Focus: Kong Gateway
Background: Deploy and Secure Istio's Bookinfo application through Kong Gateway.
Topics:
CREATE EXTERNAL TABLE IF NOT EXISTS aws_vpc_flow_logs ( | |
`version` int, | |
`account_id` string, | |
`interface_id` string, | |
`srcaddr` string, | |
`dstaddr` string, | |
`srcport` int, | |
`dstport` int, | |
`protocol` bigint, | |
`packets` bigint, |
Focus: Kong Gateway
Background: Deploy and Secure Istio's Bookinfo application through Kong Gateway.
Topics:
Setup etcdctl using the instructions at https://github.com/etcd-io/etcd/releases/tag/v3.4.13 (changed path to /usr/local/bin
):
Note: if you want to match th etcdctl binaries with the embedded k3s etcd version, please run the curl command for getting the version first and adjust ETCD_VER
below accordingly:
curl -L --cacert /var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --cert /var/lib/rancher/k3s/server/tls/etcd/server-client.crt --key /var/lib/rancher/k3s/server/tls/etcd/server-client.key https://127.0.0.1:2379/version
{ | |
"kind": "KubeletConfiguration", | |
"apiVersion": "kubelet.config.k8s.io/v1beta1", | |
"syncFrequency": "1m0s", | |
"fileCheckFrequency": "20s", | |
"httpCheckFrequency": "20s", | |
"address": "0.0.0.0", | |
"port": 10250, | |
"tlsCertFile": "/root/cdk/server.crt", | |
"tlsPrivateKeyFile": "/root/cdk/server.key", |
#!/bin/bash | |
# This uses MFA devices to get temporary (eg 12 hour) credentials. Requires | |
# a TTY for user input. | |
# | |
# GPL 2 or higher | |
if [ ! -t 0 ] | |
then | |
echo Must be on a tty >&2 |
#!/bin/bash | |
# start vault | |
VAULT_UI=true vault server -dev -dev-root-token-id=root -dev-listen-address=127.0.0.1:8200 | |
# login as root - DO NOT DO THIS IN PRODUCTION | |
vault login root | |
# write some secrets | |
vault kv put secret/test color=blue number=eleventeen |
# -*- encoding: utf-8 -*- | |
# requires a recent enough python with idna support in socket | |
# pyopenssl, cryptography and idna | |
from OpenSSL import SSL | |
from cryptography import x509 | |
from cryptography.x509.oid import NameOID | |
import idna | |
from socket import socket |
1.) Download a Nerd Font
2.) Unzip and copy to ~/.fonts
3.) Run the command fc-cache -fv
to manually rebuild the font cache
#!groovy | |
import groovy.json.JsonOutput | |
import groovy.json.JsonSlurper | |
def label = "mypod-${UUID.randomUUID().toString()}" | |
podTemplate(label: label, yaml: """ | |
spec: | |
containers: | |
- name: mvn | |
image: maven:3.3.9-jdk-8 |