Jeremy Pruitt jeremypruitt

Shamir Secret Holder

A Shamir Secret holder is responsible for being available to unseal vault when starting it up.

Requirements

Vault Binary
GPG Key

Responsibilities

DevOps Engineer Interview Questions

GETTING STARTED GUIDE FOR THE KUBERNETES OPERATOR FRAMEWORK

The getting started guide for the kubernetes operator framework has a few issues that prevent a smooth intial experience with the SDK. This doc represents a successful effort to follow the getting started guide while incorporating fixes from pending pull requests.

!! GOPATH must be set

!! Please make sure you have a an account on Quay.io for the next step, 
   or substitute your preferred container registry. On the registry,
   create a new public image repository named “memcached-operator”.

KUBERNETES VAULT CLIENT POC WITH LOCAL VAULT AND MINIKUBE

This is a PoC of the kubernetes-vault-client using an instance of Vault running in -dev mode and local instance of minikube. The kubernetes-vault-client tool is run in an init container and uses Vault kubernetes auth to pull secrets from Vault and dump then into a volume that can be mounted in any container in a pod, preferably as an emptyDir with media: Memory. It is meant to be run on a laptop and is used to demonstrate the various configurations necessary to get it working.

Intro to API Server

The entire Kubernetes architecture is API driven, so the API server is the center of a Kubernetes cluster. All operations go through the API server, like accesssing data in etcd, accepting kubectl and controller requests, and more.

Get a list of API endpoints in given Kube cluster

$ curl -k https://127.0.0.1:6443/apis

Curl with cert auth

Reminders

Remember to log all the things!

Metasploit - spool /home//.msf3/logs/console.log
Save contents from each terminal!
Linux - script myoutput.txt # Type exit to stop

Setup

Techniques

Port scanning
Service enumeration
Wordpress user enumeration
IMAP commands
Python coding
HTTP Proxy: Intercept, modify, repeat

Tools

nmap

	---- BEGIN SSH2 PUBLIC KEY ----
	Comment: "rsa-key-20170806"
	AAAAB3NzaC1yc2EAAAABJQAAAQEAqP/LmpNx7SNvvhVnDgjtJuP6GRYgpwE/xLgj
	mh+nnsHAOY9WH9FeUuKkA7vZrpa+p420CFdOSaPUS3qZHD7lxqBmVy/T04gWSL92
	k0dpvqM/M0zZ1IH1PcMPCN6+V/ruQnScSS0iV6CaRhaS+WPJLqtqiAPEAGmgVQxB
	WHr/d5af+4TMpe47DA8sK+SiX4a312odcsSVUtKRsI6DJzgHnNMSG4xG3aewbBEe
	dnJW6ddAxIvTh19kJU5H4aYLE0VA0mXq9To/FvL3I0i0XWEkLOELfQ/KuGXiKP3w
	KAVpJejYY9HwSaIdV2cT7rsuED+0uKhUOu8XTFtoXlJrMsW0wQ==
	---- END SSH2 PUBLIC KEY ----

	#!/usr/bin/env bash
	set -e
	set -o pipefail

	# FORMATTING ###################################################################

	DEFAULT=`tput sgr0`
	BOLD=`tput bold`
	RED=`tput setaf 1`
	GREEN=`tput setaf 2`