stand-sure

{{- if empty .Values.manualSecretName }}
apiVersion: v1
kind: Secret
metadata:
  name: "jwt-secret"
  annotations:
    "helm.sh/resource-policy": "keep"
type: Opaque
data:
  # retrieve the secret data using lookup function and when not exists, return an empty dictionary / map as result

stand-sure

Clickhouse & OTel Collector

clickhouse network security

The username/networks/ip under spec.configuration.users was the key to getting things to work.
It seems that "10.0.0.0/16" isn't enough. Allowing all networks solved the problem.

Otel Collector and sensitive data

Secrets can be mounted to environment variables under the extraEnvs key.

stand-sure

jaeger-config.yaml

Set values for address, username, and password.

Make the password into a hash for the clickhouse installation.

printf `printf 'my-password' | sha256sum` ; echo

# 6fa2288c361becce3e30ba4c41be7d8ba01e3580566f7acc76a7f99994474c46

stand-sure

Grafana Datasource with Secrets

1. Create a secret
2. Add the secrets as environment variables to the Grafana section of the Prometheus yaml
3. Use the environment values (secureJsonData)

stand-sure

kubectl get REPLACE_WITH_KIND -o name | xargs -n1 kubectl patch --type merge --patch '{"metadata":{"finalizers":null}}'

stand-sure

<Project Sdk="Microsoft.NET.Sdk">

    <PropertyGroup>
        <TargetFramework>netstandard2.0</TargetFramework>
        <RootNamespace>Demos.OAS.Client</RootNamespace>
        <GenerateAssemblyInfo>true</GenerateAssemblyInfo>
        <FileVersion>0.1.0.0</FileVersion>
        <LangVersion>latest</LangVersion>
        <GeneratePackageOnBuild>true</GeneratePackageOnBuild>
        <Version>0.1.0</Version>

stand-sure

repos: 
  - repo: local
    hooks:
      - id: prevent-commits-to-default-branch
        name: prevent commits to default branch
        entry: prevent-commits-to-default-branch.sh
        language: script
        require_serial: true

stand-sure

This is from https://stackoverflow.com/a/67700916/93940

Original author: https://stackoverflow.com/users/362377/conrado

stand-sure

This is for troubleshooting/fixing redis that is already running or failing to start.

Scheduling the pod on the same node

This is necessary because the PVC is RW once

  affinity:
    podAffinity:
 requiredDuringSchedulingIgnoredDuringExecution:

stand-sure

internal class RowVersionInterceptor : SaveChangesInterceptor
{
    public override InterceptionResult<int> SavingChanges(DbContextEventData eventData, InterceptionResult<int> result)
    {
        DbContext dbContext = eventData.Context!;

        foreach (EntityEntry entry in dbContext.ChangeTracker.Entries().Where(e => e.State is EntityState.Added or EntityState.Modified))
        {
            IEnumerable<PropertyEntry> concurrencyTokens = entry.Properties.Where(p => p.Metadata.IsConcurrencyToken);