a trust policy attached to the IAM role that contains the service...
AWS Step Functions state machines are defined in the JSON-based Amazon States Language (ASL). However, writing and maintaining ASL by hand is cumbersome. Therefore, most developers will prefer using the AWS Step Functions Workflow Studio in the AWS c...
Usually, we call the Kubernetes API from within a Pod using kubectl or by exposing the API via kubectl proxy in a sidecar and making unauthenticated local HTTP requests to it. The Pulumi Kubernetes provider requires a kubeconfig file, which is either...
In a typical multi-tier test setup, we run different test suites across several GitHub Actions jobs, each of which produces a coverage report. For example, we might start with unit tests running locally on the GitHub Actions runner and subsequently m...
