nikhilsuvarna

Intro to JSON?

• A JSON string contains either an array of values, or an object (an associative array of name/value pairs).

• An array is surrounded by square brackets, [ and ], and contains a comma-separated list of values.

• An object is surrounded by curly brackets, { and }, and contains a comma-separated list of name/value pairs.

• A name/value pair consists of a field name (in double quotes), followed by a colon (:), followed by the field value.

• A value in an array or object can be:

  • A number (integer or floating point)

nikhilsuvarna

Application Instance Identity and Intro to Envoy in PCF

(the content below is heavily borrowed from Eric Malm's blog post on application identity and Aaron Hurley's CFSummit talk on upcoming changes to routing tier in CF)

• Application Instance Identity and Intro to Envoy in PCF
  • Timeline :
    • PCF 1.12 - Enabled Application Instance Identity
• PCF 2.0 - Secure Service-Instance Credential Delivery

nikhilsuvarna

1. Establish the process-guid for the app :

 cf curl /v2/apps/$(cf app <app_name> --guid)| jq -r '.metadata.guid + "-" + .entity.version'
b06b2901-2093-4be4-9f37-f7788d04ce8c-ff93f0e2-285f-4f18-a6fc-806802f3dde9

2. Find the hosts where the app instances are running

cf curl v2/apps/$(cf app healthwatch-api --guid)/stats | grep host

nikhilsuvarna

Copy /System/Library/OpenSSL/openssl.cnf to a new file.

Add the following at the end:

[ req ]
req_extensions = v3_req

[ v3_req ]
# Extensions to add to a certificate request

nikhilsuvarna

1. Generate keys for your github user email id :

ssh-keygen -t rsa -b 4096 -C "[email protected]"

2. When prompted for the file to save the key, create a new file, in this case id_rsa_pivotal

Enter file in which to save the key (/Users/nsuvarna/.ssh/id_rsa):

nikhilsuvarna

for i in `ls -1 logs`
do
# for j in `$i | awk -F "." '{print $1"."$2}'`
#  do
 tar --strip-components=2 -xvf logs/$i consul_agent/consul_agent.stdout.log
 mv consul_agent.stdout.log consul_agent_`echo $i | awk -F "." '{print $1"."$2}'`
 #echo $i |awk -F "." '{print $1"."$2}'
done

nikhilsuvarna

lemur-release/jobs
lemur-release/config
lemur-release/config/final.yml
lemur-release/config/blobs.yml
lemur-release/src
lemur-release/packages

nikhilsuvarna

v1 vs v2 https://bosh.io/docs/cli-v2-diff.html

bosh2 is strict about SSL certs. If a director has been initialized using bosh1 cli, connecting to the director via bosh2 cli will throw the folowing error :

ubuntu@bosh-stemcell:~$ bosh2 alias-env dev -e 10.193.72.9 
Fetching info:
  Performing request GET 'https://10.193.72.9:25555/info':
    Performing GET request:

nikhilsuvarna

get the app guid, query CC to construct the process guid from app-guid+app-version

[11:22]  
query the BBS API for the actual lrps for that process guid (and index, if you care)

[11:22]  
which will get you the cell id and instance guid for each actual lrp

[11:23]  
and then go to that cell and get into the container for that instance guid

nikhilsuvarna

{"timestamp":"1482488862.619482040","source":"rep","message":"rep.request.auction-fetch-state.auction-state.providing","log_level":1,"data":{"method":"GET","request":"/state","session":"151.1.1"}}
{"timestamp":"1482488862.619518518","source":"rep","message":"rep.request.auction-fetch-state.auction-state.containerstore-list.starting","log_level":1,"data":{"method":"GET","request":"/state","session":"151.1.1.1"}}
{"timestamp":"1482488862.619594812","source":"rep","message":"rep.request.auction-fetch-state.auction-state.containerstore-list.complete","log_level":1,"data":{"method":"GET","request":"/state","session":"151.1.1.1"}}
{"timestamp":"1482488862.619611740","source":"rep","message":"rep.request.auction-fetch-state.auction-state.volume-drivers.list-drivers.start","log_level":1,"data":{"method":"GET","request":"/state","session":"151.1.1.3.1"}}
{"timestamp":"1482488862.619623423","source":"rep","message":"rep.request.auction-fetch-state.auction-state.volume-drivers.list-drivers.end","log_level":1,"data":{"me