Socheat Sok socheatsok78

Rancher K8s Cluster on VMware vSphere

Prerequisites

vCenter Configuration

Configure the Network Protocol Profile on the vCenter according to: https://www.virtualthoughts.co.uk/2020/03/29/rancher-vsphere-network-protocol-profiles-and-static-ip-addresses-for-k8s-nodes/
Ensure to create a service user with the regarding global and folder specific permissions: https://rancher.com/docs/rancher/v2.x/en/cluster-provisioning/rke-clusters/node-pools/vsphere/provisioning-vsphere-clusters/creating-credentials/
- Beside the vCenter role permissions from the official Rancher documentation, the following ones need to be provided in order to configure the Nodes via vApp options:
  - Content Library: Read storage
  - Extension: Register extension
vSphere Tagging: Assign or Unassign vSphere Tag on Object

Golang Workers / Job Queue

A running example of the code from:

This gist creates a working example from blog post, and a alternate example using simple worker pool.

TLDR: if you want simple and controlled concurrency use a worker pool.

This (and related gists) captures how i created my docker swarm architecture. This is intended mostly for my own notes incase i need to re-creeate anything later! As such expect some typos and possibly even an error...

Installation Step-by-Step

Each major task has its own gist, this is to help with maitainability long term.

Hyperlinks (a.k.a. HTML-like anchors) in terminal emulators

[ Update 2020-05-31: I won't be maintaining this page or responding to comments anymore (except for perhaps a few exceptional occasions). ]

Most of the terminal emulators auto-detect when a URL appears onscreen and allow to conveniently open them (e.g. via Ctrl+click or Cmd+click, or the right click menu).

It was, however, not possible until now for arbitrary text to point to URLs, just as on webpages.

Trusted SSL/TLS Certificate Stores on Linux Operating Systems and Applications

The SSL/TLS store location is not standardised across operating systems or even Linux distros. It could be anywhere in:

/etc/ssl/certs
/etc/pki/tls/certs/ca-bundle.crt
/etc/ssl/certs/ca-bundle.crt
/etc/pki/tls/certs/ca-bundle.trust.crt

Setup Kubernetes Cluster On-Premise using kubeadm

Why would you do this?

You own your bare metal infrastructure.
You want to take advantage of Kubernetes.
You do not wish to migrate your application to the cloud

Why it will not always suit your needs?

	#!/bin/bash

	# Script is needed because my default firewall rules are messed up and after
	# every restart, docker containers can't make connections to the host, notably
	# preventing debuggers like xdebug from attaching.

	# If networking fails in your containers but works in others, rm and re-create the
	# docker network that container is bound to.

	set -euo pipefail

	# run in the terminal, then set as ssl_dhparam in nginx.conf
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 4096