Victor Yang pydevops

Getting GCP access token from a service account key

Use your service account's key JSON file to get an access token to call Google APIs.

Good for seeing how things work, including the creation of JWT token.

To create a JWT token, you can replace create-jwt-token.sh script with tools like step.

If you just want to get an access token for a service account,

MySQL Cheat Sheet

Help with SQL commands to interact with a MySQL database

MySQL Locations

Mac /usr/local/mysql/bin
Windows /Program Files/MySQL/MySQL version/bin
Xampp /xampp/mysql/bin

Add mysql to your PATH

Open vault-ui

xdg-open "http://localhost:8200/ui/"

Test Vault login via API

curl --silent -k -X GET -H "X-Vault-Token:00000000-0000-0000-0000-000000000000" 'http://127.0.0.1:8200/v1/auth/token/lookup-self'

Test Read Secret via API

Example

This is simple example showing:

Service service-alpha in service-alpha namespace
Service service-beta in service-beta namespace
Nginx Ingress controller in kube-ingress namespace
Ingress called ingress-demo inside service-alpha namespace
Ingress called ingress-demo inside service-beta namespace

Steps:

Install ingress on AKS. my demo cluster does not have rbac enabled that's why there is => --set rbac.create=false

Deploy BOSH Lite for Cloud Foundry to local space on Linux

Indeed, it seems worthwhile to write down the few steps necessary to install BOSH Lite, to deploy Cloud Foundry (cf), and to push a web console for Cloud Foundry to your local space.

As a software developer you might be interested in a complete and working installation. As a computer geek as myself you might be more kin to know the ingredients of this recipe and the way they combine with each other. In this article I have tried to serve both clients.

In this mixture a few generally available components have found their usage, by the time of writing they were:

$ uname -mrs
Linux 4.15.0-58-generic x86_64

Deploy BOSH Lite for Cloud Foundry to local space on macOS

Indeed, it seems worthwhile to write down the few steps necessary to install BOSH Lite, to deploy Cloud Foundry (cf), and to push a web console for Cloud Foundry to your local space.

As a software developer you might be interested in a complete and working installation. As a computer geek as myself you might be more kin to know the ingredients of this recipe and the way they combine with each other. In this article I have tried to serve both clients.

In this mixture a few generally available components have found their usage, by the time of writing they were:

$ sw_vers
ProductName: Mac OS X

GKE IAM Roles

On GKE, there's an interesting overlap between what the IAM roles grant you for Kubernetes clusters. In general, the roles in the tables below line up with each other, but there are some strange exceptions. In each of the tables below are the results of a diff between related IAM roles (only the container.* permissions are included in these results).

Project Owner	GKE Admin
	container.hostServiceAgent.use

Project Editor	GKE Developer

	GCP console
	gcp
	https://console.cloud.google.com


	Cloud Storage
	gcs
	https://console.cloud.google.com/storage/browser

	#cloud-config

	# Option 1 - Full installation using cURL
	package_update: true
	package_upgrade: true

	groups:
	- docker

	system_info: