Blog
Validating an external IBM MQ TLS integration from a GCP Cloud Run Job
2362 words · 12 min readEnd-to-end procedure for proving network reachability, TLS handshake, channel authentication, and queue authorization against a remote IBM MQ qmgr from a Cloud Run Job using pymqi and a CMS keystore.
Replacing an L7 header-routing nginx proxy with a GCP Application Load Balancer
2321 words · 12 min readMigrating a Kubernetes-deployed nginx proxy that dispatches HTTPS traffic by header value to a GCP global external Application Load Balancer using Internet NEGs and URL-map header matches.
Importing a GCP Cloud Run service into Terraform state
draft721 words · 4 min readProcedure for importing a manually deployed Cloud Run service into Terraform state. Covers the IAM binding when the runtime service account differs from the Terraform actor, lifecycle ignore_changes for CI-managed image and env vars, and the multi-container template behavior of gcloud run services update.