Jimmy-Xu

Build a secure kubernetes api server

Add Security Group

$ nova secgroup-add-rule \
       k8sbay-wlun44ixfi2o-secgroup_kubernetes-ahsiqsc4vgqj \
       tcp 6443 6443 0.0.0.0/0

CA

Jimmy-Xu

Setting up a SSL Cert from Comodo

I use Namecheap.com as a registrar, and they resale SSL Certs from a number of other companies, including Comodo.

These are the steps I went through to set up an SSL cert.

Purchase the cert

Jimmy-Xu

# Download and Install the Latest Updates for the OS
apt-get update && apt-get upgrade -y

# Set the Server Timezone to CST
echo "America/Chicago" > /etc/timezone
dpkg-reconfigure -f noninteractive tzdata

# Enable Ubuntu Firewall and allow SSH & MySQL Ports
ufw enable
ufw allow 22

Jimmy-Xu

#!/usr/bin/env python2
# coding: utf-8

import os,socket,threading,time
#import traceback

allow_delete = False
local_ip = socket.gethostbyname(socket.gethostname())
local_port = 8888
currdir=os.path.abspath('.')

Jimmy-Xu

- Tune /etc/ssh/sshd_config

UseDNS no  # Disable DNS lookups
GSSAPIAuthentication no # Disable negotation of slow GSSAPI

don't forget to restart it, use a script provider to set it , or create it with veewee or snapshot it

- Tune Vagrantfile

    vb.customize ["modifyvm", :id, "--natdnshostresolver1", "on"]

Jimmy-Xu

[Unit]
Description=Daemon to start Shadowsocks Client
Wants=network-online.target
After=network.target

[Service]
Type=simple
ExecStart=/usr/bin/sslocal -c /etc/shadowsocks/client.json --pid-file /var/run/sslocal.pid --log-file /var/log/sslocal.log   

[Install]

Jimmy-Xu

#!/usr/bin/python
# -*- coding: utf-8 -*-
"""
Zabbix SMTP Alert script for gmail.
"""

import sys
import smtplib
from email.MIMEText import MIMEText
from email.Header import Header

Jimmy-Xu

#####   #####   #####   #####   #####   #####   #####   #####   #####   #####   #####   #####   #####   #####   #####   #####   #####

### Shell script to download Oracle JDK / JRE / Java binaries from Oracle website using terminal / command / shell prompt using wget.
### You can download all the binaries one-shot by just giving the BASE_URL.
### Script might be useful if you need Oracle JDK on Amazon EC2 env.
### Script is updated for every JDK release.

### Features:-
# 1. Resumes a broken / interrupted [previous] download, if any.
# 2. Renames the file to a proper name with including platform info.

Jimmy-Xu

Intercom user_hash

• Code for generating the user_hash value for Intercom's Secure mode
• Based on http://www.jokecamp.com/blog/examples-of-creating-base64-hashes-using-hmac-sha256-in-different-languages/#ruby
• When creating this for mobile secure mode, the final output needs to be in lowercase (the web version accepts both upper and lower case)

Remember that your secret key should never be exposed to the public

• So Javascript code below should only be used for testing unless modified and used to run on a server

Jimmy-Xu

def interfaces = NetworkInterface.getNetworkInterfaces()
while (interfaces.hasMoreElements()) {
    def addresses = interfaces.nextElement().getInetAddresses()
    while (addresses.hasMoreElements()) {
        println addresses.nextElement().getHostAddress()
    }
}