A look at life insurance in Japan

I’m starting a family, so I’ve been recently thinking about life insurance to ensure they won’t have financial hardship if I pass early. In this article I’ll review what I found. Please remember that I’m not a professional, and none of this is financial or tax advice. As always, do your own research.

Read more

Investing plans with the upcoming new NISA

From 2024, Japan’s tax-free investment system, NISA, is getting a major overhaul. Investments made within the system are tax-free (no dividend and capital gain tax), with the only major limitation on yearly and lifetime contribution limits, and that a third of the limits can only be used for mutual funds. This is not a retirement scheme, and there is no penalty for selling early. In this post I will review how I plan to invest from 2024.

Read more

istio-proxy 'NR filter_chain_not_found' / upstream connect error or disconnect/reset before headers. reset reason: connection termination

I deployed a vendor’s software on kubernetes and the website showed this error message:

upstream connect error or disconnect/reset before headers. reset reason: connection termination

Looking at the istio-proxy sidecar logs on the Pod I could see an error message:

kubectl logs -c istio-proxy app-ui-543875cf14-a2b33
[2023-08-09T06:06:22.268Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 0 - "-" "-" "-" "-" "-" - - 10.20.223.206:8080 10.20.221.213:42304 - -
Read more

How to get all repositories of an enterprise on GitHub Enterprise Cloud

GitHub Enterprise Cloud is an enterprise version of GitHub.com “designed for large businesses or teams who collaborate on GitHub.com”(source). There is a strong emphasis on security, which extends to strong limits on programmatic access, especially to enterprise-wide resources, so getting all organizations or all repositories of the enterprise becomes non-trivial. This guide will describe how to do just these.

Read more

Using vault-plugin-secrets-artifactory to generate short-lived Artifactory tokens with a non-admin user

How to use the HashiCorp Vault Secrets Plugin for Artifactory to create short-lived Artifactory tokens scoped to a specific user, without the need for an admin token. The main usecase for this is CI workflows (e.g. Github actions) that can authenticate to vault (e.g. Github’s workflow OIDC) and need access to Artifactory.

Read more