How to setup a self-signed SSL certificate for a Cloud Foundry application on IBM Cloud

This blog post is about, how to setup a self-signed SSL certificate for an encrypted (https) communication with a Cloud Foundry application on IBM Cloud, if you are at a Hackathon. Keep in mind you don’t need to implement additional code inside of your Cloud Foundry application in this scenario. All is managed by IBM Cloud and you don’t need to modify your source-code. You need to have installed OpenSSL on your local machine and this example shows the setup on MacOS and Safari. You also need a Pay-As-You-Go or Trial-Account for the IBM Cloud to setup custom domain and ssl.

Motivation

In my example situation I want to access my Node-RED instance with a custom domain and a self-signed SSL certificate.

Normally you would create a certificate signing request to get public key certificate to encrypt the communication with https provided by a certificate authority for example “Let’s encrypt”, as you see simplified in the image below.

A certificate from a certificate authority can be costly, if you aren’t able to use a free certificate authority like for example “Let’s encrypt” supported by your domain provider. In my case the domain provider GoDaddy doesn’t support to request certificates directly from “Let’s encrypt”.

One easy solution to avoid additional costs is to create a self-signed certificate. This solution works well, if you only want to test and develop during a Hackathon and you have a very small count of users and you can give them the guidance to use the self-signed SSL certificate in their browser.
As you can see you need to upload self-signed SSL certificate in this simplified picture.

Overview of the needed steps

Here is an overview of the major needed steps:

  1. Create a custom domain and map it with the CNAME (this will result in the fully qualified domain name)
  2. Register the created custom domain in your Cloud Foundry org and region
  3. Create a route with your custom domain for your Cloud Foundry app
  4. Create a self-signed SSL certificate for custom domain
  5. Upload the self-signed certificate to IBM Cloud
  6. Invoke URL in a browser on a machine
  7. Copy the self-signed certificate from your browser to your computer
  8. Import the self-signed SSL certificate to the keychain of your operating-system on your local machine
  9. Restart the browser and see now your communication is encrypted
Continue reading

How to setup a custom Domain for a Node-RED instance on IBM Cloud

This blog post is a short cheat sheet, how easy it is to configure/setup a custom domain for a Node-RED example instance on IBM Cloud for a Cloud Foundry App. To do this you need a Pay-As-You-Go or Trial-Account for the IBM Cloud.

The image below shows my Node-RED Node.js instance in IBM Cloud and the invocation in a browser.

Cloud Foundry App InstanceNode-RED invocation in a browser
Continue reading

Getting started with continuous integration and delivery (CI/CD) using Tekton and an Open Toolchain on IBM Cloud (Part 1/3)

In this blog post I want to highlight that I created a 10 min detailed overview YouTube video, which is the first video of a video series related to the hands-on tutorial “Develop a Kubernetes app by using Tekton delivery pipelines“. In that tutorial video series, we setup an easy consumable Tekton pipeline in a toolchain using developer tools for think, code and deploy in context of continuous delivery. We deploy a containerized web application to a free Kubernetes Cluster on IBM Cloud.

Continue reading

IBM Cloud Container Registry is Deprecating Container Builds

In this blog post I want to point out that I noticed that the IBM Cloud Container Registry is deprecating container builds.

If you don’t know the IBM Cloud Container Registry here are some useful features:

  • Threat insights – It provides advanced capabilities like vulnerability scanning, deployment policy enforcement, and comprehensive risk assessment and prioritization”
  • Integration – It ‘s the IBM Cloud preferred image registry; pre-integrated with the IBM Cloud Kubernetes Service for the DevOps workflow using IBM Open Toolchain or existing a CI/CD toolset.”
  • Security – It’s integrated with Identity and Access Manager and Resource Groups to provide fine-grained access controls to users within the IBM Cloud account.”
Continue reading

Get your Java microservice up and running

In this blog post I want to highlight the news, that our tutorial Get your Java Microservice up and running is now available on IBM Developer.

After you complete this workshop, you will:

  • Understand the Java implementation of a cloud-native RESTful Java microservice built on the open technologies Eclipse MicroProfile and Open Liberty
  • Be able to describe how to effectively build and run a microservice on a local machine in a container
  • Understands the steps needed to deploy a single microservice to Kubernetes and on the IBM Cloud Kubernetes service

I hope this was useful for you and let’s see what’s next?

Greetings,

Thomas

#Java, #Microprofile, #Kubernetes, #Docker, #IBMCloud

Updated: How to prepare for a Hackathon with IBM Cloud?

In this new blog post I want to address a common situation for developers: You want to participate in a hackathon, and you plan to use IBM Cloud, but you have never used it before. How to prepare? So I created a newer version of my older blog post: How to prepare for a Hackathon with IBM Cloud 

IBM Cloud provides a huge amount of different services, runtimes, and more. From my point of view, one of the most important objectives in a hackathon is:

Run your developed application instance live! To do this you need a runtime 😉

Let’s start with the basics

Let’s get a basic understanding of what does IBM Cloud provide and where to find how to’s?

The IBM Cloud catalog gives you an entry point to find Cloud Services, Software and Consulting, which are organized by different categories like containers, storage and more as you see in the gif below.

IBM Cloud has a very good entry point for new users with the getting started page. The page is structured in five major steps.

ibmcloud-starting-point
  1. Explore IBM Cloud
  2. See cloud essentials
  3. Start building
  4. Helpful resources
  5. Get community support

The gif below shows the navigation going through the different steps on the getting started page.

ibmcloud-get-starter

Free online trainings

Continue reading

Get your Java Microservice up and running!

In this blog post I want to highlight the hands-on workshop “Get your Java Microservice up and running!“, now available in GitBook . That workshop demonstrates how to build a Microservice with Java and how to deploy the Microservice Kubernetes on the IBM Cloud. The Microservice in this workshop is kept as simple as possible, so that it can be used as a starting point for other Microservices. The Microservice has been developed with Java EE, OpenLiberty and Eclipse MicroProfile.

The workshop is a part of the open source project Cloud Native Starter, which contains sample code that demonstrates how to get started with cloud-native applications and Microservice based architectures.
The Workshop has a related badge called Cloud Native Starter Level 1. This badge is available at Acclaim. In the related quiz you can verify your knowledge you achieved in the workshop.

The gif below show some major steps in the hands-on workshop. You will develop locally a Java Microservice and deploy that Microservice to a free Kubernetes Cluster on IBM Cloud.

microservice docker java kubernetes deployment

I hope this was useful for you and let’s see what’s next?

Greetings,

Thomas

#microprofile, #java, #ibmcloud, #openliberty, #microservices, #kubernetes