sumanthkumarc

SELECT pg_stat_all_tables.relname AS table_name,
    COALESCE(NULLIF(pg_class.reltuples, -1), 0)::bigint AS live_tuples,
    pg_stat_all_tables.n_dead_tup AS dead_tuples,
    pg_stat_all_tables.n_ins_since_vacuum AS rows_inserted_since_vacuum,
    pg_stat_all_tables.n_mod_since_analyze AS rows_modified_since_analyze,
    (
        COALESCE(NULLIF(pg_class.reltuples, -1), 0) * (
            SELECT setting
            FROM pg_settings
            WHERE name = 'autovacuum_vacuum_scale_factor'

sumanthkumarc

/*
https://dba.stackexchange.com/questions/96534/postgres-check-disk-space-taken-by-materialized-view?newreg=6b1d58604fce4a1fbe3033ddbb52d7ca

relkind:
r = ordinary table,
i = index,
S = sequence,
v = view,
m = materialized view,
c = composite type,

sumanthkumarc

apiVersion: v1
kind: ConfigMap
metadata:
  labels:
    app.kubernetes.io/component: server
    app.kubernetes.io/instance: argocd
    app.kubernetes.io/name: argocd-cm
  name: argocd-cm
  namespace: argocd
data:

sumanthkumarc

apiVersion: v1
kind: ConfigMap
metadata:
  labels:
    app.kubernetes.io/component: server
    app.kubernetes.io/name: argocd-cm
    app.kubernetes.io/part-of: argocd
  name: argocd-cm
  namespace: argocd
data:

sumanthkumarc

databases:
  my_handy_db_alias:        # SOME HANDY IDENTIFIER KEY TO USE IN CLI ARGS FOR --db. USEFUL WHEN TWO DB'S ACROSS HOSTS HAS SAME NAME. 
    name: <DATABASE_NAME>   # THIS IS THE ACTUAL DATABASE NAME
    host: <WRITER_HOST_URL> # THIS IS THE DEFAULT HOST BEING USED FOR OPERATIONS.
    reader_host: <READER_HOST_URL> # IDEA IS TO USE THIS AUTOMATICALLY FOR READER USER ROLE. THIS IS TODO FOR NOW.
    port: <DB_PORT>
    db_type: <DATABASE_TYPE> # THIS IS DIRECT RELATED TO USQL DRIVER NAMES. THE SCHEME PART OF DSN.
    credentials:
      - username: root
        role: admin         # USED IN CLI ARGS FOR --role.

sumanthkumarc

# Copied from https://github.com/kumahq/kuma/blob/master/pkg/core/tokens/validator.go#L65
revoked, err := j.revocations.IsRevoked(ctx, claims.ID())
if err != nil {
  return errors.Wrap(err, "could not check if the token is revoked")
}
if revoked {
  return errors.New("token is revoked")
}

sumanthkumarc

req, err := http.NewRequest("POST", "/tokens/dataplane", bytes.NewReader(reqBytes))

if err != nil {
  return "", errors.Wrap(err, "could not construct the request")
}

sumanthkumarc

// Copied from https://github.com/kumahq/kuma/blob/master/pkg/defaults/mesh/mesh.go#L60

created, err := ensureDataplaneTokenSigningKey(ctx, resManager, meshName)

if err != nil {
  return errors.Wrap(err, "could not create default Dataplane Token Signing Key")
}

if created {
  resKey := tokens.SigningKeyResourceKey(issuer.DataplaneTokenSigningKeyPrefix(meshName), tokens.DefaultSerialNumber, meshName)

sumanthkumarc

// Copied from https://github.com/kumahq/kuma/blob/master/pkg/xds/auth/universal/authenticator.go

func (u *universalAuthenticator) authDataplane(ctx context.Context, dataplane *core_mesh.DataplaneResource, credential auth.Credential) error {
	dpIdentity, err := u.dataplaneValidator.Validate(ctx, credential, dataplane.Meta.GetMesh())
	if err != nil {
		return err
	}

	if dpIdentity.Name != "" && dataplane.Meta.GetName() != dpIdentity.Name {
		return errors.Errorf("proxy name from requestor: %s is different than in token: %s", dataplane.Meta.GetName(), dpIdentity.Name)

sumanthkumarc

# each mapRoles entry maps an IAM role to a username and set of groups
# Each username and group can optionally contain template parameters:
#  1) "{{AccountID}}" is the 12 digit AWS ID.
#  2) "{{SessionName}}" is the role session name, with `@` characters
#     transliterated to `-` characters.
#  3) "{{SessionNameRaw}}" is the role session name, without character
#     transliteration (available in version >= 0.5).
mapRoles:
# statically map arn:aws:iam::000000000000:role/KubernetesAdmin to cluster admin
- roleARN: arn:aws:iam::000000000000:role/KubernetesAdmin