Nikolay Georgiev voyager123bg

Helm CheatSheet

Helm CheatSheet
- Get Started
- Struture
- General Usage
- Template
- Hooks
- Chart Repository
- Signing

I'm learning about SOPS and setting it up as my preferred mechanism for storing secrets. Here are my notes.

PGP

It’s security mechanism is that we (i.e. client) use a PUBLIC key from the receiver (i.e. server) and encode it with a random key (I’m saying nonce but it could be reused)

This varies from RSA and SSH because the server uses a PUBLIC key to identify the client.

Web of trust

Web of trust operates by still using PGP (i.e. encoding with recipient’s public key) but additionally, we can encrypt/sign the data as our own by signing it with the client’s private key.

This means the recipient will initially decrypt via our (i.e. client’s) public key (verifying the source) and then decrypting via their (i.e. server’s) private key to get the data.

	node {
	echo 'Results included as an inline comment exactly how they are returned as of Jenkins 2.121, with $BUILD_NUMBER = 1'
	echo 'No quotes, pipeline command in single quotes'
	sh 'echo $BUILD_NUMBER' // 1
	echo 'Double quotes are silently dropped'
	sh 'echo "$BUILD_NUMBER"' // 1
	echo 'Even escaped with a single backslash they are dropped'
	sh 'echo \"$BUILD_NUMBER\"' // 1
	echo 'Using two backslashes, the quotes are preserved'
	sh 'echo \\"$BUILD_NUMBER\\"' // "1"

	apiVersion: apps/v1
	kind: DaemonSet
	metadata:
	name: disk-checker
	labels:
	app: disk-checker
	spec:
	selector:
	matchLabels:
	app: disk-checker

	- name: "Build hosts file"
	lineinfile:
	path: /etc/hosts
	regexp: '.*{{ item }}$'
	line: "{{ hostvars[item]['ansible_default_ipv4']['address'] }} {{ item }}"
	state: present
	with_items:
	- "{{ groups['mongo-config'] }}"
	- "{{ groups['mongo-shards'] }}"
	- "{{ groups['mongo-main'] }}"

	---
	description: "Allow users in runjobs group to run, kill jobs, etc. in the project called specific-project-name"
	# They can also read the activity logs and view the nodes.
	context:
	project: specific-project-name
	by:
	group: runjobs
	for:
	resource:
	- equals:

	# Licence: GPLv3, MIT, BSD, Apache or whatever you prefer; FREE to use, modify, copy, no obligations
	# Description: Bash Script to Start the process with NOHUP and & - in background, pretend to be a Daemon
	# Author: Andrew Bikadorov
	# Script v1.5

	# Slightly altered, Author: Nikolay Georgiev.
	if [ -z "$2" ]; then
	echo "You must specify microservice-name to use this script!"
	exit 1
	fi

	# Replace all occurances of search with replace
	egrep -lRZ 'search' .\|xargs -0 -l sed -i -e 's/search/replace/'