This is a quick-and-dirty guide to setting up a Raspberry Pi as a "router on a stick" to PrivateInternetAccess VPN.
Install Raspbian Jessie (2016-05-27-raspbian-jessie.img) to your Pi's sdcard.
Use the Raspberry Pi Configuration tool or sudo raspi-config to:
| # Install QEMU OSX port with ARM support | |
| sudo port install qemu +target_arm | |
| export QEMU=$(which qemu-system-arm) | |
| # Dowload kernel and export location | |
| curl -OL \ | |
| https://github.com/dhruvvyas90/qemu-rpi-kernel/blob/master/kernel-qemu-4.1.7-jessie | |
| export RPI_KERNEL=./kernel-qemu-4.1.7-jessie | |
| # Download filesystem and export location |
| # Build the GRPC Java server which is used for interop testing. | |
| # Interface defined here | |
| # https://github.com/grpc/grpc-java/blob/master/interop-testing/src/main/proto/io/grpc/testing/integration/test.proto | |
| ./gradlew :grpc-interop-testing:installDist | |
| # Run it with TLS turned on so ALPN is enabled. Uses a dummy cert | |
| ./interop-testing/build/install/grpc-interop-testing/bin/test-server --port=8080 --use_tls=true | |
| # Run the awesome nghttp2 as a proxy in front of it. | |
| # See https://nghttp2.org/documentation/package_README.html#building-from-git |
Currently, there is an explosion of tools that aim to manage secrets for automated, cloud native infrastructure management. Daniel Somerfield did some work classifying the various approaches, but (as far as I know) no one has made a recent effort to summarize the various tools.
This is an attempt to give a quick overview of what can be found out there. The list is alphabetical. There will be tools that are missing, and some of the facts might be wrong--I welcome your corrections. For the purpose, I can be reached via @maxvt on Twitter, or just leave me a comment here.
There is a companion feature matrix of various tools. Comments are welcome in the same manner.
| // some updates for https://rsmitty.github.io/Kubernetes-Events/ | |
| // and http://blog.ctaggart.com/2016/09/accessing-kubernetes-api-on-google.html | |
| import ( | |
| "encoding/base64" | |
| "fmt" | |
| "log" | |
| "net/http" | |
| "time" |
kops cluster config
kubeAPIServer:
authorizationMode: RBAC
authorizationRbacSuperUser: admin
oidcCAFile: /srv/kubernetes/ca.crt
oidcClientID: example
oidcGroupsClaim: groups
oidcIssuerURL: https://dex.example.com
oidcUsernameClaim: email
If you are getting this in gdb on macOS while trying to run a program:
Unable to find Mach task port for process-id 57573: (os/kern) failure (0x5).
(please check gdb is codesigned - see taskgated(8))gdbc)
AWS CNI plugin is now merged with kops: kubernetes/kops#3997. This gist explains how to build kops, create a Kubernetes cluster using correct --networking option, and then test it.
export GOPATH=`pwd`
mkdir src/k8s.io; cd src/k8s.io
git clone [email protected]:kubernetes/kops.git
cd kops
export S3_BUCKET_NAME=<some bucket you own>
| package main | |
| import ( | |
| "context" | |
| "flag" | |
| "fmt" | |
| "log" | |
| "net/http" | |
| "os" | |
| "os/signal" |