enable ldap auth
vault auth enable ldap
write ldap configuration
vault write auth/ldap/config \
#!/bin/sh -xe | |
for NAME in $(kubectl get nodes -o name | awk -F \/ '{print $2}'); do | |
cat << EOF | kubectl apply -f - | |
apiVersion: v1 | |
kind: Pod | |
metadata: | |
name: kube-support-$NAME | |
namespace: kube-system | |
spec: |
ip tunnel add ipip local ${linux_ip} remote ${mikrotik_ip} mode ipip | |
ip link set ipip up | |
ip addr add 192.168.3.1/30 dev ipip | |
iptables -t mangle -A POSTROUTING -o ipip -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu | |
iptables -t nat -A POSTROUTING -s 192.168.3.0/30 -o ${linux_output_iface} -j MASQUERADE |
enable ldap auth
vault auth enable ldap
write ldap configuration
vault write auth/ldap/config \
#!/usr/bin/env python3 | |
import sys | |
import argparse | |
import subprocess | |
import yaml | |
def main(path, name, namespace, options): | |
command = "helm template" |
setup-alpine
apk update
apk add docker
rc-update add docker boot
# add docker service to system start-upservice docker start
# manually start docker serviceapk add docker-compose
MIT LICENSE | |
Copyright 2018 Quentin Dufour | |
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: | |
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. | |
THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR TH |
### KERNEL TUNING ### | |
# Increase size of file handles and inode cache | |
fs.file-max = 2097152 | |
# Do less swapping | |
vm.swappiness = 10 | |
vm.dirty_ratio = 60 | |
vm.dirty_background_ratio = 2 |
package main | |
import ( | |
"crypto/aes" | |
"crypto/cipher" | |
"fmt" | |
"crypto/rand" | |
"io" | |
"encoding/base64" | |
"encoding/hex" |
Producer | |
Setup | |
bin/kafka-topics.sh --zookeeper esv4-hcl197.grid.linkedin.com:2181 --create --topic test-rep-one --partitions 6 --replication-factor 1 | |
bin/kafka-topics.sh --zookeeper esv4-hcl197.grid.linkedin.com:2181 --create --topic test --partitions 6 --replication-factor 3 | |
Single thread, no replication | |
bin/kafka-run-class.sh org.apache.kafka.clients.tools.ProducerPerformance test7 50000000 100 -1 acks=1 bootstrap.servers=esv4-hcl198.grid.linkedin.com:9092 buffer.memory=67108864 batch.size=8196 |