Skip to content

Instantly share code, notes, and snippets.

View mrballcb's full-sized avatar

Todd Lyons mrballcb

View GitHub Profile
@mrballcb
mrballcb / gist:c6ae28c7ef4754c36da6bd81055a8550
Created January 19, 2018 05:47
kops rolling-update --interactive, answered always yes
~/repos/kubernetes-kops tlyons(⎈ |iad1:default) (test_1_8_0_interactive_cli) $ $KOPS rolling-update cluster sjc1.cloud.net --interactive --yes
NAME STATUS NEEDUPDATE READY MIN MAX NODES
master-us-west-1a-1 Ready 0 1 1 1 1
master-us-west-1a-2 Ready 0 1 1 1 1
master-us-west-1b-1 Ready 0 1 1 1 1
nodes NeedsUpdate 2 0 2 20 2
I0118 21:30:59.601800 41879 instancegroups.go:160] Draining the node: "ip-10-1-61-41.us-west-1.compute.internal".
node "ip-10-1-61-41.us-west-1.compute.internal" cordoned
node "ip-10-1-61-41.us-west-1.compute.internal" cordoned
WARNING: Ignoring DaemonSet-managed pods: canal-p1xkr; Deleting pods not managed by ReplicationController, ReplicaSet, Job, DaemonSet or StatefulSet: kube-proxy-ip-10-1-61-41.us-west-1.compute.internal; Deleting pods with local storage: monitoring-grafana-1831171644-ndpkv, monitoring-influxdb-3570645011-0gk5p
@mrballcb
mrballcb / output_rabbitmq.conf
Last active December 14, 2017 16:43
Multiple rabbitmq logstash output pipeline
output {
rabbitmq {
exchange => "${RABBITMQ_EXCHANGE}"
exchange_type => "direct"
key => "%{[driftwood][rabbitmq][key]}"
host => "${RABBITMQ_BOOTSTRAP_SERVER_BLUE}"
user => "${logstash_user}"
password => "${logstash_pass}"
}
# Backup stack if blue goes down
@mrballcb
mrballcb / es-curator-manual.yml
Last active November 20, 2017 15:19
ElasticSearch manual instantiation of container that runs index deletion cronjob
# The curator config file and index deletion action config are a configmap that gets mounted here.
# Test with:
# curator --config /etc/curator/curator.yml /etc/curator/delete_indices.yml --dry-run
# Execute with:
# curator --config /etc/curator/curator.yml /etc/curator/delete_indices.yml
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: es-curator-manual
@mrballcb
mrballcb / gist:d21656bcc070c01edcbb6da8d5bb8d3a
Last active July 7, 2017 20:14
Diff in output of kubectl 1.5.3 versus 1.7.0
kubectl 1.5.3 output:
ccbonnell-lt:~ $ kubectl get nodes -o wide
NAME STATUS AGE EXTERNAL-IP
ip-172-16-123-78.ec2.internal Ready,master 71d OBFUSCATED.211
ip-172-16-32-202.ec2.internal Ready,master 35d OBFUSCATED.222
ip-172-16-35-25.ec2.internal Ready 1d OBFUSCATED.42
ip-172-16-67-58.ec2.internal Ready 71d OBFUSCATED.178
ip-172-16-94-137.ec2.internal Ready,master 71d OBFUSCATED.29
@mrballcb
mrballcb / setup_winrm.txt
Last active October 18, 2018 13:35 — forked from mitchellh/setup_winrm.txt
Packer 0.12.3 example for Windows Server 2016 on AWS
<powershell>
write-output "Running User Data Script"
write-host "(host) Running User Data Script"
Set-ExecutionPolicy Unrestricted -Scope LocalMachine -Force -ErrorAction Ignore
# Don't set this before Set-ExecutionPolicy as it throws an error
$ErrorActionPreference = "stop"
# Remove HTTP listener
@mrballcb
mrballcb / gist:3d352dd6cc26b6718ddd
Created September 30, 2014 12:44
Exim skip spf from specific IPs
deny message = SPF BLOCK Sender $sender_host_address is not allowed to send mail from $sender_address_domain ($header_from:): $spf_smtp_comment
!authenticated = *
!hosts = +relay_from_hosts : net-lsearch;/etc/exim/spf_skip_ips
sender_domains = !lsearch;/etc/exim/spf_exclude_domains
spf = fail
@mrballcb
mrballcb / gist:fa7cbf416ee0a5c7fc0d
Created August 21, 2014 16:04
Summary of outbound encryption support by remote smtp domains
Outbound Summary: 177147 emails, 7438 networks, 6627 unique domains
Top 20 encrypted traffic domains:
1. google.com 62440
2. yahoodns.net 25148
3. hotmail.com 14132
4. aol.com 7577
5. comcast.net 4758
6. outlook.com 4543
7. psmtp.com 1703
@mrballcb
mrballcb / gist:443f0b07a01d013c8dd3
Last active August 29, 2015 14:05
Linking Hellcat on Ubuntu 12.04.something, gets a bit further
Linking on Ubuntu 12.04 with g++-4.8, this is what I did
cd ~/projects/hellcat # a git clone
./get_libraries.sh
mkdir build && cd build
cmake -D CMAKE_CXX_COMPILER:TXT=g++-4.8 ..
1. The order of components on the link commandline is important. On the final link, I get tons of undefined reference to uv_* functions. To fix that, change the order of the archives so that libhaywire.a is before libuv.a.
2. I then get tons of undefined reference to clock_* functions, which should be provided by librt. To fix, add "-lrt" to the linker, but only **after** the archives. (You already had it in there, but it didn't get used because it was before the archives on the CLI...I think due to the gcc/g++ commandline ordering requirements, you should move your archives to before the -l commands because IIRC gcc/g++ builds a list of symbols/functions that it should be aware of when it gets to the libs to link in, and it ignores all lib functions it doesn't explicitly need...or something like that). i.e this is what I cha
@mrballcb
mrballcb / gist:93dc046a442b818b1660
Last active August 29, 2015 14:05
Possible authenticator construction
${if and
{
{!eq{$1}{}}
{!eq{$2}{}}
{crypteq
{$2}
{${extract
{2}
{:}
{${lookup{$1}nis{passwd.byname}{$value}{*:*}}}
@mrballcb
mrballcb / gist:c096f1a27207a6b58530
Created August 11, 2014 14:40
SpamAssassin local.cf used with Exim
# Adjust headers to indicate which machine in the bank it came through
add_header spam Flag _YESNOCAPS_
add_header all Status _YESNO_, hits=_HITS_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_
add_header all Report _REPORT_
# Adjust report for borderline spams to be vendor neutral
# Modified template. Keep it under 78 columns (inside the the dots below).
# ........................................................................
clear_report_template
report Content analysis details: (_HITS_ points, _REQD_ required)