jlucaspains / blog-v2

lpains.net blog

I'm Pains, yes that's my last name and I build software stuff. Oh, I also sometimes blog about the stuff I build at blog.lpains.net. I've been coding for way too long now so a day without code is just not a good day. How can it be?

I live in the USA, was born in Brazil and miss living in Australia. Confusing? Yes.

I code anything, really. But there is nothing better than designing an enterprise scale architecture and see the many pieces working nicely together and evolving. I've designed multi-billion dollar software systems and that was fun but I lost nearly all my hair in the process.

What else do I do? I go home and code some more. However, I got some completely unrelated passions. For instance, I am:

• Kung Fu instructor. I studied under Grand Master Lopes in Kung Fu Taisan.
• Taekwondo Black Belt
• Snowboarder. Turn up the music and hit the slopes.
• Volleyball player. I really wanted to play professional, but apparently you need to be really good and ridiculous tall for that...

Some GitHub stats:

Blog posts

1. Jul 5, 2024 - GO REST Template Major Changes
2. May 31, 2024 - Sharp Cooking v1.11.0 released!
3. May 27, 2024 - Running Agile projects in GitHub Projects - 2024 review
4. May 5, 2024 - Introducing documorph
5. Apr 7, 2024 - Streamlining App Role Setup with Azure Entra: A Step-by-Step Guide

blog-v2's Issues

posts/2021-10-10-migrating-from-jekyll-to-hugo/

Migrating from jekyll to Hugo | LPains.net

Jekyll is great, but I don't love how hard it is to set it up in windows. For the most part I wrote blog posts blind. I've looked for alternatives and settled on Hugo. This is post is about everything that happened during the Jekyll to Hugo conversion.

https://lpains.net/posts/2021-10-10-migrating-from-jekyll-to-hugo/

You're not working on this actively enough

Come on, dude... 🤣

Adding roles to Azure Entra app registration and user groups

Script:

[CmdletBinding()] param ()

$RolesToAddFile = "./NewAppRole.json"
$AppNames = @(
    "OrdersApi",
    "PeopleApi"
)
$Roles = @{
    "Administrators" = "administrator"
    "Developers" = "developers"
    "Users" = "users"
}
$Envs = @(
    @("Dev", "dev"),
    @("QA", "qa")#,
    #@("Prod", "prod"))
)
foreach ($AppName in $AppNames) {
    Write-Host "Processing $($AppName)..."
    foreach ($Env in $Envs) {
        $FullAppName = "$($AppName)-$($Env[0])"
        Write-Host "Processing $FullAppName..."
        $appObjectId = (az ad app list --display-name $FullAppName --query "[0].id" -o tsv)
        $appSPObjectId = $(az ad sp list --display-name $FullAppName --query '[0].id' -o tsv)
        
        $jsonData = Get-Content -Path $RolesToAddFile | ConvertFrom-Json

        Write-Verbose "App Object Id: $appObjectId"
        Write-Verbose "App Service Principal Object Id: $appSPObjectId"

        Write-Host "Creating unique list of roles to update..."
        $existingAppRegRolesJson = (az ad app list --display-name $FullAppName --query "[0].appRoles")
        Write-Verbose ($existingAppRegRolesJson | ConvertTo-Json)
        $existingAppRegRoles = $existingAppRegRolesJson | ConvertFrom-Json
        $mergedUniqueRoles = $existingAppRegRoles + $jsonData | Sort-Object -Property Id -Unique

        $appRoles = $mergedUniqueRoles | ConvertTo-Json
        Write-Verbose $appRoles

        $appRoles > "./TempRoles.json"

        Write-Host "Adding app registration roles..."
        az ad app update --id $appObjectId --app-roles "./TempRoles.json"

        $existingRoles = (az rest -m GET -u "https://graph.microsoft.com/v1.0/servicePrincipals/$appSPObjectId/appRoleAssignedTo") | ConvertFrom-Json

        Write-Verbose $existingRoles

        foreach ($role in $jsonData) {
            if ($null -eq $Roles[$role.Value]) {
                Write-Host "Role $($role.Value) is not defined in the script. Skipping..."
                continue;
            }

            $existingRole = $existingRoles.value | Where-Object { $_.appRoleId -eq $role.id }

            if ($null -ne $existingRole) {
                Write-Verbose $existingRole
                Write-Host "Binding already exist between $($role.Value) and group prefix-$($Env[1])-$($Roles[$role.Value])..."
                continue;
            }

            Write-Host "Binding $($role.Value) to group prefix-$($Env[1])-$($Roles[$role.Value])..."
            $RoleGuid = $role.id
            $groupId = (az ad group list --display-name "prefix-$($Env[1])-$($Roles[$role.Value])" --query "[0].id" -o tsv)

            $postBody = "{\""principalId\"": \""$groupId\"", \""resourceId\"": \""$appSPObjectId\"", \""appRoleId\"": \""$RoleGuid\""}"

            Write-Verbose $postBody

            az rest -m POST -u "https://graph.microsoft.com/v1.0/servicePrincipals/$appSPObjectId/appRoleAssignments" -b $postBody --headers "Content-Type=application/json"
        }
    }
    
    Write-Host "Finished procesing $($AppName)"
}

Roles.json:

[
    {
        "allowedMemberTypes": [
            "User"
        ],
        "description": "Can use all app features including write capabilities",
        "displayName": "Administrator",
        "id": "25909a57-ce45-49d3-b1f3-4b6f3d03d15a",
        "isEnabled": true,
        "origin": "Application",
        "value": "Administrator"
    },
    {
        "allowedMemberTypes": [
            "User"
        ],
        "description": "Can configure aspects the application but generally not make administrative changes",
        "displayName": "Developer",
        "id": "07470a96-716a-4688-92fd-6fb452f81202",
        "isEnabled": true,
        "origin": "Application",
        "value": "Developer"
    },
    {
        "allowedMemberTypes": [
            "User"
        ],
        "description": "Can view data and perform user level actions but not make administrative changes",
        "displayName": "User",
        "id": "3e87b7be-a276-4e85-add7-974e0d29fed8",
        "isEnabled": true,
        "origin": "Application",
        "value": "User"
    }
]

posts/2018-07-7-install-root-ca-in-android/

Install Root CA cert in Android emulator | Pains.net

You if you need to access intranet TLS applications from an Android emulator, you will need to install your CA certs. This is how you can do it.

https://lpains.net/posts/2018-07-7-install-root-ca-in-android/

Bulk import work items in Azure DevOps with CSV

Dirty notes:

1. Cannot save State (Depends on state)
2. Cannot s ave Parent (Cannot insert nor update)
3. Cannot add Links (Can "easily" do after the import in backlog and bulk add link)
4. Cannot add Attachments

Sample csv:
Id,Work Item Type,Title,State,Description,Priority,Effort,Area Path,Iteration Path,Tags
5015,Product Backlog Item,"{Feature name}: Discovery",Sprint Committed,Long description goes here,1,5,MyArea,MyArea\Sprint 1,"MVP,UX"

Setup CosmosDB as a container in Windows

docker run `
    --publish 8081:8081 `
    --publish 10250-10255:10250-10255 `
    --interactive `
    --tty `
    -e AZURE_COSMOS_EMULATOR_IP_ADDRESS_OVERRIDE=127.0.0.1 `
    mcr.microsoft.com/cosmosdb/linux/azure-cosmos-emulator:latest

Download the cert, install using certutil:

certutil -addstore "Root" "emulatorcert.pem"

posts/2021-09-23-env-per-pr-no-containers/

Environment per PR the old fashioned way | Pains.net

If you cannot or will not use containers but still want to have environment per PR, you can still do it with VMs and IIS. I will show you how.

http://localhost:1313/posts/2021-09-23-env-per-pr-no-containers/