Frederic Leger fredleger

How to register Rancher managed Kubernetes clusters in Argo CD

Registering Rancher managed clusters in Argo CD doesn't work out of the box unless the Authorized Cluster Endpoint is used. Many users will prefer an integration of Argo CD via the central Rancher authentication proxy (which shares the network endpoint of the Rancher API/GUI). So let's find out why registering clusters via Rancher auth proxy fails and how to make it work.

Hint: If you are just looking for the solution scroll to the bottom of this page.

Why do i get an error when running `argocd cluster add`?

Service Account tokens and the Rancher authentication proxy

WORK IN PROGRESS

Docker on Android

Setup:

Samsung Galaxy Tab S5e SM-T720
Android Pie on Linux 4.9.112 (not rooted)
Termux

OVH ingress LB

This gist describe how to deploy a K8S LB at OVH and preserve source IP

Howto

1. Install the NGINX Ingress Controller

kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/master/deploy/static/mandatory.yaml

kubectl multi-version brews

Applicability

The instructions below apply to older versions of Homebrew which still provide switch capability.

For current Homebrew, you'll likely need to keep Versions around, and build locally. Here's my versions repository https://github.com/rdump/homebrew-versions

MacPorts is now keeping versioned installations available as well, by default.

Deploying Kubernetes 1.11 on DigitalOcean with Rancher 2.0

This guide will help you add support for DigitalOcean volumes and load balancers to a freshly deployed Kubernetes 1.11 cluster. It assumes you already have a cluster deployed through Rancher, have kubectl set up, and helm installed.

Set up helm

kubectl apply -f helm-rbac.yaml
helm init --service-account tiller

helm-rbac.yaml:

	apiVersion: v1
	kind: ConfigMap
	metadata:
	name: maintenance-page
	data:
	maintenance.html: \|-
	<!--HTML GOES HERE-->
	<!doctype html>
	<title>Site Maintenance</title>
	<link rel="stylesheet" href="maintenance.css">

	#!/bin/bash
	INPUT_FILE=*.log
	OUTPUT_FILE=policy.json

	# get statements
	# group all permissions by group into one statement block
	# eg. ec2:CreateInstance and ec2:DeleteInstance will be in the same statement
	STATEMENTS=$(grep "DEBUG: Request" $INPUT_FILE \|awk '{print $(NF-1)}' \| awk -F "/" '{print $1}' \| sort \| uniq )
	LAST_STATEMENT=$(echo $STATEMENTS \| awk '{print $NF}')

	# Manually remove finalizers

	kubectl edit -n cattle-system secret tls-rancher
	kubectl patch secret tls-rancher -p '{"metadata":{"finalizers":[]}}' --type='merge' -n cattle-system

	kubectl patch namespace cattle-system -p '{"metadata":{"finalizers":[]}}' --type='merge' -n cattle-system
	kubectl delete namespace cattle-system --grace-period=0 --force

	kubectl patch namespace cattle-global-data -p '{"metadata":{"finalizers":[]}}' --type='merge' -n cattle-system
	kubectl delete namespace cattle-global-data --grace-period=0 --force

	127.0.0.1 us.rdx2.lgtvsdp.com
	127.0.0.1 us.info.lgsmartad.com
	127.0.0.1 us.ibs.lgappstv.com
	127.0.0.1 us.lgtvsdp.com
	127.0.0.1 ad.lgappstv.com
	127.0.0.1 smartshare.lgtvsdp.com
	127.0.0.1 ibis.lgappstv.com

	# added after fork
	# from https://www.reddit.com/r/pihole/comments/6qmpv6/blacklists_for_lg_webos_tvs/ and others

	#!/usr/bin/env bash

	# Gets all tags for a given docker image.

	# Examples:

	# retrieve all tags for a single library
	# docker-tags "library/redis" \| jq --raw-output '.[]'

	# retrieve all tags for multiple libraries