snoby

kube2iam your security partner

• Introduction
• Setup kube2iam in your cluster
• Setting up the Role in AWS
  • The Role
• Trust Relationship

mkornatz

@reboot /path/to/ha_monitor.sh >> /var/log/ha_monitor.log 2>&1

rosskukulinski

#!/bin/bash

mkdir ./cluster-dump

kubectl get --export -o=json ns | \
jq '.items[] |
    select(.metadata.name!="kube-system") |
    select(.metadata.name!="default") |
    del(.status,
        .metadata.uid,

ianhomer

# curl not smart enough for ipv6, so force ipv4
# on my mac I started to get localhost connect failure
# 
#     curl: (7) Failed to connect to localhost port 9031: Connection refused


echo '--ipv4' >> ~/.curlrc

polonskiy

# values from https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Welcome%20to%20High%20Performance%20Computing%20%28HPC%29%20Central/page/Linux%20System%20Tuning%20Recommendations
# install (root): curl -s https://gist.githubusercontent.com/polonskiy/00a71bab32360ffcb79f/raw/10-custom.conf > /etc/sysctl.d/10-custom.conf
# apply (root): sysctl -p /etc/sysctl.d/10-custom.conf

net.ipv4.neigh.default.gc_thresh1 = 30000
net.ipv4.neigh.default.gc_thresh2 = 32000
net.ipv4.neigh.default.gc_thresh3 = 32768

net.ipv6.neigh.default.gc_thresh1 = 30000
net.ipv6.neigh.default.gc_thresh2 = 32000

erez-rabih

{
  "title": "Nginx Web",
  "services": {
    "query": {
      "list": {
        "0": {
          "query": "response:[200 TO 299]",
          "alias": "OK",
          "color": "#7EB26D",
          "id": 0,

tonyseek

[Unit]
Description=supervisord - Supervisor process control system for UNIX
Documentation=http://supervisord.org
After=network.target

[Service]
Type=forking
ExecStart=/usr/bin/supervisord -c /etc/supervisord.conf
ExecReload=/usr/bin/supervisorctl reload
ExecStop=/usr/bin/supervisorctl shutdown

porjo

UPDATE: 2014/09/05

Looks like this is now fixed as of Docker v1.2.0

---

For the benefit of the interwebs I'm documenting this here as I've spent several hours pulling my hair out.

Postfix does not play well inside a docker container

plentz

# to generate your dhparam.pem file, run in the terminal
openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048

adamloving

0-mail.com
0815.ru
0clickemail.com
0wnd.net
0wnd.org
10minutemail.com
20minutemail.com
2prong.com
30minutemail.com
3d-painting.com