In Google Cloud Platform (GCP), service account keys are used to provide Google Cloud API access to applications running outside of Google Cloud. The problem with the service account keys is that they do not come with an expiry date, and They can become a security risk if not managed…

Are your kubernetes workloads DNS records management creating too much manual work and a lot of downtimes due to frequent endpoint changes? If yes, then external DNS is for you. ExternalDNS is a kubernetes add-on which you can deploy in any kubernetes cluster and seamlessly manage the entire lifecycle of…

Are you seeing an intermediate increased response time with missing logs for requests in the GCP HTTP(S) load balancer? It could be due to the default or custom retry policy. The retried requests only generate one log entry for the final response. ( If the request is retried once and is successful, then you will see only one entry in cloud logging with the response time as 60 seconds)

Great article, You have documented almost all the issues we faced in VPC service control. VPC service control is a great security feature but we need to carefully design and implement it from the beginning otherwise it is hard to manage.