Umberto Domenico Ciccia’s Blog

Contributing to the Open Source Giants: Jenkins & Kubernetes This past week marked a milestone in my journey as a software engineer: I submitted my very first pull requests to two of the most influential open source projects in the DevOps ecosystem — Jenkins and Kubernetes. Anyone who knows me understands that tech is more than just a passion — it’s a full-blown obsession. I live and breathe code, constantly learning, breaking things, and rebuilding better. As someone deeply interested in Cloud Engineering and DevOps, contributing to these foundational tools has always been on my personal roadmap. ...

Projects and iam what is the purpose of Google Cloud Console’s Resource Manager difference between gcloud, gsutil, bg, and cloud sdk difference between projects, folder, org what is required for an organization to be established project name vs project id vs project number difference between project id and proejct number what is project migration projects move apis resourcemanager.projects.update policy resourcemanager.projects.move policy organization administrator role organization policy administrator role viewer role browser role what is an principal differences between user account and service account what is a service account what is service account admin role “google managed vs user managed service account Predefined roles Custom roles what is the iam console what is access approvale feature gcloud auth activate-service-account gcloud iam roles copy <project id / org id> command gcloud projects get-iam-policy command ensure that your on-premises application can authenticate and connect to GCP APIs. gcloud projects list command gcloud services list –project Billing what is pricing calculator what is the billing console billing console vs pricing calculator project billing manager vs billing administrator what role can setup billing alert how to consolidate all projects under a single billing account how to consolidate projects of different organization under a single billing account Logging and monitoring Google Cloud’s Operation Suite what is a Google Cloud Monitoring Workspace purpose of Cloud Logging purpose of integration cloud monitoring with cloud logging logs: admin, data, system, user default retention period of logs what is a log sink possible log sink SIEMS logging Audit logging purpose of cloud monitoring “Metrics Infrastructure vs Application vs Custom vs External vs System” cloud monitoring alert: possible destination setup multi-project cloud monitoring what is the purpose of cloud trace what is the purpose of cloud debugger what is the purpose of cloud profiler Compute engine vm ops agent vm delete protection vm on host mainteinance what si the purpose of os login Compute OS Login Compute Os Admin Login Compute OS Login External” gcloud compute reset-windows-password • set username and password from rdp in console who manage ssh keys how to send all vm log to bigquery table fast and with low cost how to ssh in windows machine persistent disk and compute engine can have same name? Managed instance group what is a managed instance group what is a instance template what are automatic signal what is a health check what is the automatic restart what is the autohealing Gradual deployments: maxSurge, maxUnavailable Compute Storage Admin Compute Admin Compute Instance Admin Compute Viewer what are the step for increase vm’s memory what is the purpose of OS Config agent role osconfig.vulnerabilityReportViewer Gke Cluster vs Node vs Pod kubectl config use-context kubectl config view gcloud container clusters get-credentials my-cluster preemptive node gke node pools gke node labels and node selectors gke cluster autoscaler horizontal and vertical pod autoscaler what are gke auto upgrade difference between rapid, regular and stable channels what is gke autopilot what is config connector how to delete config connector difference between persistent storage local storage and filestore storage gke where to enalble cluster logging how to disable logging for a pod troubleshoot pod init with kubectl describe pod Statefulset vs Deamonset gcloud config set container/cluster gcloud container cluster create gcloud container node-pool create gcloud container cluster list" cluster ip vs nodeport vs loadbalancer Cloud run what is cloud run? can scale to zero? how to fix cold start with minimum number of instances how to fix cold start with pre warming App engine what is the purpose of app engine app engine can scale to zero? how do you set the app engine config? how many app engine app for project how to return to a previous version can you change app region after deployment? manual scaling vs automatic scaling vs basic scaling automatic scaling: min_idle_instances standard vs flexible Cloud function what is cloud function Dataflow what is the purpose of dataflow whitch services integrate with dataflow data pipelines are regiomal? dataflow == apache beam dataflow autoscale? Pub sub what is the purpose of pub/sub pub/sub == apache kafka “Common pattern pub/sub and dataflow for data ingestion:unstructured data (cloud storage),relational data for sql (bigquery),nosql (bigtable)” which type of pub/sub subscription is better for batch delivery? which type of pub/sub subscription is real time delivery? Memorystore what is the purpose of memorystore Bigtable what is the purpose of bigtable best practicies for row in bigtable: domain, timestamp, id how row are indexed in bigtable bigtable is sparse. What this means? Cloud logging and monitoring: resource.type=”bigtable_instance” use case of sensor Firestore what is the purpose of firestore and the differences with bigtable firestore cloud function trigger Bigquery what is the purpose of bigquery retrieve data on bigquery big query resource hierarcy:project, datasets, table billing model for big query storage and queries how to estimate bigquery size where do you find job error? quotas and flath price for cost control of bigquery what is the quootaExceeded error what is the INFORMATION_SCHEMA bigquery roles Looker what is the purpose of looker looker studio vs looker Cloud sql what is the purpose of cloud sql different from read replica and failover replica max storage cloud sql automatic backup: retention windows and retention time scheduled backup manual backup point in time recovery binary logging vs write ahead logging wbhat is the cloud sql proxy roles cloudsql.instances.connect Cloud spanner what is the purpose of cloud spanner roles/monitoring.viewer improve read performance of cloud spanner raccomendend cpu usage threshold for single-region raccomendend cpu usage threshold for muli-region Cloud storage normal vs nearline vs coldline vs archive cloud storage regional vs multi/regional vs dual region cloud storage what are lifecyclerules cloud storage what is object versioning gsutil versioning set on/off gs:// iam policies vs acls vs signed urls gcs what do you need for iam policies object level in gcs “storage admin storage object admin storage object creator sotrage object viewer storage legacy bucket reader” what are trigger actions on bucket what service integrate with trigger action of gcs object upload object delete object archive object metadata upload triggers can retention policies be used together wht object versioning? integration of dataflow with cloud storage integration of cloud storage with dataproc integration of cloud storage with bigquery parallel composite uploads in gsutil Dataproc what is the purpose of dataproc (spark) Others what is the purpose of marketplace use case of marketplace what is the purpose of datacatalog what is the metadata management of datacatalog what is the data discovery and search of datacatalog Registry what is the purpose of container registry storage object viewer container registry what is the purpose of artifact registry artifact registry viewer artifact registry reader roles Cloud build what is the purpose of cloud build permissiond deny error in log of cloud build Deployment manager purpose of deployment manager gcloud deployment-manager deployments create my-deployment —config config.yaml gcloud deployment-manager deployments create my-deployment —config config.yaml —preview gcloud deployment-manager deployments update —config config.yaml gcloud deployment-manager resources create gcloud deployment-manager resources update Load balancing what is the purpose of load balancing static ipv4 and ipv6 load balancing frontend load balancing ssl termination level 7 vs level 4 load balancing tcp/udp load balancing vs http(s) load balancing a vs aaaa vs cname records https vs internal https vs ssl proxy load balancing tcp proxy load balancing ssl proxy vs tcp proxy load balancing external network load balancing vs internal network load balancing vs passthrough network load balancing Identity aware what is the purpose of Cloud Identity-Aware proxy (IAP) service protected by Cloud Identity-Aware proxy auth types: Cloud Identity-Aware proxy defense from attacks Cloud Identity-Aware proxy Firewall Identity-based firewall rules how to enable logging for firewall rules gcloud compute firewall-rules update —enable-logging Vpc scope of vpc scope of subnet cloud vpn shared vpc vpc peering Private Google Access Private Service Connect

Admin Sdk gcloud cli client libraries sdk linguaggi programmazione bq bigquery gsutil cloud storage Resource hierarchy Projects: contains all resources, lowest level of org Organization: top level hierarchy, contains all folder, all projects need a cloud identity or a google woekspace account Folders: logic group of projects Google Cloud Console’s Resource Manager: console for manage folder, projects and org Projects metadata Project name: name of the project can be edited Project id ...

Introduction Passing the Google Cloud Associate Cloud Engineer (ACE) certification was a major milestone in my cloud journey. In this post, I’ll walk through the resources I used, how I structured my study plan, and key tips that helped me succeed — especially if you’re balancing this with work or studies like I was. Why ACE? The ACE certification is a great entry point for understanding Google Cloud Platform (GCP) fundamentals. It’s hands-on, focused on real-world tasks like deploying apps, managing projects, configuring networks, and handling IAM policies — all of which are essential for any cloud engineer. ...

✅ Passed SAA-C03: A Milestone in My Cloud Journey 🎉 I’m thrilled to share that I’ve officially earned the AWS Certified Solutions Architect – Associate (SAA-C03) certification! 🎉 This achievement marks an important step in my professional growth toward Cloud Computing, DevOps, and DevSecOps. 🚀 What I Learned While preparing for this certification, I deepened my understanding of several critical AWS concepts, including: Designing scalable and highly available architectures Implementing secure and cost-optimized solutions Applying AWS best practices for fault tolerance, automation, and performance These topics helped me sharpen my cloud design skills and reinforced my commitment to building sustainable, reliable systems in the cloud. ...