badri

Ship-Safe Code — 5 Silent Failures (Audit Commands)

The runnable companion to the Zero to SaaS 7-day Ship-Safe Code series.

Five files, one per silent failure. Run each from your project root.

#	File	What it checks
1	failure-1-secrets.sh	Committed secrets in git history + tracked code
2	failure-2-auth.sh	Auth bug patterns + manual test snippets

badri

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "EC2Full",
      "Effect": "Allow",
      "Action": [
        "ec2:RunInstances",
        "ec2:TerminateInstances",
        "ec2:StartInstances",

badri

FROM python:3.12-slim

# Set working directory
WORKDIR /app

# Set environment variables
ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1

# Install system dependencies

badri

services:
  db:
    image: postgres:16
    restart: always
    environment:
      POSTGRES_USER: dev
      POSTGRES_PASSWORD: dev
      POSTGRES_DB: app
    ports:
      - "5432:5432"

badri

// tracing.js
const { NodeSDK } = require('@opentelemetry/sdk-node');
const { OTLPTraceExporter } = require('@opentelemetry/exporter-trace-otlp-http');
const { getNodeAutoInstrumentations } = require('@opentelemetry/auto-instrumentations-node');

// Replace these with your actual values
const otlpEndpoint = 'https://otlp-gateway-prod-us-central-0.grafana.net/otlp';
const instanceId = 'YOUR_INSTANCE_ID';
const apiToken = 'YOUR_API_TOKEN';

badri

const { SESClient, SendEmailCommand } = require("@aws-sdk/client-ses");

const ses = new SESClient({
  region: "ap-south-1",
  credentials: {
    accessKeyId: process.env.AWS_ACCESS_KEY_ID,
    secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
  },
});

badri

Topic: first_topic	TopicId: D9zBaINRQ6O3QUjnan4_0A	PartitionCount: 3	ReplicationFactor: 2	Configs: min.insync.replicas=2
	Topic: first_topic	Partition: 0	Leader: 2	Replicas: 2,1	Isr: 2,1	Offline:
	Topic: first_topic	Partition: 1	Leader: 1	Replicas: 1,2	Isr: 1,2	Offline:
	Topic: first_topic	Partition: 2	Leader: 2	Replicas: 2,1	Isr: 2,1	Offline:

badri

Create a web service using your preferred programming language and framework (e.g., Python with Flask).

Implement two endpoints:

1. /orders (POST): Accepts JSON payload representing a product order and publishes it to the Kafka topic "product_orders".
2. /orders (GET): Retrieves all product orders from the PostgreSQL database and returns them as JSON.

Implement a DB sink connector which reads "product_orders" topic and writes the data to a table called orders in Postgres DB.

Write a Kafka consumer which consumes from "product_orders" and writes to a respective city topic. For ex, in the below order payload:

badri

version: '3'

networks:
  demo-net:
    name: demo-net
    driver: bridge

services:

  postgres:

badri

apiVersion: v1
kind: Pod
metadata:
  name: postgresql-client
  namespace: postgresql-client
  labels:
    app: postgresql-client
  annotations:
    cluster-autoscaler.kubernetes.io/safe-to-evict: "true"    
spec: