It's a popular problem getting "403 Forbidden" errors from Apache. Even though it's working on the docker, it's the same but a little bit harder to investigate why it’s happened. However, most of the time, the cause of this problem is simple. Let’s take a look at some samples. First, let me show you the …

Many docker images execute its main process as root but it’s not good for security reasons and it depends on Kubernetes cluster, Pod Security Policies is applied to avoid running containers as root. So, let’s take a look at how to run Apache Web Server as a non-root user. Before trying, here is running the origin image …

One of the big advantages of using AWS is that it’s able to use reliable managed database services like RDS, Aurora. It’s also very easy to increase or decrease replicas. However sometimes, it’s necessary to create a replica externally to avoid bad effects on the production environment. I found the official document …

One day, I realized that one of my CodePipeline was failed to build the docker image. I investigated what caused the error. And then, I found out the following error message when executing docker build command. 1ERROR: failed to copy: httpReaderSeeker: failed open: unexpected status code …

I’m using ELK stack for collecting and searching logs from web servers, CDN, load balancers and so on. Let me share my cheat sheet of the Kibana query language I usually use. I’ll update this continually. Hide empty line If the logs are not well formatted, some empty line will appear and it’s bothering. So, I hide it …

Let me share an example of the CloudFormation configuration to create DynamoDB tables and an IAM user with particular policy to use it from some applications. I’ll create two tables for stage and production with TTL and also I set PAY_PER_REQUEST. So first, create the following YAML file as template.yml. …

It’s very easy to get information about how to suspend CronJob on Kubernetes clusters. It just executes the "kubectl patch" command. However, if its job is working at that time, the job will not be stopped and it’s impossible to terminate by "kubectl delete pod" command when the restartPolicy was …

There are a lot of samples of Kubernetes and Docker Compose which define public images like nginx:alpine, golang php-fpm and so on. However even though it’s easy to use, it’s not good for production environments because there's a possibility that they are not up-to-date. For example, I’m trying with one of the famous …

One of the useful and powerful function is the roll back for me. Basically, all applications on our cluster are deployed automatically by CodePipeline in AWS but if some trouble happen, rolling back to the previous version is one of our options. At that time, all I have to do is the following command. 1$ kubectl …

When running Memcached on the Kubernetes cluster, the cache data will disappear whenever the pod restarts. I know that Redis has the built-in replication and it can be able to have data on persistence disks. However, I have some reasons to run the Memecached on our Kubernetes cluster. So, I was thinking about it and I …