abuxton

# Created by https://www.toptal.com/developers/gitignore/api/ssl
# Edit at https://www.toptal.com/developers/gitignore?templates=ssl

*.csr
*.pem
*.key
*.crt

# End of https://www.toptal.com/developers/gitignore/api/ssl

abuxton

#OpenSSL Basics

##Certificate Types

• CA Certificate Authority
• CRL Certificate Revocation List
• CSR Certificate Signing Request
• DCA Deligate Certificate Authority
• DER Data Encryption Standard
• DES Data Encryption Standard
• DH Diffie-Hellmann

abuxton

• Generate a private key and a CSR(Certificate Signing Request )
• Generate a CSR from an Existing Private Key
• Generate a CSR from an Existing Certificate and Private Key
• Generating SSL Certificates
  • Generate a Self-Signed Certificate
  • Generate a Self-Signed Certificate from an Existing Private Key
  • Generate a Self-Signed Certificate from an Existing Private Key and CSR
  • View Certificates
  • View CSR Entries

• View Certificate Entries

abuxton

https://kubernetes.io/docs/tasks/debug-application-cluster/debug-running-pod/
https://kubernetes.io/docs/reference/kubectl/cheatsheet/

# examples
 kubectl -n terraform-cloud-agent get all
  kubectl -n terraform-cloud-agent logs terraform-cloud-agent-84546788bc-jfmtt -f #-f for follow
 kubectl -n terraform-cloud-agent logs terraform-cloud-agent-84546788bc-jfmtt terraform-cloud-agent
 kubectl -n terraform-cloud-agent describe pod terraform-cloud-agent-84546788bc-jfmtt

abuxton

provider "aws" {
  region = "us-east-1"
## uses default env_var from aws
#AWS_ACCESS_KEY_ID="anaccesskey"
#AWS_SECRET_ACCESS_KEY="asecretkey"
#AWS_DEFAULT_REGION="us-west-2"
}

# Additional provider configuration for west coast region; resources can
# reference this as `aws.alt`.

abuxton

Scrape Globals from Install.sh

Helper for looking for none documented flags in Replicateds Install script https://help.replicated.com/docs/native/customer-installations/installing-via-script/

Requires, egrep and grep (for no other reason than it was quick and dirty)

Usage

git clone https://gist.github.com/abuxton/c072112152c54dfcd53833053f729580 scrape_installer && cd scrape_installer

abuxton

Scrape CA to Bundle

---

sript to scrape named url and ca_bundle files https://www.digicert.com/kb/ssl-support/pem-ssl-creation.htm

usage

> git clone https://gist.github.com/abuxton/e76dfcc3c60215a200336e4262cff42a scrape-ca_bundle && cd scrape-ca_bundle
bash ./scrape-ca_bundle.sh $URL

abuxton

def get_ca_bundle():
    """Tries to find the platform ca bundle for the system (on linux systems)"""
    ca_bundles = [
        # list taken from https://golang.org/src/crypto/x509/root_linux.go
        "/etc/ssl/certs/ca-certificates.crt",                # Debian/Ubuntu/Gentoo etc.
        "/etc/pki/tls/certs/ca-bundle.crt",                  # Fedora/RHEL 6
        "/etc/ssl/ca-bundle.pem",                            # OpenSUSE
        "/etc/pki/tls/cacert.pem",                           # OpenELEC
        "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem", # CentOS/RHEL 7
    ]

abuxton

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

abuxton

#! /bin/bash +X

# later we will disable selinux
# sudo setenforce Permissive
# getenforce # just incase youy want to check selinuxmode
# lets make sure we are a clean install of docker
sudo yum remove docker docker-common docker-selinux docker-engine-selinux docker-engine docker-ce
# now install some tools dmpd(for short) ensures rhel 7 respects gpg settings in repos (issue is https://access.redhat.com/solutions/2850911) see https://access.redhat.com/discussions/5336741 for the fix
sudo yum install -y yum-utils device-mapper-persistent-data lvm2
sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo