jhidalgo3

#!/bin/bash

AUTH_NAME="auth2kube"
NEW_KUBECONFIG="newkubeconfig"

echo "create a certificate request for system:admin user"
openssl req -new -newkey rsa:4096 -nodes -keyout $AUTH_NAME.key -out $AUTH_NAME.csr -subj "/CN=system:admin/O=system:masters"

echo "create signing request resource definition"

jhidalgo3

1. OpenShift cluster (one-hour sandbox): https://learn.openshift.com/playgrounds/openshift42/
2. Workshop Gitbook: https://ibm-developer.gitbook.io/openshift101
3. Workshop GitHub Repo: https://github.com/IBM/openshift101/tree/master/workshop
4. Repo for the NodeJS application: https://github.com/IBM/node-s2i-openshift
5. Background on containers: https://www.ibm.com/cloud/learn/containers
6. Background on Kubernetes: https://www.ibm.com/cloud/learn/kubernetes
7. All Kubernetes concepts under 30 minutes: https://www.youtube.com/watch?v=90kZRyPcRZw
8. Source-to-Image(S2I) Deep-dive: https://www.youtube.com/watch?v=flI6zx9wH6M
9. Slides: https://github.com/dewan-ahmed/openshift101 (Kubernetes with Red Hat OpenShift Workshop --- April 21 2020.pptx)

jhidalgo3

# show indices on this host
curl 'localhost:9200/_cat/indices?v'

# edit elasticsearch configuration file to allow remote indexing
sudo vi /etc/elasticsearch/elasticsearch.yml

## copy the line below somewhere in the file
>>>
# --- whitelist for remote indexing ---
reindex.remote.whitelist: my-remote-machine.my-domain.com:9200

jhidalgo3

reference

• https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands

cheatsheet

• https://cloud.google.com/anthos/gke/docs/on-prem/reference/cheatsheet
• https://medium.com/flant-com/kubectl-commands-and-tips-7b33de0c5476
• https://prefetch.net/blog/2019/10/16/the-beginners-guide-to-creating-kubernetes-manifests/
• https://kubernetes.io/docs/user-guide/kubectl-cheatsheet/
• https://learnk8s.io/blog/kubectl-productivity/
• https://medium.com/faun/kubectl-commands-cheatsheet-43ce8f13adfb

jhidalgo3

Getting a shell on each node

I run several K8S cluster on EKS and by default do not setup inbound SSH to the nodes. Sometimes I need to get into each node to check things or run a one-off tool.

Rather than update my terraform, rebuild the launch templates and redeploy brand new nodes, I decided to use kubernetes to access each node directly.

Alternative option

https://github.com/alexei-led/nsenter

jhidalgo3

# Use envFrom to load Secrets and ConfigMaps into environment variables

apiVersion: apps/v1beta2
kind: Deployment
metadata:
  name: mans-not-hot
  labels:
    app: mans-not-hot
spec:
  replicas: 1

jhidalgo3

AKS Cheat Sheet

Unofficial AKS Cheat Sheet

Official AKS FAQ is here

• AKS Cheat Sheet
  • Azure CLI Commands
• AKS

jhidalgo3

Helm cheatsheet

• Helm cheatsheet
  • Get started
  • Struture
  • General Usage
  • Template
• Hooks

jhidalgo3

Benchmark commands

Producer

Setup

bin/kafka-topics.sh \
  --zookeeper zookeeper.example.com:2181 \
  --create \

jhidalgo3

ssh-keygen -t rsa -b 4096 -m PEM -f jwtRS256.key
# Don't add passphrase
openssl rsa -in jwtRS256.key -pubout -outform PEM -out jwtRS256.key.pub
cat jwtRS256.key
cat jwtRS256.key.pub