cdxker cdxker

Tailscale is OIDC compliant now!!!

We self-hosted headscale, but wanted to move to their cloud product for higher reliablity.

The way that tailscale authenticates for an email like [email protected] is:

Makes a call to https://trieve.ai/.well-known/webfinger?resource=acct:[email protected]. The response should look like this

most annoying thing about eks,,, you gotta build everything yourself

AWS_REGION=us-west-1
CLUSTER_NAME=my-cluster
AWS_ACCOUNT_ID="$(aws sts get-caller-identity --query "Account" --output text)"

## Creating IAM Roles
eksctl create iamserviceaccount \
  --region="${AWS_REGION}" \
  --name="ebs-csi-controller-sa" \

Using raw vms are great for quickly self-hosting many products. Self hosting sentry is 50 services managed in docker-compose. The docs's arent very clear, but there is a way to use s3 to host the filestorage. Updating the config was too hard for me to figure out and now its all being logged to storage on the vm itself. Our selfhosted Sentry has died many times because it ran out of storage. I didn't realize that before. When you run out of storage, you are no longer able to even ssh into the machine to diagnose the problem. Anyways... this is how we do it on gcp.

From the gcloud cli run.

Run this, with a different tag name in hn_frontend/frontend

docker build -t trieve/hn-ui:21 . && docker push trieve/hn-ui:21
gcloud container clusters get-credentials --region us-west1-a hackernews
kubectl edit -n hackernews deployments/hackernews

You will be in a vim session and just edit the tag here

Take for example this simplified pseudo code for hackernews ingest.

import requests

def get_post(id):
  
  return requests.get(f"https://hacker-news.firebaseio.com/v0/item/{id}.json?print=pretty").json()

	<!DOCTYPE html>
	<html lang="en">

	<head>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<title>cdxker</title>
	<script src="https://cdn.tailwindcss.com"></script>

	<style>

	BACKEND=$(kubectl get ing <ingress-name> -o json \| jq -j '.metadata.annotations."ingress.kubernetes.io/backends"' \| jq -j 'keys[0]')
	gcloud compute backend-services update $BACKEND --enable-cdn