If you have deployed grafana to your k8s cluster using the helm chart and for some reason can’t login using the password stored in the secret, this is how you reset it. The password is stored on first run to the database. Resetting the secret will not have any effect Read more…
This is a little experiment to run ubuntu linux on your Mac using multipass to develop SPAs using a vscode Remote-SSH development environment. This is not the quickest way to setup a remote development environment but, it does offer an isolated “development environment” without depending on docker that you can Read more…
Get the role name wget http://169.254.169.254/latest/meta-data/iam/info will get something like: { “Code” : “Success”, “LastUpdated” : “2020-03-06T20:34:08Z”, “InstanceProfileArn” : “arn:aws:iam::3940394039403:instance-profile/ProfileName”, “InstanceProfileId” : “kasdjaksjakjsa” } or better yet, get the role name from: wget http://169.254.169.254/latest/meta-data/iam/security-credentials It will be the name of the only entry returned. then get credentials with: wget http://169.254.169.254/latest/meta-data/iam/security-credentials/ProfileName Read more…
Similar to assigning an IAM role to a ec2 instance to grant access to the applications running on it to access AWS services, you can assign an IAM role to each individual k8s service. This will allow you to get finer control and only grant the access to aws resources Read more…
Install on ubuntu 18.04: sudo add-apt-repository ppa:wireguard/wireguard sudo apt-get update sudo apt-get install wireguard Create keys Create keys for server in /etc/wireguard: umask 077; wg genkey | tee privatekey | wg pubkey > publickey Forward traffic To use this box as jumpbox to the LAN: sysctl -w net.ipv4.ip_forward=1 To survive Read more…
Install kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml https://argoproj.github.io/argo-cd/getting_started/ Proxy connection to server kubectl port-forward svc/argocd-server -n argocd 8080:443 You can access the argocd server at http://localhost:8080 Until we configure SSL you will get a certificate error in the browser. Click continue and use the default credentials Read more…
The mongo SRV connection string allow mongo clients to resolve the individual server names using DNS. If you need to debug connection problems or simply are curious about the hosts used, you find them by making DNS queries using dig or even https://dns.google.com/ The Connection Format mongodb+srv://USER:PASSWORD@CLUSTER.mongodb.net/DATABASENAME The replica set Read more…
This will guide you on how to configure a RabbitMQ cluster using an Auto Scaling Group. We use the Auto Scaling Group to deploy a RabbitMQ cluster so we can use it to have RabbitMQ nodes find each other and to use it as a target for the Load Balancer. Read more…
In this example we are using Elastic Cloud managed elasticsearch and will deploy the metricbeat to a k8s cluster. Create Secret apiVersion: v1 data: ELASTICSEARCH_AUTH: [base64_encoded_auth] ELASTICSEARCH_CLOUD_ID: [base64_encoded_cloudid] ELASTICSEARCH_RABBITMQ_PASSWORD: [base64_encoded_password] ELASTICSEARCH_RABBITMQ_USER: [base64_encoded_user] kind: Secret metadata: name: metricbeat type: Opaque Create DNS pointing to RabbitMQ apiVersion: v1 kind: Service metadata: name: Read more…
Creating a private docker registry can be as simple as running a container provided by docker. Most cloud providers offer a hosted solution (e.g. AWS ECR). But, sometimes you just want/need to roll your own 🙂 If you are using k8s, this is a quick way of doing it. The Read more…