ams0

#1.16.7 works, 1.17.3 no (AKS)

#helm3

#nginx-ingress
helm repo add stable https://kubernetes-charts.storage.googleapis.com

kubectl create ns ingress

helm upgrade --install ingress stable/nginx-ingress \

ams0

kind: ServiceAccount
apiVersion: v1
metadata:
  name: datadog-agent
  namespace: datadog
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: datadog-agent

ams0

kubectl create ns ingress

#took forever to figure out
helm install nginx-ingress stable/nginx-ingress \
--namespace ingress \
--set controller.replicaCount=2 \
--set controller.service.annotations."service\.beta\.kubernetes\.io\/azure-load-balancer-internal"="true" \
--set controller.service.annotations."service\.beta\.kubernetes\.io\/azure-dns-label-name"="internal" \
--set controller.metrics.enabled=true \
--set controller.stats.enabled=true \

ams0

Every pod can do (https://github.com/cloudbooster/Azure-Instance-Metadata/blob/master/Instance-Metadata.md):

curl -H Metadata:true http://169.254.169.254/metadata/instance?api-version=2017-03-01

and get info on the node etc, even identity

az vmss identity assign -g MC_K8S_NFS_WESTEUROPE -n aks-base-11322803-vmss

curl 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https%3A%2F%2Fmanagement.azure.com%2F' -H Metadata:true -s

ams0

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: fluentd-elasticsearch
  namespace: kube-system
  labels:
    k8s-app: fluentd-logging
    version: v1
spec:
  selector:

ams0

apiVersion: elasticsearch.k8s.elastic.co/v1
kind: Elasticsearch
metadata:
  name: es
spec:
  version: 7.5.2
  nodeSets:
  - name: default
    count: 3
    volumeClaimTemplates:

ams0

Keybase proof

I hereby claim:

• I am ams0 on github.
• I am avozza (https://keybase.io/avozza) on keybase.
• I have a public key whose fingerprint is B10E C607 72E9 459D 6B5A 7D84 BEE1 E1EE 7CE6 4FD5

To claim this, I am signing this object:

ams0

Welcome to my landing page for my Gistlog; I've been experimenting with blogging platforms for a while but I think I found my Nirvana. Stay tuned!

ams0

‎‎​#/bin/bash
#AKS private clusters

#Setup VPN gw with OpenVPN


rg=k8s
clustername=private

az aks get-credentials  -g $rg -n $clustername

ams0

https://github.com/Hyperfish/vsts-build.git


vsts:
  enabled: true
  repository: microsoft/vsts-agent
  tag: "ubuntu-16.04-docker-18.06.1-ce-standard"
  replicaCount: 2
  pullPolicy: IfNotPresent
  nodeSelector: {}