jbeda

1. Show kubectl proxy

Things are now locked down by default. Try to upload kubeconfig. Talk certs vs. tokens. Skip login... nothing works.

2. Let's get UI working!

Option 1: Give UI SA with admin. Don't do this!

brycemcd

Ansible Cheatsheet

A smattering of frequently used commands I use. This will help prevent excessive load on Google's systems.

NOTE: most examples are copied and pasted from the documentation. Attribution belongs to the contributors of the documentation!

Template

http://docs.ansible.com/ansible/latest/template_module.html

PatrickLang

This is my attempt to capture steps needed to deploy:

1. Azure Container Service (AKS) - currently only supporting Linux
2. Virtual-Kubelet - to create a Windows "node"
3. Azure Open Service Broker - make it easy to create Azure SQL databases and other services
4. Helm to deploy a Windows app with web app in container, backend in Azure SQL

Prerequisites

jaytaylor

status = error
dest = err
name = PopertiesConfig

property.logDir = /var/log/elasticsearch

appender.console.type = Console
appender.console.name = STDOUT
appender.console.layout.type = PatternLayout
appender.console.layout.pattern = [%d{ISO8601}][%-5p][%-25c{1.}] %marker%m%n

jbeda

• Terminology
  • Registry -- the API/service you talk to to push/pull images
  • Repository -- a set of relate container images that share the same name but different tags.
  • Container Image -- a single image that can be used to launch a container. Has multiple "names"
  • Container Image Layer -- implementation detail used to speed up image push/pull/launch
• Docker Hub
  • One personal registry per user. There are "organizations" that are shared registries. Similar to github model.
• ACR
  • Registry is called foo.azurecr.io
• 2 authentication mechanisms:

richarddli

apiVersion: v1
kind: ServiceAccount
metadata:
  name: prometheus
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole
metadata:
  name: prometheus
rules:

koobitor

Cloud SDK

gcloud init
gcloud auth list
gcloud config list
gcloud info
gcloud help
gcloud help compute instances create

mrmichalis

OpenSSL Cheatsheet

Generating Certificates

Generate RSA Private Key + CSR
openssl req -out newkey.csr -new -newkey rsa:[bits] -nodes -keyout priv.key

Generate Self Signed Certificate + Priv Key
openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:[bits] -keyout priv.key -out cert.crt

boris

Vault init & unseal:

export VAULT_ADDR="http://127.0.0.1:8200"
vault status
vault init
vault init -key-shares=10 -key-threshold=2 > vault-storage.txt
vault unseal
vault auth <root-key>

read/write with vault

polleyg

#!/usr/bin/env bash
PROJECT="<project-id>"

### Sinks ###

#Base sink for all logs to BigQuery
gcloud logging sinks create --quiet --project $project ${project}_bigquery_sink bigquery.googleapis.com/projects/billing-exports-184901/datasets/CLOUD_LOGGING_EXPORTS --log-filter "resource.type:*"

#### Metrics ####