↓Skip to main content

Bank of Anthos: Resolving Cross-Project Workload Identity Telemetry (PR #2423)

172 words·1 min· loading · loading · ·
Vijay Kumar Singh
Open Source kubernetes GKE Java Spring-Boot GCP Workload-Identity Observability
Vijay Kumar Singh
Author
Vijay Kumar Singh
Certified Kubernetes Administrator (CKA) & Google Cloud ACE | Cloud, DevOps & Site Reliability Engineer specializing in Kubernetes (GKE/AKS/k3s), Terraform, ArgoCD GitOps, and Enterprise Observability.
Table of Contents

Project Overview
#

Contributed core telemetry fixes to Bank of Anthos, a Kubernetes-native microservices reference application developed by Google Cloud to demonstrate enterprise architecture patterns on GKE, Istio, and Cloud Observability.

Hands-On Experience
#

  • Refactored projectId() resolution logic across 3 Java microservices (balancereader, ledgerwriter, transactionhistory) to evaluate GOOGLE_CLOUD_PROJECT env vars prior to GCE Metadata Server fallback
  • Synchronized trace exporters with metric overrides by updating application.properties configuration schemas
  • Wrote unit tests in JUnit 5 (BalanceReaderApplicationTest.java) ensuring complete test branch coverage for configuration overrides
  • Containerized Java applications using Google Jib Maven plugin without needing local Docker daemons
  • Validated deployments on live Google Kubernetes Engine (GKE) clusters, resolving service-account image pull permission errors

Tech Stack
#

  • Container Orchestration: Google Kubernetes Engine (GKE)
  • Cloud Platform: Google Cloud Platform (GCP)
  • Security & IAM: Workload Identity, GCP IAM
  • Languages & Frameworks: Java 17, Spring Boot, JUnit 5
  • Containerization & Build: Google Jib, Maven
  • Observability: Cloud Monitoring / Cloud Trace

Project Links #

GoogleCloudPlatform/bank-of-anthos

Retail banking sample application showcasing Kubernetes and Google Cloud

Java
1445
863

Pull Request #2423

Reply by Email