| # Generated by iptables-save v1.4.21 on Tue Feb 21 01:00:01 2017 | |
| *nat | |
| :PREROUTING ACCEPT [0:0] | |
| :INPUT ACCEPT [0:0] | |
| :OUTPUT ACCEPT [0:0] | |
| :POSTROUTING ACCEPT [0:0] | |
| :DOCKER - [0:0] | |
| :KUBE-HOSTPORTS - [0:0] | |
| :KUBE-MARK-DROP - [0:0] | |
| :KUBE-MARK-MASQ - [0:0] |
| { | |
| "signing": { | |
| "default": { | |
| "expiry": "43800h" | |
| }, | |
| "profiles": { | |
| "server": { | |
| "expiry": "43800h", | |
| "usages": [ | |
| "signing", |
| package main | |
| import ( | |
| "context" | |
| "crypto/rand" | |
| "crypto/rsa" | |
| "crypto/tls" | |
| "crypto/x509" | |
| "crypto/x509/pkix" | |
| "encoding/pem" |
| { | |
| "signing": { | |
| "default": { | |
| "expiry": "43800h" | |
| }, | |
| "profiles": { | |
| "server": { | |
| "expiry": "43800h", | |
| "usages": [ | |
| "signing", |
| # HELP vault_barrier_get Metric autogenerated by statsd_exporter. | |
| # TYPE vault_barrier_get summary | |
| vault_barrier_get{quantile="0.5"} 1.169558 | |
| vault_barrier_get{quantile="0.9"} 1.648282 | |
| vault_barrier_get{quantile="0.99"} 2.089528 | |
| vault_barrier_get_sum 34.97571799999999 | |
| vault_barrier_get_count 29 | |
| # HELP vault_barrier_list Metric autogenerated by statsd_exporter. | |
| # TYPE vault_barrier_list summary | |
| vault_barrier_list{quantile="0.5"} 1.135013 |
Assumption:
Go to directory of etcd-operator/example/tls/certs/: https://github.com/coreos/etcd-operator/tree/master/example/tls/certs
create secret:
kubectl create secret generic etcd-peer-tls --from-file=peer-ca.crt --from-file=peer.crt --from-file=peer.key
kubectl create secret generic etcd-client-tls --from-file=etcd-client-ca.crt --from-file=etcd-client.crt --from-file=etcd-client.key
| package main | |
| import ( | |
| "fmt" | |
| "github.com/aliyun/alibaba-cloud-sdk-go/sdk" | |
| "github.com/aliyun/alibaba-cloud-sdk-go/sdk/requests" | |
| ) | |
| var ( | |
| templateBody = ``` |
| kind: Application | |
| spec: | |
| componnets: | |
| - ... # 微服务组件 | |
| # policies are applied first and only once unless changed | |
| policies: | |
| - type: security | |
| properties: | |
| rbac: ... |
| package main | |
| import ( | |
| "dagger.io/dagger" | |
| "universe.dagger.io/alpine" | |
| "universe.dagger.io/bash" | |
| "universe.dagger.io/docker" | |
| ) | |
| dagger.#Plan & { |
| #!/usr/bin/env bash | |
| path=$1 | |
| # sync dir append '/' at the end, e.g. my-code/ | |
| rsync -avzhe ssh --progress \ | |
| --exclude ".git" \ | |
| $path user@remote:$path |