Socheat Sok socheatsok78

Setup Kubernetes Cluster On-Premise using kubeadm

Why would you do this?

You own your bare metal infrastructure.
You want to take advantage of Kubernetes.
You do not wish to migrate your application to the cloud

Why it will not always suit your needs?

Trusted SSL/TLS Certificate Stores on Linux Operating Systems and Applications

The SSL/TLS store location is not standardised across operating systems or even Linux distros. It could be anywhere in:

/etc/ssl/certs
/etc/pki/tls/certs/ca-bundle.crt
/etc/ssl/certs/ca-bundle.crt
/etc/pki/tls/certs/ca-bundle.trust.crt

Hyperlinks (a.k.a. HTML-like anchors) in terminal emulators

[ Update 2020-05-31: I won't be maintaining this page or responding to comments anymore (except for perhaps a few exceptional occasions). ]

Most of the terminal emulators auto-detect when a URL appears onscreen and allow to conveniently open them (e.g. via Ctrl+click or Cmd+click, or the right click menu).

It was, however, not possible until now for arbitrary text to point to URLs, just as on webpages.

This (and related gists) captures how i created my docker swarm architecture. This is intended mostly for my own notes incase i need to re-creeate anything later! As such expect some typos and possibly even an error...

Installation Step-by-Step

Each major task has its own gist, this is to help with maitainability long term.

Golang Workers / Job Queue

A running example of the code from:

This gist creates a working example from blog post, and a alternate example using simple worker pool.

TLDR: if you want simple and controlled concurrency use a worker pool.

Rancher K8s Cluster on VMware vSphere

Prerequisites

vCenter Configuration

Configure the Network Protocol Profile on the vCenter according to: https://www.virtualthoughts.co.uk/2020/03/29/rancher-vsphere-network-protocol-profiles-and-static-ip-addresses-for-k8s-nodes/
Ensure to create a service user with the regarding global and folder specific permissions: https://rancher.com/docs/rancher/v2.x/en/cluster-provisioning/rke-clusters/node-pools/vsphere/provisioning-vsphere-clusters/creating-credentials/
- Beside the vCenter role permissions from the official Rancher documentation, the following ones need to be provided in order to configure the Nodes via vApp options:
  - Content Library: Read storage
  - Extension: Register extension
vSphere Tagging: Assign or Unassign vSphere Tag on Object

Pure ESM package

The package that linked you here is now pure ESM. It cannot be require()'d from CommonJS.

This means you have the following choices:

Use ESM yourself. (preferred)
Use import foo from 'foo' instead of const foo = require('foo') to import the package. You also need to put "type": "module" in your package.json and more. Follow the below guide.
If the package is used in an async context, you could use await import(…) from CommonJS instead of require(…).
Stay on the existing version of the package until you can move to ESM.

	#!/bin/bash

	# Script is needed because my default firewall rules are messed up and after
	# every restart, docker containers can't make connections to the host, notably
	# preventing debuggers like xdebug from attaching.

	# If networking fails in your containers but works in others, rm and re-create the
	# docker network that container is bound to.

	set -euo pipefail

	import javax.net.ssl.SSLParameters;
	import javax.net.ssl.SSLSocket;
	import javax.net.ssl.SSLSocketFactory;
	import java.io.BufferedReader;
	import java.io.BufferedWriter;
	import java.io.IOException;
	import java.io.InputStreamReader;
	import java.io.OutputStreamWriter;
	import java.net.Socket;

	# run in the terminal, then set as ssl_dhparam in nginx.conf
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 4096