Frank Kloeker eumel8

Howto migrate RKE downstream cluster from one seed cluster to another with another URL

Assume you have 2 Rancher instances with the same Rancher version and the same underlying Kubernetes Infrastructur
Install rancher-backup on both Rancher instances
Perform a backup on the source instance. Best way to use S3 storage for easy migration. For this create a Secret with the S3 credentials
Restore the backup on the destination instance. EXTRA WARNINGS:
- This step will import all clusters, nodes, users, tokens.
- Rancher settings will be overwritten from the source instance, incl. admin user, 3th party auth like Keycloak, UI layout

If restore task isn't completed, it will retry in a loop. You may observe restart loops of Rancher PODs which is caused by the restore process. Look at the cattle-resource-system namespace in rancher-backup POD logs. In any case the restore should stopped or with kubectl delete restore deleted

how to sign 3th party binaries on MacOS with Gon

Gon is a tool to manage code signing without Apples Xcode app withing the Apple Developer portal. There are alreay a good explanation in the project repo. To verify here the step by step procedure

Download and install the program with brew:

$ brew tap mitchellh/gon
$ brew install mitchellh/gon/gon

How to make trust with Yubikey

Yubikey 5 series with PIV (https://www.yubico.com/product/yubikey-5-nfc)
Ubuntu 18.04
Install Software

Goto https://console.cloud.google.com and create a new project
Goto project and create an API service
Choose Youtube API Data v3 from the inventory marketplace
Create API key credentials
Create OAuth 2.0 Client-ID (type other)
Remark: For access public API data only the API key is require, for read/write access to your account you need the OAuth 2.0 thing
Browse to the OAuth 2.0 project url: https://accounts.google.com/o/oauth2/auth?client_id=[my_client_id]&redirect_uri=urn:ietf:wg:oauth:2.0:oob&scope=https://www.googleapis.com/auth/youtube&response_type=code
You'll get a code for your Youtube account. Together with the OAuth 2.0 Client-ID and Client-Secret you can make a curl request to get a token
curl --request POST --data "code=[my_code]&client_id=[my_client_id]&client_secret=[my_client_secret]&redirect_uri=urn:ietf:wg:oauth:2.0:oob&grant_type=authorization_code" https://accounts.google.com/o/oauth2/token
Put the API Key and the OAuth Token into the keys.yml. The token is valid for one

	package main

	// get a token with project scope "eu-de"

	import (
	"fmt"

	gophercloud "github.com/opentelekomcloud/gophertelekomcloud"
	"github.com/opentelekomcloud/gophertelekomcloud/openstack"
	"github.com/opentelekomcloud/gophertelekomcloud/openstack/identity/v3/tokens"

	package daemonset

	import (
	"context"
	"testing"

	apps "k8s.io/api/apps/v1"
	core "k8s.io/api/core/v1"
	meta "k8s.io/apimachinery/pkg/apis/meta/v1"
	"k8s.io/client-go/kubernetes/fake"

	package pod

	import (
	"context"
	"testing"

	core "k8s.io/api/core/v1"
	meta "k8s.io/apimachinery/pkg/apis/meta/v1"
	"k8s.io/client-go/kubernetes/fake"
	)

	---
	apiVersion: networking.k8s.io/v1beta1
	kind: Ingress
	metadata:
	name: {{ $.Values.Name }}
	annotations:
	kubernetes.io/ingress.class: nginx
	external-dns.alpha.kubernetes.io/target: {{ $.Values.ClusterName }}
	nginx.ingress.kubernetes.io/rewrite-target: /
	nginx.ingress.kubernetes.io/affinity: cookie

	```plantuml

	title Train QA

	actor "Traveller" as traveller
	participant "DB station realtime API" as db
	participant "Data collector" as trains2
	participant "Google Spreadsheet" as google
	participant "Tableau data viz" as tableau

	<html>
	<head>
	<meta charset="utf-8">
	</head>
	<body>
	<!-- CSS Code -->
	<style type="text/css" scoped>
	.GeneratedMarquee {
	font-family:Arial, sans-serif;
	font-size:2em;