ajohnstone

--- app.js      2015-04-12 16:31:48.433430728 +0100
+++ app.js      2015-04-12 16:31:48.433430728 +0100
@@ -19,6 +19,12 @@
 app.set('view engine', 'jade');
 app.set('x-powered-by', false);
 
+var sessions = require("client-sessions")
+var c_auth = require('./lib/google-oauth')
+var config_security = require('./config/security')
+app.use(sessions({ cookieName: 'session', secret: config_security.cookie_secret }))

ajohnstone

#!/usr/bin/env bash

LATEST_PREDEFINED_SECURITY_GROUP=$(aws elb describe-load-balancer-policies | grep -i PolicyName | awk -F '"' '{print $4}' | head -n1);

aws  elb describe-load-balancers | awk -F '"' '/LoadBalancerName/ {print $4}' | while read lb; do
    CURRENT_SECURITY_POLICY=$(aws elb describe-load-balancer-policies --load-balancer-name $lb | egrep ELBSecurityPolicy | awk -F'"' '/PolicyName/ {print $4}');
    if [ "${LATEST_PREDEFINED_SECURITY_GROUP}" != "${CURRENT_SECURITY_POLICY}" ]; then
        echo "Load balancer security policy out of date: '${lb}' - '${CURRENT_SECURITY_POLICY}' expected '${LATEST_PREDEFINED_SECURITY_GROUP}'";
    fi
        

ajohnstone

#!/usr/bin/env bash
 
UPDATE_ELB_POLICY=${UPDATE_ELB_POLICY:-0};
 
TMPFILE=`mktemp -t example.XXXXXXXXXX` && {
    printf "Region|Status|Current security policy|Expected security policy|ELB|Action\n" >> "${TMPFILE}";
 
    aws ec2 describe-regions |awk -F'"' '/RegionName/ {print $4}' | while read region; do
 
        LATEST_PREDEFINED_SECURITY_GROUP=$(aws --region=$region elb describe-load-balancer-policies | grep -i PolicyName | awk -F '"' '{print $4}' | head -n1 | sed 's/[ \r\n]//g');

ajohnstone

{
    "Records": [
        {
            "awsRegion": "eu-west-1",
            "eventID": "0ed50878-9f42-4e73-a361-2d19ee0a61d7",
            "eventName": "LookupEvents",
            "eventSource": "cloudtrail.amazonaws.com",
            "eventTime": "2015-11-22T12:26:22Z",
            "eventType": "AwsApiCall",
            "eventVersion": "1.04",

ajohnstone

ELBS="`aws elb describe-load-balancers`";

echo "$ELBS" | jq -c '.LoadBalancerDescriptions[] | select(.LoadBalancerName|contains("production-services"))'  | tr -d '^J' | while read line; do
    NAME=$(echo $line | jq -r '.LoadBalancerName')
    echo $NAME | grep tmp$ && continue;
    LISTENERS=$(echo $line | jq -c '.ListenerDescriptions[].Listener'| tr -d '^J' | tr '\n' ',' | sed 's/^/\[/g;s/,$/]/g');
    SCHEME=$(echo $line | jq -r '.Scheme')
    aws elb create-load-balancer --load-balancer-name "${NAME}tmp" --listeners "${LISTENERS}" --scheme "${SCHEME}" --security-groups sg-3c7df658 --subnets subnet-f598ee9d 
done;

ajohnstone

'use strict';

console.log('Loading event');

var logGroupName = 'vpc-flow-logs',
    region = 'eu-west-1';

var AWS = require('aws-sdk'),
    Promise = require('bluebird'),
    async = require('async'),

ajohnstone

import boto3

r53_client = boto3.client('route53')

hosted_zone = 'alias.photobox.com.'

def lambda_handler(event = {}, context = {}):
    aws_region = event['detail']['awsRegion']
    elb_client = boto3.client('elb', region_name=aws_region)

ajohnstone

$ kubectl exec --tty -i nginx-ingress-controller-9xccu  -- ls -alh --color
total 6.2M
drwxr-xr-x  46 root root 4.0K May  1 12:47 .
drwxr-xr-x  46 root root 4.0K May  1 12:47 ..
-rwxr-xr-x   1 root root    0 May  1 12:46 .dockerenv
-rwxr-xr-x   1 root root    0 May  1 12:46 .dockerinit
drwxr-xr-x   2 root root 4.0K Apr 28 00:50 bin
drwxr-xr-x   2 root root 4.0K Nov 27 13:59 boot
drwxr-xr-x   5 root root  380 May  1 12:46 dev
drwxr-xr-x  45 root root 4.0K May  1 12:46 etc

ajohnstone

function kubernetes::deployment::wait {
    deployment=$1
    ns=${2:-'default'};
    k_cmd="kubectl --namespace=$ns get deployments $deployment";
    while true; do
        observed=$($k_cmd -o 'jsonpath={.status.observedGeneration}');
        generated=$($k_cmd -o 'jsonpath={.metadata.Generation}');
        [ "$?" -ne 0 ] && break;
        [ "${observed}" -ge "${generated}" ] && {
            updated_replicas=$($k_cmd -o 'jsonpath={.status.updatedReplicas}');

ajohnstone

The kubernetes cluster has nodes of m3.medium and only have a emphemeral storage capacity of 4gb.

This is easily utilized, and therefore need to increase the total size.

I've allocated the following so technically the LVM group could utilise the following. However its unclear how to automatically get it to expand the volume.

export MASTER_DISK_TYPE='gp2';
export MASTER_DISK_SIZE=250