cdimascio

# start the mongo shell, then set to the appropriate db and create a user
# in this case, create a user with dbadmin, and read write access roles
use my_db
db.createUser( {  user: "my_user", pwd: "MyP@ssw0rd", roles: [ { role: "readWrite", db: "my_db"}, { role: "dbAdmin", db: "my_db" } ] })

cdimascio

mongodump --host your-hostname --port your-port --ssl --sslAllowInvalidCertificates --db=your-db-name --archive=./ep-ao-dump -u admin -p your-password --authenticationDatabase admin

cdimascio

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /tmp/tls.key -out /tmp/tls.crt -subj "/CN=example.domain.com"
kubectl create secret tls example --key /tmp/tls.key --cert /tmp/tls.crt # example is the ingress secret key

cdimascio

# Replace mongodb.log with your mongodb log
cat mongodb.log | grep "syslog" | cut -d " " -f 6 | sort | uniq -c | sort -rn

cdimascio

1. Kong default config https://github.com/Kong/kong/blob/master/kong.conf.default


2. Then modify
pg_host =            # The PostgreSQL host to connect to.
pg_port = 60335                  # The port to connect to.
pg_user = kong                  # The username to authenticate if required.
pg_password =                  # The password to authenticate if required.
pg_database = kong              # The database name to connect to.

cdimascio

ngrok http -bind-tls=true localhost:3000

cdimascio

#!/bin/bash

./bin/elasticsearch-keystore create
echo 'XXX' | ./bin/elasticsearch-keystore add --stdin s3.client.default.access_key
echo 'XXX' | ./bin/elasticsearch-keystore add --stdin s3.client.default.secret_key

cdimascio

timeout 300 bash -c 'while [[ "$(curl -s -o /dev/null -w ''%{http_code}'' localhost:9000)" != "200" ]]; do sleep 5; done' || false

cdimascio

ip addr
ss -pna | grep LISTEN

cdimascio

#!/bin/bash

role_arn="<your_role_arn>"
mfa_arn="<your_mfa_arn>"
session_id=`date +%s000`
# export AWS_DEFAULT_REGION="us-east-2"
echo "MFA:"

read token_code
cmd=$(aws sts assume-role --role-arn "${role_arn}" --role-session-name "${session_id}"  --serial-number "${mfa_arn}" --token-code "${token_code}" --query '[Credentials.AccessKeyId,Credentials.SecretAccessKey,Credentials.SessionToken]' --output text)