Category: IT Security

Hello! Today, we’re going to dive deep into the invisible hero responsible for the stability of Backstage operations: Deterministic Installs in Yarn Monorepos. 🚀 When operating a Backstage project, multiple developers often work simultaneously, or builds are performed in CI/CD pipelines. Understand the core mechanism that prevents situations like “It works on my machine, but…

Hello! Today, we’re going to dive deep into one of the most crucial pieces of metadata underpinning Backstage’s software catalog: the backstage.io/source-location annotation. 🚀 When using Backstage, you’ll often encounter this setting when clicking the “View Source” button on a service’s detail page or when linking documentation. Let’s fully understand what magic this single line…

Hello everyone! Today, we’re going to take an in-depth look at the “common-library” role, which plays a very important part in Backstage’s package management system. 🚀 As a Backstage project grows, utility functions and UI components that are commonly used across multiple plugins naturally emerge. The “common-library” is used to prevent code duplication and manage…

Hello! Today, we will delve into a core topic that allows you to achieve both security and flexibility when operating Backstage: ‘Recommended Practices for Overriding Defaults and Managing Secrets.’ 🛡️ As Backstage is a large-scale developer portal, there’s a high probability that sensitive API keys or tokens might be included in configuration files. We’ll outline…

Hello everyone! Today, we’re going to dive deep into a core component that enables one of Backstage’s powerful features, Kubernetes integration: the Kubernetes backend plugin. 🚀 In a cloud-native environment, when operating a developer portal (Backstage), it’s crucial to see at a glance how your services are running on a Kubernetes cluster (Pod status, deployment…

Looking at Kubernetes’ Admission Webhook and Kyverno’s policy management structure, some resources cannot be validated or modified by Kyverno policies. The prime examples are ValidatingWebhookConfiguration and MutatingWebhookConfiguration. This article deeply explores the reasons for this phenomenon, why such a design is necessary, and what practical alternatives can be considered. https://kyverno.io/docs/introduction/how-kyverno-works/ 🧩 First, what is an…

“This post is a Korean translation and summary of the Quick Start content from the official Kyverno documentation, intended to aid understanding.” > https://kyverno.io/blog/2023/11/16/kyverno-1.11-released/ Introduction to Kyverno Policies and Rule Types This section provides a guide to quickly install and run Kyverno, and to demonstrate some of Kyverno’s core features. Guides focusing on Validation, Mutation,…

Hello! Today, we’ll delve into one of the most crucial topics when operating Backstage in a containerized environment (Docker, Kubernetes, etc.): ‘Environment-specific Configuration Injection Methods.’ 🚀 When deploying a service from a development environment to a production environment, have you ever wanted to keep the source code as is, but completely change only the database…

Google’s AI CLI flow for developers is changing. Previously, it was common to use Gemini CLI by running the gemini command in the terminal. However, Google has recently been transitioning the Gemini CLI for individual users and the Gemini Code Assist IDE extension to focus on Antigravity CLI. Now, to use Google’s AI CLI in…

Hello! When operating GitOps in a Kubernetes environment, there’s a challenge you’re bound to face: controlling “who can access which project, and to what extent?” Today, we will delve into the structure of Argo CD’s authorization engine, argocd-rbac-cm, and explore in detail the method for issuing CI-specific tokens based on AppProject, which can be considered…